Real-time software synthesizer based on the SoundFont 2 specifications
# pkg install fluidsynthinstalls 2.6.1 from latest; from quarterly (2026Q4) 2.6.1# cd /usr/ports/audio/fluidsynth && make install clean# make -C /usr/ports/audio/fluidsynth config # change options first
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 2.6.1 | 2.6.1 | – |
| FreeBSD 15 | 2.6.1 | 2.6.1 | – |
| FreeBSD 14 | 2.6.1 | 2.6.1 | 2.6.1 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 2.6.1 | 2.6.1 | – |
| FreeBSD 14 | 2.6.1 | 2.6.1 | 2.6.1 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
The CVE record lists the packaged version 2.6.1 as affected, and no VuXML entry names the CVE. What does this mean?
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-111123 | 6.9 | 2026-10-15 | FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corrupt heap and stack memory by supplying unvalidated SoundFont modulato… |
Listed in VuXML, the packaged version 2.6.1 is still in the affected range; pkg audit reports it. What does this mean?
audio/fluidsynth: Update to 2.6.1 and enable "make test" USES= cmake:insource is required for unit tests Changelog: https://github.com/FluidSynth/fluidsynth/releases/tag/v2.6.1ee712bbc1e
audio/fluidsynth: Update to upstream release 2.5.7 Details: Bugfix release, see https://github.com/FluidSynth/fluidsynth/releases/tag/v2.5.7 MFH: 2026Q3696d37fb90
audio/fluidsynth: Update to 2.5.6 Fixes multiple security issues: Fix CVE-2026-58264 - a heap-based buffer overrun in command handler Fix a heap-based buffer overflow in MIDI player Fix a heap-based buffer overrun for DLS samples Fix a DLS ptbl chunk integer overflow Fix a DLS articulation chunk integer overflow Fix a SF2 DMOD chunk integer underflow Changelog: https://github.com/FluidSynth/fluidsynth/releases/tag/v2.5.6 Security: CVE-2026-582643b1f222a7a
audio/fluidsynth: Update to 2.5.5 Changelog: https://github.com/FluidSynth/fluidsynth/releases/tag/v2.5.581667f841f
audio/fluidsynth: Update to 2.5.3 Changelog: https://github.com/FluidSynth/fluidsynth/releases/tag/v2.5.3ab1cb93a29
audio/fluidsynth: Update to upstream release 2.5.2 Details: - Bugfix release, see https://github.com/FluidSynth/fluidsynth/releases/tag/v2.5.2 - Includes a fix for CVE-2025-68617 (use after free) MFH: 2025Q4 Security: CVE-2025-686171276053c82
audio/fluidsynth: Update to 2.5.1 Changelog: https://github.com/FluidSynth/fluidsynth/releases/tag/v2.5.1111bf33d4c
audio/fluidsynth: Update to 2.5.0 Bump requirement to c++17 in order to remove glib dependency Changelog: https://github.com/FluidSynth/fluidsynth/releases/tag/v2.5.056573a792e
audio/fluidsynth: Update to 2.4.7 Changelog: https://github.com/FluidSynth/fluidsynth/releases/tag/v2.4.79865f928c6
audio/*: remove useless USES=pathfixa542853b79
