CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

net-im/dendrite0.14.1_17

Matrix protocol homeserver

Maintainer
ashish@FreeBSD.org
Packages
dendrite 0.14.1_17
Upstream
Higher version available: 0.15.2
CPE
matrix:dendrite from the port
WWW
https://github.com/element-hq/dendrite
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (3)

VuXML entries whose affected range this version has left.

Commits (118)

Dag-Erling Smørgrav (des) · 0.14.1_17
various: Bump Go ports for Go 1.26.10 / 1.27.3
d81b7ba3c3
Dag-Erling Smørgrav (des) · 0.14.1_16
various: Bump Go ports
031fc6bfbf
Adam Weinberger (adamw) · 0.14.1_15
many: Bump go ports for 1.26.8 and 1.27.1
dd0905142a
Dag-Erling Smørgrav (des) · 0.14.1_14
various: Bump go ports for go-1.25.14 / 1.26.7
4867821cd6
Dag-Erling Smørgrav (des) · 0.14.1_13
various: Bump go ports for go-1.25.13 / 1.26.6
6d39dcf04e
Dag-Erling Smørgrav (des) · 0.14.1_12
various: Bump go ports for go-1.25.12 / 1.26.5
4ea3547132
Dag-Erling Smørgrav (des) · 0.14.1_11
various: Bump go ports for go-1.25.11 / go-1.26.4
dd8dc2a59d
Adam Weinberger (adamw) · 0.14.1_10
various: Bump ports for Go 1.25.10
4e243a83f8
Dag-Erling Smørgrav (des) · 0.14.1_9
various: Bump go ports for go-1.25.9 / 1.26.2
7507e72a84
Adam Weinberger (adamw) · 0.14.1_8
various: Bump ports for Go 1.25.8
a8d318da7c
Adam Weinberger (adamw) · 0.14.1_7
various: Bump ports for Go default 1.24->1.25
97685c1886
Adam Weinberger (adamw) · 0.14.1_6
various: Bump Go ports for 1.24.13
529df949a5
Adam Weinberger (adamw) · 0.14.1_5
various: Bump Go ports for 1.24.12
013f2d30b0
Dag-Erling Smørgrav (des) · 0.14.1_4
many: Unpin Go ports

* Ports that were pinned to a deprecated version of Go (1.23 or older)
  have been unpinned.

* Ports that were pinned to a still-supported version of Go (1.24 or
  newer) have been converted to requesting that as their minimum Go
  version.

* Ports that had been forcibly deprecated for pinning an expired Go
  version have been undeprecated.
75d873b56a
Adam Weinberger (adamw) · 0.14.1_4
many: Unsupported Go dep; deprecate and schedule for removal

There are about 75 ports that depend on old, unsupported Go
versions. I've scheduled those Go versions for deletions on
2025/01/01, and so these ports are scheduled for removal on
that same day.

HOWEVER....

Likely NONE or VERY VERY FEW of these ports will actually need
to be deleted! This stems from a misunderstanding:

When go.mod says "go 1.23", it means that it requires AT LEAST
go-1.23. Locking a port to a specific go version should almost
never happen; it is reserved for when a package absolutely
cannot build with any newer version, and it almost means that
the port will only last 1 year (Go releases new minors twice a
year).

Where a port has
USES=go:1.23
maintainers should attempt build with just
USES=go

If that works, please either commit it or submit it in a PR.

Same goes go
USES=go:1.23,modules
to attempt
USES=go,modules
f45b1d07f5
Adam Weinberger (adamw) · 0.14.1_4
go123 ports: Bump for 1.23.12
b6703954e3
Adam Weinberger (adamw) · 0.14.1_3
go: Bump ports for go124 update
a4e30d4f4f
Adam Weinberger (adamw) · 0.14.1_2
Bump all go ports for yesterday's releases
d0642a6176
Ashish SHUKLA (ashish) · 0.14.1_1
all: Bump after lang/go123 update

PR:		284681
f9fbe03c69
Ashish SHUKLA (ashish) · 0.14.1
net-im/dendrite: Update to 0.14.1

Security:	cd2ace09-df23-11ef-a205-901b0e9408dc
Security:	CVE-2024-52594
MFH:		2025Q1
a95d0890a0
Ashish SHUKLA (ashish) · 0.14.0_1
all: Bump after lang/go123 update

MFH:		2025Q1
ca07a602a8
Ashish SHUKLA (ashish) · 0.14.0
net-im/dendrite: Update to 0.14.0

- Update WWW to point to updated upstream
- Depend on Go 1.23
- Update upstream module

