CVE and update status of the FreeBSD ports tree3,298 unaddressed CVEs in 671 portsAll times are CET
Port details

audio/fluidsynth 2.6.1

Real-time software synthesizer based on the SoundFont 2 specifications

Port info

Maintainer
multimedia@FreeBSD.org
Packages
latest: 2.6.1
Upstream
up to date
Last update
to 2.6.1 · ee712bbc1e
Quarterly
2026Q4: 2.6.1
WWW
https://www.fluidsynth.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install fluidsynth
installs 2.6.1 from latest; from quarterly (2026Q4) 2.6.1
Port
# cd /usr/ports/audio/fluidsynth && make install clean
# make -C /usr/ports/audio/fluidsynth config  # change options first
Size
305 KiB download · 821 KiB installed
Depends on
audio/jack 1.9.22_3, devel/readline 8.3.6
License
LGPL21
Options
2 of 10 on in the package: JACK READLINE
Show the 8 options that are off
ALSA DBUS LADSPA PIPEWIRE PORTAUDIO PULSEAUDIO SDL SNDFILE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.6.12.6.1–
FreeBSD 152.6.12.6.1–
FreeBSD 142.6.12.6.12.6.1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.6.12.6.1–
FreeBSD 142.6.12.6.12.6.1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (1)

The CVE record lists the packaged version 2.6.1 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-1111236.92026-10-15FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corrupt heap and stack memory by supplying unvalidated SoundFont modulato…

VuXML only (0)

Listed in VuXML, the packaged version 2.6.1 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (104)

Thomas Zander (riggs) · 2.0.3
Update to upstream version 2.0.3

While on it:
- Pet portlint

PR:		233448
Submitted by:	yuri
Reviewed by:	tobik
9cdfc5987e
Thomas Zander (riggs) · 1.1.11
Updtate to upstrem version.

PR:		228265
Submitted by:	takefu@airport.fm
Reviewed by:	riggs
Approved by:	multimedia@ (riggs)
59c613cbf7
Dmitry Marakasov (amdmi3) · 1.1.6_5
- Fix LICENSE - Pet portlint - Switch to opt_CMAKE_BOOL

Approved by:	portmgr blanket
c33f72ca5b
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1.6_5
Update devel/readline to 7.0 patch 3

- Bump PORTREVISION for shlib change

Changes:	https://cnswww.cns.cwru.edu/php/chet/readline/CHANGES
		https://lists.gnu.org/archive/html/bug-bash/2016-09/msg00107.html
		https://lists.gnu.org/archive/html/bug-readline/2017-01/msg00002.html
Differential Revision:	https://reviews.freebsd.org/D11172
PR:		219947
Exp-run by:	antoine
cb037d3c98
Tobias C. Berner (tcberner) · 1.1.6_4
Make ninja opt-out in cmake.mk

Using ninja instead of make (1) can lead to significant speed ups while building.
Therefore switch from having the ninja generator opt-in to having it opt-out.

Previously cmake-ports that wanted to use ninja could set
    CMAKE_NINJA=yes
now, ports that do not work with ninja can set
    cmake:<existing args>,noninja
Note, that needing this should be an exception and most often points to a broken
cmake of the port.

The ports using cmake were modified
* removed USES=gmake, if ninja is used
* removed MAKE_ARGS, if ninja is used
* added the cmake-argument noninja if necessary

PR:		219629
PR:		213331
Exp-run by:	antoine
Reviewed by:	rakuco
Differential Revision:	https://reviews.freebsd.org/D10748
5e373eaa92
Thomas Zander (riggs) · 1.1.6_4
Add default OPTION for READLINE so users can disable it for custom builds

PR:		213513
Reported by:	rozhuk.im@gmail.com
MFH:		2017Q1
b66d245e9b
Thomas Zander (riggs) · 1.1.6_3
Bump PORTREVISION (due to changed OPTIONS set in the previous commit)
c981ff6de0
Thomas Zander (riggs) · 1.1.6_2
Add SNDIO support and non-default OPTION

PR:		212838
Submitted by:	t@tobik.me
d08a087ea4
Mathieu Arnold (mat) · 1.1.6_2
Cleanup patches, a* categories.

Rename them to follow the make makepatch naming, and regenerate them.

