CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

multimedia/libde2651.1.1

Open source h.265 video codec

Maintainer
ports@FreeBSD.org
Packages
libde265 1.1.1
Upstream
Higher version available: 1.1.3
CPE
struktur:libde265 from the port
WWW
https://www.libde265.org
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (1)

VuXML entries whose affected range this version has left.

CVE-2020-21594, CVE-2020-21595, CVE-2020-21596, CVE-2020-21597, CVE-2020-21598, CVE-2020-21599, CVE-2020-21600, CVE-2020-21601, CVE-2020-21602, CVE-2020-21603, CVE-2020-21604, CVE-2020-21605, CVE-2020-21606, CVE-2022-1253, CVE-2022-43236, CVE-2022-43237, CVE-2022-43238, CVE-2022-43239, CVE-2022-43240, CVE-2022-43241, CVE-2022-43242, CVE-2022-43243, CVE-2022-43244, CVE-2022-43245, CVE-2022-43248, CVE-2022-43249, CVE-2022-43250, CVE-2022-43252, CVE-2022-43253, CVE-2022-47655

Commits (27)

Vladimir Druzenko (vvd) · 1.1.1
multimedia/libde265: Update 1.0.19 => 1.1.1

Changelogs:
https://github.com/strukturag/libde265/releases/tag/v1.1.0
https://github.com/strukturag/libde265/releases/tag/v1.1.1

- Replace CMAKE_ARGS with CMAKE_ON and CMAKE_OFF.

PR:		296194
Security:	CVE-2026-49295
Security:	CVE-2026-49337
Security:	CVE-2026-49346
Security:	CVE-2026-54240
Security:	CVE-2026-54241
Security:	GHSA-x27c-jp65-g395
Sponsored by:	UNIS Labs
Co-authored-by:	Vladimir Druzenko <vvd@FreeBSD.org>
MFH:		2026Q2
94cf33b625
Xin LI (delphij) · 1.0.19
multimedia/libde265: Update to 1.0.19, switch to cmake
54c66caafa
Vladimir Druzenko (vvd) · 1.0.16
multimedia/libde265: Update 1.0.12 => 1.0.16, improve port

Changelogs:
https://github.com/strukturag/libde265/releases/tag/v1.0.13
https://github.com/strukturag/libde265/releases/tag/v1.0.14
https://github.com/strukturag/libde265/releases/tag/v1.0.15
https://github.com/strukturag/libde265/releases/tag/v1.0.16

Improve port:
- Move SDL to option - default on.
- Upstream migrate to SDL2.
- Replace manual STRIP_CMD with INSTALL_TARGET=install-strip.
- Fix warnings from portclippy.
- Optimize armv6/7 handle.
- Regenerate patches.
- Remove upstreamed patches.

Security:	CVE-2023-49465
Security:	CVE-2023-49467
Security:	CVE-2023-49468
MFH:		2025Q4
bdd895f12c
Tilman Keskinoz (arved) · 1.0.12_1
multimedia/libde265: Record missing dependency on sdl

PR:		274004
Submitted by:	Ivan Rozhuk
4777d3f645
Rene Ladan (rene) · 1.0.12
all: return kwm's ports to the pool after safekeeping his commit bit.

Hat:	portmgr-secretary
084a730cd9
Koop Mast (kwm) · 1.0.12
multimedia/libde265: Update to 1.0.12.

PR:		272062
aa5436884a
Koop Mast (kwm) · 1.0.11
multimedia/libde265: Update to 1.0.11

Also include some additional patches from debian.

