CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

multimedia/libvpx1.17.0

VP8/VP9 reference encoder/decoder

Maintainer
jbeich@FreeBSD.org
Packages
libvpx 1.17.0
Upstream
up to date
CPE
webmproject:libvpx from the port
WWW
https://www.webmproject.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (4)

Show 4 fixed
VuXML entries whose affected range this version has left.

Commits (103)

Jan Beich (jbeich) · 1.17.0
multimedia/libvpx: update 1.17.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.16.0..v1.17.0
Reported by:	Repology, portscout
c5cb6977ab
Jan Beich (jbeich) · 1.16.0
multimedia/libvpx: update 1.16.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.15.2..v1.16.0
Reported by:	Repology
939d8775e7
Jan Beich (jbeich) · 1.15.2
multimedia/libvpx: update 1.15.2 (nop)

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.15.2-rc1..v1.15.2
e85c29a0f4
Jan Beich (jbeich) · 1.15.2.r1
multimedia/libvpx: update 1.15.2.r1

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.15.1..v1.15.2-rc1
PR:		287197
Reported by:	diizzy
Security:	CVE-2025-5283
b6f1cf881f
Jan Beich (jbeich) · 1.15.1
multimedia/libvpx: update 1.15.1

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.15.0..v1.15.1
Reported by:	portscout
64f3a6bf7e
Jan Beich (jbeich) · 1.15.0
multimedia/libvpx: update 1.15.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.14.1..v1.15.0
Reported by:	Repology
888cea7dee
Jan Beich (jbeich) · 1.14.1
multimedia/libvpx: update 1.14.1

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.14.0..v1.14.1
Reported by:	portscout
ebf9487ea6
Jan Beich (jbeich) · 1.14.0
multimedia/libvpx: update 1.14.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.13.1..v1.14.0
Reported by:	portscout
589aaaeb09
Jan Beich (jbeich) · 1.13.1
multimedia/libvpx: update 1.13.1

