CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

net/tigervnc-server1.16.2_1

TigerVNC Server

Maintainer
meta@FreeBSD.org
Packages
tigervnc-server 1.16.2_1
Upstream
up to date
CPE
tigervnc:tigervnc from the port
WWW
https://tigervnc.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (48)

Gleb Popov (arrowd) · 1.16.2_1
net/tigervnc-server: Fix the dependency line on xkeyboard-config

Reported by:	kib

Approved by:	portmgr (fixit blanket)
4d684e1fb3
Gleb Popov (arrowd)
graphics/ImageMagick: update to 7.1.2-25

Changes:	https://github.com/ImageMagick/ImageMagick/compare/7.1.2-24...7.1.2-25
Security:	CVE-2026-53460
Security:	CVE-2026-53461
Security:	CVE-2026-53462
Security:	CVE-2026-53463
Security:	CVE-2026-53464
Security:	CVE-2026-53465
PR:		296190
320e46a6ce
Koichiro Iwao (meta)
net/tigervnc*: Update to 1.16.2

Changes:	https://github.com/TigerVNC/tigervnc/releases/tag/v1.16.1
Changes:	https://github.com/TigerVNC/tigervnc/releases/tag/v1.16.2
7e05dc92d3
Koichiro Iwao (meta)
net/tigervnc-server: Explicitly disable Wayland (w0vncserver)

The default is AUTO, which attempts to build with Wayland if it is
installed in the build environment. This may result in
non-reproducible builds depending on the build environment.

In addition, w0vncserver currently fails to build. This is on my TODO
list but disabled for the time being.

While here, explicitly enable pwquality and declare a dependency on
security/libpwquality.

PR:		292938
Reported by:	Paul Boehmer
c5dcdc1534
Koichiro Iwao (meta)
net/tigervnc*: Update to 1.16.0

It now depends on GNU make (abspath).  While here cleanup Xorg configure
arguments.

Changes:	https://github.com/TigerVNC/tigervnc/releases/tag/v1.16.0
35f59fb7e6
Baptiste Daroussin (bapt)
multimedia/ffmpeg: bump revision to chase lib version change
18ea9c7108
Koichiro Iwao (meta)
net/tigervnc-*: Update to 1.15.0

Changes:	https://github.com/TigerVNC/tigervnc/releases/tag/v1.15.0
0d8d6228e7
Koichiro Iwao (meta)
net/tigervnc-server: explicitly declare dependency on libxcvt

TigerVNC has dependency on libxcvt since 1.14.1.

PR:		283370
Reported by:	leres@
af0e83799c
Koichiro Iwao (meta)
net/tigervnc-*: Update to 1.14.1

Changes:	https://github.com/TigerVNC/tigervnc/releases/tag/v1.14.1
15992b14fc
Koichiro Iwao (meta)
net/tigervnc-viewer: Apply a fix for ZRLE exception

Reported by:	Keith White <Keith.White@uottawa.ca>
Obtained from:	https://github.com/TigerVNC/tigervnc/issues/1809
ca5d9506c4
Koichiro Iwao (meta)
net/tigervnc-*: Update to 1.14.0

Changes:	https://github.com/TigerVNC/tigervnc/releases/tag/v1.14.0

A prominent change that affects FreeBSD port is:

* The viewers and servers now follow the XDG Base Directory
  Specification, like "~/.config", for storing files in the home
  directory. Existing users will continue using the legacy "~/.vnc"
  directory, but new users will get the XDG directories.

While here,
- Adjust BUILD_DEPENDS and LIB_DEPENDS reported in stage-qa
3d472dc668
Koichiro Iwao (meta)
net/tigervnc-server: add missing dependency on perl5

Reported by:	 Lundin Cahill (via private email)
48e17658aa
Muhammad Moinur Rahman (bofh)
net/tigervnc-server: Sanitize MANPREFIX

Approved by:    portmgr (blanket)
5122239c0a
Muhammad Moinur Rahman (bofh)
net/tigervnc-server: Sanitize MANPREFIX

Approved by:    portmgr (blanket)
4e8940a3a4
Gleb Popov (arrowd)
x11/xtrans: Don't unlink X11 Unix sockets.

Without this change calling `Xorg -displayfd ..` would always make X to use
:0 as the DISPLAY. This was a showstopper for running parallel desktop sessions.

The leftover UDS' are cleaned up during system's boot by the /etc/rc.d/cleartmp
service.

Based on work of jbeich and Olivier Certner <olivier.freebsd@free.fr>.

PR:		253277
Approved by:	manu
Sponsored by:	Serenity Cybersecurity, LLC
Differential Revision:	https://reviews.freebsd.org/D30557
3312d02769
Daniel Engberg (diizzy)
*/*: Bump jpeg-turbo users treewide

New major version 3.0.0
664a2fa1e5
Piotr Kubaj (pkubaj)
net/tigervnc-server: enable libunwind on powerpc
a13cd6a146
Koichiro Iwao (meta)
net/tigervnc-*: Update to 1.13.1

This fixes the following critical issues:

* x0vncserver can either crash itself, or crash the X server it is connected to
* The servers might crash if the clipboard is updated just as a client is connected
* The vncserver service can fail to start on SELinux system if ~/.vnc doesn't exist

While here, add NO_ARCH=yes to java viewer.

