CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

multimedia/mp4v2 2.1.3_1

Library and tools to read, create, and modify mp4 files

Port info

Maintainer
multimedia@FreeBSD.org
Packages
latest: 2.1.3_1
Upstream
up to date
Last update
to 2.1.3_1 · 99b53b813f
Quarterly
2026Q4: 2.1.3_1
WWW
http://mp4v2.org/
Links
cgit · VuXML

Install

Package
# pkg install mp4v2
installs 2.1.3_1 from latest; from quarterly (2026Q4) 2.1.3_1
Port
# cd /usr/ports/multimedia/mp4v2 && make install clean
Size
387 KiB download · 1.3 MiB installed
Depends on
nothing
License
MPL11

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.1.3_12.1.3_1–
FreeBSD 152.1.3_12.1.3_1–
FreeBSD 142.1.3_12.1.3_12.1.3_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.1.3_12.1.3_1–
FreeBSD 142.1.3_12.1.3_12.1.3_1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (2)

The CVE record lists the packaged version 2.1.3_1 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2023-337188.82023-05-31mp4v2 v2.1.3 was discovered to contain a memory leak via MP4File::ReadString() at mp4file_io.cpp
CVE-2023-337175.52023-06-02mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated memory but did not catch exceptions thrown by ReadBytes()

VuXML only (0)

Listed in VuXML, the packaged version 2.1.3_1 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (48)

Muhammad Moinur Rahman (bofh) · 2.1.3_1
multimedia/mp4v2: Moved man to share/man

Approved by:    portmgr (blanket)
99b53b813f
Matthias Andree (mandree) · 2.1.3
multimedia/mp4v2: switch to fork, update to 2.1.3

