CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

net-im/uTox0.18.1_3

Lightweight Tox client

Maintainer
portmaster@BSDforge.com
Packages
uTox 0.18.1_3
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
https://github.com/uTox/uTox
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (84)

Gleb Popov (arrowd) · 0.18.1_3
net-im/uTox: Fix building with CMake 4

Approved by:	portmgr (fixit blanket)
5ba9462574
Daniel Engberg (diizzy) · 0.18.1_3
*/*: Bump PORTREVISION for libsodium consumers after version bump

Bump consumers of libsodium
42b95df84d
Brooks Davis (brooks) · 0.18.1_2
*/*: remove checks that base ld is(n't) GNU ld

GNU binutils was removed entierly prior to 13.0 so assume /usr/bin/ld
is LLD.

Sponsored by:	DARPA, AFRL
Reviewed by:	arrowd, bapt
Approved by:	portmgr (bapt)
Differential Revision:	https://reviews.freebsd.org/D55691
d87609e18e
Jan Beich (jbeich) · 0.18.1_2
multimedia/libvpx: update 1.16.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.15.2..v1.16.0
Reported by:	Repology
939d8775e7
Vsevolod Stakhov (vsevolod) · 0.18.1_1
security/libsodium: Update to 1.0.21

The API remains compatible but bumping all dependent ports as SHLIB
has changed.

Changelog: https://github.com/jedisct1/libsodium/releases/tag/1.0.21-RELEASE
Security: https://00f.net/2025/12/30/libsodium-vulnerability/
PR: 279347
8b878d88b4
Vladimir Druzenko (vvd) · 0.18.1
net-im/uTox: Update 0.17.2 => 0.18.1

Changelogs:
https://github.com/uTox/uTox/releases/tag/v0.18.0
https://github.com/uTox/uTox/releases/tag/v0.18.1

PR:		290840
Approved by:	Chris Hutchinson <portmaster@bsdforge.com>
87c8cb0f69
Thierry Thomas (thierry) · 0.17.2_10
net-im/uTox: update WWW, add MAINTAINER, remove DEPRECATED

PR:		286047
c40180aa4c
Jan Beich (jbeich) · 0.17.2_10
multimedia/libvpx: update 1.15.1

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.15.0..v1.15.1
Reported by:	portscout
64f3a6bf7e
Daniel Engberg (diizzy) · 0.17.2_9
net-im/uTox: Deprecate and set expiration date to 2025-04-30

Unmaintained upstream, redirect users to net-im/qTox

Reference:
https://wiki.tox.chat/clients/inactive
0ab81d4a72
Gleb Popov (arrowd) · 0.17.2_9
*: Bump revisions after dbus update

PR:		285253
Reported by:	Martin Birgmeier <d8zNeCFG@aon.at>
a347a92e6e
Thierry Thomas (thierry) · 0.17.2_8
net-im/*: bump PORTREVISION after the upgrade of toxcore
e88c230822
Jan Beich (jbeich) · 0.17.2_7
multimedia/libvpx: update 1.15.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.14.1..v1.15.0
Reported by:	Repology
888cea7dee
Vsevolod Stakhov (vsevolod) · 0.17.2_6
security/libsodium: update to 1.0.19, bump dependent ports

PR:	278259
Reported by:	Andrey Korobkov <alster-vinterdalen.se>
b66e4949cb
Jan Beich (jbeich) · 0.17.2_5
multimedia/libvpx: update 1.14.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.13.1..v1.14.0
Reported by:	portscout
589aaaeb09
Christian Weisgerber (naddy) · 0.17.2_4
audio/opus: bump consumers after update to 1.4
feb1fa34f5
Jan Beich (jbeich) · 0.17.2_3
multimedia/libvpx: update 1.13.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.12.0..v1.13.0
Reported by:	portscout
17f6d799d7
Stefan Eßer (se) · 0.17.2_2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 0.17.2_2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Loïc Bartoletti (lbartoletti) · 0.17.2_2
devel/cmake: Update to 3.23.0

Update to 3.23.0.
Fix pkg-plist: using the default share/man location

Release Notes:
  https://cmake.org/cmake/help/v3.23/release/3.23.html

PR:		262886
Exp-run by:	antoine
2d34c2bfea
Jan Beich (jbeich) · 0.17.2_2
multimedia/libvpx: update 1.11.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.10.0..v1.11.0
Reported by:	portscout, Repology
f16d8e5635
Mathieu Arnold (mat) · 0.17.2_1
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 0.17.2_1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Piotr Kubaj (pkubaj) · 0.17.2_1
net-im/uTox: fix build on powerpc64le

Use correct emulation.
8ae6e04d52
Niclas Zeising (zeising) · 0.17.2_1
Bump portrevision for devel/evdev-proto

Bump portrevision on everything with a build dependency on
devel/evdev-proto, to chace the update of evdev-proto in r550442.
a8d9df7e30
Tobias Kortkamp (tobik) · 0.17.2
Reset MAINTAINER
f35841a5de
Mark Linimon (linimon) · 0.17.2
Allow building on powerpc64le.

