- Update to 11.30 Feature safe: yes PR: ports/174249 Submitted by: Chris Petrik <c.petrik.sosa@gmail.com> (maintainer)8a1decdae8
liveMedia -- potential remote code executionentered 2018-10-28
Port details
net/liveMedia 2026.10.24,2
LIVE.COM Streaming Media
Port info
- Maintainer
- multimedia@FreeBSD.org
- Packages
- latest: 2026.10.17,2, update to 2026.10.24,2 not built yet
- Upstream
- up to date
- Last update
- to 2026.10.24,2 · 735d14f90d
- Quarterly
- 2026Q4: 2026.10.17,2 · last MFH f0aed12710
- WWW
- http://www.live555.com/liveMedia/
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install liveMediainstalls 2026.10.17,2 fromlatest; fromquarterly(2026Q4) 2026.10.17,2- Port
# cd /usr/ports/net/liveMedia && make install clean- Size
- 556 KiB download · 2.3 MiB installed
- Depends on
- nothing
- License
- LGPL3+
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 2026.10.17,2 | 2026.08.14,2 | – |
| FreeBSD 15 | 2026.10.17,2 | 2026.10.13,2 | – |
| FreeBSD 14 | 2026.10.17,2 | 2026.08.14,2 | 2026.10.17,2 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 2026.10.17,2 | 2026.10.13,2 | – |
| FreeBSD 14 | 2026.10.17,2 | 2026.08.14,2 | 2026.10.17,2 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 2026.10.17,2.Not counted (8)
CVEs that match this port only loosely: inherited from the whole project, or with versions that cannot be compared. What does this mean?
8 with versions that cannot be compared
The CVE record gives dates or the port uses snapshot versions (or the other way round), so the version of this port cannot be placed in the affected range.
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2019-15232 | 9.8 | 2019-08-20 | Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is m… |
| CVE-2013-6933 | 7.5 | 2014-01-23 | The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers… |
| CVE-2013-6934 | 7.5 | 2014-01-23 | The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial … |
| CVE-2025-65407 | 6.5 | 2025-12-01 | A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supp… |
| CVE-2025-65406 | 6.5 | 2025-12-01 | A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) vi… |
| CVE-2025-65408 | 6.5 | 2025-12-01 | A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Deni… |
| CVE-2025-65404 | 6.5 | 2025-12-01 | A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via a crafted MP3 stream. |
| CVE-2025-65405 | 6.5 | 2025-12-01 | A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via … |
Fixed (2)
Show 2 fixed
VuXML entries whose affected range the packaged version has left.
liveMedia -- DoS vulnerabilityentered 2007-12-08
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (417)
Over to new volunteer. PR: ports/173907 Submitted by: Chris Petrik <c.petrik.sosa@gmail.com> Feature safe: yes7400c7644a
Update to 2012.04.04 needed by the upcoming vlc 2.0.3 .0ddb7cc0b8
- Reassign nork@ ports to the heap - Thank you for your years of service, we hope to see you back Approved by: portmgr83fc7a83ad
Revert back to version 2011.06.16 to fix build of vlc 1.1.13, that's in the tree now. This patch should be reapplied along with vlc 2.0.1 update. I'm sorry about that. Pointyhat to: rm (myself) Approved by: maintainer (implicit)b0965e19ce
Switch MASTER_SITE_LOCAL to my subdirectory because original distfile was removed upstream (replaced with new live.2012.04.27.tar.gz) and I wasn't able to recieve any response from maintainer. This will fix fetch. Reported by: Leslie Jensen <leslie at eskk dot nu> (via ports@ ML) Approved by: maintainer (implicit)b999cc46bc
This update is a required prerequisite for vlc 2.x. - update to 2012.04.04 - actualize/sort pkg-plist (installed files from liveMedia/include) - drop LICENSE_FILE that isn't neccessary for GPLv2 - change `YES' with `yes' in couple of knobs - whitespace fixes - set XLOCALE_NOT_USED for xlocale.h-less FreeBSD versions to fix build on this systems. Notably on FreeBSD < 1000010. This value should be corrected if/when xlocale stuff will be MFCed sometime. PR: 166916 Submitted by: rm (myself) Approved by: maintainer timeout (>2weeks)34af72a963
Update to 2011.06.16.c1cb2b16ad
Update to 2011.03.14. Committed at: AsiaBSDCon 2011 @ Kagurazaka, Tokyo, Japan. Committed with: akiyama, ume, gnn, philip, daichi and nyan8b22c99362
Update to 2011.03.05.ce71b72347
Update to 2010.11.17.c8c73ef533
Add more dougb-test-resistant:-) by portmaster with UPGRADE_TOOL. Reported by: dougb Feature safe: yesbf9d4698fb
Update to 2010.06.22. Feature safe: yes2462727e01
Update to 2010.06.11.0a699b73b6
Update to 2010.05.29.d164a6ade6
Update to 2010.05.28.9ee86b2900
Update to 2010.05.27 and Add LICENSE informations.ab7d25ba23
Update to 2010.04.09. Committed at: 24th CBUG Meeting at Asakusa, Tokyo, Japan.b8fcce0d8d
Update to 2010.04.01c7e7a06a57
Update to 2010.03.16.04eb532496
Update to 2010.03.08. Committed at: AsiaBSDCon 2010 @ Kagurazaka, Tokyo, Japan.d65d6b9cfa
Update to 2010.02.10. Feature safe: yes2edd1c6330
Update to 2010.01.22.229d0cafc8
Update to 2010.01.16.ec0c37ec67
Update to 2009.11.27.0813b69899
Update to 2009.11.12.73fa413530
Update to 2009.09.28. Feature safe: yes859d904e16
Update to 2009.09.21. Feature safe: yes7764a96b04
o Update to 2009.09.04. o Make too fast with MAKE_JOBS_SAFE on SMP.687ea3e51b
Update to 2009.07.28.fb50a96433
Update to 2009.07.09.ab034105dd
Update to 2009.06.02.33d6e541a2
Update to 2009.04.20.1e8c4b7157
Update to 2009.04.07.d7218e8355
o Update to 2009.02.23. o Change handling -fpic/-fPIC option, radically. [NOTE] I don't know what CFLAGS+=-fpic(-fPIC) doesn't inherit to liveMedia's Makefile, yet. But many people reported this issue. So I don't believe to inherit CFLAGS, and I directly replace CFLAGS in liveMedia's Makefile by sed(1). Related PR: ports/129156, ports/131299 [1] Pointed out by: many people5d62d537c5
Update to 2009.01.26.526153856c
Update to 2008.12.20.1551affc84
Update to 2008.11.13.586c3ac20b
Update to 2008.11.04.12762d5448
Update to 2008.10.07.ead2894246
Update to 2008.09.02.d7ac96202a
Update to 2008.07.25.083f5ae1a0
Update to 2008.07.24.b87779b5c7
Update to 2008.07.22.69dfc37e01
Update to 2008.06.05.c84bb1fae2
Update to 2008.05.12.7ebdef27fc
Update to 2008.04.09.b6fb59b134
Update to 2008.04.03.9b707841ef
Update to 2008.02.08.7d57267f67
Update to 2008.01.19.da050fcef6