CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

multimedia/tautulli2.18.1

Monitoring, analytics, and notifications for Plex Media Server

Maintainer
christer.edwards@gmail.com
Packages
tautulli 2.18.1
Upstream
Higher version available: 2.18.2
CPE
tautulli:tautulli from the port
WWW
https://github.com/Tautulli/Tautulli
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (39)

Vladimir Druzenko (vvd) · 2.18.1
multimedia/tautulli: Update 2.16.0 => 2.18.1

Changelog:
https://github.com/Tautulli/Tautulli/blob/v2.18.1/CHANGELOG.md

PR:		295759
Approved by:	christer.edwards@gmail.com (maintainer, timeout 2 weeks)
Sponsored by:	UNIS Labs
MFH:		2026Q3
404b001f83
Vladimir Druzenko (vvd) · 2.16.0_2
multimedia/tautulli: Fix missing runtime dependency

With modern python setuptools are not just installed.

Starting tautulli.
Traceback (most recent call last):
  File "/usr/local/www/tautulli/Tautulli.py", line 39, in <module>
    import plexpy
  File "/usr/local/www/tautulli/plexpy/__init__.py", line 33, in <module>
    from apscheduler.schedulers.background import BackgroundScheduler
  File "/usr/local/www/tautulli/lib/apscheduler/__init__.py", line 1, in <module>
    from pkg_resources import get_distribution, DistributionNotFound
ModuleNotFoundError: No module named 'pkg_resources'

PR:		295759
Approved by:	christer.edwards@gmail.com (maintainer, timeout 3 months)
Sponsored by:	UNIS Labs
MFH:		2026Q3
2434bbea97
Po-Chuan Hsieh (sunpoet) · 2.16.0_1
security/py-pyopenssl: Move security/py-openssl to security/py-pyopenssl

- Update WWW
- Convert to USE_PYTHON=pep517
- Clean up Makefile
- Bump PORTREVISION for package change
- Bump PORTREVISION of dependent ports for dependency change
aafe9a2135
Hiroki Tagato (tagattie) · 2.16.0
multimedia/tautulli: update to 2.16.0

Important Note!
Several security vulnerabilities have been identified in Tautulli
versions <=2.15.3 (CVE-2025-58760, CVE-2025-58761, CVE-2025-58762,
CVE-2025-58763). Users are strongly encouraged to update to the latest
Tautulli version 2.16.x. (Thanks @d-xuan)

Changelog:
- https://github.com/Tautulli/Tautulli/releases/tag/v2.15.3
- https://github.com/Tautulli/Tautulli/releases/tag/v2.16.0

PR:		289404
Reported by:	Michiel van Baak Jansen <michiel@vanbaak.eu>
Approved by:	christer.edwards@gmail.com (maintainer timeout; >4 weeks)
MFH:		2025Q4
Security:	CVE-2025-58760
Security:	CVE-2025-58761
Security:	CVE-2025-58762
Security:	CVE-2025-58763
8a4b050e9a
Vladimir Druzenko (vvd) · 2.15.2
multimedia/tautulli: Update 2.13.4 => 2.15.2

Changelogs:
https://github.com/Tautulli/Tautulli/releases/tag/v2.14.2
https://github.com/Tautulli/Tautulli/releases/tag/v2.14.3
https://github.com/Tautulli/Tautulli/releases/tag/v2.14.4
https://github.com/Tautulli/Tautulli/releases/tag/v2.14.5
https://github.com/Tautulli/Tautulli/releases/tag/v2.14.6
https://github.com/Tautulli/Tautulli/releases/tag/v2.15.0
https://github.com/Tautulli/Tautulli/releases/tag/v2.15.1
https://github.com/Tautulli/Tautulli/releases/tag/v2.15.2

Refresh patch.

