CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

net-p2p/bazarr1.6.0

Automatic subtitle downloader for Radarr and Sonarr

Maintainer
michiel@vanbaak.eu
Packages
bazarr 1.6.0
Upstream
Higher version available: 1.6.2
CPE
none, CVEs only via VuXML
WWW
https://www.bazarr.media
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (49)

Hiroki Tagato (tagattie) · 1.6.0
net-p2p/bazarr: Update to 1.6.0

Changelog: https://github.com/morpheus65535/bazarr/releases/tag/v1.6.0

PR:		297010
Reported by:	Michiel van Baak Jansen <michiel@vanbaak.eu> (maintainer)
142815b3ae
Max Brazhnikov (makc) · 1.5.6_1
*/*: bump PORTREVISION after switching to NumPy 2.x
2bf3834a19
Max Brazhnikov (makc) · 1.5.6
*/*: Switch to NumPy 2.x

PR:		294328
Exp-run:	antoine
b0b4d9e1ea
Vladimir Druzenko (vvd) · 1.5.6
net-p2p/bazarr: Update 1.5.4 => 1.5.6

Changelog:
https://github.com/morpheus65535/bazarr/releases/tag/v1.5.5
https://github.com/morpheus65535/bazarr/releases/tag/v1.5.6

PR:		294291
Security:	CVE-2024-40348
Sponsored by:	UNIS Labs
MFH:		2026Q2
24aae72732
Charlie Li (vishwin) · 1.5.4_1
math/py-numpy: switch all consumers to math/py-numpy1

...and bump PORTREVISIONs of consumers with hard RUN_DEPENDS

PR: 281470
d4bd5ba72e
Vladimir Druzenko (vvd) · 1.5.4
net-p2p/bazarr: Fix build with python version other than 3.11

PR:		293708
Approved by:	Michiel van Baak Jansen <michiel@vanbaak.eu> (maintainer)
MFH:		2026Q1
d000c5fe82
Vladimir Druzenko (vvd) · 1.5.4
net-p2p/bazarr: Update 1.5.2 => 1.5.4

Changelog:
https://github.com/morpheus65535/bazarr/releases/tag/v1.5.4

PR:	292427
e8cf76fca9
Hiroki Tagato (tagattie) · 1.5.2_3
*/*: switch dependency from devel/py-lxml5 to devel/py-lxml

Currently, there are two versions of python XML processing library
which conflict each other in the ports tree, namely:
- devel/py-lxml5 (now at version 5.4.0)
- devel/py-lxml  (now at version 6.0.1)

To avoid the situation that some ports depend on py-lxml5 and some
others do on py-lxml (by switching dependencies individually), this
commit switches the dependencies from py-lxml5 to py-lxml at once.

Additional note: There are still two ports (textproc/py-rdflib and
www/py-draftjs-exporter) depending on py-lxml5 since they limit upper
version to less than 6.

PR:		289491
Approved by:	Michiel van Baak Jansen <michiel@vanbaak.eu>, arrowd,
		crees, madpilot, delphij, marcus, nivit, kai,
		skreuzer, fluffy, bofh, thierry, stephen, sunpoet,
		0mp, Eric Camachat <eric@camachat.org>
a6233e5a2f
Rene Ladan (rene) · 1.5.2_2
all: bump PORTREVISION after updating graphics/libyuv

Using the Tools/scripts/bump_revision.pl script
b304d8ab18
Hiroki Tagato (tagattie) · 1.5.2_1
*/*: update dependency on devel/py-lxml to devel/py-lxml5 (2nd attempt)

This is a follow up to the commit 230fb2661c78, which updated some
ports' dependencies on devel/py-lxml to devel/py-lxml5. It was an
attempt to follow the dependency change of
www/py-beautifulsoup. However, the switch was incomplete and broke
some other ports.

It has turned out that the ports depending on devel/py-lxml (at
version 4.9.3) does not limit their dependencies' upper bound to 4.x
except for one (devel/py-pymaven-patch). So updating them to
devel/py-lxml5 (at version 5.4.0) should cause no harm.

This commit switch dependencies of all the ports (except
devel/py-pymaven-patch) to devel/py-lxml5 avoid potential conflicts.