audio/fluidsynth: Update to 2.4.6 and drop SDL(2) support * Drop SDL(2) support and move SDL(3) into SDL variable * Move GITHUB related variables into a separate section * Fix typo in SNDFILE_DESC Changelog: https://github.com/FluidSynth/fluidsynth/releases/tag/v2.4.6aba04fabf1
audio/fluidsynth: Update to 2.4.4 Support SDL 3.x and group SDL options into a RADIO options group. Note: This is temporary. SDL 2.x support has been deprecated in this release and will be removed in fluidsynth 2.5.x. Add INSTPATCH option. Boy howdy! This has not been re-evaluated in quite a while. Remove unnecessary pthread hack from Makefile. Remove overly paranoid CMake arguments added in c4d5a141aa97. Upstream ships a rather compentent configure process and there is no need to supply unnecessary arguments. https://github.com/FluidSynth/fluidsynth/releases/tag/v2.4.431670a219f
*: Bump revisions after dbus update PR: 285253 Reported by: Martin Birgmeier <d8zNeCFG@aon.at>a347a92e6e
audio/fluidsynth: Update to upstream release 2.4.3 Details: https://github.com/FluidSynth/fluidsynth/releases/tag/v2.4.3 MFH: 2025Q1ac7d62eed4
audio/fluidsynth: Update to 2.4.1 * Fix disabling detection of Doxygen * Disable detection of git Changelog: https://github.com/FluidSynth/fluidsynth/releases/tag/v2.4.1933dd550c5
*: Bump PORTREVISIONs of Pulseaudio consumers Sponsored by: Future Crew, LLC5505c50fcc
audio/fluidsynth: Update to upstream release 2.4.0 Details: - Significant release, see https://github.com/FluidSynth/fluidsynth/releases/tag/v2.4.0 - Some breaking changes, most notably the removal of LASH supporte17affd81d
audio/fluidsynth: Update to 2.3.6 and drop sndio support Drop sndio patches as maintaining our "custom fork/set of patches" will cause bitrot further down the road PR: 281184c4d5a141aa
audio/fluidsynth: Update to upstream version 2.3.47bcb6dea89
audio/pulseaudio: Update to 16.1 Bump PORTREVISION on consumers. Sponsored by: Serenity Cybersecurity, LLC PR: 262713b1ecad53b0
Mk/bsd.options.desc.mk: add "PIPEWIRE_DESC?= PipeWire multimedia server support" Keep custom description in ports: graphics/spectacle multimedia/obs-studio net/krfb x11-wm/gamescope Approved by: arrowd (mentor) Differential Revision: https://reviews.freebsd.org/D41038 MFH: 2023Q3cc018ec33b
audio/fluidsynth: Update to upstream release 2.3.3 MFH: 2023Q2855350978c
audio/opus: bump consumers after update to 1.4feb1fa34f5
audio/fluidsynth: Update to upstream relese 2.3.2 MFH: 2023Q27c2f46c8e6
audio/fluidsynth: Update to upstream version 2.3.1 Details: - Update to new upstream version 2.3.1 - Add non-default PIPEWIRE OPTION641bf33cd9
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
audio/fluidsynth: Update to upstream release 2.2.8 Details: - Bugfix release, see https://github.com/FluidSynth/fluidsynth/releases/tag/v2.2.8 MFH: 2022Q3bc920fd8a9