PR:		286469
Approved by:	christer.edwards@gmail.com (maitainer, timeout > 1 month)
114e7181eb
Fernando Apesteguía (fernape) · 2.13.4
multimedia/tautulli: Update to 2.13.4

ChangeLog: https://github.com/Tautulli/Tautulli/releases/tag/v2.13.4

PR:		278359
Reported by:	michiel@vanbaak.eu
Approved by:	christer.edwards@gmail.com (maintainer, timeout > 2 weeks)
e9f316fd77
Rene Ladan (rene) · 2.12.2
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Fernando Apesteguía (fernape) · 2.12.2
multimedia/tautulli: Update to 2.12.2

ChangeLog: https://github.com/Tautulli/Tautulli/releases/tag/v2.12.2

PR:		270306
Reported by:	michiel@vanbaak.eu
Approved by:	christer.edwards@gmail.com (maintainer)
f7eb609dcd
Stefan Eßer (se) · 2.10.3
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.10.3
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Fernando Apesteguía (fernape) · 2.10.3
multimedia/tautulli: Update to 2.10.3

ChangeLog: https://github.com/Tautulli/Tautulli/releases/tag/v2.10.3

 * Added JSON support for MQTT notifications.
 * Added show year notification parameter.
 * Added guids to artist, album, and track metadata export fields.
 * Added languageTag to stream media info export fields.
 * Long channel identifier overflowing activity card.
 * Use the last played item's artwork for library statistics cards.
 * Username log filter causing database to lock up.
 * Username log filter only applies to usernames longer than 3 characters.
 * Added parent_year and grandparent_year to get_metadata_details API command.
 * Added last played metadata to top_libraries and top_users in get_home_stats
   API command.
 * Allow fallback to another PMS image in pms_image_proxy API command.

PR:	265754
Reported by:	christer.edwards@gmail.com (maintainer)
be4595751b
Fernando Apesteguía (fernape) · 2.10.2
multimedia/tautulli: Update to 2.10.2

ChangeLog:https://github.com/Tautulli/Tautulli/releases/tag/v2.10.2

 * Incorrect audio stream info shown on the activity card when
   playing a secondary audio track.
 * Usernames not showing on the home statistics cards.
 * Do not save a user's friendly name if it is the same as the username.
 * Update library icons to the latest Plex style.