Co-authored-by: Daniel Engberg <diizzy@FreeBSD.org>

PR:		287144, 288047
Reported by:	makc (via ports-committers),
		vvd (PR 288047),
		diizzy (PR 287144)
Approved by:	portmgr (chase dependency change, unbreak build)
Fixes:		230fb2661c78 (*/*: update dependency on devel/py-lxml to devel/py-lxml5)
0b0f7cda9d
Charlie Li (vishwin) · 1.5.2
python.mk: rename PYTHON_EXT_SUFFIX to PYTHON_TAG, document, etc

EXT_SUFFIX, according to PEP 3149, refers to the full tag and
extension for compiled extension module objects, eg .cpython-311.so,
.cpython-313t.so, etc. We do not use the correct semantic meaning,
and this usage becomes ambiguous and confusing when tags do not
match between bytecode and compiled extension module objects.

Rename our PYTHON_EXT_SUFFIX to PYTHON_TAG to align with PEP 3147's
specification of a magic tag, which consists of implementation name
and shorthand version only. This is meant for bytecode and other
files containing this tag in their filename that do not depend on
a specific Python ABI for the same version. Chase all existing
consumers.

Introduce PYTHON_SOABI to align with PEP 3149's specification of a
tag, which consists of implementation name, shorthand version and
any ABI flags present (this and PYTHON_TAG are identical without
ABI flags). This is meant for compiled extension module objects and
other files that depend on a specific Python ABI for the same
version.

Add documentation for these variables that our PYTHON_EXT_SUFFIX
never had.

PR: 274671
Event: Kitchener-Waterloo Hackathon 202506
4f0eba1efd
Vladimir Druzenko (vvd) · 1.5.2
net-p2p/bazarr: Update 1.5.1 => 1.5.2

Changelog:
https://github.com/morpheus65535/bazarr/releases/tag/v1.5.2

PR:	287107
82600cd4b6
Dries Michiels (driesm) · 1.5.1_1
net-p2p/bazarr: add setuptools as run dependency

bazarr fails to start correctly when setuptools is not present.

PR:	285469
63c61cb6e1
Vladimir Druzenko (vvd) · 1.5.1
net-p2p/bazarr: Update 1.5.0 → 1.5.1

Changelog:
https://github.com/morpheus65535/bazarr/releases/tag/v1.5.1

PR:	284083
05e1a7d4fb
Vladimir Druzenko (vvd) · 1.5.0
net-p2p/bazarr: Update 1.4.5 → 1.5.0

Changelog:
https://github.com/morpheus65535/bazarr/releases/tag/v1.5.0

PR:	283721
31bd1e5ce9
Vladimir Druzenko (vvd) · 1.4.5
net-p2p/bazarr: Update 1.4.4 → 1.4.5

Changelog:
https://github.com/morpheus65535/bazarr/releases/tag/v1.4.5

PR:	282174
MFH:	2024Q4
11445a8992
Joel Bodenmann (jbo) · 1.4.4
net-p2p/bazarr: Update to 1.4.4

Changelog: https://github.com/morpheus65535/bazarr/releases/tag/v1.4.4

PR:	281728
2082ca9f01
Olivier Cochard (olivier) · 1.4.3
net-p2p/bazarr: Update to 1.4.3

PR:		279855
19edb39fb9
Dries Michiels (driesm) · 1.4.2_1
net-p2p/bazarr: use LOCALBASE in exporting PATH

Reported by:	jbeich
Approved by:	maintainer (e-mail)
d52daad310
Muhammad Moinur Rahman (bofh) · 1.4.2
net-p2p/bazarr: Update version 1.4.0=>1.4.2

Changelog: https://github.com/morpheus65535/bazarr/releases/tag/v1.4.2

PR:		277173
Approved by:	submitter is maintainer
fa75953850
Fernando Apesteguía (fernape) · 1.4.0_2
net-p2p/bazarr: Configure correct branch for release/update

Correct branch name in the file package_info so the list of possible releases is
correctly filtered (master for releases, develop for pre-releases/beta)

PR:		276540
Reported by:	driesm@
e2f3988de7
Dries Michiels (driesm) · 1.4.0_1
net-p2p/bazarr: fix finding ffprobe during start

bazazr fails to start with the standard PATH set.