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.13.0..v1.13.1
Reported by:	portscout
cacf1a0c90
Jan Beich (jbeich) · 1.13.0
multimedia/libvpx: update 1.13.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.12.0..v1.13.0
Reported by:	portscout
17f6d799d7
Stefan Eßer (se) · 1.12.0
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.12.0
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 1.12.0
multimedia: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron LI <aly@aaronly.me>
  *  Alexander Botero-Lowry <alexbl@FreeBSD.org>
  *  Alexander Logvinov <ports@logvinov.com>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Anders Nordby <anders@FreeBSD.org>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrew Thompson <andy@fud.org.nz>
  *  Andrew Thompson <thompsa@FreeBSD.org>
  *  Angel Carpintero <ack@telefonica.net>
  *  Anish Mistry (with help from mean)
  *  Anonymous <swell.k@gmail.com>
  *  Ashish SHUKLA <ashish@FreeBSD.org>
  *  Ashish Shukla <wahjava@gmail.com>
  *  Ben Woods <woodsb02@FreeBSD.org>
  *  Brian Somers <brian@FreeBSD.org>
  *  Bruce M Simpson <bms@FreeBSD.org>
  *  Byung-Hee HWANG <bh@izb.knu.ac.kr>
  *  Charlie Kester <corky1951@comcast.net>
  *  Chess Griffin <chess@chessgriffin.com>
  *  Chris Piazza <cpiazza@FreeBSD.org>
  *  Christopher Key <cjk32@cam.ac.uk>
  *  Chuck Hein <chein@FreeBSD.org> & Jim Overholt <overholt@isdw.net>
  *  Daniel Morante <daniel@morante.net>
  *  Diego Depaoli <trebestie@gmail.com> and Yinghong Liu <relaxbsd@gmail.com>
  *  Dierk Sacher <dierk@blaxxtarz.de>
  *  Dreamcat4 <dreamcat4@gmail.com>
  *  Earl Gay <earl@eeg3.net>
  *  Ed Schouten <ed@FreeBSD.org>
  *  Edwin Groothuis <edwin@mavetju.org>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Felix Palmen <felix@palmen-it.de>
  *  Franz Bettag <franz@bett.ag>
  *  FreeBSD GNOME Team <gnome@freebsd.org>
  *  Gea-Suan Lin <gslin@gslin.org>
  *  George Reid <greid@ukug.uk.freebsd.org>
  *  Grzegorz Blach <gblach@FreeBSD.org>
  *  Gustau Perez <gustau.perez@gmail.com>
  *  Harold Gutch <logix@foobar.franken.de>
  *  Heiner <h.eichmann@gmx.de>
  *  Heiner Eichmann <h.eichmann@gmx.de>
  *  Hendrik Scholz <hendrik@scholz.net>
  *  Herbert J. Skuhra <h.skuhra@gmail.com>
  *  Herve Quiroz <hq@FreeBSD.org>
  *  Holger Lamm
  *  J.R. Oldroyd <fbsd@opal.com>
  *  Jason Harmening <jason.harmening@gmail.com>
  *  Jille Timmermans (jille@quis.cx)
  *  Juergen Lock <nox@FreeBSD.org>
  *  Juergen Lock <nox@jelal.kn-bremen.de>
  *  KalleDK <plexmaintainer@k-moeller.dk>
  *  Koop Mast <kwm@FreeBSD.org>
  *  Koop Mast <kwm@rainbow-runner.nl>
  *  Kozlov Sergey <kozlov.sergey.404@gmail.com>
  *  Kris Moore
  *  Kuan-Chung Chiu <buganini@gmail.com>
  *  Lars Eggert <lars.eggert@gmx.net>
  *  Leinier Cruz Salfran <salfrancl@yahoo.es>
  *  MANTANI Nobutaka <nobutaka@nobutaka.com>
  *  Manuel Creach <manuel.creach@icloud.com>
  *  Marc van Woerkom <3d@FreeBSD.org>
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
  *  Mark Felder <feld@FreeBSD.org>
  *  Martin Matuska <mm@FreeBSD.org>
  *  Martin Neubauer <m.ne@gmx.net>
  *  Martin Wilke <miwi@FreeBSD.org>
  *  Michael Johnson <ahze@FreeBSD.org>
  *  Michael Johnson <ahze@ahze.net>
  *  Michael Nottebrock <michaelnottebrock@gmx.net>
  *  Michael Nottebrock <michaelnottebrock@gmx.net> et al
  *  Mina Naguib <webmaster@topfx.com>
  *  Mykola Dzham <i@levsha.me>
  *  Naram Qashat <cyberbotx@cyberbotx.com>
  *  Olivier Cochard-Labbe <olivier@FreeBSD.org>
  *  Pascal Vizeli <pvizeli@yahoo.de>
  *  Pav Lucistnik <pav@FreeBSD.org>
  *  Pawel Pekala <pawel@FreeBSD.org>
  *  Petar Zhivkov Petrov <pesho.petrov@gmail.com>
  *  Phil Oleson
  *  Phil Oleson <oz@nixil.net>
  *  Piotr Kubaj <pkubaj@anongoth.pl>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Raaf <freebsd@luna.afraid.org>
  *  Randall Hopper <aa8vb@nc.rr.com>
  *  Rodrigo OSORIO <rodrigo@FreeBSD.org>
  *  Rozhuk Ivan 2018 <rozhuk.im@gmail.com>
  *  Rozhuk Ivan <rozhuk.im@gmail.com>
  *  Rozhuk Ivan rozhuk.im@gmail.com
  *  Rusmir Dusko <nemysis@FreeBSD.org>
  *  Stacey Son <mythdev@son.org>, Ari Maniatis <ari@ish.com.au>
  *  Steve Wills <steve@mouf.net>
  *  Steve Wills <swills@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Sylvio Cesar <sylvio@FreeBSD.org>
  *  Thierry Thomas <thierry@pompo.net>
  *  Thomas E. Zander
  *  Thomas E. Zander with help from Vladimir Kushnir
  *  Vladimir Kondratiev <wulf@mail.mipt.ru>
  *  William Grzybowski <wg@FreeBSD.org>
  *  William Grzybowski <william88@gmail.com>
  *  Yi-Hsuan Hsin <mhsin@mhsin.org>
  *  Zastupov Stepan [RedChrom] <redchrom@mail.ru>
  *  adamw
  *  alex
  *  arved
  *  erich@FreeBSD.org
  *  freebsd-ports@evilcode.net
  *  giffunip@asme.org
  *  ijliao
  *  kamikaze@bsdforen.de
  *  michael johnson <ahze@ahze.net>
  *  mikael.urankar@gmail.com
  *  mm
  *  nox@FreeBSD.org
  *  osa
  *  pb@FreeBSD.org
  *  piero
  *  se@FreeBSD.org
  *  sumikawa

With hat:	portmgr
63f36d3262
Jan Beich (jbeich) · 1.12.0
multimedia/libvpx: update 1.12.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.11.0..v1.12.0
Reported by:	Repology, portscout
d4c4753e44
Jan Beich (jbeich) · 1.11.0
multimedia/libvpx: update 1.11.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.10.0..v1.11.0
Reported by:	portscout, Repology
f16d8e5635
Rene Ladan (rene) · 1.10.0
cleanup: drop support for EOL FreeBSD 11.X