PR:	265315
Reported by:	christer.edwards@gmail.com (maintainer)
b79dd930cf
Tobias C. Berner (tcberner) · 2.9.7
multimedia: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron LI <aly@aaronly.me>
  *  Alexander Botero-Lowry <alexbl@FreeBSD.org>
  *  Alexander Logvinov <ports@logvinov.com>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Anders Nordby <anders@FreeBSD.org>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrew Thompson <andy@fud.org.nz>
  *  Andrew Thompson <thompsa@FreeBSD.org>
  *  Angel Carpintero <ack@telefonica.net>
  *  Anish Mistry (with help from mean)
  *  Anonymous <swell.k@gmail.com>
  *  Ashish SHUKLA <ashish@FreeBSD.org>
  *  Ashish Shukla <wahjava@gmail.com>
  *  Ben Woods <woodsb02@FreeBSD.org>
  *  Brian Somers <brian@FreeBSD.org>
  *  Bruce M Simpson <bms@FreeBSD.org>
  *  Byung-Hee HWANG <bh@izb.knu.ac.kr>
  *  Charlie Kester <corky1951@comcast.net>
  *  Chess Griffin <chess@chessgriffin.com>
  *  Chris Piazza <cpiazza@FreeBSD.org>
  *  Christopher Key <cjk32@cam.ac.uk>
  *  Chuck Hein <chein@FreeBSD.org> & Jim Overholt <overholt@isdw.net>
  *  Daniel Morante <daniel@morante.net>
  *  Diego Depaoli <trebestie@gmail.com> and Yinghong Liu <relaxbsd@gmail.com>
  *  Dierk Sacher <dierk@blaxxtarz.de>
  *  Dreamcat4 <dreamcat4@gmail.com>
  *  Earl Gay <earl@eeg3.net>
  *  Ed Schouten <ed@FreeBSD.org>
  *  Edwin Groothuis <edwin@mavetju.org>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Felix Palmen <felix@palmen-it.de>
  *  Franz Bettag <franz@bett.ag>
  *  FreeBSD GNOME Team <gnome@freebsd.org>
  *  Gea-Suan Lin <gslin@gslin.org>
  *  George Reid <greid@ukug.uk.freebsd.org>
  *  Grzegorz Blach <gblach@FreeBSD.org>
  *  Gustau Perez <gustau.perez@gmail.com>
  *  Harold Gutch <logix@foobar.franken.de>
  *  Heiner <h.eichmann@gmx.de>
  *  Heiner Eichmann <h.eichmann@gmx.de>
  *  Hendrik Scholz <hendrik@scholz.net>
  *  Herbert J. Skuhra <h.skuhra@gmail.com>
  *  Herve Quiroz <hq@FreeBSD.org>
  *  Holger Lamm
  *  J.R. Oldroyd <fbsd@opal.com>
  *  Jason Harmening <jason.harmening@gmail.com>
  *  Jille Timmermans (jille@quis.cx)
  *  Juergen Lock <nox@FreeBSD.org>
  *  Juergen Lock <nox@jelal.kn-bremen.de>
  *  KalleDK <plexmaintainer@k-moeller.dk>
  *  Koop Mast <kwm@FreeBSD.org>
  *  Koop Mast <kwm@rainbow-runner.nl>
  *  Kozlov Sergey <kozlov.sergey.404@gmail.com>
  *  Kris Moore
  *  Kuan-Chung Chiu <buganini@gmail.com>
  *  Lars Eggert <lars.eggert@gmx.net>
  *  Leinier Cruz Salfran <salfrancl@yahoo.es>
  *  MANTANI Nobutaka <nobutaka@nobutaka.com>
  *  Manuel Creach <manuel.creach@icloud.com>
  *  Marc van Woerkom <3d@FreeBSD.org>
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
  *  Mark Felder <feld@FreeBSD.org>
  *  Martin Matuska <mm@FreeBSD.org>
  *  Martin Neubauer <m.ne@gmx.net>
  *  Martin Wilke <miwi@FreeBSD.org>
  *  Michael Johnson <ahze@FreeBSD.org>
  *  Michael Johnson <ahze@ahze.net>
  *  Michael Nottebrock <michaelnottebrock@gmx.net>
  *  Michael Nottebrock <michaelnottebrock@gmx.net> et al
  *  Mina Naguib <webmaster@topfx.com>
  *  Mykola Dzham <i@levsha.me>
  *  Naram Qashat <cyberbotx@cyberbotx.com>
  *  Olivier Cochard-Labbe <olivier@FreeBSD.org>
  *  Pascal Vizeli <pvizeli@yahoo.de>
  *  Pav Lucistnik <pav@FreeBSD.org>
  *  Pawel Pekala <pawel@FreeBSD.org>
  *  Petar Zhivkov Petrov <pesho.petrov@gmail.com>
  *  Phil Oleson
  *  Phil Oleson <oz@nixil.net>
  *  Piotr Kubaj <pkubaj@anongoth.pl>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Raaf <freebsd@luna.afraid.org>
  *  Randall Hopper <aa8vb@nc.rr.com>
  *  Rodrigo OSORIO <rodrigo@FreeBSD.org>
  *  Rozhuk Ivan 2018 <rozhuk.im@gmail.com>
  *  Rozhuk Ivan <rozhuk.im@gmail.com>
  *  Rozhuk Ivan rozhuk.im@gmail.com
  *  Rusmir Dusko <nemysis@FreeBSD.org>
  *  Stacey Son <mythdev@son.org>, Ari Maniatis <ari@ish.com.au>
  *  Steve Wills <steve@mouf.net>
  *  Steve Wills <swills@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Sylvio Cesar <sylvio@FreeBSD.org>
  *  Thierry Thomas <thierry@pompo.net>
  *  Thomas E. Zander
  *  Thomas E. Zander with help from Vladimir Kushnir
  *  Vladimir Kondratiev <wulf@mail.mipt.ru>
  *  William Grzybowski <wg@FreeBSD.org>
  *  William Grzybowski <william88@gmail.com>
  *  Yi-Hsuan Hsin <mhsin@mhsin.org>
  *  Zastupov Stepan [RedChrom] <redchrom@mail.ru>
  *  adamw
  *  alex
  *  arved
  *  erich@FreeBSD.org
  *  freebsd-ports@evilcode.net
  *  giffunip@asme.org
  *  ijliao
  *  kamikaze@bsdforen.de
  *  michael johnson <ahze@ahze.net>
  *  mikael.urankar@gmail.com
  *  mm
  *  nox@FreeBSD.org
  *  osa
  *  pb@FreeBSD.org
  *  piero
  *  se@FreeBSD.org
  *  sumikawa