PR:	276280
1b0ddca286
Fernando Apesteguía (fernape) · 1.4.0
net-p2p/bazarr: Update to 1.4.0

ChangeLog: https://github.com/morpheus65535/bazarr/releases/tag/v1.4.0

 * Dropped support for Python 3.7 because our dependencies doesn't support it
   anymore.
 * Fixed Whisper provider to make it throttle longer after ConnectionError
 * Fixed an issue that could clear episodes history in case Sonarr API return
   something else than valid series or episodes.
 * Improved providers exceptions throttling to reduce useless calls to
   providers.
 * Fixed infinite download retry loop in whisperai provider b25d416
 * Fixed (sqlite3.OperationalError) too many SQL variables issue while inserting
   too many episodes at the same time.
 * Fixed issue with series/movies import using a deleted default languages
   profile.
 * Modified "no subtitles found" notification to be a message instead of an
   error.
 * Fixed improper subtitles being downloaded when HI is required by languages
   profile.
 * Fixed languages profile creation issue.
 * Prevent overwriting season and episode number guessed from file name with db
   values unless they haven't been properly guessed.
 * Hide clipboard button when is not possible to copy to clipboard
 * Subdivx provider: improve language matching
 * Improve mods
 * Fixed an error in previous commit that would prevent episodes syncing.
 * Fixed compression type for backup.
 * Fixed other issues with subzero_mods parsing.
 * Fixed issues with SQlite older than 3.35.
 * Avoid FileNotFoundError indexing subtitles
 * Improved compression ratio of backup.
 * Improved stability by usinf Python f-string as much as possible to prevent
   TypeError and improve code readability.
 * Fixed issue while parsing enabled mods during subtitles download 225d79e
 * Fixed config.ini conversion by disabling interpolation with ConfigParser that
   failed with addic7ed cookie.
 * Fixed datatype issue when creating a new languages profile with PostgreSQL.
 * Changing from config.ini to config.yaml

PR:		275699
Reported by:	michiel@vanbaak.eu (maintainer)
d2c21bd613
Fernando Apesteguía (fernape) · 1.3.1
net-p2p/bazarr: Update to 1.3.1

While here add missing WWW

ChangeLog: https://github.com/morpheus65535/bazarr/releases/tag/v1.3.1

 * HDBits provider: add search filters
 * EmbeddedSubtitles provider: add blacklist support
 * HDBits provider: handle JSON errors
 * Exposed subtitle file size through API
 * Fixed hosszupuska website parsing issue.
 * Improved throttling duration for some common configuration or connection
   issues.
 * Fixed history logging of downloaded and uploaded subtitles.
 * Improved synchronization speed for Sonarr and Radarr.
 * Fixed history logging issue for episodes and movies subtitles.
 * EmbeddedSubtitles provider: update subtitles checker
 * HDBits provider: improve episode matching
 * Fixed an additional issue with
 * Add HDBits.org provider
 * Fixed database migration process causing UNIQUE constraint in some edge cases
   where duplicate ID root folders where stored.
 * Fixed latest migration that cleared history for sqlite users.
 * Added error logging when trying to determine malformed audio track languages.
 * Added logging for opensubtitles.com 400 error.
 * Fixed Postgres issues while creating new database with v1.3.0.
 * Subdivx provider: improve movies matches
 * Update providers exception regex for Windows
 * Fixed some code to prevent arbitrary file read and blind SSRF.
 * Removed sucha provider that doesn't exist anymore.

PR:		274485
Reported by:	michiel@vanbaak.eu (maintainer)
98530ec49e
Robert Clausecker (fuz) · 1.3.0
net-p2p/bazarr: Update to 1.3.0

* Switched ORM from peewee to SQLAlchemy
 * big updates to the embedded subtitles and opensubtitles providers

Changelog: https://github.com/morpheus65535/bazarr/releases/tag/v1.3.0

PR:		273852
8328eafe19
Po-Chuan Hsieh (sunpoet) · 1.2.4_1
net-p2p/bazarr: Clean up USES=python

- While I'm here, add NO_ARCH

Approved by:	portmgr (blanket)
With hat:	python
93c225c50a
Fernando Apesteguía (fernape) · 1.2.4_1
net-p2p/bazarr: Specify minimum versions for dependencies

PR:		272873
Reported by:	michiel@vanbaak.eu (maintainer)
175e588fbe
Fernando Apesteguía (fernape) · 1.2.4
net-p2p/bazarr: Update to 1.2.4

ChangeLog: https://github.com/morpheus65535/bazarr/releases/tag/v1.2.4

 * Fixed more stuff related to opensubtitles.com
 * Improved subtitles providers settings to reset Authentication or
   Configuration error throttling while saving.
 * Fixed opensubtitles.com issue with looping over failed login.

