textproc/md4c: Update 0.5.3 => 0.6.0 Changelog: https://github.com/mity/md4c/blob/v0.6.0/CHANGELOG.md PR: 298778 Sponsored by: UNIS Labs (vvd, commit patch) MFH: 2026Q34f7ef7d80f
md4c -- DoS attackentered 2024-08-23
Markdown Parser written in C
# pkg install md4cinstalls 0.6.0 from latest; from quarterly (2026Q4) 0.6.0# cd /usr/ports/textproc/md4c && make install clean| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 0.6.0 | 0.6.0 | – |
| FreeBSD 15 | 0.6.0 | 0.6.0 | – |
| FreeBSD 14 | 0.6.0 | 0.6.0 | 0.6.0 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 0.6.0 | 0.6.0 | – |
| FreeBSD 14 | 0.6.0 | 0.6.0 | 0.6.0 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
pkg audit for the packaged version 0.6.0.textproc/md4c: Update 0.5.3 => 0.6.0 Changelog: https://github.com/mity/md4c/blob/v0.6.0/CHANGELOG.md PR: 298778 Sponsored by: UNIS Labs (vvd, commit patch) MFH: 2026Q34f7ef7d80f
textproc/md4c: Update 0.5.2.20240225 => 0.5.3, take maintainership Changelog: https://github.com/mity/md4c/blob/release-0.5.3/CHANGELOG.md Commit log: https://github.com/mity/md4c/compare/481fbfb...release-0.5.3 PR: 294864 Approved by: Henrik Rosenke <rosenke@dssgmbh.de> (former maintainer, via xing.com profile) Sponsored by: UNIS Labs MFH: 2026Q2c3be68827f
textproc/md4c: Update 0.5.2 => 0.5.2.20240225 (last commit)
This update allow onlyoffice-documentserver to use the ports version,
rather than the existing source build.
Changelog:
Fixes:
- Fix quadratic time behavior caused by one-by-one walking over
block lines instead of calling md_lookup_line().
- Fix quadratic time and output size behavior caused by malicious
misuse of link reference definitions.
- The strike-through extension (with flag MD_FLAG_STRIKETHROUGH)
now follows same logic as other emphasis spans in respect to
punctuation character and word boundaries.
- Fix handling tab when removing trailing whitespace, especially in
connection with ATX headers.
https://github.com/mity/md4c/blob/481fbfb/CHANGELOG.md
Commit log:
https://github.com/mity/md4c/compare/release-0.5.2...481fbfb
PR: 290670
Reported by: Matt Kempe <fsbruva@yahoo.com>
Approved by: Henrik Rosenke <rosenke@dssgmbh.de> (maintainer, timeout 3 weeks)b7ccdbcc66textproc/md4c: update to 0.5.2 ChangeLog: https://github.com/mity/md4c/blob/master/CHANGELOG.md Fixes CVE-2021-30027: DoS with malformed Markdown. * Base Score: 5.5 MEDIUM * Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H PR: 280956 Reported by: alster@vinterdalen.se MFH: 2024Q3 (security fix) Security: CVE-2021-30027156b0ec232
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
devel/cmake: Update to 3.23.0 Update to 3.23.0. Fix pkg-plist: using the default share/man location Release Notes: https://cmake.org/cmake/help/v3.23/release/3.23.html PR: 262886 Exp-run by: antoine2d34c2bfea
textproc/md4c: Add CPE information Approved by: portmgr (blanket)154b1a334b
One more small cleanup, forgotten yesterday. Reported by: lwhsucf118ccf87
Remove # $FreeBSD$ from Makefiles.305f148f48
Regular USE_GITHUB cleanup. Remove DISTNAME, it is always overwritten. Cleanup GH_TAGNAME and WRKSRC.f1b1322655
textproc/md4c: Create the port. md4c is a markdown parser written in C. PR: 252383 Submitted by: Henrik Rosenke <rosenke@dssgmbh.de> Reviewed by: Matthias Apitz <guru@unixarea.de>, daniel.engberg.lists@pyret.netd4b10e52fe