CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

multimedia/streamlink8.6.2

Command-line utility that pipes video streams

Maintainer
takefu@airport.fm
Packages
py312-streamlink 8.6.2
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
https://streamlink.github.io/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (32)

Vladimir Druzenko (vvd) · 8.6.2
multimedia/streamlink: Update 8.6.1 => 8.6.2

Changelog:
https://github.com/streamlink/streamlink/releases/tag/8.6.2

PR:		299217
Security:	GHSA-j7pf-m7gx-jr33
Sponsored by:	UNIS Labs (vvd, commit patch)
MFH:		2026Q4
21bfabaac9
Jochen Neumeister (joneum) · 8.6.1
multimedia/streamlink: Drop python version constraint

Sponsored by:	Netzkommune GmbH
e9ebc283e8
Jochen Neumeister (joneum) · 8.6.1
multimedia/streamlink: Update to 8.6.1

- SECURITY: fixed arbitrary local file read via HTTP(S) redirection to
  file:// URL (GHSA-vf2x-4v53-pm7v).
- SECURITY: fixed insecure cross-scheme redirection (HTTPS -> HTTP)
  (GHSA-vf2x-4v53-pm7v).
- Added support for HLS packed audio streams.
- Fixed HTTP server of --player-http/--player-continuous-http binding to
  all interfaces.
- Fixed compatibility with urllib3 2.8.0.

Changes:	https://streamlink.github.io/changelog.html#streamlink-8-6-1-2026-09-16
PR:		277552
Sponsored by:	Netzkommune GmbH
4bf3302c40
Daniel Engberg (diizzy) · 6.5.1_4
multimedia/streamlink: Allow greater versions of (py-)lxml than 6

This broke at runtime due to a6233e5a2fdfc3f67a89a90ac005521f25395355
and appears to work fine on my end

Approved by:	blanket, just fix it
d5f97db624
Hiroki Tagato (tagattie) · 6.5.1_3
*/*: switch dependency from devel/py-lxml5 to devel/py-lxml

Currently, there are two versions of python XML processing library
which conflict each other in the ports tree, namely:
- devel/py-lxml5 (now at version 5.4.0)
- devel/py-lxml  (now at version 6.0.1)

To avoid the situation that some ports depend on py-lxml5 and some
others do on py-lxml (by switching dependencies individually), this
commit switches the dependencies from py-lxml5 to py-lxml at once.

Additional note: There are still two ports (textproc/py-rdflib and
www/py-draftjs-exporter) depending on py-lxml5 since they limit upper
version to less than 6.

PR:		289491
Approved by:	Michiel van Baak Jansen <michiel@vanbaak.eu>, arrowd,
		crees, madpilot, delphij, marcus, nivit, kai,
		skreuzer, fluffy, bofh, thierry, stephen, sunpoet,
		0mp, Eric Camachat <eric@camachat.org>
a6233e5a2f
Hiroki Tagato (tagattie) · 6.5.1_2
*/*: update dependency on devel/py-lxml to devel/py-lxml5 (2nd attempt)

This is a follow up to the commit 230fb2661c78, which updated some
ports' dependencies on devel/py-lxml to devel/py-lxml5. It was an
attempt to follow the dependency change of
www/py-beautifulsoup. However, the switch was incomplete and broke
some other ports.

It has turned out that the ports depending on devel/py-lxml (at
version 4.9.3) does not limit their dependencies' upper bound to 4.x
except for one (devel/py-pymaven-patch). So updating them to
devel/py-lxml5 (at version 5.4.0) should cause no harm.

This commit switch dependencies of all the ports (except
devel/py-pymaven-patch) to devel/py-lxml5 avoid potential conflicts.

Co-authored-by: Daniel Engberg <diizzy@FreeBSD.org>

PR:		287144, 288047
Reported by:	makc (via ports-committers),
		vvd (PR 288047),
		diizzy (PR 287144)
Approved by:	portmgr (chase dependency change, unbreak build)
Fixes:		230fb2661c78 (*/*: update dependency on devel/py-lxml to devel/py-lxml5)
0b0f7cda9d
Charlie Li (vishwin) · 6.5.1_1
python: bump all USE_PYTHON=distutils consumers after RUN_DEPENDS removal

Any missed ports, feel free to bump.

Any ports that need setuptools at runtime can have the devel/py-setuptools
manually added back to RUN_DEPENDS, but understand that this practice
is deprecated; see CHANGES for details.
06a08e69f3
Po-Chuan Hsieh (sunpoet) · 6.5.1
multimedia/streamlink: Convert to USE_PYTHON=pytest

Approved by:	portmgr (blanket)
With hat:	python
cd8223b8ed
Vladimir Druzenko (vvd) · 6.5.1
multimedia/streamlink: update to 6.5.1

Changelog:
https://github.com/streamlink/streamlink/releases/tag/6.5.1

PR:		276397
Approved by:	arrowd (mentor, implicit)
ffd93c4ef3
Vladimir Druzenko (vvd) · 6.5.0
multimedia/streamlink: update to 6.5.0

Changelogs:
https://github.com/streamlink/streamlink/releases/tag/6.5.0
https://github.com/streamlink/streamlink/releases/tag/6.4.2
https://github.com/streamlink/streamlink/releases/tag/6.4.1
https://github.com/streamlink/streamlink/releases/tag/6.4.0
https://github.com/streamlink/streamlink/releases/tag/6.3.1
https://github.com/streamlink/streamlink/releases/tag/6.3.0

PR:		276214
Approved by:	arrowd (mentor, implicit)
311bf0fcc6
Robert Clausecker (fuz) · 6.2.1
multimedia/streamlink: update to 6.2.1

Changelog: https://github.com/streamlink/streamlink/releases/tag/6.2.1

PR:		274387
c4e83db1dd
Fernando Apesteguía (fernape) · 6.2.0
multimedia/streamlink: Update to 6.2.0

While here, fix dependencies according to original author notes.

