CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

multimedia/plexmediaserver1.43.3.10896

Plex Media Server component

Maintainer
b.shertenlieb@yahoo.com
Packages
plexmediaserver 1.43.3.10896
Upstream
Higher version available: 1.43.5.11079
CPE
plex:media_server from the port
WWW
https://plex.tv
Links
cgit · VuXML

Unaddressed (1) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2020-57428.82020-06-15Improper Access Control in Plex Media Server prior to June 15, 2020 allows any origin to execute cross-origin application requests.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (7)

Show 7 fixed
VuXML entries whose affected range this version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVE-2026-966568.62026-09-23Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbat…
CVE-2026-966517.12026-09-23Plex Media Server before 1.43.3.10861 builds a file path from the url parameter without checking it for ../ sequences, allowing path traversal via '/system/agents/media/…
CVE-2026-966546.92026-09-23Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply …
CVE-2026-966525.32026-09-23Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a full URL in the 'protocol' parameter and…
CVE-2026-966555.32026-09-23Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parame…

Commits (248)

Mark Felder (feld) · 0.9.12.13.1464_1
multimedia/plexmediaserver{-plexpass}: Update LD_LIBRARY_PATH in rc script

Occasionally a user would be unable to run plex due to a crash on startup.
The problem was identified as the libstdc++.so.6 from GCC being picked
up first instead of the one from compat9x.

PR:		204034
57dc9f2ace
Mark Felder (feld) · 0.9.12.13.1464
multimedia/plexmediaserver: update to 0.9.12.13

Changelog:	https://forums.plex.tv/discussion/comment/1026614/#Comment_1026614

PR:		203784
eaadaf4579
Mathieu Arnold (mat) · 0.9.12.11.1406
Drop 8 support.

With hat:	portmgr
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D3694
7f0f664d7e
Mark Felder (feld) · 0.9.12.11.1406
Add CPE information

PR:		203263
c159b88776
Mark Felder (feld) · 0.9.12.11.1406
multimedia/plexmedaserver: Update to 0.9.12.11.1406

Changes:	https://forums.plex.tv/discussion/comment/1002923/#Comment_1002923
1154a7dc4e
Mark Felder (feld) · 0.9.12.8.1362
multimedia/plexmediaserver: update to 0.9.12.8.1362

The plugins are now versioned, so use %%PLEX_BUILD%% to cut down on
further pkg-plist churn.

Relnotes:	https://forums.plex.tv/discussion/comment/985893/#Comment_985893
0569789c9f
Mark Felder (feld) · 0.9.12.4.1192
Update to 0.9.12.4.1192

https://forums.plex.tv/index.php/topic/62832-plex-media-server/?p=963754
8cd9dff592
Mark Felder (feld) · 0.9.12.3.1173
Update to 0.9.12.3.1173
37f7237054
Mark Felder (feld) · 0.9.12.0.1071
Update to 0.9.12.0.1071
99689fcd24
Mark Felder (feld) · 0.9.11.16.958
Update to 0.9.11.16.958
96f422150b
Mark Felder (feld) · 0.9.11.7.803_1
Teach the rc script to clean up leftover children
73ea9714a6
Mark Felder (feld) · 0.9.11.7.803
Update to 0.9.11.7.803
0aa0bd18ba
Mark Felder (feld) · 0.9.11.4.739_1
Update to 0.9.11.6 Add another mirror
e8184547fe
Mark Felder (feld) · 0.9.11.4.739_1
Simplify ONLY_FOR_ARCHES wording

Full sententes look ugly when the message is produced

Submitted by:	danfe
b134ca1eb8
Mark Felder (feld) · 0.9.11.4.739_1
Restore ONLY_FOR_ARCHS Fix a few rc script issues that mainly affected the plexpass slave port
dbdb1c3d72
Mark Felder (feld) · 0.9.11.4.739
Last update broke rc script for plexpass users.

pointyhat -> me
39909dd3f7
Mark Felder (feld) · 0.9.11.4.739
Make plexmediaserver-plexpass a slave port to reduce duplicated efforts.

While here fix a plist issue.
6d7f861aab
Mark Felder (feld) · 0.9.11.4.739
Port cleanup and preparation for making -plexpass a slave port to prevent duplicate work

PR:		194909
Submitted by:	Josh Ruehlig
d406136e2c
Mark Felder (feld) · 0.9.11.4.739
Update to 0.9.11.4.739
6fbbf46513
Mark Felder (feld) · 0.9.11.1.678
Update to 0.9.11.1.678

Notably this release disables SSLv3 between Plex and the Plex servers
8429f01f58
Mark Felder (feld) · 0.9.9.13.525_1
Adjust documentation for the configurable tmp directory used for transcoding so nobody shoots themselves in the foot and causes /tmp to have its permissions changed...