PR:		272326
c70787606c
Stefan Eßer (se) · 2.0.0
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.0.0
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 2.0.0
multimedia: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron LI <aly@aaronly.me>
  *  Alexander Botero-Lowry <alexbl@FreeBSD.org>
  *  Alexander Logvinov <ports@logvinov.com>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Anders Nordby <anders@FreeBSD.org>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrew Thompson <andy@fud.org.nz>
  *  Andrew Thompson <thompsa@FreeBSD.org>
  *  Angel Carpintero <ack@telefonica.net>
  *  Anish Mistry (with help from mean)
  *  Anonymous <swell.k@gmail.com>
  *  Ashish SHUKLA <ashish@FreeBSD.org>
  *  Ashish Shukla <wahjava@gmail.com>
  *  Ben Woods <woodsb02@FreeBSD.org>
  *  Brian Somers <brian@FreeBSD.org>
  *  Bruce M Simpson <bms@FreeBSD.org>
  *  Byung-Hee HWANG <bh@izb.knu.ac.kr>
  *  Charlie Kester <corky1951@comcast.net>
  *  Chess Griffin <chess@chessgriffin.com>
  *  Chris Piazza <cpiazza@FreeBSD.org>
  *  Christopher Key <cjk32@cam.ac.uk>
  *  Chuck Hein <chein@FreeBSD.org> & Jim Overholt <overholt@isdw.net>
  *  Daniel Morante <daniel@morante.net>
  *  Diego Depaoli <trebestie@gmail.com> and Yinghong Liu <relaxbsd@gmail.com>
  *  Dierk Sacher <dierk@blaxxtarz.de>
  *  Dreamcat4 <dreamcat4@gmail.com>
  *  Earl Gay <earl@eeg3.net>
  *  Ed Schouten <ed@FreeBSD.org>
  *  Edwin Groothuis <edwin@mavetju.org>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Felix Palmen <felix@palmen-it.de>
  *  Franz Bettag <franz@bett.ag>
  *  FreeBSD GNOME Team <gnome@freebsd.org>
  *  Gea-Suan Lin <gslin@gslin.org>
  *  George Reid <greid@ukug.uk.freebsd.org>
  *  Grzegorz Blach <gblach@FreeBSD.org>
  *  Gustau Perez <gustau.perez@gmail.com>
  *  Harold Gutch <logix@foobar.franken.de>
  *  Heiner <h.eichmann@gmx.de>
  *  Heiner Eichmann <h.eichmann@gmx.de>
  *  Hendrik Scholz <hendrik@scholz.net>
  *  Herbert J. Skuhra <h.skuhra@gmail.com>
  *  Herve Quiroz <hq@FreeBSD.org>
  *  Holger Lamm
  *  J.R. Oldroyd <fbsd@opal.com>
  *  Jason Harmening <jason.harmening@gmail.com>
  *  Jille Timmermans (jille@quis.cx)
  *  Juergen Lock <nox@FreeBSD.org>
  *  Juergen Lock <nox@jelal.kn-bremen.de>
  *  KalleDK <plexmaintainer@k-moeller.dk>
  *  Koop Mast <kwm@FreeBSD.org>
  *  Koop Mast <kwm@rainbow-runner.nl>
  *  Kozlov Sergey <kozlov.sergey.404@gmail.com>
  *  Kris Moore
  *  Kuan-Chung Chiu <buganini@gmail.com>
  *  Lars Eggert <lars.eggert@gmx.net>
  *  Leinier Cruz Salfran <salfrancl@yahoo.es>
  *  MANTANI Nobutaka <nobutaka@nobutaka.com>
  *  Manuel Creach <manuel.creach@icloud.com>
  *  Marc van Woerkom <3d@FreeBSD.org>
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
  *  Mark Felder <feld@FreeBSD.org>
  *  Martin Matuska <mm@FreeBSD.org>
  *  Martin Neubauer <m.ne@gmx.net>
  *  Martin Wilke <miwi@FreeBSD.org>
  *  Michael Johnson <ahze@FreeBSD.org>
  *  Michael Johnson <ahze@ahze.net>
  *  Michael Nottebrock <michaelnottebrock@gmx.net>
  *  Michael Nottebrock <michaelnottebrock@gmx.net> et al
  *  Mina Naguib <webmaster@topfx.com>
  *  Mykola Dzham <i@levsha.me>
  *  Naram Qashat <cyberbotx@cyberbotx.com>
  *  Olivier Cochard-Labbe <olivier@FreeBSD.org>
  *  Pascal Vizeli <pvizeli@yahoo.de>
  *  Pav Lucistnik <pav@FreeBSD.org>
  *  Pawel Pekala <pawel@FreeBSD.org>
  *  Petar Zhivkov Petrov <pesho.petrov@gmail.com>
  *  Phil Oleson
  *  Phil Oleson <oz@nixil.net>
  *  Piotr Kubaj <pkubaj@anongoth.pl>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Raaf <freebsd@luna.afraid.org>
  *  Randall Hopper <aa8vb@nc.rr.com>
  *  Rodrigo OSORIO <rodrigo@FreeBSD.org>
  *  Rozhuk Ivan 2018 <rozhuk.im@gmail.com>
  *  Rozhuk Ivan <rozhuk.im@gmail.com>
  *  Rozhuk Ivan rozhuk.im@gmail.com
  *  Rusmir Dusko <nemysis@FreeBSD.org>
  *  Stacey Son <mythdev@son.org>, Ari Maniatis <ari@ish.com.au>
  *  Steve Wills <steve@mouf.net>
  *  Steve Wills <swills@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Sylvio Cesar <sylvio@FreeBSD.org>
  *  Thierry Thomas <thierry@pompo.net>
  *  Thomas E. Zander
  *  Thomas E. Zander with help from Vladimir Kushnir
  *  Vladimir Kondratiev <wulf@mail.mipt.ru>
  *  William Grzybowski <wg@FreeBSD.org>
  *  William Grzybowski <william88@gmail.com>
  *  Yi-Hsuan Hsin <mhsin@mhsin.org>
  *  Zastupov Stepan [RedChrom] <redchrom@mail.ru>
  *  adamw
  *  alex
  *  arved
  *  erich@FreeBSD.org
  *  freebsd-ports@evilcode.net
  *  giffunip@asme.org
  *  ijliao
  *  kamikaze@bsdforen.de
  *  michael johnson <ahze@ahze.net>
  *  mikael.urankar@gmail.com
  *  mm
  *  nox@FreeBSD.org
  *  osa
  *  pb@FreeBSD.org
  *  piero
  *  se@FreeBSD.org
  *  sumikawa

With hat:	portmgr
63f36d3262
Bernhard Froehlich (decke) · 2.0.0
multimedia/mp4v2: Add CPE information

Approved by:    portmgr (blanket)
668a591254
Mathieu Arnold (mat) · 2.0.0
Remove # $FreeBSD$ from Makefiles.
305f148f48
Thomas Zander (riggs) · 2.0.0
Update to upstream release 2.0.0

Details:
Update to what seems to be the latest generally accepted upstream
release (judging by what major Linux distributions have been including
in the recent past and what consumers of the lib are using.)