PR:	2726e
Reported by:	michiel@vanbaak.eu (maintainer)
MFH:		2023Q3 (bugfix release)
41e03128c4
Nuno Teixeira (eduardo) · 1.2.3
net-p2p/bazarr: Update to 1.2.3

ChangeLog:	https://github.com/morpheus65535/bazarr/releases/tag/v1.2.3
PR:		272500
8ff24ac7d9
Fernando Apesteguía (fernape) · 1.2.2
net-p2p/bazarr: Update to 1.2.2

ChangeLog: https://github.com/morpheus65535/bazarr/releases/tag/v1.2.2

 * Add debugging changes
 * Reverting b6777bc edfbb1a
 * Added experimental Python 3.11 support
 * Debugging: update subtitle and language representations
 * Updated pytz module to support latest timezone changes
 * Fix path mapping issues ab3c171
 * Subf2m provider: improve episode matching
 * Fix issues when saving the notification providers
 * Fixed issue in releases page since we upgraded Mantine.
 * Removed leftover from legendas.tv provider.
 * Fixed issue where subtitles would get upgraded even if not required anymore
   by shows languages profile.
 * Subf2m provider: improve queries
 * Embedded Subtitles provider
 * Update language equals mechanism
 * Subf2m provider: add support for IMDB IDs
 * Embedded Subtitles provider: handle ASS errors
 * Subf2m Provider: add user-agent header configuration
 * Fixed yavka.net provider.
 * Increase width of the manually search modal
 * Fixed some UI issues caused by React and Mantine upgrade.
 * Fixed server side exception throttling opensubtitles.com when it shouldn't.
 * Fixed Chinese translation issue (zh and zt inverted).
 * Updated apprise module to improve notification system.
 * Update all UI dependencies and update React version to 18
 * Downgrade Axios to fix a settings saving issue.
 * Added support for Portuguese and Simplified Chinese to opensubtitles.com.
 * Added some exceptions that shouldn't be retried to retry function.
 * Language-equals: add compatibility for more providers
 * Fixed external subtitles indexation with accented characters that resulted
   in download in loop.
 * Added feature to treat couples of languages as equal when searching for
   subtitles
 * Fixed type in opensubtitles.com provider that could cause
   AuthenticationError for new users.
 * Specify ffmpeg path in case it's not in PATH envvar
 * Add support for custom languages in audio tracks
 * Use literals instead of scripts for custom languages
 * Fixed AI and machine translated subtitles being incorrectly returned by
    Opensubtitles.com
 * Emergency fix for custom languages issue
 * Add mediainfo support for custom languages
 * Implemented gzip compression of http requests made to Bazarr
 * Subdivx Provider: improve series matching
 * Fixed yify provider MissingSchema exception on download.
 * Fixed zimuku.org parsing error
 * SuperSubtitles provider: fix hungarian subtitles downloads
 * Fixed SyntaxError under Python 3.7

PR:		272274
Reported by:	michiel@vanbaak.eu (maintainer)
1ab1a45e9b
Rene Ladan (rene) · 1.2.1
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Robert Clausecker (fuz) · 1.2.1
net-p2p/bazarr: Update to 1.2.1

Changelog: https://github.com/morpheus65535/bazarr/releases/tag/v1.2.1

PR:		271256
6272f0fc53
Christian Weisgerber (naddy) · 1.2.0_2
audio/opus: bump consumers after update to 1.4
feb1fa34f5
Gerald Pfeifer (gerald) · 1.2.0_1
*: Bump PORTREVISIONs for math/mpc update to 1.3.1
8d3e020ed0
Robert Clausecker (fuz) · 1.2.0
net-p2p/bazarr: Update to 1.2.0

Changelog: https://github.com/morpheus65535/bazarr/releases/tag/v1.2.0

PR:		270006
bcfadbafc3
Nuno Teixeira (eduardo) · 1.1.4
net-p2p/bazarr: Update to 1.1.4

ChangeLog:	https://github.com/morpheus65535/bazarr/releases/tag/v1.1.4
PR:		268713
cf86795a19
Daniel Engberg (diizzy) · 1.1.3
net-p2p/bazarr: Update to 1.1.3