Changes:	https://github.com/TigerVNC/tigervnc/releases/tag/v1.13.1
2f598ef8c6
Koichiro Iwao (meta)
net/tigervnc-server: Fix build and some housekeeping

- Add missing LIB_DEPENDS on security/nettle and math/gmp
- Regenerate CMakeLists.txt patch
- Replace vncserver manpage with v1.10.0 as we're using v1.10.0 script
- Quit suppressing output

PR:		269461
Reported by:	VVD, Konstantin Belousov, John Hein
22f51621a5
Koichiro Iwao (meta)
net/tigervnc-{server,viewer,viewer-java}: Update to 1.13.0

Changes:	https://github.com/TigerVNC/tigervnc/releases/tag/v1.13.0
Sponsored by:	Miracle Linux
ae256a0661
Hiroki Sato (hrs)
net/tigervnc-server: Use the same default fp for Xvnc as xorg-server

Minor style fixes:
- Respect ${_MAKE_JOBS} in the post-build target, and
- Remove an extra strip(1) invocation in the post-install target.

Approved by:		meta (maintainer)
Differential Revision:	https://reviews.freebsd.org/D37927
813eb0a4f0
Stefan Eßer (se)
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se)
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Baptiste Daroussin (bapt)
net/tigervnc-server: add now missing libcxvt dependency

This is needed since the xorg-server upgrade
601b49a2b8
Baptiste Daroussin (bapt)
net/tigervnc-server: fix build with xorg-server 21.1.4

Import patches from upstream which fixes the build with recent
xorg-server

Reported by:	leres@
e3f762cd04
Loïc Bartoletti (lbartoletti)
net/tigervnc-server: fix pkg-plist use share/man

Approved by:	portmgr (blanket)
27e5996a49
Stefan Eßer (se)
net/tigervnc-server: Fix CONFLICTS

Remove redundant version wildcard.

Approved by:	portmgr (blanket)
9e703966e8
Jimmy Olgeni (olgeni)
net/tigervnc-{server,viewer}: Update to version 1.12.0

PR:		259966
Approved by:	meta
16464822d1
Koichiro Iwao (meta)
net/tigervnc-server: fix obtaining HOST_NAME_MAX

See Phabricator review for details.

Reported by:	Adam Wolk
Approved by:	meta (myself, maintainer)
Differential Revision:	https://reviews.freebsd.org/D30045
e2f69c2a24
Bernhard Froehlich (decke)
net/tigervnc-[server|viewer]: Add CPE information

Approved by:	portmgr (blanket)
ff31646d2c
Piotr Kubaj (pkubaj)
net/tigervnc-server: enable libunwind on all supported architectures
4b4ff99ee6
Kevin Bowling (kbowling)
graphics/mesa-libs: Bump reverse deps for libglvnd

Per discussion with bapt on helping pkg handle the changing of these
deps and avoiding impossible upgrade senarios.

PR:		246767
Reviewed by:	manu, bapt
Approved by:	x11
Differential Revision:	https://reviews.freebsd.org/D30824
da3162c7c9
Tobias Kortkamp (tobik)
Clean up some things

- Fix typos
- Remove duplicate variables
- Remove nop variables
- Clean up commented PORTREVISION
- Add missing USES

Reported by:	portscan
6707a3c942
Mathieu Arnold (mat)
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat)
Remove # $FreeBSD$ from Makefiles.
305f148f48
Koichiro Iwao (meta)
net/tigervnc-server: add vncserver script of the former version

as workaround because bran-new vncsession script is not working on FreeBSD
right now.  Thanks to kib@ and László Károlyi!

PR:		250143
e6d3d07a90
Jung-uk Kim (jkim)
Remove an obsolete patch.

This fixes the following link failure:

ld: error: duplicate symbol: ddxInputThreadInit
>>> defined at xvnc.c
>>>            Xvnc-xvnc.o:(ddxInputThreadInit)
>>> defined at Input.c
>>>            libvnccommon_la-Input.o:(.text+0xDC0) in archive ./.libs/libvnccommon.a
c++: error: linker command failed with exit code 1 (use -v to see invocation)
9e79939f81
Koichiro Iwao (meta)
net/tigervnc-{server,viewer}:

Relnotes:	https://github.com/TigerVNC/tigervnc/releases/tag/v1.11.0
Sponsored by:	HAW International
fc8f1a8f11
Piotr Kubaj (pkubaj)
net/tigervnc-server: fix build on GCC architectures

C11 compiler is required:
../include/glx_extinit.h:33: error: redefinition of typedef '__GLXscreen'

MFH:		2020Q2 (fix build blanket)2020Q2 (fix build blanket)
04b9242c38
Niclas Zeising (zeising)
Update xorg x11 servers to 1.20.7

Update xorg x11 servers to 1.20.7.  This updates x11-servers/xorg-server,
xephyr, xorg-dmx, xorg-nestserver, xorg-vbserver and xwayland.