PR:		212785
Submitted by:	wulf (patch set for the port)
Reported by:	rkoberman@gmail.com
fe795ffd4b
Jan Beich (jbeich) · 1.9.1_3
multimedia/mp4v2: unbreak build with Clang 6 (C++14 by default)

src/mp4.cpp:679:20: error: cannot initialize return object of type 'mp4v2_ismacrypParams *' (aka 'mp4v2_ismacryp_session_params *') with an rvalue of type 'MP4TrackId' (aka 'unsigned int')
            return MP4_INVALID_TRACK_ID;
                   ^~~~~~~~~~~~~~~~~~~~
./include/mp4v2/general.h:45:33: note: expanded from macro 'MP4_INVALID_TRACK_ID'
 #define MP4_INVALID_TRACK_ID    ((MP4TrackId)0)       /**< Constant: invalid MP4TrackId. */
                                 ^~~~~~~~~~~~~~~
src/rtphint.cpp:348:32: error: comparison between pointer and integer ('const char *' and 'int')
                    if (pSlash != '\0') {
                        ~~~~~~ ^  ~~~~
util/mp4chaps.cpp:712:14: error: case value evaluates to 4026531855, which cannot be narrowed to type 'int'
      [-Wc++11-narrowing]
        case LC_CHP_REMOVE:
             ^
util/mp4file.cpp:206:14: error: case value evaluates to 4026531848, which cannot be narrowed to type 'int'
      [-Wc++11-narrowing]
        case LC_DUMP:
             ^
util/mp4art.cpp:413:14: error: case value evaluates to 4026531852, which cannot be narrowed to type 'int'
      [-Wc++11-narrowing]
        case LC_EXTRACT:
             ^
libutil/Utility.cpp:544:18: error: case value evaluates to 4026531842, which cannot be narrowed to type 'int'
      [-Wc++11-narrowing]
            case LC_VERBOSE:
                 ^

Reported by:	antoine (via bug 224669)
a21c69ba28
Danilo G. Baio (dbaio) · 1.9.1_2
Update license of ports using MPL (without version)

All ports now should use MPL[10|11|20] license.

Approved by:	portmgr (blanket)
c27d4e377f
Thomas Zander (riggs) · 1.9.1_2
Un-break port; distfile is fetchable again

While on it:
- Add LICENSE
- Use install-strip install target
- Bump PORTREVISION

PR:		212752
Reported by:	rajil.s@gmail.com
b4b45b82c2
Mathieu Arnold (mat) · 1.9.1_1
GOOGLE_CODE has gone away.

- If a port has another upstream, remove GOOGLE_CODE
- If a port only has GOOGLE_CODE mark it BROKEN

Some ports have a local mirror configured but for security reasons, it
is not considered upstream.

Sponsored by:	Absolight
dbbfc7889a
Antoine Brodin (antoine) · 1.9.1_1
Fix build with GCC on recent head kernel by disabling PCH for GCC

With hat:	portmgr
264f422b89
Dmitry Marakasov (amdmi3) · 1.9.1_1
- Drop @dirrm* from and add empty directories to pkg-plists

Approved by:	portmgr blanket
40f13c68dc
Dmitry Marakasov (amdmi3) · 1.9.1_1
- Switch multimedia/mp4v2 to USES=libtool, drop .la files - Bump dependent ports as .so version has changed

Approved by:	portmgr blanket
6763f2ce33
Baptiste Daroussin (bapt) · 1.9.1
Convert from USE_BZIP2 to USES=tar:bzip2
30523fa0e6
Baptiste Daroussin (bapt) · 1.9.1
Support staging Convert USE_GMAKE to USES=gmake
cb45c14448
Baptiste Daroussin (bapt) · 1.9.1
Add NO_STAGE all over the place in preparation for the staging support (cat: multimedia)
855fb638fb
Alberto Villa (avilla) · 1.9.1
- Fix build with Clang.

PR:		164180
Submitted by:	Yuri Pankov <yuri.pankov@gmail.com>
5fe1b68e8e
Martin Wilke (miwi) · 1.9.1
- Remove WITH_FBSD10_FIX, is no longer needed
e1c6649edf
Martin Wilke (miwi) · 1.9.1
- Fix build on FreeBSD 10

Reported by:	pointyhat
69a39f5f38
Olli Hauer (ohauer) · 1.9.1
- remove MD5
4c503beb39
Max Brazhnikov (makc) · 1.9.1
Update mp4v2 to 1.9.1 after repocopy from multimedia/mpeg4ip-libmp4v2.

MPEG4IP is no longer maintained[1]. mp4v2 [2] forked the libmp4v2
components, and is under active developement.

[1] http://mpeg4ip.sourceforge.net/
[2] http://code.google.com/p/mp4v2/

PR:		ports/148643
Submitted by:	Christopher Key <cjk32 at cam.ac.uk>
606817dbc2
Jeremy Messenger (mezz) · 1.6.1
-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22. -Update libtool and libltdl to 2.2.6a. -Remove devel/libtool15 and devel/libltdl15. -Fix ports build with libtool22/libltdl22. -Bump ports that depend on libltdl22 due to shared library version change. -Explain what to do update in the UPDATING.

It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.