Search criteria used:
- 11.4
- OSREL*
- OSVER*
- *_FreeBSD_11

Input from:
- adridg: devel/qca-legacy
- jbeich: _WITH_DPRINTF, _WITH_GETLINE, GNU bfd workarounds
- sunpoet: security/p5-*OpenSSL*

Reviewed by:	doceng, kde, multimedia, perl, python, ruby, rust
Differential Revision: https://reviews.freebsd.org/D32008
Test Plan: make index
620968a43a
Bernhard Froehlich (decke) · 1.10.0
multimedia/libvpx: Fix CPE information because current one is deprecated

Approved by:    portmgr (blanket)
fb9720f20f
Mathieu Arnold (mat) · 1.10.0
Remove # $FreeBSD$ from Makefiles.
305f148f48
Jan Beich (jbeich) · 1.10.0
multimedia/libvpx: update 1.10.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.9.0..v1.10.0
Reported by:	portscout, Repology
9d9a526954
Jan Beich (jbeich) · 1.9.0
multimedia/libvpx: unbreak armv6/armv7 on -CURRENT

as -I./ -I"/wrkdirs/usr/ports/multimedia/libvpx/work/libvpx-1.9.0"/ -march=armv7-a -meabi=5 -mfpu=neon -o vpx_dsp/arm/vpx_convolve_copy_neon_asm.asm.S.o vpx_dsp/arm/vpx_convolve_copy_neon_asm.asm.S
/bin/sh: as: not found

PR:		250045
Submitted by:	mikael (based on)
93c4582fed
Jan Beich (jbeich) · 1.9.0
multimedia/libvpx: update 1.9.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.8.2..v1.9.0
ABI:		https://abi-laboratory.pro/tracker/timeline/libvpx/
Reported by:	portscout, Repology
42ea51ba20
Jan Beich (jbeich) · 1.8.2_1
multimedia/libvpx: update COMMENT and pkg-decr

Only decoder and encoder are installed. Other features are not
maintained by the port. Besides, ffmpeg provides alternative decoder
while svt-vp9 provides alternative encoder.
471a9adacc
Jan Beich (jbeich) · 1.8.2_1
multimedia/libvpx: kill all options

None of the consumers were tested with non-default options. As
there're no additional dependencies users are better off with
Makefile.local which provides access to more e.g.

  --enable-better-hw-compatibility
  --enable-onthefly-bitpacking
  --enable-error-concealment
  --enable-coefficient-range-checking
  --enable-postproc-visualizer

Similar to multimedia/aom this reduces maintenance.
7c0b2d922b
Jan Beich (jbeich) · 1.8.2_1
multimedia/libvpx: convert to _ENABLE option helper
963bc22e39
Jan Beich (jbeich) · 1.8.2_1
multimedia/libvpx: enable 10/12-bit profiles

- Same as Chromium, VLC, Arch, Fedora, Gentoo, Homebrew
- Option named after 10-bit to match multimedia/x265

Requested by:	Dima D <dima_bsd@inbox.lv>
MFH:		2020Q1
6cf5b9ce60
Jan Beich (jbeich) · 1.8.2
multimedia/libvpx: fix RTCPU=OFF and POSTPROC=off
450e3723da
Jan Beich (jbeich) · 1.8.2
multimedia/libvpx: drop redundant flags

All codecs are enabled by default.
1e25885048
Jan Beich (jbeich) · 1.8.2
multimedia/libvpx: document current Firefox limit

See https://bugzilla.mozilla.org/show_bug.cgi?id=1225221
ff7874ae37
Jan Beich (jbeich) · 1.8.2
multimedia/libvpx: update 1.8.2

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.8.1..v1.8.2
ABI:		https://abi-laboratory.pro/tracker/timeline/libvpx/
Reported by:	portscout
434b910203
Gerald Pfeifer (gerald) · 1.8.1_1
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Jan Beich (jbeich) · 1.8.1
multimedia/libvpx: update 1.8.1

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.8.0..v1.8.1
ABI:		https://abi-laboratory.pro/tracker/timeline/libvpx/
Reported by:	Repology
9ae289f748
Jan Beich (jbeich) · 1.8.0
multimedia/libvpx: handle snapshots in version string

