CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

lang/erlang28.5.0.8,4

Functional programming language from Ericsson

Maintainer
erlang@FreeBSD.org
Packages
erlang 28.5.0.8,4
Upstream
Higher version available: 29.1.2
CPE
erlang:erlang/otp from the port
WWW
https://www.erlang.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (18)

VuXML entries whose affected range this version has left.

Commits (475)

Dave Cottlehuber (dch) · 28.5.0.8_1,4
lang/erlang*: Enable deterministic builds
5eb37a0851
Jimmy Olgeni (olgeni) · 28.5.0.8,4
lang/erlang: Fix the vsn.mk consistency checks in pre-configure

The checks grepped lib/*/vsn.mk for _EI_VSN, _TOOLS_VSN and _SNMP_VSN,
but upstream names those variables EI_VSN, TOOLS_VSN and SNMP_VSN.
The grep therefore matched nothing and each test reduced to
[ ! = <version> ], which sh evaluates as a false string comparison, so
every check passed silently no matter what the Makefile said.

The port-side variables grew their underscore prefix in 12b48a4d8ea,
which renamed them inside the grep patterns as well.
af2f39d2d6
Jimmy Olgeni (olgeni) · 28.5.0.8,4
lang/erlang: Update to 28.5.0.8
2f43b1e1f4
Jimmy Olgeni (olgeni) · 28.5.0.7,4
lang/erlang: Do not add WRKSRC/lib to ERL_LIBS during build

ERL_LIBS=${WRKSRC}/lib puts the half-populated in-tree lib/*/ebin
directories on the bootstrap erlc's code path, where they shadow the
bootstrap compiler.  That breaks whenever a patch release changes an
API inside the compiler itself.  OTP 28.5.0.8 changes
beam_ssa_type:opt_start from arity 2 to arity 3, so the freshly
written beam_ssa_opt.beam gets loaded from lib/compiler/ebin while
beam_ssa_type still comes from the bootstrap, and the build dies with

  beam_ssa_recv.erl: internal error in pass beam_ssa_opt:
  exception error: undefined function beam_ssa_type:opt_start/3

The ordering inside lib/compiler/src is alphabetical, so this is not a
job race and MAKE_JOBS_UNSAFE, which the error message suggests, does
not help.

The build system derives its own code paths from ERL_TOP, and
lang/erlang-runtime2[789] build the same tarballs, doc chunks
included, without this variable.  Removing it leaves the installed
file list unchanged.
863f508dee
Jimmy Olgeni (olgeni) · 28.5.0.7,4
lang/erlang: Update to 28.5.0.7

Security:	60eb0bba-b668-11f1-9d0e-4c526214c986
bf7911cd08
Jimmy Olgeni (olgeni) · 28.5.0.6,4
lang/erlang: Update to 28.5.0.6
ceab5f12b5
Jimmy Olgeni (olgeni) · 28.5.0.5,4
lang/erlang: Update to 28.5.0.5
32c1dbb0e5
Jimmy Olgeni (olgeni) · 28.5.0.4,4
lang/erlang: Update to 28.5.0.4
a2553a6734
Jimmy Olgeni (olgeni) · 28.5.0.2,4
lang/erlang: Update to 28.5.0.2

OTP 26 is end-of-life; move the main suite to OTP 28.  Update the bundled
erl_interface, snmp and tools subsystem versions, and bump the corba
dependency to 5.2.2.

Drop the FOP and PDF options: they relied on the XML/fop documentation
toolchain that upstream removed in OTP 27, so they no longer build.
1d3ce55877
Jimmy Olgeni (olgeni) · 26.2.5.21,4
lang/erlang: Update to 26.2.5.21

Security:	CVE-2026-42789, CVE-2026-42790
d200bef393
Jimmy Olgeni (olgeni) · 26.2.5.20,4
lang/erlang: Update to 26.2.5.20
13043294f9
Jimmy Olgeni (olgeni) · 26.2.5.19,4
lang/erlang: Update to 26.2.5.19
4f9d5d5e5f
Ronald Klop (ronald) · 26.2.5.16_2,4
*/*: bump portrevision after java_default=21 update

PR:	272855
2baaf16375
Dave Cottlehuber (dch) · 26.2.5.16_1,4
lang/erlang: rename typer to avoid conflicts with other ports

typer is rarely used, so rename to erl_typer to allow the far more
common py-typer to take its place, used by many py-* CLI tools.