audio: remove 'Created by' lines A big Thank You to the original contributors of these ports: * <dmagda+libsamplerate@ee.ryerson.ca> * <trasz@FreeBSD.org> * Adam Weinberger * Adam Weinberger <adamw@FreeBSD.org> * Akinori MUSHA aka knu <knu@idaemons.org> * Aleksander Fafula <alex@bsdguru.org> * Alex Allan <alex@kamaz.org.uk> * Alexander Botero-Lowry <alex@foxybanana.com> * Alexander Kojevnikov <alexander@kojevnikov.com> * Alexander Nedotsukov <bland@FreeBSD.org> * Alexander Vereeken <Alexander88207@protonmail.com> * Alexander Yerenkow <yerenkow@gmail.com> * Alexandr Kovalenko <never@nevermind.kiev.ua> * Alexey Dokuchaev <danfe@FreeBSD.org> * Anders Nordby <anders@FreeBSD.org> * Anders Nordby <anders@fix.no> * Andreas Kohn <andreas@syndrom23.de> * Andrew Pantyukhin <infofarmer@FreeBSD.org> * Andrey Zakhvatov * Anes Mukhametov <anes@anes.su> * Anthony Ginepro <anthony.ginepro@laposte.net> * Anton Yuzhaninov <citrin@citrin.ru> * Aragon Gouveia <aragon@phat.za.net> * Ashish SHUKLA <wahjava@gmail.com> * Ayumi M <ayu@commun.jp> * Ayumi Mitsui <ayu@commun.jp> * Bartoletti <lbartoletti@FreeBSD.org> * Bernard Spil <brnrd@FreeBSD.org> * Bill Fenner <fenner@FreeBSD.org> * Brad Walker <tha_walka@hotmail.com> * Brett Taylor <brett@peloton.physics.montana.edu> * Byung-Hee HWANG <bh@izb.knu.ac.kr> * Carey Jones <mcj@acquiesce.org> * Carlos J. Puga Medina <cpm@FreeBSD.org> * Cezary Morga <cm@therek.net> * Chao Shin <quakelee@cn.freebsd.org> * Charles Mercadal <mercadal@diablonet.net> * Chia-liang Kao <clkao@CirX.ORG> * Chip Marshall <chip@eboai.org> * Choi Jun Ho <junker@moderato.snu.ac.kr> * Chris Piazza <cpiazza@FreeBSD.org> * Christian Laursen <xi@borderworlds.dk> * Christopher Key <cjk32@cam.ac.uk> * Daniel Menelkir <dmenelkir@gmail.com> * Daniel O'Connor * David Bushong <david@bushong.net> * David Le Brun <david@dyn-ns.net> * David MacKenzie <djm@pix.net> * David Naylor <dbn@FreeBSD.org> * David Naylor <naylor.b.david@gmail.com> * David Yeske <dyeske@gmail.com> * Denise H. G. <darcsis@gmail.com> * Dennis Herrmann <adox@mcx2.org> * Dennis Herrmann <dhn@FreeBSD.org> * Devon Ryan <dpryan@dpryan.com> * Ditesh Shashikant Gathani <ditesh@gathani.org> * Dmitry Afanasiev <KOT@MATPOCKuH.Ru> * Dominic Mitchell <dom@happygiraffe.net> * Dominique Goncalves <dominique.goncalves@gmail.com> * Dryice Liu <dryice@dryice.name> * Edward Tomasz Napierala <trasz@FreeBSD.org> * Edward Tomasz Napierala <trasz@pin.if.uz.zgora.pl> * Emanuel Haupt <ehaupt@FreeBSD.org> * Emanuel Haupt <ehaupt@critical.ch> * Eric Anholt <anholt@FreeBSD.org> * Erik Cederstrand <erich@FreeBSD.org> * Francisco Gomez <francisco@gomezmarin.com> * Frank Laszlo <laszlof@vonostingroup.com> * František Dvořák <valtri@civ.zcu.cz> * Fraser Tweedale <frase@frase.id.au> * Gabor Kovesdan * Gabor Zahemszky <Gabor@Zahemszky.HU> * Ganael Laplanche <ganael.laplanche@martymac.org> * Gea-Suan Lin <gslin@gslin.org> * Gennady Sorokopud <gena@NetVision.net.il> * George Reid <greid@FreeBSD.org> * George Reid <greid@ukug.uk.freebsd.org> * Goran Mekić <meka@tilda.center> * Grzegorz Blach <gblach@FreeBSD.org> * Gustau Perez <gustau.perez@gmail.com> * Hans Petter Selasky <hselasky@FreeBSD.org> * Hans Petter Selasky <hselasky@freebsd.org> * Hye-Shik Chang * Hye-Shik Chang <perky@FreeBSD.org> * Jaap Akkerhuis <jaap@NLnetLabs.nl> * Jamie Heckford <jamie@blackhole.net> * Jean-Marc Zucconi <jmz@FreeBSD.org> * Jean-Yves Lefort <jylefort@FreeBSD.org> * Jean-Yves Lefort <jylefort@brutele.be> * Jerry Eriksson <jerry@freebsd.se> * Jim Mock <jim@FreeBSD.org> * Jin-Shan Tseng <tjs@cdpa.nsysu.edu.tw> * Joao Carlos Mendes Luis <jonny@jonny.eng.br> * Joe Marcus Clarke <marcus@FreeBSD.org> * John Hixson <jhixson@FreeBSD.org> * John Hixson <john@pcbsd.org> * Jonathan Lennox <lennox@cs.columbia.edu> * Joris Vandalon <joris@vandalon.nl> * Juha Erkkilä <erkkila@cc.jyu.fi> * Juha Nygard <juha.nygard1@netikka.fi> * Kawaguti Ginga <ginga@athena.club.ne.jp> * Kengo Ichiki <kichiki@users.sourceforge.net> * Koine Yuusuke(koinec) <koinec@users.osdn.me> * Konstantinos Konstantinidis <kkonstan@daemon.gr> * Koop Mast <kwm@FreeBSD.org> * Lars Engels <lars.engels@0x20.net> * Lars Engels <lme@FreeBSD.org> * Lars Thegler <lth@FreeBSD.org> * Leo Kim <leo@florida.sarang.net> * Liam J. Foy <liamfoy@sepulcrum.org> * Manuel Creach <manuel.creach@icloud.com> * Marc van Woerkom <3d@FreeBSD.org> * Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org> * Mark Felder <feld@FreeBSD.org> * Mark Kane <mark@mkproductions.org> * Mark Pulford <mark@kyne.com.au> * Mark Reidel <ports@mark.reidel.info> * Mark Reidel <ports@mark.reidle.info> * Martin Blapp <mbr@FreeBSD.org> * Martin Dieringer <Martin.Dieringer@t-online.de> * Martin Kraft <martin.kraft@fal.de> * Martin Matuska <mm@FreeBSD.org> * Martin Wilke (miwi@FreeBSD.org) * Martin Wilke <miwi@FreeBSD.org> * Masanori Kiriake <seiken@nbs.co.jp> * Mathew Kanner <mat@hak.cnd.mcgill.ca> * Matt Tosto <datahead4@gmail.com> * Matthias Andree <matthias.andree@gmx.de> * Maxim Sobolev <sobomax@FreeBSD.org> * Michael Beer <beerml@sigma6audio.de> * Michael Haro <mharo@area51.fremont.ca.us> * Michael Johnson <ahze@FreeBSD.org> * Michael Johnson <ahze@ahze.net> * Michael Nottebrock <michaelnottebrock@gmx.net> * Michael Vasilenko <acid@stu.cn.ua> * Mike Makonnen <mtm@identd.net> * Munish Chopra <mchopra@engmail.uwaterloo.ca> * Mykola Dzham <i@levsha.me> * Nadelyaev Stanislav <funkblaster@n11.bmstu.ru> * Necati Ersen SISECI <siseci@enderunix.org> * Nicola Vitale <nivit@FreeBSD.org> * Nicola Vitale <nivit@email.it> * Nicolas Herry <nicolasherry@gmail.com> * Oliver Breuninger <ob@breuninger.org> * Oliver Fromme <oliver.fromme@heim3.tu-clausthal.de> * Oliver Lehmann <oliver@FreeBSD.org> * Olivier Duchateau * Oyvind Moll <oyvindmo@initio.no> * Pav Lucistnik <pav@FreeBSD.org> * Pav Lucistnik <pav@oook.cz> * Peter Pentchev <roam@FreeBSD.org> * Philip Paeps <philip@paeps.cx> * Philippe Audeoud <jadawin@tuxaco.net> * Pietro Cerutti <gahr@FreeBSD.org> * Piotr Kubaj <emulation@FreeBSD.org$ * Piotr