PR:		194120
a48ea4b639
Baptiste Daroussin (bapt) · 0.9.9.13.525_1
Prevent some ports to provide bundled libraries Bump port revision

PR:		193592
c9caf106d5
Baptiste Daroussin (bapt) · 0.9.9.13.525
Prevent to export bundle libraries
9287f06965
Mark Felder (feld) · 0.9.9.13.525
Update to 0.9.9.13.525
15ebc9eac3
Mark Felder (feld) · 0.9.9.12.504
Update to 0.9.9.12
4210c089e3
Mark Felder (feld) · 0.9.9.10.458
Update to 0.9.9.10
f0c25c1bfb
Mark Felder (feld) · 0.9.9.7.429
Do not ship start.sh; we provide an rc script
ad9998edde
Mark Felder (feld) · 0.9.9.7.429
0.9.9.7.429 has been released to the general public
1753327411
Mark Felder (feld) · 0.9.9.5.411_1
Do not override $sig_stop to be -QUIT

The init scripts that come with Linux versions of Plex were used as
inspiration for the FreeBSD rc script. They use SIGQUIT when shutting
down Plex, but on FreeBSD this causes a core dump. SIGTERM seems to work
just fine.
347f25eada
Mark Felder (feld) · 0.9.9.5.411
Update to 0.9.9.5.411
809cb7fc58
Mark Felder (feld) · 0.9.9.4.409_2
Fix setting a custom tmp dir for Plex. It was broken and the env was wrong.

Plex obeys TMPDIR env now.
8c92b0bd07
Mark Felder (feld) · 0.9.9.4.409_1
Add capability to override default maximum number of plugin processes in rc.conf. This mirrors the capability found on Linux and is only required in rare circumstances when the user has installed 3rd party Plex agents.
e055b80bc0
Mark Felder (feld) · 0.9.9.4.409
Update to 0.9.9.4.409 Fixes a crash associated with new nightly scheduled tasks
d7ba2fa06e
Mark Felder (feld) · 0.9.9.3.402
Plex has a new website While here, fix a space -> tab issue to appease portlint
c5c9cff0d1
Mark Felder (feld) · 0.9.9.3.402
Update to 0.9.9.3.402
c3f7858f53
Mark Felder (feld) · 0.9.9.2.374
Update to 0.9.9.2.374 FreeBSD 10+ is now supported thanks to the upgrade of the bundled Python

We also now strip the binaries that Plex ships. It doesn't cause any
harm and the build logs are now significantly easier to read.

Approved by:	swills (mentor)
663c8018e0
John Marino (marino) · 0.9.8.18.290
multimedia/plexmedia: Use OPSYS with OSVERSION

OSVERSION is FreeBSD-specific.  This port has broken multiple times on
dports recently because of this, so nipping it in bud.
9fa781148f
Mark Felder (feld) · 0.9.8.18.290
Mark BROKEN on 10.0+. Bundled python missing patch

Approved by:	swills (mentor, implicit)
MFH:	2014Q1
0101c45d3d
Mark Felder (feld) · 0.9.8.18.290
Update to 0.9.8.18.290

Approved by:		swills (mentor)
9dcaf5d01a
Mark Felder (feld) · 0.9.8.14.263
Update Plex to 0.9.8.14.263 Now supports the Google Chromecast!

Approved by:	crees (mentor)
aa15507880
Mark Felder (feld) · 0.9.8.10.215
Update to 0.9.8.10.215

Approved by:	crees (mentor)
3aa0f12517
Mark Felder (feld) · 0.9.8.9.211
Update to 0.9.8.9.211

Approved by:	swills (mentor)
69d010d437
Mark Felder (feld) · 0.9.8.7.186_1
rc script was generated incorrectly due to STAGE changes

Approved by:	crees (mentor)
dd6c6ac5d9
Mark Felder (feld) · 0.9.8.7.186
- Update to 0.9.8.7.186 - Support STAGE - Maintainer change approved through personal email

Approved by:	swills (mentor)
141df4bc2c
Baptiste Daroussin (bapt) · 0.9.8.6.175
Add NO_STAGE all over the place in preparation for the staging support (cat: multimedia)
855fb638fb
Mark Felder (feld) · 0.9.8.6.175
- Update to 0.9.8.6.175

Approved by:	swills (mentor)
871be4db49
Mark Felder (feld) · 0.9.8.5.165
- Update to 0.9.8.5.165

Approved by:	crees (mentor)
545a6965f8
Mark Felder (feld) · 0.9.8.4.125
Add plexmediaserver 0.9.8.4.125, the Plex Media Server component.

PR:		ports/180249
Submitted by:	KalleDK <plexmaintainer@k-moeller.dk>
Approved by:	swills (mentor)
ebcda92ad8