Update to upstream version 2.0.3 While on it: - Pet portlint PR: 233448 Submitted by: yuri Reviewed by: tobik9cdfc5987e
fluidsynth -- Use after free when using DLS filesentered 2025-12-25
Real-time software synthesizer based on the SoundFont 2 specifications
# pkg install fluidsynthinstalls 2.6.1 from latest; from quarterly (2026Q4) 2.6.1# cd /usr/ports/audio/fluidsynth && make install clean# make -C /usr/ports/audio/fluidsynth config # change options first
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 2.6.1 | 2.6.1 | – |
| FreeBSD 15 | 2.6.1 | 2.6.1 | – |
| FreeBSD 14 | 2.6.1 | 2.6.1 | 2.6.1 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 2.6.1 | 2.6.1 | – |
| FreeBSD 14 | 2.6.1 | 2.6.1 | 2.6.1 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
The CVE record lists the packaged version 2.6.1 as affected, and no VuXML entry names the CVE. What does this mean?
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-111123 | 6.9 | 2026-10-15 | FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corrupt heap and stack memory by supplying unvalidated SoundFont modulato… |
Listed in VuXML, the packaged version 2.6.1 is still in the affected range; pkg audit reports it. What does this mean?
Update to upstream version 2.0.3 While on it: - Pet portlint PR: 233448 Submitted by: yuri Reviewed by: tobik9cdfc5987e
Updtate to upstrem version. PR: 228265 Submitted by: takefu@airport.fm Reviewed by: riggs Approved by: multimedia@ (riggs)59c613cbf7
- Fix LICENSE - Pet portlint - Switch to opt_CMAKE_BOOL Approved by: portmgr blanketc33f72ca5b
Update devel/readline to 7.0 patch 3 - Bump PORTREVISION for shlib change Changes: https://cnswww.cns.cwru.edu/php/chet/readline/CHANGES https://lists.gnu.org/archive/html/bug-bash/2016-09/msg00107.html https://lists.gnu.org/archive/html/bug-readline/2017-01/msg00002.html Differential Revision: https://reviews.freebsd.org/D11172 PR: 219947 Exp-run by: antoinecb037d3c98
Make ninja opt-out in cmake.mk
Using ninja instead of make (1) can lead to significant speed ups while building.
Therefore switch from having the ninja generator opt-in to having it opt-out.
Previously cmake-ports that wanted to use ninja could set
CMAKE_NINJA=yes
now, ports that do not work with ninja can set
cmake:<existing args>,noninja
Note, that needing this should be an exception and most often points to a broken
cmake of the port.
The ports using cmake were modified
* removed USES=gmake, if ninja is used
* removed MAKE_ARGS, if ninja is used
* added the cmake-argument noninja if necessary
PR: 219629
PR: 213331
Exp-run by: antoine
Reviewed by: rakuco
Differential Revision: https://reviews.freebsd.org/D107485e373eaa92Add default OPTION for READLINE so users can disable it for custom builds PR: 213513 Reported by: rozhuk.im@gmail.com MFH: 2017Q1b66d245e9b
Bump PORTREVISION (due to changed OPTIONS set in the previous commit)c981ff6de0
Add SNDIO support and non-default OPTION PR: 212838 Submitted by: t@tobik.med08a087ea4
Cleanup patches, a* categories. Rename them to follow the make makepatch naming, and regenerate them. With hat: portmgr Sponsored by: Absolight9fa9eb9ac7
Remove ${PORTSDIR}/ from dependencies, Mk and categories a, b, and c.