Kubaj <pkubaj@anongoth.pl> * Po-Chuan Hsieh <sunpoet@FreeBSD.org> * Putrya Statislav * Rahul Siddharthan <rsidd@online.fr> * Rich Neese <r.neese@gmail.com> * Richard Neese * Rob Zinkov <rzinkov@gmail.com> * Romain Tartiere <romain@blogreen.org> * Romain Tartière <romain@blogreen.org> * Roman Bogorodskiy * Roman Shterenzon <roman@xpert.com> * Sander Janssen <janssen@rendo.dekooi.nl> * Sascha Klauder <sklauder@trimind.de> * Satoshi Taoka <taoka@FreeBSD.org> * Sean McGovern <sean@sfarc.net> * Sergey Akifyev <asa@gascom.ru> * Seth Kingsley <sethk@osd.bsdi.com> * Simon 'corecode' Schubert <corecode@corecode.ath.cx> * Simon Barner <barner@gmx.de> * Stas Timokhin <stast@bsdportal.ru> * Stefan Ehmann <shoesoft@gmx.net> * Stefan Jahn <stefan.jahn@nemesis-sektor.de> * Stefan Zehl <sec@42.org> * Stepan Zastupov [RedChrom] <redchrom@gmail.com> * Steve Wills <swills@FreeBSD.org> * Sue Blake <sue@FreeBSD.org> * Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net> * TOMIDA, Hiroaki <t.hiroaki.209 at gmail.com> * Tatsuki Makino <tatsuki_makino@hotmail.com> * The Anarcat <anarcat@anarcat.dyndns.org> * Thomas Gellekum <tg@FreeBSD.org> * Thomas M. Hermann <tmh.public@gmail.com> * Thomas Runge <runge@rostock.zgdv.de> * Thomas Zander <riggs@FreeBSD.org> * Tilman Linneweh <arved@FreeBSD.org> * Tim Bishop <tdb@FreeBSD.org> * Timothy Beyer <beyert@cs.ucr.edu> * Tobias Rehbein <tobias.rehbein@web.de> * Tyler Spivey * Ulrich Spoerlein <q@uni.de> * Ulrich Spoerlein <uspoerlein@gmail.com> * Vanilla I. Shu <vanilla@FreeBSD.org> * Veniamin Gvozdikov <vg@FreeBSD.org> * Vincent Tantardini <vinc@FreeBSD-fr.org> * Wen Heping <wen@FreeBSD.org> * Wen Heping <wenheping@gmail.com> * Yanhui Shen <shen.elf@gmail.com> * Yar Tikhiy <yar@FreeBSD.org> * Yar Tikhiy <yar@comp.chem.msu.su> * Ying-Chieh Liao <ijliao@FreeBSD.org> * Yoichi Asai <yatt@luna2.org> * Yoichi Asai <yatt@msc.biglobe.ne.jp> * Yoshiaki Uchikawa * Yoshihide SONODA <ysonoda@dontaku.csce.kyushu-u.ac.jp> * Yuri Victorovich * Yuri Victorovich <yuri@FreeBSD.org> * Yuri Victorovich <yuri@rawbw.com> * Zach Zurflu <zach@pabst.bendnet.com> * Zane C. Bowers * Zane C. Bowers-Hadley <vvelox@vvelox.net> * Zhihao Yuan <lichray@gmail.com> * ache * arved * chinsan * chinsan <chinsan.tw@gmail.com> * ericb@thedeepsky.com * erich@FreeBSD.org * faulkner@mpd.tandem.com * gahr * greg * hrkfrd@googlemail.com * ijliao * janek@gaja.ipan.lublin.pl * jkh * jockl <jockl@pianojockl.org> * kbyanc@posi.net * kwm@rainbow-runner.nl * lazyklimm <lazyklimm@gmail.com> * leo * lx * mahonmesr@googlemail.com * marius nuennerich * mathias.picker@gmx.de * michael johnson <ahze@ahze.net> * michaelnottebrock@gmx.net and lioux@FreeBSD.org * mtm@identd.net * nemysis <nemysis@gmx.ch> * nork@FreeBSD.org * nox@jelal.kn-bremen.de * numisemis at yahoo dot com * patrick * pjm <pierrejacqes.mimifir@gmail.com> * pozar * pst * r.neese * rene@FreeBSD.org (repocopied from audio/py-mpd) * sethk * shanee@augusta.de * sobomax * squell@alumina.nl * swallace * t.vanklaveren@student.utwente.nl * torstenb * trasz <trasz@FreeBSD.org * trasz <trasz@pin.if.uz.zgora.pl> * trevor * ugen * will * yoshiaki Uchikawa With hat: portmgr213b0b7a75
