CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

textproc/md4c 0.6.0

Markdown Parser written in C

Port info

Maintainer
fsbruva@yahoo.com
Packages
latest: 0.6.0
Upstream
up to date
Last update
to 0.6.0 · 4f7ef7d80f
Quarterly
2026Q4: 0.6.0
WWW
https://github.com/mity/md4c/
Links
cgit · VuXML

Install

Package
# pkg install md4c
installs 0.6.0 from latest; from quarterly (2026Q4) 0.6.0
Port
# cd /usr/ports/textproc/md4c && make install clean
Size
81 KiB download · 246 KiB installed
Depends on
nothing
License
MIT

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 160.6.00.6.0–
FreeBSD 150.6.00.6.0–
FreeBSD 140.6.00.6.00.6.0

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 150.6.00.6.0–
FreeBSD 140.6.00.6.00.6.0

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 0.6.0.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (12)

Vladimir Druzenko (vvd) · 0.6.0 MFH 2026Q3 ✓
textproc/md4c: Update 0.5.3 => 0.6.0

Changelog:
https://github.com/mity/md4c/blob/v0.6.0/CHANGELOG.md

PR:		298778
Sponsored by:	UNIS Labs (vvd, commit patch)
MFH:		2026Q3
4f7ef7d80f
Vladimir Druzenko (vvd) · 0.5.3
textproc/md4c: Update 0.5.2.20240225 => 0.5.3, take maintainership

Changelog:
https://github.com/mity/md4c/blob/release-0.5.3/CHANGELOG.md

Commit log:
https://github.com/mity/md4c/compare/481fbfb...release-0.5.3

PR:		294864
Approved by:	Henrik Rosenke <rosenke@dssgmbh.de> (former maintainer, via xing.com profile)
Sponsored by:	UNIS Labs
MFH:		2026Q2
c3be68827f
Vladimir Druzenko (vvd) · 0.5.2.20240225
textproc/md4c: Update 0.5.2 => 0.5.2.20240225 (last commit)

This update allow onlyoffice-documentserver to use the ports version,
rather than the existing source build.

Changelog:
  Fixes:
    - Fix quadratic time behavior caused by one-by-one walking over
      block lines instead of calling md_lookup_line().
    - Fix quadratic time and output size behavior caused by malicious
      misuse of link reference definitions.
    - The strike-through extension (with flag MD_FLAG_STRIKETHROUGH)
      now follows same logic as other emphasis spans in respect to
      punctuation character and word boundaries.
    - Fix handling tab when removing trailing whitespace, especially in
      connection with ATX headers.
https://github.com/mity/md4c/blob/481fbfb/CHANGELOG.md

Commit log:
https://github.com/mity/md4c/compare/release-0.5.2...481fbfb

PR:		290670
Reported by:	Matt Kempe <fsbruva@yahoo.com>
Approved by:	Henrik Rosenke <rosenke@dssgmbh.de> (maintainer, timeout 3 weeks)
b7ccdbcc66
Fernando Apesteguía (fernape) · 0.5.2
textproc/md4c: update to 0.5.2

ChangeLog: https://github.com/mity/md4c/blob/master/CHANGELOG.md

Fixes CVE-2021-30027: DoS with malformed Markdown.

 * Base Score:	5.5 MEDIUM
 * Vector:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

PR:		280956
Reported by:	alster@vinterdalen.se
MFH:		2024Q3 (security fix)
Security:	CVE-2021-30027
156b0ec232
Stefan Eßer (se) · 0.4.7
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 0.4.7
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Loïc Bartoletti (lbartoletti) · 0.4.7
devel/cmake: Update to 3.23.0

Update to 3.23.0.
Fix pkg-plist: using the default share/man location

Release Notes:
  https://cmake.org/cmake/help/v3.23/release/3.23.html

PR:		262886
Exp-run by:	antoine
2d34c2bfea
Stefan Eßer (se) · 0.4.7
textproc/md4c: Add CPE information

Approved by:	portmgr (blanket)
154b1a334b
Mathieu Arnold (mat) · 0.4.7
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 0.4.7
Remove # $FreeBSD$ from Makefiles.
305f148f48
Mathieu Arnold (mat) · 0.4.7
Regular USE_GITHUB cleanup.

Remove DISTNAME, it is always overwritten.
Cleanup GH_TAGNAME and WRKSRC.
f1b1322655
Gleb Popov (arrowd) · 0.4.7
textproc/md4c: Create the port.

md4c is a markdown parser written in C.

PR:		252383
Submitted by:	Henrik Rosenke <rosenke@dssgmbh.de>
Reviewed by:	Matthias Apitz <guru@unixarea.de>, daniel.engberg.lists@pyret.net
d4b10e52fe