CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

multimedia/openh2642.6.0_1,2

Cisco implementation of H.264 codec

Maintainer
gecko@FreeBSD.org
Packages
openh264 2.6.0_1,2
Upstream
Higher version available: 2.7.0
CPE
cisco:openh264 from the port
WWW
https://www.openh264.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (1)

VuXML entries whose affected range this version has left.

Commits (48)

Christoph Moench-Tegeder (cmt) · 2.6.0_1,2
multimedia/openh264: link library as originally intended

We carried this patch since importing openh264 into the ports tree,
but at this time it results in weird linkage.
The original reasoning behind this patch can't be reconstructed beyond
the short comment in the patch file.
Without the patch, the library looks much more sane.

PR:		299071
Reported by:	jsm@
1d3db2fc40
Christoph Moench-Tegeder (cmt) · 2.6.0,2
multimedia/openh264: clean up pkg-plist

cliqz has been removed 2020-12-31, and seamonkey was removed 2019-07-13.
A firefox-nightly might even never have existed in the official tree
(it sure is not there riht now, and I cannot find any commit related
to that in the git history).
No PORTREVISION bump, as this does not change any installed file, and
the symlinks created/removed by the postexec statements shouldn't exist
in any remotely current system.
60ac10a1a8
Matthias Andree (mandree) · 2.6.0,2
multimedia/openh264: security update to v2.6.0

This includes a security fix:
"- Fix potential bug in the codebase (Commit: 63db555e, PR: #3818)"
which the 2.5.1 release described as
"Fix decoder heap overflow vulnerability".
<https://github.com/cisco/openh264/releases>

But due to the other fixes, let's move to 2.6.0 right away.
Requires gmp-api (GeckoMediaPlayer) API update to Firefox 135 to build.

Changelog:	https://github.com/cisco/openh264/blob/openh264v2.6.0/RELEASES#L4
Security:	03ba1cdd-4faf-11f0-af06-00a098b42aeb
Security:	CVE-2025-27091
PR:		288375
Approved by:	ports-secteam@ (fernape@)
MFH:		2025Q3 (needs gmp-api update)
dc94e017da
Stefan Eßer (se) · 2.3.0,2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.3.0,2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Jan Beich (jbeich) · 2.3.0,2
multimedia/openh264: update to 2.3.0

Changes:	https://github.com/cisco/openh264/releases/tag/v2.3.0
Reported by:	GitHub (watch releases), portscout
f74655586a
Jan Beich (jbeich) · 2.2.0,2
multimedia/openh264: update to 2.2.0

Changes:	https://github.com/cisco/openh264/releases/tag/v2.2.0
Reported by:	GitHub (watch releases)
e861fc41d6
Jan Beich (jbeich) · 2.1.1_1,2
multimedia/openh264: backport FreeRDP decoding fix
bb46df5a3a
Mathieu Arnold (mat) · 2.1.1,2
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 2.1.1,2
Remove # $FreeBSD$ from Makefiles.
305f148f48
Jan Beich (jbeich) · 2.1.1,2
multimedia/openh264: restore PORTEPOCH after r536180

Reported by:	jrm
5861211b40
Jan Beich (jbeich) · 2.1.1
multimedia/openh264: update to 2.1.1

Changes:	https://github.com/cisco/openh264/releases/tag/v2.1.1
ABI:		https://abi-laboratory.pro/tracker/timeline/openh264/
Reported by:	GitHub (watch releases)
767d3c61be
Jan Beich (jbeich) · 2.1.0,2
multimedia/openh264: update to 2.1.0

Changes:	https://github.com/cisco/openh264/releases/tag/v2.1.0
ABI:		https://abi-laboratory.pro/tracker/timeline/openh264/
Reported by:	GitHub (watch releases)
88a2c6fd1b
Jan Beich (jbeich) · 2.0.0,2
multimedia/openh264: respect SOURCE_DATE_EPOCH in GMP timestamp
35504f496c
Jan Beich (jbeich) · 2.0.0,2
multimedia/openh264: update to 2.0.0

- Add symlinks for cliqz and thunderbird

Changes:	https://github.com/cisco/openh264/releases/tag/v2.0.0
ABI:		https://abi-laboratory.pro/tracker/timeline/openh264/
Reported by:	GitHub (watch releases)
edc42f3c38
Jan Beich (jbeich) · 1.8.0,2
multimedia/openh264: drop USES=compiler after r473444
3f497d4050
Ed Maste (emaste) · 1.8.0,2
multimedia/openh264: add -znotext to LDFLAGS on i386, for lld

Example error:
/usr/bin/ld: error: can't create dynamic relocation R_386_32 against
    local symbol in readonly segment; recompile object files with -fPIC

This port links some non-PIC code, which fails with lld as it defaults
to disallowing relocations against read-only segments.  For i386 we can
just add -znotext unconditionally: for GNU BFD ld it just affirms BFD's
existing default.