PR:		269382
Submitted by:	diizzy@
Security:	CVE-2020-21594
		CVE-2020-21595
		CVE-2020-21596
		CVE-2020-21597
		CVE-2020-21598
		CVE-2020-21599
		CVE-2020-21600
		CVE-2020-21601
		CVE-2020-21602
		CVE-2020-21603
		CVE-2020-21604
		CVE-2020-21605
		CVE-2020-21606
		CVE-2022-1253
		CVE-2022-43236
		CVE-2022-43237
		CVE-2022-43238
		CVE-2022-43239
		CVE-2022-43240
		CVE-2022-43241
		CVE-2022-43242
		CVE-2022-43243
		CVE-2022-43244
		CVE-2022-43245
		CVE-2022-43248
		CVE-2022-43249
		CVE-2022-43250
		CVE-2022-43252
		CVE-2022-43253
		CVE-2022-47655
MFH:		2023Q1
4b2680edc5
Daniel Engberg (diizzy) · 1.0.9
multimedia/libde265: Update to 1.0.9

Changelog: https://github.com/strukturag/libde265/releases/tag/v1.0.9

PR:		267231
Approved by:	portmgr (maintainer timeout, 2+ weeks)
52821d5eeb
Daniel Engberg (diizzy) · 1.0.8
multimedia/libde265: Update distinfo