- head(1) which is not part of native-xtools
- CHANGELOG is only updated on releases
- similar change was done in multimedia/aom
977506a4e8
Jan Beich (jbeich) · 1.8.0
multimedia/libvpx: update 1.8.0

www/firefox, www/firefox-esr, mail/thunderbird wait for upstream fix via
https://bugzilla.mozilla.org/show_bug.cgi?id=1525393

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.7.0..v1.8.0
ABI:		https://abi-laboratory.pro/tracker/timeline/libvpx/
7c039bce3a
Jan Beich (jbeich) · 1.7.0_4
multimedia/libvpx: restore NEON on armv6 after r466922

- Only armv6 needs -meabi=5
- Build NEON files on armv6
- Respect CPUTYPE on armv7 and aarch64
4667d6c426
Gerald Pfeifer (gerald) · 1.7.0_3
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
a9f015d155
Jan Beich (jbeich) · 1.7.0_2
multimedia/libvpx: standardize variable name holding AT_HWCAP value
bf228555fc
Jan Beich (jbeich) · 1.7.0_2
multimedia/libvpx: assume NEON on armv7
ad55310097
Jan Beich (jbeich) · 1.7.0_2
multimedia/libvpx: simplify NEON/VSX detection on FreeBSD 12
3366163855
Jan Beich (jbeich) · 1.7.0_2
multimedia/libvpx: backport use-after-free fix

https://bugs.chromium.org/p/chromium/issues/detail?id=842265

Inspired by:	Mozilla
Obtained from:	upstream (Chromium 68, Firefox 62)
48d344f9d1
Gerald Pfeifer (gerald) · 1.7.0_1
Bump PORTREVISION for ports depending on the canonical version of GCC in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which has now moved from GCC 6 to GCC 7 by default.

This includes ports
 - featuring USE_GCC=yes or USE_GCC=any,
 - featuring USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and those
 - with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
   c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.

PR:		222542
09f9633cb6
Jan Beich (jbeich) · 1.7.0
multimedia/libvpx: unbreak on powerpc*

- newer libstdc++ ABI is required by many consumers
- -mspe and -maltivec are mutually exclusive
- implement VSX detection for powerpc and powerpc64

PR:		228586
Submitted by:	jhibbits (based on)
e5ec3eafed
Jan Beich (jbeich) · 1.7.0
multimedia/libvpx: chase HTTP redirect

Reported by:	Repology
ee06012058
Jan Beich (jbeich) · 1.7.0
multimedia/libvpx: enable NEON on armv6 with more CPUTYPE values

PR:		224107
Submitted by:	Mikaël Urankar
d4911c10e7
Jan Beich (jbeich) · 1.7.0
multimedia/libvpx: merge static post-patch into file

PR:		224107
b639a8c291
Jan Beich (jbeich) · 1.7.0
multimedia/libvpx: drop explicit targets

PR:		224107
e2b39d9b99
Jan Beich (jbeich) · 1.7.0
multimedia/libvpx: unbreak on armv7

vpx_ports/arm_cpudetect.c.o: In function `arm_cpu_caps':
arm_cpudetect.c:(.text+0x48): undefined reference to `getauxval'
arm_cpudetect.c:(.text+0x78): undefined reference to `getauxval'
c++: error: linker command failed with exit code 1 (use -v to see invocation)

PR:		224107
Reported by:	pkg-fallout
Submitted by:	Mikaël Urankar
1bc81acd3b
Jan Beich (jbeich) · 1.7.0
multimedia/libvpx: update 1.7.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.6.1..v1.7.0
ABI:		https://abi-laboratory.pro/tracker/timeline/libvpx/
b964b053b6
Alexey Dokuchaev (danfe) · 1.6.1_2
Allow to build on sparc64 and powerpc.
73f128faa2
Mathieu Arnold (mat) · 1.6.1_2
OPTIONS_SUB only cares about being defined, its content is ignored.

Sponsored by:	Absolight
cbcfde370c
Jan Beich (jbeich) · 1.6.1_2
multimedia/libvpx: unbreak on amd64 after r454153

nasm -Ox -f elf64 -I./ -I"/wrkdirs/usr/ports/multimedia/libvpx/work/libvpx-1.6.1"/ -o vpx_dsp/x86/intrapred_sse2.asm.o vpx_dsp/x86/intrapred_sse2.asm
vpx_dsp/x86/intrapred_sse2.asm:64: error: invalid combination of opcode and operands
third_party/x86inc/x86inc.asm:1383: ... from macro `movd' defined here
third_party/x86inc/x86inc.asm:1283: ... from macro `RUN_AVX_INSTR' defined here

Reported by:	antoine
Pointy hat to:	jbeich
1e89dfe53a