CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

audio/libmp3splt 0.9.2_5

Library for splitting of various audio files

Port info

Maintainer
citrin@citrin.ru
Packages
latest: 0.9.2_5
Upstream
up to date
Last update
to 0.9.2_5 · a542853b79
Quarterly
2026Q4: 0.9.2_5
WWW
https://mp3splt.sourceforge.net/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install libmp3splt
installs 0.9.2_5 from latest; from quarterly (2026Q4) 0.9.2_5
Port
# cd /usr/ports/audio/libmp3splt && make install clean
# make -C /usr/ports/audio/libmp3splt config  # change options first
Size
235 KiB download · 1.0 MiB installed
Depends on
audio/flac 1.5.0,1, audio/libid3tag 0.16.4, audio/libmad 0.16.4, audio/libogg 1.3.6,4, audio/libvorbis 1.3.7_2,3, devel/gettext-runtime 1.0_1, devel/libltdl 2.6.2, devel/pcre 8.45_4
License
GPLv2
Options
6 of 6 on in the package: FLAC ID3 MAD NLS PCRE VORBIS

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 160.9.2_50.9.2_5–
FreeBSD 150.9.2_50.9.2_5–
FreeBSD 140.9.2_50.9.2_50.9.2_5

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 150.9.2_50.9.2_5–
FreeBSD 140.9.2_50.9.2_50.9.2_5

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (2)

The CVE record lists the packaged version 0.9.2_5 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2017-56655.52017-03-01The splt_cue_export_to_file function in cue.c in libmp3splt 0.9.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted…
CVE-2017-151855.02017-10-09plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbis_block_clear function with uninitialized data upon detection of invalid input, which allows remote attackers …

VuXML only (0)

Listed in VuXML, the packaged version 0.9.2_5 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (53)

Christian Weisgerber (naddy) · 0.5.4_2
Bump PORTREVISION after libogg and libvorbisfile major version increment.
94d47b2ecd
Vsevolod Stakhov (vsevolod) · 0.5.4_1
Fix parsing of CUE files. Bump portrevision.

Submitted by:	maintainer via email
6b5d678bf3
Vsevolod Stakhov (vsevolod) · 0.5.4
Add libmp3splt that is required for new version of audio/mp3splt port.

Submitted by:	Anton Yuzhaninov <citrin at citrin.ru> via email
da61be2a8b