CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

math/gnuplot-tex-extras5.2.8_1

Extra files for Gnuplot TeX support

Maintainer
glewis@FreeBSD.org
Packages
gnuplot-tex-extras 5.2.8_1
Upstream
Higher version available: 6.0.5
CPE
gnuplot:gnuplot from the port
WWW
http://www.gnuplot.info/
Links
cgit · VuXML

Unaddressed (5) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2025-311766.2published 2025-03-27

A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash.

CVE-2025-311786.2published 2025-03-27

A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.

CVE-2025-311796.2published 2025-03-27

A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.

CVE-2025-311806.2published 2025-03-27

A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash.

CVE-2025-311816.2published 2025-03-27

A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (17)

Muhammad Moinur Rahman (bofh) · 5.2.8_1
math/gnuplot-tex-extras: Remove commented texmf

After 6 months of commit there were no comments from the maintainer or
any bugs reported about the removal of texmf which means this port
does not use texmf at all.

Sponsored by:	Nepustil
Approved by:    portmgr (blanket)
d3ece546b5
Muhammad Moinur Rahman (bofh) · 5.2.8_1
*/tex*: Update version 20210325=>20230313

- devel/tex-kpathsea: Update version 6.3.3=>6.3.5
- print/texlive-tlmgr: Update version 20210325=>20230313
  * Add LICENSE GPLv2
- devel/tex-libtexlua: Update distinfo from 20230313 dists
- devel/tex-libtexluajit: Update distinfo from 20230313 dists
- print/tex-ptexenc: Update version 1.3.9=>1.4.3
  * Pet portclippy
- devel/tex-web2c: Update version 20210325=>20230313
- devel/tex-synctex: Update distinfo from 20230313 dists
- print/tex-basic-engines: Update version 20210325=>20230313
- print/texlive-base: Update version 20210325=>20230313
- print/texlive-docs: Update version 20210325=>20230313
- print/texlive-full: Update version 20210325=>20230313
- print/texlive-texmf: Update version 20210325=>20230313
- print/texlive-texmf-source: Update version 20210325=>20230313
- print/latex-biber: Update version 2.16=>2.19
- print/tex-dvipdfmax: Update version 20210325=>20230313
- print/tex-dvipsk: Update version 2021.1=>2023.1
- print/tex-formats: Update version 20210325=>20230313
- print/tex-jadetex: Update distinfo from 20230313 dists
- print/tex-luatex: Update version 1.12.0=>1.16.0
- print/tex-xetex: Update distinfo from 20230313 dists
- print/tex-xmltex: Update distinfo from 20230313 dists
- japanese/tex-ptex: Fix build
  * Remove ConTeXt format
- textproc/foiltex: Update MASTER_SITES
  * Adopt port
- There are multiple ports which uses the macro USE_TEX=texmf that is
  downloading a big DISTFILE. Unfortunately it is not possible for me to
  test all the consumers in runtime. So in the following ports I have
  removed USE_TEX=texmf so that someone who uses those can report the
  runtime files those are missing. If possible(based on LICENSE
  permission) I will try to create a smaller distfile out of the
  texlive-20230313-texmf and change dependency accordingly otherwise
  will reinstate USE_TEX=texmf. The list of ports that are affected are
  following:
  * arabic/arabtex
  * graphics/epix
  * math/cadabra2
  * math/coq
  * math/gnuplot-tex-extras
  * net-mgmt/netmagis-www
  * print/dvisvg
  * print/lilypond
  * print/mftrace
  * print/tex-xdvik
  * print/latex-beamer

Sponsored by:	Nepustil
24e24a1956
Muhammad Moinur Rahman (bofh) · 5.2.8
Mk/**tex.mk: Convert bsd.tex.mk to USES=tex

- Update all the consumers to use USES=tex
- USE_TEX=yes is the old way of writing USES=tex which has been removed
  and replaced in all ports
- Almost all of the USE_TEX features remains unchanged
- Some consumers had the same variables defined both in the mk
  infrastructure and also in the ports which have been removed from the
  ports as those are redundant.

In case any of the consumers are failing to build please make sure that
the nexessary USES=tex is there. Unlike previous USE_TEX=yes will no
longer load the required VARS for tex and related dependencies.

Reviewed by:	portmgr
Approved by:	portmgr (blanket)
721e5776c9
Stefan Eßer (se) · 5.2.8
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 5.2.8
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Stefan Eßer (se) · 5.2.8
math/gnuplot-tex-extras: Add CPE information

Approved by:	portmgr (blanket)
8a74ca58c1
Mathieu Arnold (mat) · 5.2.8
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 5.2.8
Remove # $FreeBSD$ from Makefiles.
305f148f48
Greg Lewis (glewis) · 5.2.8
Update to 5.2.8
8b85e3fa60
Greg Lewis (glewis) · 5.2.7
. Update to 5.2.7
253a85110d
Greg Lewis (glewis) · 5.2.6
. Update to 5.2.6
103b4bef17
Greg Lewis (glewis) · 5.2.5
. Update to 5.2.5
7091bd92e7
Greg Lewis (glewis) · 5.2.4
. Update to 5.2.4.
c6732807ca
Greg Lewis (glewis) · 5.2.3
. Update to 5.2.3.
5c008c532a
Dmitry Marakasov (amdmi3) · 4.6.6
- Fix trailing whitespace in pkg-descrs, categories [g-n]*

Approved by:	portmgr blanket
4e942b6419
Mathieu Arnold (mat) · 4.6.6
Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.

With hat:	portmgr
Sponsored by:	Absolight
8d6597e0bb
Hiroki Sato (hrs) · 4.6.6
- Separate TeX style files from math/gnuplot into math/gnuplot-tex-extras   to eliminate huge TeXLive dependency.  Note that TeX terminal support is   still enabled by default because it works without them.

- Add Lua dependency to support TeX/Tikz terminal.

Approved by:	glewis (maintainer)
3922098b6f