Enable the UDEV backend by default, instead of the DEVD backend, for
autoconfiguration of input devices on FreeBSD 12 and later.
FreeBSD 11 lacks the needed support in base and will keep on using the DEVD
backend.
Support for the HAL backend is dropped completely, it has been deprecated
for a long time.
Update and improve the DEVD backend.
Add a pkg message about sysctl configuration that might be needed when using
UDEV.

Use the upstream fix for glamour issues.

Use evdev xkb rules by default in xwayland [2]

Add x11-drivers/xf86-input-libinput to the list installed by default by
x11-drivers/xorg-drivers.

Fix net/tigervnc-server and emulators/virtualbox-ose

Bump portrevision of all x11 drivers, as well as other ports dependent on
xorg-server.

This represents work by many people over a long period.  These include
wulf, ak, dumbbell, hselasky pete AT nomadlogic DOT org, jbeich, manu,
myself and possibly others (I tried to look through history, but might have
missed people. If so, I am sorry.)

PR:             196678 [1], 244129 [2]
Submitted by:   hselasky, wulf [1], jbeich [2]
Obtained from:	https://github.com/FreeBSDDesktop/freebsd-ports/tree/feature/xserver-1.20 (in part)
4b9c697c26
Koichiro Iwao (meta)
net/tigervnc-{server,viewer}: Update to 1.10.1

This is a security release to fix a number of issues that were found by
Kaspersky Lab. These issues affect both the client and server and could
theoretically allow an malicious peer to take control over the software
on the other side.

No working exploit is known at this time, and the issues require the
peer to first be authenticated. We still urge users to upgrade when
possible.

Relnotes:	https://github.com/TigerVNC/tigervnc/releases/tag/v1.10.1
Sponsored by:	HAW International
9ce84f7e52
Koichiro Iwao (meta)
net/tigervnc-{server,viewer}: Update to 1.10.0

Lots of changes have been made since the last release, but the highlights are:

* The clipboard now supports full Unicode in the native viewer, WinVNC and Xvnc/libvnc.so
* The native client will now respect the system trust store when verifying server certificates
* Improved compatibility with VMware's VNC server
* Improved compatibility with some input methods on macOS
* Improvements to the automatic "repair" of JPEG artefacts
* Better handling of the Alt keys in some corner cases
* The Java web server has been removed as applets are no longer support by most browsers
* x0vncserver can now be configured to only allow local connections
* x0vncserver has received fixes for when only part of the display is shared
* Polling is now default in WinVNC as that works better for most

Relnotes:	https://github.com/TigerVNC/tigervnc/releases/tag/v1.10.0
Sponsored by:	HAW International, Inc.
be72a54dbb
Niclas Zeising (zeising)
Add USES=xorg USES=gl, ports categories n

Add USES=xorg and USES=gl to ports in categories starting with 'n'.
While here, try to sprinkle other USES (mostly gnome and sdl) as needed.
897ad0b36e
Baptiste Daroussin (bapt)
Drop build dependency on GNU m4.

m4 from base is able to do the job, if properly wrapped to mimic GNU m4

Differential Revision:	https://reviews.freebsd.org/D21835
56a6c38e8d
Koichiro Iwao (meta)
net/tigervnc: Remove non-essential meta port

Reported by:	hrs [1]

[1] https://lists.freebsd.org/pipermail/svn-ports-all/2019-April/212975.html
c3426fa8c4
Koichiro Iwao (meta)
Fix the issue tigervnc-server and -viewer cannot be installed together

when DOCS=on because both ports install LICENSE_FILE into the same place.
Also, following changes are made.

net/tigervnc-{server,viewer}:

- bump PORTREVISION due to plist & dependency change
- do build tests, it introduces unnecessary dependencies on fltk

net/tigervnc-server:

- add missing dependency on devel/m4
- remove unnecessary dependency on x11-toolkits/fltk

MFH:		2019Q2
843cfb439c
Koichiro Iwao (meta)
net/tigervnc-server: restore default options

Before separating ports GNUTLS and PAM are on by default.
8f72f8ffb8
Koichiro Iwao (meta)
net/tigervnc: separate port into -server -and -viewer

since usually people want to install either server or client on the same
box. Formerly, net/tigervnc had options to build & install vncviewer(client)
but vncviewer could not be installed alone. Server components was necessary.

Now TigerVNC server and viewer are completely separeted and can be installed
independently.

Tested by: Juan Molina
Differential Revision:	https://reviews.freebsd.org/D19709
6ccd55baec