With hat: portmgr
Sponsored by: Absolight7f4572eae4- Add back part of LDFLAGS removed in r387982, it's needed to link at least on FreeBSD 9.3: fluid_sys.c:(.text+0xced): undefined reference to `pthread_setschedparam' - While here, fix a typo in an option helper763d60e203
Update portaudio to v19/Remove portaudio2 [1] Chase portaudio change Add patches from debian for games/cultivation Add patches from upsteam for audio/rezound Mark py-fastaudio as broken Approved by: maintainer3fef6c52f0
audio category: Remove $PTHREAD_LIBS xmcd didn't pass check-plist (pre-existing), fixed. approved by: PTHREAD blanket112f62e6b9
Fix build failure with non-default ALSA option PR: 196163 Submitted by: mi@ALDAN.algebra.com MFH: 2015Q1c9fdd43a1e
- Fix build with PORTAUDIO option enabled in presence of old portaudio by always prepending portaudio2 include/link paths [1] - While here, add LICENSE_FILE Approved by: kwm [1] (via irc)f230b4e4ca
Cleanup plistbbef49d4cf
- Mark broken when portaudio(2) support is requested and portaudio(1) is installed: doesn't build Approved by: portmgr blanketad3b00da50
- Switch audio/lash to USES=libtool, drop .la files - Add required LIBS - Bump dependent ports as .so version has changed Approved by: portmgr blanketc48c4a1ca0
use USES=tar:bzip2abc4e01c43
Prefer ninja over make(1)254efb3968
Stagify Use options helpers42f94ef9b4
Add NO_STAGE all over the place in preparation for the staging support (cat: audio)183c2ed74f
- Remove MAKE_JOBS_SAFE variable Approved by: portmgr (bdrewery)d4041784dc
Convert USE_PKGCONFIG -> USES=pkgconf for audio categorya215727686
- convert USE_CMAKE to USES - while here clean up some ports from CMAKE_VERBOSE, which is intended for users Approved by: portmgr (miwi)ffd97a0193
- Update to 1.1.6 PR: 171958 Submitted by: ports fury219658944f
Convert audio/jack and fluidsynth to only build depend on pkgconf, track dependency impact72ae5b1a39
Convert to new options frameworkd192c12c85
- Add missing patches Feature safe: yes312ef6a405
- Update to 1.5.1 PR: 161631 Submitted by: Ports Fury Feature safe: yes151664cac4
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS) - Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav6f6fbe4bdf- Get Rid MD5 supporta9481afc8a
Sync to new bsd.autotools.mk4a8684e352
- Fixed problem with games/scumm when compiled with option fluidsynth. PR: 146121 Submitted by: Oliver Herold <oh@fixmbr.de>3437b25c5c
- Update to 1.1.1 PR: 142312 Submitted by: Ports Fury138f5d455d
- Remove USE_GETOPT_LONG which is a no-op since March 2007dad0d0873a
- Update to 1.0.8 PR: ports/118259 Submitted by: Dmitry Klimov <lazyklimm@gmail.com>efcf49406f
- Transfer maintainership to multimedia@ - Make jack-audio support on by default (per configure script) - add OPTIONS34d361776d
- s,INSTALLS_SHLIB,USE_LDCONFIG,g - these include astro/ audio/ biology/ chinese/ maintained by ports@ PR: ports/101916 Submitted by: Gea-Suan Lin <gslin_AT_gslin dot org>ab63f5bd0b
Conversion to a single libtool environment. Approved by: portmgr (kris)8503536d38
- Update to 1.0.7a - portlint(1) PR: 93652 Submitted by: KATO Tsuguru <tkato432@yahoo.com>b087037379
- Add some SHA256 checksums6329c4d7f9
Mass-conversion to the USE_AUTOTOOLS New World Order. The code present in bsd.autotools.mk essentially makes this a no-op given that all the old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in exactly the same way as USE_AUTOTOOLS itself. Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME team -- all GNOME 2.12.x ports use it. Preliminary documentation can be found at: http://people.FreeBSD.org/~ade/autotools.txt which is in the process of being SGMLized before introduction into the Porters Handbook. Light blue touch-paper. Run.54a0b86543
- Update to 1.0.6 PR: ports/87053 Submitted by: Ports Fury968c09857f
Drop maintainership393ec32227
Now builds on sparc64a6064d1bfa
o Update to 1.0.5 o Take over maintainership (suggested by previous maintainer [1]) Approved by: Juha Nyg?rd <juha.nygard1@netikka.fi> [1]a6536683de
Apply a big libtool patch to allow porters to use the libtool installed by the libtoolX ports instead of the one included with each port. Ports that set USE_LIBTOOL_VER=X will now use the ports version of libtool instead of the included version. To restore previous behavior, use the new macro, USE_INC_LIBTOOL_VER. Both macros accept the same argument: a libtool version. For example, to use the ports version of libtool-1.5, add the following to your Makefile: USE_LIBTOOL_VER= 15 To use the included version of libtool with extra hacks provided by libtool-1.5, add the following to your Makefile: USE_INC_LIBTOOL_VER= 15 With this change, ports that had to add additional libtool hacks to prevent .la files from being installed or to fix certain threading issues can now delete those hacks (after appropriate testing, of course). PR: 63944 Based on work by:eik and marcus Approved by: ade (autotools maintainer) Tested by: kris on pointyhat Bound to be hidden problems: You bet9e5632dd66
SIZEify (maintainer timeout)8232e82f85
Whoa there, boy, that's a mighty big commit y'all have there...
Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".
For ports-in-waiting:
USE_LIBTOOL=YES -> USE_LIBTOOL_VER=13
USE_AUTOCONF=YES -> USE_AUTOCONF_VER=213
USE_AUTOMAKE=YES -> USE_AUTOMAKE_VER=14
Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.3f651573ad