While here, pet portlint (stray whitespace at EOL).

Approved by:	portmgr (tier-2 blanket)
777f5ca830
Tobias Kortkamp (tobik) · 0.17.2
net-im/uTox: Update to 0.17.2

Changes:	https://github.com/uTox/uTox/releases/tag/v0.17.2
9bfca6b9b6
Tobias Kortkamp (tobik) · 0.17.1
net-im/uTox: Remove LLD_UNSAFE

ld.lld lacks default output emulation.  Using -b binary without explicit
-m will fail.  Add arch-to-emulation mapping and unbreak build.
f8c11b4f6a
Tobias Kortkamp (tobik) · 0.17.1
net-im/uTox: Unbreak build on arm64

In file included from src/main.c:9:
In file included from src/native/main.h:16:
In file included from src/native/../xlib/main.h:18:
In file included from /usr/local/include/X11/extensions/Xrender.h:28:
In file included from /usr/local/include/X11/Xlib.h:38:
In file included from /usr/include/sys/types.h:46:
/usr/include/machine/endian.h:68:20: error: too many arguments provided to function-like macro
invocation
                         : "=&r" (ret), "+r" (x));
                                        ^
src/main.h:30:9: note: macro 'volatile' defined here
#define volatile(x)(x)
        ^

While untested optimistically allow the build on armv* again too.
2e076c1cd3
Tobias Kortkamp (tobik) · 0.17.1
net-im/uTox: Unbreak with openal-soft-1.20.0

/usr/local/include/AL/alc.h:34:26: error: typedef redefinition with different types ('struct ALCdevice' vs 'struct ALCdevice_struct')
typedef struct ALCdevice ALCdevice;
                         ^
.../src/av/audio.h:8:33: note: previous definition is here
typedef struct ALCdevice_struct ALCdevice;
                                ^
75418ec125
Tobias Kortkamp (tobik) · 0.17.1
net-im/uTox: Update to 0.17.1

- Take maintainership

Changes:	https://github.com/uTox/uTox/releases/tag/v0.17.1
PR:		240721
Approved by:	portmaster@BSDforge.com (maintainer timeout, 14 days)
713fe32ef9
Gerald Pfeifer (gerald) · 0.17.0_7
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Tobias Kortkamp (tobik) · 0.17.0_6
net-im/uTox: Add missing link to upstream commit to patch

PR:		235799
a05558d466
Steve Wills (swills) · 0.17.0_6
net-im/uTox: Fix push to talk

PR:		235799
Submitted by:	Darren Mulligan <fixer@bsdmail.com>
Approved by:	maintainer timeout (portmaster@bsdforge.com, >2 months)
b45626d7bd
Jan Beich (jbeich) · 0.17.0_5
multimedia/libvpx: update 1.8.0

www/firefox, www/firefox-esr, mail/thunderbird wait for upstream fix via
https://bugzilla.mozilla.org/show_bug.cgi?id=1525393

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.7.0..v1.8.0
ABI:		https://abi-laboratory.pro/tracker/timeline/libvpx/
7c039bce3a
Tobias C. Berner (tcberner) · 0.17.0_4
Change cmake default behaviour to outsource.

Ports that build out of source now simply can use "USES=cmake"
instead of "USES=cmake:outsource". Ports that fail to build
out of source now need to specify "USES=cmake:insource".

I tried to only set insource where explictely needed.

PR:		232038
Exp-run by:	antoine
707c6bf295
Gerald Pfeifer (gerald) · 0.17.0_4
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
a9f015d155
Thomas Zander (riggs) · 0.17.0_3
Bump PORTREVISION to chase update of multimedia/v4l_compat and libv4l
84b6aee905
Gerald Pfeifer (gerald) · 0.17.0_2
Bump PORTREVISION for ports depending on the canonical version of GCC in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which has now moved from GCC 6 to GCC 7 by default.

This includes ports
 - featuring USE_GCC=yes or USE_GCC=any,
 - featuring USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and those
 - with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
   c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.

PR:		222542
09f9633cb6
Mark Linimon (linimon) · 0.17.0_1
Mark these ports as broken on aarch64, and, where appropriate, armvX.