Sponsored by:	SkunkWerks, GmbH
Approved by:	erlang
2e947b7d11
Jimmy Olgeni (olgeni) · 26.2.5.16,4
lang/erlang: Update to 26.2.5.16
4ae103395f
Jimmy Olgeni (olgeni) · 26.2.5.15,4
lang/erlang: Update to 26.2.5.15
a6a167bd63
Jimmy Olgeni (olgeni) · 26.2.5.14,4
lang/erlang: Update to 26.2.5.14

Update Erlang/OTP to the latest patch release 26.2.5.14.
8038b22c02
Jimmy Olgeni (olgeni) · 26.2.5.12_2,4
lang/erlang: enhance epmd security

- Add dedicated beam user (UID/GID 372) for non-root execution
- Use daemon(8) for epmd process supervision and auto-restart

This addresses security concerns with epmd running as root by
providing privilege separation and automatic restart capability.

PR:		213001
Reviewed by:	dch
Differential Revision:	https://reviews.freebsd.org/D50874
302b0049a9
Nuno Teixeira (eduardo) · 26.2.5.12_1,4
*/*: Bump consumers of x11-toolkits/wxgtk32

New version of wxgtk32 in tree (3.2.8.1)
dac482159a
Vladimir Druzenko (vvd) · 26.2.5.12,4
lang/erlang: 26.2.5.6 => 26.2.5.12

Changelogs:
https://github.com/erlang/otp/releases/tag/OTP-26.2.5.7
https://github.com/erlang/otp/releases/tag/OTP-26.2.5.8
https://github.com/erlang/otp/releases/tag/OTP-26.2.5.9
https://github.com/erlang/otp/releases/tag/OTP-26.2.5.10
https://github.com/erlang/otp/releases/tag/OTP-26.2.5.11
https://github.com/erlang/otp/releases/tag/OTP-26.2.5.12

Refresh patches.
Pet portclippy.

PR:		286332
Approved by:	erlang (maintainer, timeout > 3 weeks)
Security:	CVE-2025-26618
Security:	CVE-2025-30211
Security:	CVE-2025-32433
Security:	CVE-2025-46712
MFH:		2025Q2
169c288b4e
Dave Cottlehuber (dch) · 26.2.5.6,4
lang/erlang{,-doc,-java,-man,-wx}: update to OTP26 latest

Sponsored by:   SkunkWerks, GmbH

Differential Revision:	https://reviews.freebsd.org/D48305
12b48a4d8e
Muhammad Moinur Rahman (bofh) · 25.3.2.15_1,4
Mk/**java.mk: Convert bsd.java.mk to USES

The following features have been added or changed:
- Instead of USE_JAVA use USES=java. This defaults to
  USES=java:build,run if NO_BUILD is undefined. Else it defaults to
  USES=java:run
- Instead of USE_ANT=yes use USES=java:ant which also implies
  USES=java:build
- Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or
  extract
- Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply
  build or run
- Instead of JAVA_RUN=yes use USES=java:run does not imply extract or
  build
- Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version>

Approved by: mat (portmgr), glewis
Differential Revision:  https://reviews.freebsd.org/D48201
0835676e36
Nuno Teixeira (eduardo) · 25.3.2.15_1,4
*/*: Bump consumers of x11-toolkits/wxgtk32

New version of wxgtk32 in tree
73202fb63e
Jimmy Olgeni (olgeni) · 25.3.2.15,4
lang/erlang: update to version 25.3.2.15
e229cb709a
Jimmy Olgeni (olgeni) · 25.3.2.14,4
lang/erlang: update to version 25.3.2.14
02d3178d98
Dave Cottlehuber (dch) · 25.3.2.13,4
lang/erlang: ensure epmd receives user-configurable flags

Differential Revision: https://reviews.freebsd.org/D45938

Sponsored by:	SkunkWerks, GmbH
97061b758b
Jimmy Olgeni (olgeni) · 25.3.2.13,4
lang/erlang: update to version 25.3.2.13
4bfbdb9fb2
Rene Ladan (rene) · 25.3.2.12_1,4
all: drop support for FreeBSD 13.2 which reached EOL today

Thanks again to jbeich for noticing various things I overlooked.