With hat:	portmgr
63f36d3262
Neel Chauhan (nc) · 2.9.7
multimedia/tautulli: Update 2.9.7

PR:	263482
156e67688e
Guangyuan Yang (ygy) · 2.8.1
multimedia/tautulli: Update to 2.8.1

Changelog:	https://github.com/Tautulli/Tautulli/releases/tag/v2.8.1

PR:		260948
72862a3740
Hiroki Tagato (tagattie) · 2.8.0
multimedia/tautulli: update to 2.8.0

Changelog: https://github.com/Tautulli/Tautulli/releases/tag/v2.8.0

PR:		260465
Reported by:	Christer Edwards <christer.edwards@gmail.com> (maintainer)
29b441349f
Dries Michiels (driesm) · 2.7.7
multimedia/tautulli: Update to 2.7.7

While here switch to DISTVERSION, pet portclippy and portfmt.

Changes:		https://github.com/Tautulli/Tautulli/releases/tag/v2.7.7
PR:			259479
Approved by:		portmgr (maintainer timeout), philip (mentor)
Differential Revision:	https://reviews.freebsd.org/D33336
849bacb55c
Guangyuan Yang (ygy) · 2.7.5
multimedia/tautulli: Update to 2.7.5

Changelog:	https://github.com/Tautulli/Tautulli/releases/tag/v2.7.5

PR:		257636
Approved by:	Christer Edwards <christer.edwards@gmail.com> (maintainer)
ea48959a8e
Bernhard Froehlich (decke) · 2.7.3
multimedia/tautulli: Add CPE information

Approved by:	portmgr (blanket)
49698d74e0
Guangyuan Yang (ygy) · 2.7.3
multimedia/tautulli: Update to 2.7.3

PR:		256480
Approved by:	maintainer, lwhsu (mentor, implicit)
04548d47a5
Mathieu Arnold (mat) · 2.5.5
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 2.5.5
Remove # $FreeBSD$ from Makefiles.
305f148f48
Dmitry Marakasov (amdmi3) · 2.5.5
- Fix LICENSE - Simplify installation and silence unrelevant commands - Install CHANGELOG into WWWDIR unconditionally, for it's referenced from the application

PR:		252920
Submitted by:	amdmi3
Approved by:	christer.edwards@gmail.com (maintainer)
0d6e5f1fb9
Li-Wen Hsu (lwhsu) · 2.5.5
multimedia/tautulli: Update to 2.5.5

- Updated to use python3
- There is now a build step that runs 'python -m compileall' on all python code
- Tautulli supports libraries with the new and improved plex movie scanner

PR:		249161
Submitted by:	Michiel van Baak <michiel@vanbaak.eu>
Approved by:	Christer Edwards <christer.edwards@gmail.com>
0a829ac2a5
Li-Wen Hsu (lwhsu) · 2.2.4
Update to 2.2.4