GitHub changed hashes in patch files which causes checksum mismatch

Approved by:	portmgr (blanket)
d03b885945
Stefan Eßer (se) · 1.0.8
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.0.8
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 1.0.8
multimedia: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron LI <aly@aaronly.me>
  *  Alexander Botero-Lowry <alexbl@FreeBSD.org>
  *  Alexander Logvinov <ports@logvinov.com>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Anders Nordby <anders@FreeBSD.org>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrew Thompson <andy@fud.org.nz>
  *  Andrew Thompson <thompsa@FreeBSD.org>
  *  Angel Carpintero <ack@telefonica.net>
  *  Anish Mistry (with help from mean)
  *  Anonymous <swell.k@gmail.com>
  *  Ashish SHUKLA <ashish@FreeBSD.org>
  *  Ashish Shukla <wahjava@gmail.com>
  *  Ben Woods <woodsb02@FreeBSD.org>
  *  Brian Somers <brian@FreeBSD.org>
  *  Bruce M Simpson <bms@FreeBSD.org>
  *  Byung-Hee HWANG <bh@izb.knu.ac.kr>
  *  Charlie Kester <corky1951@comcast.net>
  *  Chess Griffin <chess@chessgriffin.com>
  *  Chris Piazza <cpiazza@FreeBSD.org>
  *  Christopher Key <cjk32@cam.ac.uk>
  *  Chuck Hein <chein@FreeBSD.org> & Jim Overholt <overholt@isdw.net>
  *  Daniel Morante <daniel@morante.net>
  *  Diego Depaoli <trebestie@gmail.com> and Yinghong Liu <relaxbsd@gmail.com>
  *  Dierk Sacher <dierk@blaxxtarz.de>
  *  Dreamcat4 <dreamcat4@gmail.com>
  *  Earl Gay <earl@eeg3.net>
  *  Ed Schouten <ed@FreeBSD.org>
  *  Edwin Groothuis <edwin@mavetju.org>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Felix Palmen <felix@palmen-it.de>
  *  Franz Bettag <franz@bett.ag>
  *  FreeBSD GNOME Team <gnome@freebsd.org>
  *  Gea-Suan Lin <gslin@gslin.org>
  *  George Reid <greid@ukug.uk.freebsd.org>
  *  Grzegorz Blach <gblach@FreeBSD.org>
  *  Gustau Perez <gustau.perez@gmail.com>
  *  Harold Gutch <logix@foobar.franken.de>
  *  Heiner <h.eichmann@gmx.de>
  *  Heiner Eichmann <h.eichmann@gmx.de>
  *  Hendrik Scholz <hendrik@scholz.net>
  *  Herbert J. Skuhra <h.skuhra@gmail.com>
  *  Herve Quiroz <hq@FreeBSD.org>
  *  Holger Lamm
  *  J.R. Oldroyd <fbsd@opal.com>
  *  Jason Harmening <jason.harmening@gmail.com>
  *  Jille Timmermans (jille@quis.cx)
  *  Juergen Lock <nox@FreeBSD.org>
  *  Juergen Lock <nox@jelal.kn-bremen.de>
  *  KalleDK <plexmaintainer@k-moeller.dk>
  *  Koop Mast <kwm@FreeBSD.org>
  *  Koop Mast <kwm@rainbow-runner.nl>
  *  Kozlov Sergey <kozlov.sergey.404@gmail.com>
  *  Kris Moore
  *  Kuan-Chung Chiu <buganini@gmail.com>
  *  Lars Eggert <lars.eggert@gmx.net>
  *  Leinier Cruz Salfran <salfrancl@yahoo.es>
  *  MANTANI Nobutaka <nobutaka@nobutaka.com>
  *  Manuel Creach <manuel.creach@icloud.com>
  *  Marc van Woerkom <3d@FreeBSD.org>
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
  *  Mark Felder <feld@FreeBSD.org>
  *  Martin Matuska <mm@FreeBSD.org>
  *  Martin Neubauer <m.ne@gmx.net>
  *  Martin Wilke <miwi@FreeBSD.org>
  *  Michael Johnson <ahze@FreeBSD.org>
  *  Michael Johnson <ahze@ahze.net>
  *  Michael Nottebrock <michaelnottebrock@gmx.net>
  *  Michael Nottebrock <michaelnottebrock@gmx.net> et al
  *  Mina Naguib <webmaster@topfx.com>
  *  Mykola Dzham <i@levsha.me>
  *  Naram Qashat <cyberbotx@cyberbotx.com>
  *  Olivier Cochard-Labbe <olivier@FreeBSD.org>
  *  Pascal Vizeli <pvizeli@yahoo.de>
  *  Pav Lucistnik <pav@FreeBSD.org>
  *  Pawel Pekala <pawel@FreeBSD.org>
  *  Petar Zhivkov Petrov <pesho.petrov@gmail.com>
  *  Phil Oleson
  *  Phil Oleson <oz@nixil.net>
  *  Piotr Kubaj <pkubaj@anongoth.pl>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Raaf <freebsd@luna.afraid.org>
  *  Randall Hopper <aa8vb@nc.rr.com>
  *  Rodrigo OSORIO <rodrigo@FreeBSD.org>
  *  Rozhuk Ivan 2018 <rozhuk.im@gmail.com>
  *  Rozhuk Ivan <rozhuk.im@gmail.com>
  *  Rozhuk Ivan rozhuk.im@gmail.com
  *  Rusmir Dusko <nemysis@FreeBSD.org>
  *  Stacey Son <mythdev@son.org>, Ari Maniatis <ari@ish.com.au>
  *  Steve Wills <steve@mouf.net>
  *  Steve Wills <swills@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Sylvio Cesar <sylvio@FreeBSD.org>
  *  Thierry Thomas <thierry@pompo.net>
  *  Thomas E. Zander
  *  Thomas E. Zander with help from Vladimir Kushnir
  *  Vladimir Kondratiev <wulf@mail.mipt.ru>
  *  William Grzybowski <wg@FreeBSD.org>
  *  William Grzybowski <william88@gmail.com>
  *  Yi-Hsuan Hsin <mhsin@mhsin.org>
  *  Zastupov Stepan [RedChrom] <redchrom@mail.ru>
  *  adamw
  *  alex
  *  arved
  *  erich@FreeBSD.org
  *  freebsd-ports@evilcode.net
  *  giffunip@asme.org
  *  ijliao
  *  kamikaze@bsdforen.de
  *  michael johnson <ahze@ahze.net>
  *  mikael.urankar@gmail.com
  *  mm
  *  nox@FreeBSD.org
  *  osa
  *  pb@FreeBSD.org
  *  piero
  *  se@FreeBSD.org
  *  sumikawa

With hat:	portmgr
63f36d3262
Bernhard Froehlich (decke) · 1.0.8
multimedia/libde265: Add CPE information

Approved by:	portmgr (blanket)
25d7a105e0
Daniel Engberg (diizzy) · 1.0.8
multimedia/libde265: Update to 1.0.8

- Use upstream release archive as recommended by Porters Handbook
  (see USE_GITHUB section)
- Backport upstream commits 900772c3e9ee1e106b93283fd8e7633d52899e40 ,
  7d5aeb5f11531de33f5b7ae0e768ffc50da4facb ,
  dbff9077462899fc8e3b39907d43c2a6ad54e9f3 ,
  a3f1c6a0dea2b0d4a531255ad06ed40cdb184d25 and
  4c0fe2c149c68ece57fde4cb11e05b5fb572da4b for various bug fixes
- Package dec265 utility, also rename it as libde265-dec265 to match
  Debian's repository
- Import patches from Debian to only expose public API and disable
  tools that don't build without internal API exposed.