PR:		214864
Approved by:	bapt
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D17179
2bdeb107ae
Jan Beich (jbeich) · 1.8.0,2
multimedia/openh264: update to 1.8.0

Changes:	https://github.com/cisco/openh264/releases/tag/v1.8.0
ABI:		https://abi-laboratory.pro/tracker/timeline/openh264/
2243654754
Jan Beich (jbeich) · 1.7.0,2
multimedia/openh264: update to 1.7.0

Changes:	https://github.com/cisco/openh264/releases/tag/v1.6.0
Changes:	https://github.com/cisco/openh264/releases/tag/v1.7.0
ABI:		https://abi-laboratory.pro/tracker/timeline/openh264/
84fc20fa32
Mark Linimon (linimon) · 1.5.0,2
Back out previous change.  ASFLAGS_<arch> here use ${MACHINE} or `uname -m`

Reported by:	jbeich
02677599b2
Mark Linimon (linimon) · 1.5.0,2
Use the modern spelling of 'aarch64'.

Approved by:	portmgr (tier-2 blanket)
6afd462faa
Jan Beich (jbeich) · 1.5.0,2
multimedia/openh264: make sure as(1) is available

aarch64 lacks binutils in base unlike armv6 while the buildbot only
copies ld(1) from ports under /usr/bin. Note, Clang 3.9 still doesn't
support the assembly used here.
50a7356718
Mark Linimon (linimon) · 1.5.0,2
Mark broken on aarch64.  If I understand the code correctly, there is a problem with the MAKE_ARGS logic.

Approved by:	portmgr (tier-2 blanket)
7ec86f7762
Jan Beich (jbeich) · 1.5.0,2
multimedia/openh264: back out r418381 (try#2)

As every consumer was broken except for net/pjsip which isn't actually
linking against openh264 there's no need to bump PORTREVISION.
8ddbc0585e
Jan Beich (jbeich) · 1.6.0,1
multimedia/openh264: update to 1.6.0

API/ABI has changed, so bump PORTREVISION in consumers. Some of those
are marked BROKEN that may need a fix similar to libav.

https://git.libav.org/?p=libav.git;a=commitdiff;h=d825b1a53065

Changes:	https://github.com/cisco/openh264/releases/tag/v1.6.0
dd9e1d2c23
Jan Beich (jbeich) · 1.5.0,1
multimedia/openh264: oops, back out r418381

Every consumer was broken except for net/pjsip which isn't actually
building *against* openh264.
4aaa8b6e3c
Jan Beich (jbeich) · 1.6.0
multimedia/openh264: update to 1.6.0

API/ABI has changed, so bump PORTREVISION in consumers. Some of those
are marked BROKEN that may need a fix similar to libav.

https://git.libav.org/?p=libav.git;a=commitdiff;h=d825b1a53065

Changes:	https://github.com/cisco/openh264/releases/tag/v1.6.0
f1071e550c
Baptiste Daroussin (bapt) · 1.5.0
Prefer explicit @postexec
3935f3bbe2
Jan Beich (jbeich) · 1.5.0
multimedia/openh264: also try armv7 code on armv8
d311a3c056
Mathieu Arnold (mat) · 1.5.0
Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.

With hat:	portmgr
Sponsored by:	Absolight
8d6597e0bb
Jan Beich (jbeich) · 1.5.0
multimedia/openh264: partially unbreak PREFIX != LOCALBASE

PR:		206589
Submitted by:	mi
6439afeb12
Jan Beich (jbeich) · 1.5.0
multimedia/openh264: oops, drop unused devel/binutils

USE_BINUTILS isn't magically enabled for non-autotools ports.
One of the following had to be provided

  CFLAGS+=	-B${LOCALBASE}/bin
  MAKE_ENV+=	COMPILER_PATH=${LOCALBASE}/bin

However, binutils 2.17 in base is enough for NEON with armv6 while
aarch64 requires recent binutils for everything, not just this port.