With hat:	portmgr
Sponsored by:	Absolight
9fa9eb9ac7
Mathieu Arnold (mat) · 1.1.6_2
Remove ${PORTSDIR}/ from dependencies, Mk and categories a, b, and c.

With hat:	portmgr
Sponsored by:	Absolight
7f4572eae4
Antoine Brodin (antoine) · 1.1.6_2
- Add back part of LDFLAGS removed in r387982, it's needed to link at least on FreeBSD 9.3: fluid_sys.c:(.text+0xced): undefined reference to `pthread_setschedparam'

- While here, fix a typo in an option helper
763d60e203
Baptiste Daroussin (bapt) · 1.1.6_2
Update portaudio to v19/Remove portaudio2 [1] Chase portaudio change Add patches from debian for games/cultivation Add patches from upsteam for audio/rezound Mark py-fastaudio as broken

Approved by:	maintainer
3fef6c52f0
John Marino (marino) · 1.1.6_1
audio category: Remove $PTHREAD_LIBS

xmcd didn't pass check-plist (pre-existing), fixed.

approved by:	PTHREAD blanket
112f62e6b9
Thomas Zander (riggs) · 1.1.6_1
Fix build failure with non-default ALSA option

PR:		196163
Submitted by:	mi@ALDAN.algebra.com
MFH:		2015Q1
c9fdd43a1e
Dmitry Marakasov (amdmi3) · 1.1.6_1
- Fix build with PORTAUDIO option enabled in presence of old portaudio by always prepending portaudio2 include/link paths [1] - While here, add LICENSE_FILE

Approved by:	kwm [1] (via irc)
f230b4e4ca
Baptiste Daroussin (bapt) · 1.1.6_1
Cleanup plist
bbef49d4cf
Dmitry Marakasov (amdmi3) · 1.1.6_1
- Mark broken when portaudio(2) support is requested and portaudio(1) is installed: doesn't build

Approved by:	portmgr blanket
ad3b00da50
Dmitry Marakasov (amdmi3) · 1.1.6_1
- Switch audio/lash to USES=libtool, drop .la files - Add required LIBS - Bump dependent ports as .so version has changed

Approved by:	portmgr blanket
c48c4a1ca0
Baptiste Daroussin (bapt) · 1.1.6
use USES=tar:bzip2
abc4e01c43
Baptiste Daroussin (bapt) · 1.1.6
Prefer ninja over make(1)
254efb3968
Baptiste Daroussin (bapt) · 1.1.6
Stagify Use options helpers
42f94ef9b4
Baptiste Daroussin (bapt) · 1.1.6
Add NO_STAGE all over the place in preparation for the staging support (cat: audio)
183c2ed74f
Alex Kozlov (ak) · 1.1.6
- Remove MAKE_JOBS_SAFE variable

Approved by:	portmgr (bdrewery)
d4041784dc
Baptiste Daroussin (bapt) · 1.1.6
Convert USE_PKGCONFIG -> USES=pkgconf for audio category
a215727686
Max Brazhnikov (makc) · 1.1.6
- convert USE_CMAKE to USES - while here clean up some ports from CMAKE_VERBOSE, which is intended   for users

Approved by:	portmgr (miwi)
ffd97a0193
Martin Wilke (miwi) · 1.1.6
- Update to 1.1.6

PR:		171958
Submitted by:	ports fury
219658944f
Baptiste Daroussin (bapt) · 1.1.5
Convert audio/jack and fluidsynth to only build depend on pkgconf, track dependency impact
72ae5b1a39
Baptiste Daroussin (bapt) · 1.1.5
Convert to new options framework
d192c12c85
Martin Wilke (miwi) · 1.1.5
- Add missing patches

Feature safe: yes
312ef6a405
Martin Wilke (miwi) · 1.1.5
- Update to 1.5.1

PR:		161631
Submitted by:	Ports Fury
Feature safe:	yes
151664cac4
Dmitry Marakasov (amdmi3) · 1.1.1
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS) - Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:		157936
Submitted by:	myself
Exp-runs by:	pav
Approved by:	pav
6f6fbe4bdf
Martin Wilke (miwi) · 1.1.1
- Get Rid MD5 support
a9481afc8a
Ade Lovett (ade) · 1.1.1
Sync to new bsd.autotools.mk
4a8684e352
Sylvio Cesar Teixeira (sylvio) · 1.1.1
- Fixed problem with games/scumm when compiled with option fluidsynth.