References:

https://github.com/strukturag/libde265/commit/900772c3e9ee1e106b93283fd8e7633d52899e40
https://github.com/strukturag/libde265/commit/7d5aeb5f11531de33f5b7ae0e768ffc50da4facb
https://github.com/strukturag/libde265/commit/dbff9077462899fc8e3b39907d43c2a6ad54e9f3
https://github.com/strukturag/libde265/commit/a3f1c6a0dea2b0d4a531255ad06ed40cdb184d25
https://github.com/strukturag/libde265/commit/4c0fe2c149c68ece57fde4cb11e05b5fb572da4b
https://salsa.debian.org/multimedia-team/libde265/-/blob/master/debian/patches/only_export_decoder_api.patch
https://salsa.debian.org/multimedia-team/libde265/-/blob/master/debian/patches/disable_tools.patch

Patch initially submitted by vishwin

PR:		251442
Reported by:	vishwin
Approved by:	kwm (maintainer timeout, 14+ months)
c9445b18bf
Jimmy Olgeni (olgeni) · 1.0.2_5
*: fix tab vs. space issues, and comments according to the guide.
4460cf727a
Mathieu Arnold (mat) · 1.0.2_5
Remove # $FreeBSD$ from Makefiles.
305f148f48
Piotr Kubaj (pkubaj) · 1.0.2_5
multimedia/libde265: fix build on armv6, armv7

Use GNU LD from binutils to fix build.
c809a01baf
Gerald Pfeifer (gerald) · 1.0.2_5
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Gerald Pfeifer (gerald) · 1.0.2_4
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
a9f015d155
Gerald Pfeifer (gerald) · 1.0.2_3
Bump PORTREVISION for ports depending on the canonical version of GCC in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which has now moved from GCC 6 to GCC 7 by default.

This includes ports
 - featuring USE_GCC=yes or USE_GCC=any,
 - featuring USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and those
 - with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
   c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.

PR:		222542
09f9633cb6
Mark Linimon (linimon) · 1.0.2_2
For ports that are marked BROKEN on armv6, and also fail to build on armv7, mark them so.

This is part two of a multipart commit to bring armv7 ports to parity
with armv6.

Approved by:	portmgr (tier-2 blanket)
Obtained from:	lonesome.com -exp run
bf43557044
Gerald Pfeifer (gerald) · 1.0.2_2
Bump PORTREVISION for ports depending on the canonical version of GCC (via Mk/bsd.default-versions.mk and lang/gcc) which has moved from GCC 5.4 to GCC 6.4 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++11-lang,
   c++14-lang, c++0x, c11, or gcc-c++11-lib.

PR:		219275
e59c88cece
Gerald Pfeifer (gerald) · 1.0.2_1
Bump PORTREVISIONs for ports depending on the canonical version of GCC and lang/gcc which have moved from GCC 4.9.4 to GCC 5.4 (at least under some circumstances such as versions of FreeBSD or platforms).

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using using Mk/bsd.octave.mk which in turn has USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++14-lang,
   c++11-lang, c++0x, c11, or gcc-c++11-lib.

PR:		216707
04d6f52202
Mark Linimon (linimon) · 1.0.2
Mark various ports as broken on armv6: invokes x86 asm.

Approved by:	portmgr (tier-2 blanket)
89d2c5da0e
Mathieu Arnold (mat) · 1.0.2
Use USES=pathfix where applicable.

PR:		213195
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D8093
a0bcd2cf68
Mathieu Arnold (mat) · 1.0.2
Cleanup GH_* and variables order.

Sponsored by:	Absolight
7823fa4b7e
Koop Mast (kwm) · 1.0.2
Add libde265 Opensource h.265 video codec.
ad938aa557