Update to 2008.01.04.c1ee58926e
liveMedia -- potential remote code executionentered 2018-10-28
Port details
net/liveMedia 2026.10.24,2
LIVE.COM Streaming Media
Port info
- Maintainer
- multimedia@FreeBSD.org
- Packages
- latest: 2026.10.17,2, update to 2026.10.24,2 not built yet
- Upstream
- up to date
- Last update
- to 2026.10.24,2 · 735d14f90d
- Quarterly
- 2026Q4: 2026.10.17,2 · last MFH f0aed12710
- WWW
- http://www.live555.com/liveMedia/
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install liveMediainstalls 2026.10.17,2 fromlatest; fromquarterly(2026Q4) 2026.10.17,2- Port
# cd /usr/ports/net/liveMedia && make install clean- Size
- 556 KiB download · 2.3 MiB installed
- Depends on
- nothing
- License
- LGPL3+
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 2026.10.17,2 | 2026.08.14,2 | – |
| FreeBSD 15 | 2026.10.17,2 | 2026.10.13,2 | – |
| FreeBSD 14 | 2026.10.17,2 | 2026.08.14,2 | 2026.10.17,2 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 2026.10.17,2 | 2026.10.13,2 | – |
| FreeBSD 14 | 2026.10.17,2 | 2026.08.14,2 | 2026.10.17,2 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 2026.10.17,2.Not counted (8)
CVEs that match this port only loosely: inherited from the whole project, or with versions that cannot be compared. What does this mean?
8 with versions that cannot be compared
The CVE record gives dates or the port uses snapshot versions (or the other way round), so the version of this port cannot be placed in the affected range.
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2019-15232 | 9.8 | 2019-08-20 | Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is m… |
| CVE-2013-6933 | 7.5 | 2014-01-23 | The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers… |
| CVE-2013-6934 | 7.5 | 2014-01-23 | The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial … |
| CVE-2025-65407 | 6.5 | 2025-12-01 | A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supp… |
| CVE-2025-65406 | 6.5 | 2025-12-01 | A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) vi… |
| CVE-2025-65408 | 6.5 | 2025-12-01 | A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Deni… |
| CVE-2025-65404 | 6.5 | 2025-12-01 | A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via a crafted MP3 stream. |
| CVE-2025-65405 | 6.5 | 2025-12-01 | A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via … |
Fixed (2)
Show 2 fixed
VuXML entries whose affected range the packaged version has left.
liveMedia -- DoS vulnerabilityentered 2007-12-08
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (417)
Update to 2007.12.27.3dfa48324a
Update to 2007.12.07 with fix security issue. Security: VuXML ID: 821afaa2-9e9a-11dc-a7e3-0016360406fa CVE-2007-6036 http://aluigi.altervista.org/adv/live555x-adv.txt Approved by: portmgr (erwin)35a9136398
Mark broken on sparc64: fails to compile. Approved by: portmgr (self)c43b22c929
Update to 2007.07.25.a3117c84a9
Update to 2007.07.10.1b542b7328
Update to 2007.07.01.dd7f7f1bbd
o Add -fpic/-fPIC for shared object(.so) using liveMedia. o Bump PORTREVISION, accordingly. Requested by: ahze Discussed with: ahze and krise5c7a81c81
Update to 2007.05.24.a717cbeb82
Update to 2007.04.20. Committed at: 20th CBUG meeting 2007 Spring @ TimeIntermedia, Ichigaya Tokyo Japan2032325f0f
Update to 2007.02.20.14825a45ec
Update to 2007.01.17.2997453f70
Update to 2007.01.11.61d2dde106
Update to 2007.01.09.b17127f51b
Oops, I forgot updating distinfo. Pointy Hat to: myself148fc12a89
Update to 2006.12.31.9e2d3d895c
Update to 2006.12.08.0671601ebe
Update to 2006.10.27.2a2d0dc4ba
Update to 2006.10.07.c69b03d267
Update to 2006.09.20.6c5e265bc3
Update to 2006.09.18.2948c6f947
Update to 2006.09.12.27f6ac9f29
Update to 2006.09.09.f30429942d
Update to 2006.09.08.99a3c061ab
Update to 2006.09.07.9102bc235f
Update to 2006.08.26.0007a7ee37
Update to 2006.08.24.ffe5f9624c
Update to 2006.08.07.e9636257fd
Update to 2006.07.04.6f7468d5ff
Update to 2006.06.28.c8bd5103d6
2006.06.27.ee278868ea
Update to 2006.06.23.808d84ed5b
Update to 2006.05.17.c45636ced6
Remove USE_REINPLACE from all categories starting with N0f12b488a5
Update to 2006.05.11.7b8e5720ee
Use pre-su-install instead of pre-install to create directories when running as normal user. PR: ports/95867 Submitted by: Michael Neumann <mneuma2s@smail.inf.fh-brs.de>a21ae56985
Update to 2006.03.17.4b9f32de1d
Update to 2006.03.15.69b5248cc2
Update to 2006.02.15.b3fed7f459
Update to 2006.01.27.8c82b52413
Update to 2006.01.24.96dc7c8aae
Update to 2006.01.05.0d620d92ab
Update to 2006.01.04.1e41b32abf
Update to 2005.12.30.177fbdca27
Update to 2005.12.29.10876a79a7
Update to 2005.12.23.95adcbf580
Update to 2005.12.15.7b17461da7
Update to 2005.12.09. Committed at: Kanto *BSD Users Group Party Committed with: gnne8e8863e5b
Update to 2005.12.05.a13bf8f541
Update to 2005.11.30a.b3802b3108