PR:		146121
Submitted by:	Oliver Herold <oh@fixmbr.de>
3437b25c5c
Martin Wilke (miwi) · 1.1.1
- Update to 1.1.1

PR:		142312
Submitted by:	Ports Fury
138f5d455d
Pav Lucistnik (pav) · 1.0.8
- Remove USE_GETOPT_LONG which is a no-op since March 2007
dad0d0873a
Pav Lucistnik (pav) · 1.0.8
- Update to 1.0.8

PR:		ports/118259
Submitted by:	Dmitry Klimov <lazyklimm@gmail.com>
efcf49406f
Michael Johnson (ahze) · 1.0.7a_2
- Transfer maintainership to multimedia@ - Make jack-audio support on by default (per configure script) - add OPTIONS
34d361776d
Cheng-Lung Sung (clsung) · 1.0.7a_1
- s,INSTALLS_SHLIB,USE_LDCONFIG,g - these include astro/ audio/ biology/ chinese/ maintained by ports@

PR:		ports/101916
Submitted by:	Gea-Suan Lin <gslin_AT_gslin dot org>
ab63f5bd0b
Ade Lovett (ade) · 1.0.7a_1
Conversion to a single libtool environment.

Approved by:	portmgr (kris)
8503536d38
Marcus Alves Grando (mnag) · 1.0.7a
- Update to 1.0.7a - portlint(1)

PR:		93652
Submitted by:	KATO Tsuguru <tkato432@yahoo.com>
b087037379
Pav Lucistnik (pav) · 1.0.6
- Add some SHA256 checksums
6329c4d7f9
Ade Lovett (ade) · 1.0.6
Mass-conversion to the USE_AUTOTOOLS New World Order.  The code present in bsd.autotools.mk essentially makes this a no-op given that all the old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in exactly the same way as USE_AUTOTOOLS itself.

Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.

Preliminary documentation can be found at:
	http://people.FreeBSD.org/~ade/autotools.txt

which is in the process of being SGMLized before introduction into the
Porters Handbook.

Light blue touch-paper.  Run.
54a0b86543
Renato Botelho (garga) · 1.0.6
- Update to 1.0.6

PR:		ports/87053
Submitted by:	Ports Fury
968c09857f
Mario Sergio Fujikawa Ferreira (lioux) · 1.0.5
Drop maintainership
393ec32227
Kris Kennaway (kris) · 1.0.5
Now builds on sparc64
a6064d1bfa
Mario Sergio Fujikawa Ferreira (lioux) · 1.0.5
o Update to 1.0.5 o Take over maintainership (suggested by previous maintainer [1])

Approved by:	Juha Nyg?rd <juha.nygard1@netikka.fi> [1]
a6536683de
Joe Marcus Clarke (marcus) · 1.0.3_1
Apply a big libtool patch to allow porters to use the libtool installed by the libtoolX ports instead of the one included with each port.  Ports that set USE_LIBTOOL_VER=X will now use the ports version of libtool instead of the included version.  To restore previous behavior, use the new macro, USE_INC_LIBTOOL_VER.  Both macros accept the same argument: a libtool version.

For example, to use the ports version of libtool-1.5, add the following to
your Makefile:

USE_LIBTOOL_VER=        15

To use the included version of libtool with extra hacks provided by
libtool-1.5, add the following to your Makefile:

USE_INC_LIBTOOL_VER=    15

With this change, ports that had to add additional libtool hacks to prevent
.la files from being installed or to fix certain threading issues can now
delete those hacks (after appropriate testing, of course).

PR:		63944
Based on work by:eik and marcus
Approved by:	ade (autotools maintainer)
Tested by:	kris on pointyhat
Bound to be hidden problems:	You bet
9e5632dd66
Trevor Johnson (trevor) · 1.0.3_1
SIZEify (maintainer timeout)
8232e82f85
Ade Lovett (ade) · 1.0.3_1
Whoa there, boy, that's a mighty big commit y'all have there...

Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".

For ports-in-waiting:

	USE_LIBTOOL=YES		->	USE_LIBTOOL_VER=13
	USE_AUTOCONF=YES	->	USE_AUTOCONF_VER=213
	USE_AUTOMAKE=YES	->	USE_AUTOMAKE_VER=14

Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.
3f651573ad