PR:		243889
Submitted by:	Christer Edwards <christer.edwards@gmail.com> (maintainer)
3e4a5f0614
Antoine Brodin (antoine) · 2.1.41
Deprecate some ports using deprecated version of python

With hat:	portmgr
5ae8688c07
Jochen Neumeister (joneum) · 2.1.41
Update to 2.1.41

PR:		243020
Submitted by:	Christer Edwards <christer.edwards@gmail.com> (maintainer)
Sponsored by:	Netzkommune GmbH
958d7833a6
Bernhard Froehlich (decke) · 2.1.37
multimedia/tautulli: Update to 2.1.37

PR:		241514
Submitted by:	Christer Edwards <christer.edwards@gmail.com> (maintainer)
be72536ce0
Steve Wills (swills) · 2.1.33
multimedia/tautulli: Update to 2.1.33

PR:		239500
Submitted by:	Christer Edwards <christer.edwards@gmail.com> (maintainer)
a75071ecef
Mathieu Arnold (mat) · 2.1.32
onvert to UCL & cleanup pkg-message (categories l-m)
558224994b
Steve Wills (swills) · 2.1.32
multimedia/tautulli: update to 2.1.32

PR:		238957
Submitted by:	Christer Edwards <christer.edwards@gmail.com> (maintainer)
63c72d473a
Steve Wills (swills) · 2.1.29
multimedia/tautulli: update to 2.1.29

PR:		237967
Submitted by:	Christer Edwards <christer.edwards@gmail.com> (maintainer)
04ff2dd0c5
Steve Wills (swills) · 2.1.28
multimedia/tautulli: Update to 2.1.28

PR:		236552
Submitted by:	Christer Edwards <christer.edwards@gmail.com> (maintainer)
643f9aa834
Jochen Neumeister (joneum) · 2.1.26
Update to 2.1.26

Give Maintainership to Submitter

Changelog:
 - Monitoring: Fix: Resume event not being triggered after buffering.
 - Notifications: New: Added user email as a notification parameter.
 - Graphs: Fix: History model showing no results for stream info graph.
 - API: Fix: API returning error when missing a cmd.

PR:		233984
Reported by:	Christer Edwards <christer.edwards@gmail.com>
Sponsored by:	Netzkommune GmbH
80e0225661
Steve Wills (swills) · 2.1.22
multimedia/tautulli: fix PORTDOCS and install

Reported by:	tobik
Pointyhat to:	swills
615692eb3e
Steve Wills (swills) · 2.1.22
multimedia/tautulli: Update to 2.1.22

PR:		232364
Submitted by:	Nathan <ndowens@yahoo.com>
69039cd2cf
Mark Felder (feld) · 2.0.28
Reset maintainer for misc ports I do not interact with anymore
393a1c00f3
Mark Felder (feld) · 2.0.28
multimedia/tautulli: Update to 2.0.28

- Now runs as dedicated tautulli user

Changelog:	https://github.com/Tautulli/Tautulli/releases/tag/v2.0.28
330c6f9e84
Mark Felder (feld) · 2.0.22
multimedia/plexpy: Move to new project name, Tautulli

Due to Copyright infringement, the upstream project was renamed.

The software has also been updated from version 1.x to 2.x. Notable
changes and improvements:

- Automated pkg-plist
- No hardcoded user in the package. You can now more easily run the
software as another user
- Files have been moved to WWWDIR instead of PREFIX/plexpy
- Software no longer needs write access to the web root: all data is now
in /var/db/tautulli  (backups, cache, logs, database)

Upgrade instructions:

- Install Tautulli
- Create /var/db/tautulli, owned by the user you will run the daemon as
(default: nobody)
- Copy your config.ini and plexpy.db to /var/db/tautulli
- Enable the service and start the software

Tautulli should automatically find your database file, rename it to
tautulli.db, and perform the required updates.

Reported by:	many
2738bc525e