audio/fluidsynth: update to 2.2.7 PR: 264221 Submitted by: Alastair Hogge7cb8d122bd
audio/fluidsynth: Update to upstream version 2.2.6eb6ab58d12
audio/fluidsynth: Update to upstream version 2.2.4 MFH: 2021Q4e40e82b3bc
audio/fluidsynth: Update to upstream version 2.2.3 MFH: 2021Q44c2db26adf
audio/fluidsynth: Add CPE information Approved by: portmgr (blanket)b9fdd7134c
audio/jack: Update to Jack2: 0.125.0 -> 1.9.16 Big thank you to Florian Walpen <dev@submerge.ch> and Goran Mekić <meka@tilda.center> for working on Jack2. PR: 251125 Submitted by: Florian Walpen <dev@submerge.ch> (original version)5708ae4005
Remove # $FreeBSD$ from Makefiles.305f148f48
audio/fluidsynth: update to 2.1.7460779c2f9
Update to upstream version 2.1.6.ea52e7b62f
Chase libsndfile 1.0.30 update. Details: - Missing symbol sf_version_string, not auto-resolved by pkg + rebuild. - Bump PORTREVISION for consumers.8337fc6d5f
audio/sndio: Update to 1.7.0a167bf51dd
audio/fluidsynth: update to 2.1.3a3508551b3
audio/fluidsynth: Update to v2.1.2 Changes: https://github.com/FluidSynth/fluidsynth/releases/tag/v2.1.2 PR: 245416 Approved by: multimedia (tcberner)fa8eb7d9c9
audio/fluidsynth: Update to v2.1.1 Also fix LADSPA option which was silently failing because ladspa.h could not be found. Changes: https://github.com/FluidSynth/fluidsynth/releases/tag/v2.1.1 PR: 244300 Approved by: multimedia (tcberner)4364cbdd48
audio/fluidsynth: Update to v2.1.0 Changes: https://github.com/FluidSynth/fluidsynth/releases/tag/v2.1.0 PR: 242348 Approved by: multimedia (tcberner)15714eddaa
audio/fluidsynth: update to 2.0.8
Changelog:
* fix incorrect behavior of fluid_sample_set_sound_data() (#576, thanks to
@swesterfeld) fix voices being mixed incorrectly, causing audible crackle
* esp. at sample-rates >48kHz (#580)
* make sure that defining NDEBUG disables assertions5613cb3532Update to upstream version 2.0.7 PR: 240890 Submitted by: tobik94cf2bb4bd
Update to upstream version 2.0.6 Details: - Bug fixes, see changelog: https://github.com/FluidSynth/fluidsynth/releases/tag/v2.0.6 MFH: 2019Q3 (hat: ports-secteam)3a8904a687
audio/fluidsynth: Update to 2.0.5 Changes: https://github.com/FluidSynth/fluidsynth/releases/tag/v2.0.5 PR: 237363 Submitted by: tobik Approved by: multimedia (tcberner)2d12180ae6
audio/fluidsynth: Update to 2.0.4 Changes: https://github.com/FluidSynth/fluidsynth/releases/tag/v2.0.4 PR: 237363 Submitted by: tobik Approved by: multimedia (tcberner)cdd450e1ef
Update devel/readline to 8.0 - Bump PORTREVISION of dependent ports for shlib change Changes: https://tiswww.case.edu/php/chet/readline/CHANGES PR: 236156 Exp-run by: antoine40c9c7f7eb