Use PORTCOMMENT in the Makefile, and whack the pkg-comment. Approved by: patd9611f9375
unrtf -- buffer overflow vulnerabilityentered 2005-01-16
Port details
textproc/unrtf 0.21.10_1
Converter from RTF to several formats, including HTML and LaTeX
Port info
- Maintainer
- jharris@widomaker.com
- Packages
- latest: 0.21.10_1
- Upstream
- Higher version available: 0.21.13
- Last update
- to 0.21.10_1 · b46a39e082
- Quarterly
- 2026Q4: 0.21.10_1
- WWW
- https://www.gnu.org/software/unrtf/unrtf.html
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install unrtfinstalls 0.21.10_1 fromlatest; fromquarterly(2026Q4) 0.21.10_1- Port
# cd /usr/ports/textproc/unrtf && make install clean- Size
- 54 KiB download · 144 KiB installed
- Depends on
- nothing
- License
- GPLv3+
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 0.21.10_1 | 0.21.10_1 | – |
| FreeBSD 15 | 0.21.10_1 | 0.21.10_1 | – |
| FreeBSD 14 | 0.21.10_1 | 0.21.10_1 | 0.21.10_1 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 0.21.10_1 | 0.21.10_1 | – |
| FreeBSD 14 | 0.21.10_1 | 0.21.10_1 | 0.21.10_1 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed (2)
The CVE record lists the packaged version 0.21.10_1 as affected, and no VuXML entry names the CVE. What does this mean?
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2025-65411 | 7.5 | 2025-12-30 | A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the… |
| CVE-2025-65410 | 6.2 | 2025-12-23 | A stack overflow in the src/main.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a crafted input into the filename pa… |
VuXML only (0)
Listed in VuXML, the packaged version 0.21.10_1 is still in the affected range; pkg audit reports it. What does this mean?
None.
Fixed (1)
Show 1 fixed
VuXML entries whose affected range the packaged version has left.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (55)
Respect CC.29d643d455
Set maintainership to ports@.3a34ee019d
Change MAINTAINER to my FreeBSD address. Approved by: dwcjr (mentor)c502381a37
add unrtf 0.18.1 A converter from RTF to several formats, including HTML and LaTeX PR: 36345 Submitted by: Oliver Braun <obraun@informatik.unibw-muenchen.de>dd943e7784