PR:		273951
Reported by:	mail@bastimeyer.de
d31fcc17f2
Po-Chuan Hsieh (sunpoet) · 6.1.0
multimedia/streamlink: Clean up USES=python

Approved by:	portmgr (blanket)
With hat:	python
5f4256e50c
Fernando Apesteguía (fernape) · 6.1.0
multimedia/streamlink: Update to 6.1.0

ChangeLog:
https://streamlink.github.io/changelog.html#streamlink-6-1-0-2023-08-16

* Added: --hls-segment-queue-threshold for being able to configure when to stop
  HLS streams early on missing segments (#5478)
* Fixed: config file parsing issues and made parsing argument values more strict
* Fixed: race condition when reading and validating the FFmpeg version string
* Fixed plugins: atresplayer
* Docs: added code examples for the removal of Streamlink.{g,s}et_plugin_option
* Build: fixed entry-points config issues with setuptools 68.1.0

PR:		273336
Reported by:	takefu@airport.fm
3aaaca643f
Charlie Li (vishwin) · 5.5.1
devel/py-setuptools: convert individual consumers to ${PY_SETUPTOOLS}

Currently a no-op, but in the future outputs the correct setuptools
port depending on whether USES_PYTHON=distutils is specified.

With hat: python
PR: 270510, 270358
9a80a6ee5e
Rene Ladan (rene) · 5.5.1
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Matthias Andree (mandree) · 5.5.1
multimedia/streamlink: maintainer update to 5.5.1

PR:		262366
b5f09fd135
Christian Weisgerber (naddy) · 2.1.2_1
audio/opus: bump consumers after update to 1.4
feb1fa34f5
Dmitry Marakasov (amdmi3) · 2.1.2
*/*: rename CHEESESHOP to PYPI in MASTER_SITES

PR:			267994
Differential revision:	D37518
Approved by:		bapt
77d68471ad
Stefan Eßer (se) · 2.1.2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.1.2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Neel Chauhan (nc) · 2.1.2
multimedia/streamlink: Revert version

Not all updates to dependencies were committed.

This reverts commit a6976a7dda52e65445ed95bd1c3cacefb9566545.
d7277abb83
Neel Chauhan (nc) · 3.2.0
multimedia/streamlink: Update to 3.2.0

PR:		262366
Approved by:	maintainer
a6976a7dda
Li-Wen Hsu (lwhsu) · 2.1.2
multimedia/streamlink: Update to 2.1.2

PR:		256117
7d61f88f88
Li-Wen Hsu (lwhsu) · 2.1.1
multimedia/streamlink: Update to 2.1.1

PR:		254562
Submitted by:	takefu@airport.fm (maintainer)
1a32651473
Mathieu Arnold (mat) · 2.0.0
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 2.0.0
Remove # $FreeBSD$ from Makefiles.
305f148f48
Guangyuan Yang (ygy) · 2.0.0
multimedia/streamlink: Update to 2.0.0

- Fix Python 3.6+
- Changelog: https://github.com/streamlink/streamlink/releases/tag/2.0.0

PR:		252386
Submitted by:	Naram Qashat <cyberbotx@cyberbotx.com>
Approved by:	lwhsu, takefu@airport.fm (maintainer)
f3d61b8764
Mikael Urankar (mikael) · 1.7.0
multimedia/streamlink: Update to 1.7.0

Changelogs:
  https://github.com/streamlink/streamlink/releases/tag/1.6.0
  https://github.com/streamlink/streamlink/releases/tag/1.7.0

PR:		250788
Submitted by:	Naram Qashat
Approved by:	takefu@airport.fm (maintainer)
2fef51325e
Steve Wills (swills) · 1.5.0
multimedia/streamlink: Update to 1.5.0

PR:		247968
Submitted by:	takefu@airport.fm (maintainer)
f9883c3937
Matthias Andree (mandree) · 1.4.1_1
multimedia/streamlink: add missing requisites

https://streamlink.github.io/install.html#dependencies

- py-pysocks is a mandatory dependency (the import isn't guarded
  by try...except)
- ffmpeg and rtmpdump are formally optional,
  but required for high-profile streaming sites, make them
  options enabled by default
- add PORTREVISION=1 to pull pysocks in.
100532e19f
Matthias Andree (mandree) · 1.4.1
New port multimedia/streamlink 1.4.1. ---------------------------------------------------------------------------- Streamlink is a command-line utility that pipes video streams from various services into a video player, such as VLC.

The main purpose of Streamlink is to allow the user to avoid buggy and CPU
heavy flash plugins but still be able to enjoy various streamed content.

There is also an API available for developers who want access to the video
stream data.

This project was forked from Livestreamer, which is no longer maintained.

WWW: https://streamlink.github.io/
----------------------------------------------------------------------------

Over the original submission, add these changes:
- limit to Python 3.5+ because 241566 was lacking the four requisites
  (one not even in the ports tree before) needed additionally on 2.7,
  and upstream deprecated Python 2.7 support
- add support for make test (TEST_DEPENDS=, do-test:)
- add a PYCOUNTRY port option with a "magic" default that will be enabled
  while textproc/py-iso3166 (new -> Bugzilla #241565) is missing and use
  py-country instead of py-iso-639 and py-iso3166.
  So this port no longer depends on PR 241565.

PR:		241566
Submitted by:	takefu@airport.fm (new maintainer)
e466ca2a0c