Reviewed by:	acm, ashish, eduardo, ehaupt, eugen, jbeich, martymac, mat, nobukata, sunpoet, tagattie, yuri, arrowd, kde
Differential Revision:	https://reviews.freebsd.org/D45141
19d68720f1
Jimmy Olgeni (olgeni) · 25.3.2.12_1,4
lang/erlang: update CORBA applications to 5.2.1
c912bb176a
Jimmy Olgeni (olgeni) · 25.3.2.12,4
lang/erlang: update to version 25.3.2.12
2d542e2d29
Jimmy Olgeni (olgeni) · 25.3.2.11,4
lang/erlang: update to version 25.3.2.11
8675485bd4
Jimmy Olgeni (olgeni) · 25.3.2.10,4
lang/erlang: update to version 25.3.2.10
1bed475f7a
Jimmy Olgeni (olgeni) · 25.3.2.9,4
lang/erlang: update to version 25.3.2.9
dd3e4e5d88
Muhammad Moinur Rahman (bofh) · 25.3.2.7_1,4
*/*: Sunset 12.4-RELEASE/12-STABLE from ports tree

- Remove all references to defunct ARCH arm
- Remove all references to defunct ARCH sparc64
- Remove x11-drivers/xf86-video-sunffb which requires defunct sparc64
  ARCH
- Remove sysutils/afbinit requires defunct sparc64 ARCH
- Remove all references to bktr driver
- Remove all references to defunct FreeBSD_12
- Remove all references to OSVERSION/OSREL corresponding to 12
- Remove conditionals in Mk/Uses/cabal.mk
- Remove sparc reference from Mk/Uses/qt-dist.mk
- Remove BROKEN_sparc64/NOT_FOR_ARCH=sparc64
- Remove BROKEN_FreeBSD_12* from:
- Remove OpenSSL patches from:
- Remove conditional flags for OSVERSION >= 1300000 to fixed flags.
  Also move conditional flags for non sparc64/arm ARCH to fixed flags.

Reviewed by:	brooks, jbeich, rene, salvadore
Differential Revision: https://reviews.freebsd.org/D42068
bbab7f59e9
Nuno Teixeira (eduardo) · 25.3.2.7_1,4
*/*: Bump consumers of x11-toolkits/wxgtk32

New version of wxWidgets in tree
03eac77c10
Jimmy Olgeni (olgeni) · 25.3.2.7,4
lang/erlang: update to version 25.3.2.7
19f340816a
Jimmy Olgeni (olgeni) · 25.3.2.6,4
lang/erlang: update to version 25.3.2.6
5deed7049e
Jimmy Olgeni (olgeni) · 25.3.2.5,4
lang/erlang: update to version 25.3.2.5
4136f583e7
Jimmy Olgeni (olgeni) · 25.3.2.4,4
lang/erlang: update to version 25.3.2.4
fde93f948c
Jimmy Olgeni (olgeni) · 25.3.2.3,4
lang/erlang: update to version 25.3.2.3
a031ddf600
Jimmy Olgeni (olgeni) · 25.3.2.2,4
lang/erlang: update to version 25.3.2.2
040154bb47
Jimmy Olgeni (olgeni) · 25.3.1,4
lang/erlang: update to version 25.3.1
b7035fc361
Jimmy Olgeni (olgeni) · 25.3,4
lang/erlang: update to version 25.3
ba370ff0e5
Jimmy Olgeni (olgeni) · 25.2.3,4
lang/erlang: update to version 25.2.3
5f8fd4b88b
Dave Cottlehuber (dch) · 25.2.1,4
lang/erlang: update to version 25.2.1
428d54e3d1
Loïc Bartoletti (lbartoletti) · 24.3.4.6_1,4
lang/erlang: use wx 3.2

PR:		265093
bfbb016436
Jimmy Olgeni (olgeni) · 24.3.4.6,4
lang/erlang: update to version 24.3.4.6
931c7daf82
Jimmy Olgeni (olgeni) · 24.3.4.5,4
lang/erlang: update to version 24.3.4.5
4a965422aa
Stefan Eßer (se) · 24.3.4.4,4
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 24.3.4.4,4
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
page 1 of 10older →oldest »