Changelog: https://github.com/morpheus65535/bazarr/releases/tag/v1.1.3

PR:		268170
29e53527b2
Nuno Teixeira (eduardo) · 1.1.2
net-p2p/bazarr: Update to 1.1.2

ChangeLog: https://github.com/morpheus65535/bazarr/releases/tag/v1.1.2

PR:		267166
MFH:		2022Q4 (bugfixes)
81b4c1dc69
Fernando Apesteguía (fernape) · 1.1.1
net-p2p/bazarr: Update to 1.1.1

ChangeLog: https://github.com/morpheus65535/bazarr/releases/tag/v1.1.1

PR:		266127
Reported by:	michiel@vanbaak.eu (maintainer)
MFH:		2022Q3 (bugfixes)
58c6bdf51d
Fernando Apesteguía (fernape) · 1.1.0
net-p2p/bazarr: Update to 1.1.0

ChangeLog: https://github.com/morpheus65535/bazarr/releases/tag/v1.1.0

PR:	265015
Reported by:	michiel@vanbaak.eu (maintainer)
MFH:	2022Q3 (bugfix release)
99c5e7755f
Fernando Apesteguía (fernape) · 1.0.4
net-p2p/bazarr: Update to 1.0.4

ChangeLog: https://github.com/morpheus65535/bazarr/releases/tag/v1.0.4

PR:	263682
Reported by:	michiel@vanbaak.eu (maintainer)
938964c856
Mikael Urankar (mikael) · 1.0.3
net-p2p/bazarr: Update to 1.0.3

While at it, read package info like the other *arrs do as well.

Changes: https://github.com/morpheus65535/bazarr/releases/tag/v1.0.3

PR:		262244
3d50502a52
Guangyuan Yang (ygy) · 1.0.2
net-p2p/bazarr: Update to 1.0.2

Changelog:	https://github.com/morpheus65535/bazarr/releases/tag/v1.0.2

PR:		260816
afbe2ca73b
Guangyuan Yang (ygy) · 1.0.1
net-p2p/bazarr: Update to 1.0.1

Changelog:	https://github.com/morpheus65535/bazarr/releases/tag/v1.0.1

PR:		260668
03d02b9e1f
Yasuhiro Kimura (yasu) · 1.0.0
net-p2p/bazarr: Update to 1.0.0

ChangeLog:	https://github.com/morpheus65535/bazarr/releases/tag/v1.0.0
PR:		259168
Approved by:	ygy (mentor)
Differential Revision:	https://reviews.freebsd.org/D32535
481c501161
Nuno Teixeira (eduardo) · 0.9.9
net-p2p/bazarr: Update to 0.9.9

- add DIST_SUBDIR so bazarr and bazarr-devel distfiles can coexist

ChangeLog: https://github.com/morpheus65535/bazarr/releases/tag/v0.9.9

PR:		258476
a351de4b7b
Guangyuan Yang (ygy) · 0.9.7
net-p2p/bazarr: Update to 0.9.7

Changelog:	https://github.com/morpheus65535/bazarr/releases/tag/v0.9.7

PR:		257808
4f74b3285d
Guangyuan Yang (ygy) · 0.9.6
net-p2p/bazarr: Update to 0.9.6

Changelog:	https://github.com/morpheus65535/bazarr/releases/tag/v0.9.6

PR:		257327
Approved by:	lwhsu (mentor, implicit)
c61016d798
Tobias C. Berner (tcberner) · 0.9.5
net-p2p/bazarr*: new ports for bazarr and bazarr-devel

Bazarr is a companion application to Sonarr and Radarr that manages and
downloads subtitles based on your requirements.

- net-p2p/bazarr uses latest stable release
- net-p2p/bazarr-devel uses beta builds (created automatically from
  development branch once a day, if there were changes to that branch)
- Ports dont have bundled dependencies unbundled (yet).
  Talked this over with upstream, they are not going to unbundle
  for support-workload avoidance  and ease-of-install they get from the
  fact they bundle all dependencies on specific versions.
- Reserve UID and GID for bazarr daemon process
- Add to net-p2p/Makefile
- The plists are auto-generated as in multimedia/tautulli.

Website: https://www.bazarr.media
Changelog: https://github.com/morpheus65535/bazarr/releases
Bugtracker: https://github.com/morpheus65535/bazarr/issues

PR:		243967
22d8cccfd0