Thanks to Sven for notifying about the upstream change, and update
available.
957da2851b
Ashish SHUKLA (ashish) · 0.13.8
net-im/dendrite: Update to 0.13.8
1a6e34b4cd
Ashish SHUKLA (ashish) · 0.13.7_5
all: Bump after lang/go121 update
aa8c0111bf
Ashish SHUKLA (ashish) · 0.13.7_4
all: Bump after lang/go121 update
c4b51c2028
Ashish SHUKLA (ashish) · 0.13.7_3
all: Bump after lang/go121 update

MFH:		2024Q2
746fa696a1
Ashish SHUKLA (ashish) · 0.13.7_2
all: Bump after lang/go121 update

MFH:		2024Q2
fce0cc3272
Ashish SHUKLA (ashish) · 0.13.7_1
all: Bump after lang/go121 update

MFH:		2024Q2
32b284679a
Ashish SHUKLA (ashish) · 0.13.7
net-im/dendrite: Update to 0.13.7
bddf1fd16a
Muhammad Moinur Rahman (bofh) · 0.13.6_2
lang/go: Change DEFAULT to 1.21

PR:		277776
Approved by:	portmgr (exp-run)
a5a000df3b
Ashish SHUKLA (ashish) · 0.13.6_1
all: Bump PORTREVISION after lang/go* update

PR:		276530
7e5aa2085f
Ashish SHUKLA (ashish) · 0.13.6
net-im/dendrite: Update to 0.13.6

MFH:		2024Q1
3238e5381c
Ashish SHUKLA (ashish) · 0.13.5
net-im/dendrite: Update to 0.13.5

MFH:		2023Q4 (recommended by upstream)
ac474d8c91
Ashish SHUKLA (ashish) · 0.13.4_1
all: Bump PORTREVISION after lang/go* update

PR:		274405
0505b712df
Ashish SHUKLA (ashish) · 0.13.4
net-im/dendrite: Update to 0.13.4

MFH:		2023Q4 (recommendation from upstream)
03b0926fe0
Ashish SHUKLA (ashish) · 0.13.3
net-im/dendrite: Update to 0.13.3

- Switch to GO_MODULE
1ddb0f4161
Dmitri Goutnik (dmgk) · 0.13.2_1
all: Bump PORTREVISION after lang/go* update
8e4bc57934
Ashish SHUKLA (ashish) · 0.13.2
net-im/dendrite: Update to 0.13.2
f051c2f2af
Dmitri Goutnik (dmgk) · 0.13.1_1
all: Bump PORTREVISION after lang/go{119,120} update
09b993031a
Ashish SHUKLA (ashish) · 0.13.1
net-im/dendrite: Update to 0.13.1

MFH:		2023Q3 (as recommended by upstream)
10d964c18e
Ashish SHUKLA (ashish) · 0.13.0
net-im/dendrite: Update to 0.13.0
3a22759662
Mathieu Arnold (mat) · 0.12.3
*: regular cleanup for GH_TAGNAME bad usage
0619748960
Ashish SHUKLA (ashish) · 0.12.3
net-im/dendrite: Update to 0.12.3
0f46ba3ef6
Ashish SHUKLA (ashish) · 0.12.2
net-im/dendrite: Update to 0.12.2

- Remove polylith support
- Switch to different tag name

Reported by:	Sven Lellesch <sven at lellesch dot de>
c4ef440636
Dmitri Goutnik (dmgk) · 0.11.1_3
all: Bump PORTREVISION after lang/go{119,120} update
ff40d94c1d
Dmitri Goutnik (dmgk) · 0.11.1_2
all: Bump PORTREVISION after Go ports update
09079730e9
Dmitri Goutnik (dmgk) · 0.11.1_1
all: Bump PORTREVISION after lang/go{119,120} update
56b5ec772f
Ashish SHUKLA (ashish) · 0.11.1
net-im/dendrite: Update to 0.11.1

- Mark as buildable with Go 1.20
ae6a3fb64d
Dmitri Goutnik (dmgk) · 0.11.0_1
all: Bump PORTREVISION after GO_DEFAULT update.
2297efc51b
Dmitri Goutnik (dmgk) · 0.11.0
net-im/dendrite: Pin Go version to 1.19

vendor/github.com/lucas-clemente/quic-go/internal/qtls/go120.go:5:13: cannot use "The version of quic-go you're using can't be built on Go 1.20 yet.

quic-go doesn't support go1.20 yet, keep building this port with go1.19
for now.

PR:		269289
Reported by:	exp-run
9bb7a77ba0