BROKEN on !i386 and !amd64: Does not compile.bbd98c96f6
fluidsynth -- Use after free when using DLS filesentered 2025-12-25
Port details
audio/fluidsynth 2.6.1
Real-time software synthesizer based on the SoundFont 2 specifications
Port info
- Maintainer
- multimedia@FreeBSD.org
- Packages
- latest: 2.6.1
- Upstream
- up to date
- Last update
- to 2.6.1 · ee712bbc1e
- Quarterly
- 2026Q4: 2.6.1
- WWW
- https://www.fluidsynth.org/
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install fluidsynthinstalls 2.6.1 fromlatest; fromquarterly(2026Q4) 2.6.1- Port
# cd /usr/ports/audio/fluidsynth && make install clean# make -C /usr/ports/audio/fluidsynth config # change options first
- Size
- 305 KiB download · 821 KiB installed
- Depends on
- audio/jack 1.9.22_3, devel/readline 8.3.6
- License
- LGPL21
- Options
- 2 of 10 on in the package: JACK READLINE
Show the 8 options that are off
ALSA DBUS LADSPA PIPEWIRE PORTAUDIO PULSEAUDIO SDL SNDFILE
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 2.6.1 | 2.6.1 | – |
| FreeBSD 15 | 2.6.1 | 2.6.1 | – |
| FreeBSD 14 | 2.6.1 | 2.6.1 | 2.6.1 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 2.6.1 | 2.6.1 | – |
| FreeBSD 14 | 2.6.1 | 2.6.1 | 2.6.1 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed (1)
The CVE record lists the packaged version 2.6.1 as affected, and no VuXML entry names the CVE. What does this mean?
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-111123 | 6.9 | 2026-10-15 | FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corrupt heap and stack memory by supplying unvalidated SoundFont modulato… |
VuXML only (0)
Listed in VuXML, the packaged version 2.6.1 is still in the affected range; pkg audit reports it. What does this mean?
None.
Fixed (1)
Show 1 fixed
VuXML entries whose affected range the packaged version has left.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (104)
Bump PORTREVISION on all ports that depend on gettext to aid with upgrading. (Part 2)053fdb6a6b
- Savannah is still dead but there is a new master_sites Reported by: bento via kris80002fcf1a
Add fluidsynth, a real-time software synthesizer based on the SoundFont 2 specifications. It is a "software synthesizer". FluidSynth can read MIDI events from the MIDI input device and render them to the audio device. It can also play MIDI files. PR: ports/59716 Submitted by: Juha Nygard <juha.nygard1@netikka.fi> Approved by: adamw (mentor)bba67c373f