PR:		201273 (ping)
Reported by:	Mikaël Urankar (via private mail)
MFH:		2015Q4
X-MFH-With:	r400578
b7763209ee
Jan Beich (jbeich) · 1.5.0
multimedia/openh264: update to 1.5.0

Changes:	https://github.com/cisco/openh264/releases/tag/v1.5.0
94fb07d464
Jan Beich (jbeich) · 1.4.0_5
multimedia/openh264: unbreak build on aarch64

/nxb-bin/usr/bin/cc -O2 -pipe  -I/usr/local/include/gmp-api -fno-strict-aliasing  -DHAVE_NEON_AARCH64 -fPIC -DGENERATED_VERSION_HEADER -I./codec/common/arm64/ -I./codec/api/svc -I./codec/common/inc   -c -o codec/common/arm64/copy_mb_aarch64_neon.o codec/common/arm64/copy_mb_aarch64_neon.S
<instantiation>:4:1: error: unknown directive
.func WelsCopy8x8_AArch64_neon
^
codec/common/arm64/copy_mb_aarch64_neon.S:186:1: note: while in macro instantiation
WELS_ASM_AARCH64_FUNC_BEGIN WelsCopy8x8_AArch64_neon
^
<instantiation>:2:1: error: unknown directive
.endfunc
^
codec/common/arm64/copy_mb_aarch64_neon.S:196:1: note: while in macro instantiation
WELS_ASM_AARCH64_FUNC_END
^
[...]

Backout r394430 as armv6 can do NEON but not runtime detection on
FreeBSD while armv8 always has NEON. So, use devel/binutils and detect
NEON via compiler defines e.g.,

  # To enable NEON on armv6 put the following into make.conf
  CFLAGS+=	-march=armv7-a

PR:		201273 (ping)
MFH:		2015Q4
af9ad09683
Jan Beich (jbeich) · 1.4.0_4
multimedia/openh264: convert to new option helpers
b6f55ae785
Jan Beich (jbeich) · 1.4.0_4
multimedia/openh264: unbreak build on armv6

Disable NEON support for armv6 (softfp). Alas, MACHINE_CPU is
underspecified on arm* to conditionalize NEON check within a port.

PR:		201273
Reported by:	pkg-fallout
Submitted by:	mikael.urankar@gmail.com
MFH:		2015Q3
6ac83e0894
Jan Beich (jbeich) · 1.4.0_4
multimedia/openh264: arm* don't need nasm to build *.S files

PR:		201273
3f898bdc2f
Jan Beich (jbeich) · 1.4.0_4
Switch OpenH264 plugin to use environment variable

files/patch-system-openh264 causes patch churn on updates and hits
assertion with DEBUG=on[1]. Rework to use MOZ_GMP_PATH instead.

While here populate Last Updated field to avoid falling back to Epoch start
and disable Automatic Updates in an unlikely case of
- Cisco & Mozilla providing prebuilt version for FreeBSD
- Firefox running with root priveleges i.e., write permission under /usr/local

PR:		202218 [1]
Reported by:	kib, pi [1]
Inspired by:	Gentoo
MFH:		2015Q3
ca8a3f7f59
Jan Beich (jbeich) · 1.4.0_3
- Update NSS and ca_root_nss to 3.19.2 - Update Firefox and gmp-api to 39.0 - Update Firefox ESR and libxul to 38.1.0

Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.19.2_release_notes
Changes:	https://www.mozilla.org/firefox/39.0/releasenotes/
Changes:	https://www.mozilla.org/firefox/38.1.0/releasenotes/
MFH:		2015Q3
Security:	https://vuxml.freebsd.org/freebsd/44d9daee-940c-4179-86bb-6e3ffd617869.html
ef0a0c91f1
Dmitry Marakasov (amdmi3) · 1.4.0_2
- Add CPE info

Approved by:	portmgr blanket
be10d850b7
Bryan Drewery (bdrewery) · 1.4.0_2
USE_GITHUB: For the new support, fix DISTNAME to be more consistent.

When using GH_TAGNAME the DISTNAME would have GH_PROJECT and GH_ACCOUNT in
it. When not using GH_TAGNAME it would not have this. Now both cases
will add in the GH_PROJECT and GH_ACCOUNT.