While here, pet portlint and modernize.

Approved by:	portmgr (tier-2 blanket)
fd22400b4e
Thierry Thomas (thierry) · 0.17.0_1
- Upgrade Tox to v0.2.3   Release notes at <https://github.com/TokTok/c-toxcore/releases/tag/v0.2.3>

- Bump PORTREVISION of consumers.
d6a6d2b90e
Tobias Kortkamp (tobik) · 0.17.0
net-im/uTox: Update to 0.17.0

- Update license and WWW

Changes:	https://github.com/uTox/uTox/releases
PR:		229198
Submitted by:	tobik
Approved by:	maintainer
1787e07150
Ed Maste (emaste) · 0.11.1_6
Use BINARY_ALIAS to make LLD_UNSAFE more widely applicable

Some ports do not honour $LD or -fuse-ld=bfd in $CFLAGS, but do invoke
ld via $PATH.   Automatically set BINARY_ALIAS+=ld=${LD} when LLD_UNSAFE
is active to use ld.bfd for these ports.

Approved by:	portmgr (antoine)
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D14876
73ca9e7230
Kirill Ponomarev (krion) · 0.11.1_6
Switch to ld.bfd by default as ld.ldd doesn't have built-in default output target. Pet portlint(1).

PR:		226995
Submitted by:	emaste
Approved by:	portmgr (LLD_UNSAFE blanket)
5f793b000f
Thierry Thomas (thierry) · 0.11.1_6
Make it depend on net-im/tox12 for the moment.

See https://github.com/uTox/uTox/pull/1157

Reported by:	yuri
ecbffb4e1d
Jan Beich (jbeich) · 0.11.1_5
multimedia/libvpx: update 1.7.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.6.1..v1.7.0
ABI:		https://abi-laboratory.pro/tracker/timeline/libvpx/
b964b053b6
Vsevolod Stakhov (vsevolod) · 0.11.1_4
- Update libsodium to 1.0.15 [1] - Bump revisions for all dependent ports

PR:		223147 [1]
Submitted by:	Greg V [1]
f191a0244b
Gerald Pfeifer (gerald) · 0.11.1_3
Bump PORTREVISION for ports depending on the canonical version of GCC (via Mk/bsd.default-versions.mk and lang/gcc) which has moved from GCC 5.4 to GCC 6.4 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++11-lang,
   c++14-lang, c++0x, c11, or gcc-c++11-lib.

PR:		219275
e59c88cece
Gerald Pfeifer (gerald) · 0.11.1_2
Bump PORTREVISIONs for ports depending on the canonical version of GCC and lang/gcc which have moved from GCC 4.9.4 to GCC 5.4 (at least under some circumstances such as versions of FreeBSD or platforms).

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using using Mk/bsd.octave.mk which in turn has USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++14-lang,
   c++11-lang, c++0x, c11, or gcc-c++11-lib.

PR:		216707
04d6f52202
Nikolai Lifanov (lifanov) · 0.11.1_1
unbreak net-im/uTox on 10.3-RELEASE amd64

[ 83%] Building C object CMakeFiles/utox.dir/src/main.c.o
/usr/bin/cc   -I/usr/local/include/freetype2 -O2 -pipe  -fstack-protector -isystem /usr/local/include -fno-strict-aliasing -Wall -Wextra -fno-strict-aliasing -O2 -pipe  -fstack-protector -isystem /usr/local/include -fno-strict-aliasing   -std=gnu99 -o CMakeFiles/utox.dir/src/main.c.o   -c /wrkdirs/usr/ports/net-im/uTox/work/uTox-1835eae/src/main.c
In file included from /wrkdirs/usr/ports/net-im/uTox/work/uTox-1835eae/src/main.c:5:
In file included from /wrkdirs/usr/ports/net-im/uTox/work/uTox-1835eae/src/main.h:282:
In file included from /wrkdirs/usr/ports/net-im/uTox/work/uTox-1835eae/src/stb_image.h:678:
/usr/include/clang/3.4.1/emmintrin.h:1444:21: error: expected '(' after 'asm'
  __asm__ volatile ("pause");
                    ^
/wrkdirs/usr/ports/net-im/uTox/work/uTox-1835eae/src/main.h:84:21: note: expanded from macro 'volatile'
#define volatile(x) x
                    ^

PR:		216332
Submitted by:	cpm, amdmi3
Reviewed by:	matthew
Approved by:	matthew (mentor), portmaster@BSDforge.com (maintainer timeout, 2 weeks)
Differential Revision:	https://reviews.freebsd.org/D9477
6c15557e9c