With help:	marcus and kwm
Pointyhat-exp:	a few times by pav
Tested by:	pgollucci, "Romain Tartière" <romain@blogreen.org>, and
		a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by:	marcus
Approved by:	portmgr
789d75c728
Martin Matuska (mm) · 1.6.1
- Add MAKE_JOBS_SAFE to support SMP compilation
69d69ada8f
Martin Wilke (miwi) · 1.6.1
- Remove unneeded dependency from gtk12/gtk20 [1] - Remove USE_XLIB/USE_X_PREFIX/USE_XPM in favor of USE_XORG - Remove X11BASE support in favor of LOCALBASE or PREFIX - Use USE_LDCONFIG instead of INSTALLS_SHLIB - Remove unneeded USE_GCC 3.4+

Thanks to all Helpers:
	Dmitry Marakasov, Chess Griffin, beech@, dinoex, rafan, gahr,
	ehaupt, nox, itetcu, flz, pav

PR:		116263
Tested on:	pointyhat
Approved by:	portmgr (pav)
3e4ed01146
Pietro Cerutti (gahr) · 1.6.1
- Fix configure step with new devel/nasm (-r is no more, use -v instead)

Approved by:	ahze (multimedia), miwi (mentor)
2d97714719
Michael Johnson (ahze) · 1.6.1
Update to 1.6.1
8a135bfc6b
Edwin Groothuis (edwin) · 1.6
Remove always-false/true conditions based on OSVERSION 500000
fa9509791f
Michael Johnson (ahze) · 1.6
Update to 1.6
53210a7fbd
Jeremy Messenger (mezz) · 1.5.0.1
Portlint: 	-INSTALLS_SHLIB -> USE_LDCONFIG.
0180080a9e
Kris Kennaway (kris) · 1.5.0.1
Use libtool port instead of included one to avoid objformat a.out botch
7f3fa7a0b6
Michael Johnson (ahze) · 1.5.0.1
- Update to 1.5.0.1
1e7cf0b725
Michael Johnson (ahze) · 1.5
- Transfer MAINTAINER to multimedia@

Approved by:	dhw (postmaster, for using multimedia@ as maintainer)
		gnome (gstreamer ports)
948f5473bd
Michael Johnson (ahze) · 1.5
- Update to 1.5
525ca296c8
Edwin Groothuis (edwin) · 1.4.1_1
Remove USE_REINPLACE from ports starting with M
efe7d5f7f4
Ade Lovett (ade) · 1.4.1_1
Conversion to a single libtool environment.

Approved by:	portmgr (kris)
8503536d38
Michael Johnson (ahze) · 1.4.1
- Update to 1.4.1
d0acaf9c7a
Ade Lovett (ade) · 1.4
Mass-conversion to the USE_AUTOTOOLS New World Order.  The code present in bsd.autotools.mk essentially makes this a no-op given that all the old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in exactly the same way as USE_AUTOTOOLS itself.

Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.

Preliminary documentation can be found at:
	http://people.FreeBSD.org/~ade/autotools.txt

which is in the process of being SGMLized before introduction into the
Porters Handbook.

Light blue touch-paper.  Run.
54a0b86543
Michael Johnson (ahze) · 1.4
- Update to 1.4
426b1817c3
Michael Johnson (ahze) · 1.3
- Add SHA256 - Add SIZE to a few ports
3e4b179fa7
Michael Johnson (ahze) · 1.3
- Update to 1.3
d77ee0ec3d
Michael Johnson (ahze) · 1.1_1
- Speed up configure by not using two unneeded configure scripts.
26213b110a
Michael Johnson (ahze) · 1.1_1
- Don't use gcc34 on 4.x by adding -O2 to CFLAGS - Use USE_LIBTOOL_VER instead of USE_INC_LIBTOOL_VER since we don't have   USE_GCC=3.4 anymore
dbd2d75399
Michael Johnson (ahze) · 1.1_1
- Fix header problem - Bump PORTREVISION

Approved by:	lioux
dc317cf2e7
Michael Johnson (ahze) · 1.1
Fix build on amd64

Submitted by:	Sean McNeil
Approved by:	pav (co mentor)
80a70f80e4
Michael Johnson (ahze) · 1.1
Mark broken if older version of faad has been installed with WITHOUT_MPEG4IP

Reviewed by:	lioux
16b906cc9e
Mario Sergio Fujikawa Ferreira (lioux) · 1.1
o New port mpeg4ip-libmp4v2 version 1.1: Mpeg-4 library and tools   from mpeg4ip o These tools were separated from the main mpeg4ip port so that   some ports such as audio/faad can depend on this smaller port   rather than the big mpeg4ip one

PR:		72204
Submitted by:	ahze
bc96b55f4b