Add special care to ensure that the DISTVERSION is not added in twice. If
a port does GH_TAGNAME=v${PORTVERSION} it will be added in twice though. For
that case DISTVERSIONPREFIX=v should be set and no GH_TAGNAME should be used.

empty() is used rather than (!defined || !${}) to support fmake.

The purpose of setting DISTNAME at all in these cases is to make it more clear
that the distfile is from *GITHUB* and to avoid collisions if a project were
to be renamed or moved. Without adding in GH_PROJECT and GH_ACCOUNT then there
are real risks that collisions on filenames would happen on renamed or moved
projects, which is fairly common. A GITHUB-generated file may not match
a custom-rolled or git-archive-rolled distfile.

PR:		199069
With hat:	portmgr
Testing done:	All USE_GITHUB ports without GH_COMMIT were checksum/fetch/extract/WRKSRC tested.
aa6ad6e726
Jan Beich (jbeich) · 1.4.0_2
- Update to re-rolled 1.4.0 - Remove deprecated GH_COMMIT with a side effect of making it harder   to track from where tag moves in future

Changes:	https://github.com/cisco/openh264/compare/3a75956...v1.4.0
MFH:		2015Q2
5fcf2e5982
John Marino (marino) · 1.4.0_1
multimedia/openh264: Mark broken; checksum mismatch

At least this saves having to download 35Mb for nothing...
7735455562
Jan Beich (jbeich) · 1.4.0_1
- Update gmp-api to 38.0 - Update Firefox to 37.0 - Update Firefox ESR and libxul to 31.6.0 - Update Thunderbird to 31.6.0 - Backport a few GTK3 fixes to Firefox 37

MFH:		2015Q1
Security:	https://vuxml.freebsd.org/freebsd/d0c97697-df2c-4b8b-bff2-cec24dc35af8.html
351d85711d
Jan Beich (jbeich) · 1.4.0
- Update OpenH264 to 1.4.0 - Update NSS and ca_root_nss to 3.18 - Update Firefox to 36.0.4 - Update Firefox ESR and libxul to 31.5.3 - Update SeaMonkey to 2.33.1 - Update Enigmail to 1.8

Changes:	https://github.com/cisco/openh264/releases/tag/v1.4.0
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.18_release_notes
Changes:	https://www.mozilla.org/firefox/36.0.4/releasenotes/
Changes:	https://www.mozilla.org/firefox/31.5.3/releasenotes/
Changes:	http://www.seamonkey-project.org/releases/seamonkey2.33/
Changes:	https://www.enigmail.net/download/changelog.php#enig1.8
MFH:		2015Q1
X-MFH-With:	r380090
Security:	https://vuxml.freebsd.org/freebsd/76ff65f4-17ca-4d3f-864a-a3d6026194fb.html
cbca8c3691
Beat Gaetzi (beat) · 1.3.1
- Update openh264 to 1.3.1 - Update Thunderbird to 31.4.0 - Update Firefox to 35.0 - Update Firefox ESR to 31.4.0 - Update libxul to 31.4.0

Submitted by:	Jan Beich
MFH:		2015Q1
Security:	http://www.vuxml.org/freebsd/bd62c640-9bb9-11e4-a5ad-000c297fb80f.html
7483da328d
Beat Gaetzi (beat) · 1.2
- Update Thunderbird to 31.3.0 - Update gmp-api to 35.0 - Update openh264 to 1.2 - Update NSS to 3.17.3 - Update Firefox to 34.0.5 - Update Firefox ESR 31.3.0 - Update libxul to 31.3.0 - Improve CONFIGURE_TARGET handling - Always build using client.mk - Switch to clang by default on systems without libc++   (/stable/8 and /stable/9) - Drop lang/python2 dependency, only lang/python27 is required   

PR:		195559
Submitted by:	Jan Beich
MFH:		2014Q4
Security:	http://vuxml.org/freebsd/7ae61870-9dd2-4884-a2f2-f19bb5784d09.html
0ccec1792b
Beat Gaetzi (beat) · 1.1
OpenH264 is a codec library which supports H.264 encoding and decoding. It is suitable for use in real time applications such as WebRTC.

WWW: http://www.openh264.org/

PR:		194356
Submitted by:	Jan Beich
04b9f3319e