Update to 2004.06.14.44d1eb6260
liveMedia -- potential remote code executionentered 2018-10-28
Port details
net/liveMedia 2026.10.24,2
LIVE.COM Streaming Media
Port info
- Maintainer
- multimedia@FreeBSD.org
- Packages
- latest: 2026.10.17,2, update to 2026.10.24,2 not built yet
- Upstream
- up to date
- Last update
- to 2026.10.24,2 · 735d14f90d
- Quarterly
- 2026Q4: 2026.10.17,2 · last MFH f0aed12710
- WWW
- http://www.live555.com/liveMedia/
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install liveMediainstalls 2026.10.17,2 fromlatest; fromquarterly(2026Q4) 2026.10.17,2- Port
# cd /usr/ports/net/liveMedia && make install clean- Size
- 556 KiB download · 2.3 MiB installed
- Depends on
- nothing
- License
- LGPL3+
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 2026.10.17,2 | 2026.08.14,2 | – |
| FreeBSD 15 | 2026.10.17,2 | 2026.10.13,2 | – |
| FreeBSD 14 | 2026.10.17,2 | 2026.08.14,2 | 2026.10.17,2 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 2026.10.17,2 | 2026.10.13,2 | – |
| FreeBSD 14 | 2026.10.17,2 | 2026.08.14,2 | 2026.10.17,2 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 2026.10.17,2.Not counted (8)
CVEs that match this port only loosely: inherited from the whole project, or with versions that cannot be compared. What does this mean?
8 with versions that cannot be compared
The CVE record gives dates or the port uses snapshot versions (or the other way round), so the version of this port cannot be placed in the affected range.
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2019-15232 | 9.8 | 2019-08-20 | Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is m… |
| CVE-2013-6933 | 7.5 | 2014-01-23 | The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers… |
| CVE-2013-6934 | 7.5 | 2014-01-23 | The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial … |
| CVE-2025-65407 | 6.5 | 2025-12-01 | A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supp… |
| CVE-2025-65406 | 6.5 | 2025-12-01 | A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) vi… |
| CVE-2025-65408 | 6.5 | 2025-12-01 | A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Deni… |
| CVE-2025-65404 | 6.5 | 2025-12-01 | A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via a crafted MP3 stream. |
| CVE-2025-65405 | 6.5 | 2025-12-01 | A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via … |
Fixed (2)
Show 2 fixed
VuXML entries whose affected range the packaged version has left.
liveMedia -- DoS vulnerabilityentered 2007-12-08
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (417)
Update to 2004.06.11.159e3d05ea
Update to 2004.06.09.64ac5bf132
Update to 2004.06.07.725f640830
Update to 2004.06.03.b780a44b0e
Update to 2004.06.02.9424403dad
Update to 2004.05.29a.00aa08d82d
Update to 2004.05.28. Committed at: 10th EBUG Meeting in Tokamachi City, Niigata, Japana5fdfceaa4
Update to 2004.05.24.e58de09226
Update to 2004.05.19.e6a1ec0b97
Update to 2004.05.17.a71aea5c08
Update to 2004.05.12.ceaf437e34
Update to 2004.05.09. Submitted by: TAKANO Yuji <takachan@running-dog.net>348122941f
Update to 2004.05.04.bf4c041c63
Update to 2004.05.02.dd95da8ff2
o Update to 2004.04.27. o Remove MASTER_SITE_LOCAL. [memo] This version contains Real RTSP support (SUPPORT_REAL_RTSP). But I didn't enable Real RTSP support. Because this was broken on build.09a3740bcd
Resurrect MASTER_SITE_LOCAL.79af4d1955
Update to 2004.04.09.d5d1da9a9e
Update to 2004.03.31.3bc95945d4
Update to 2004.03.27.c7e1ee362b
Update to 2004.03.23.84d73e349c
Update to 2004.03.17.daf0cffcce
Update to 2004.03.15. PR: ports/64306 Submitted by: Michael Johnson <ahze@ahze.net>282e7d6f94
Update to 2004.03.12.b9fbb14dc7
Update to 2004.03.05. Submitted by: albi <albi@saynotomicrosoft.org>0dc1025197
Update to 2004.03.03.fb08329277
Update to 2004.03.02a. Submitted by: Randy Pratt <rpratt1950@earthlink.net>f3d3305d92
Update to 2004.03.02.d49c3382c0
Remove MASTER_SITE_LOCAL from MASTER_SITES by no maintain this. Submitted by: adamw06357be904
o Update to 2004.02.26. PR: ports/63428 [1] Pointed out by: Scott Michel <scottm@cs.ucla.edu> Michael Johnson <ahze@ahze.net> [1]e483f45143
o Update to 2004.02.20a. o Remove hack of using include <sstream> instead of include <strstream.h>. Pointed out by: FreeBSD Ports distfiles survey via fenneraea70146b7
Update to 2004.02.19.87efe3096f
Update to 2004.02.13. Submitted by: osaa3a051eec6
o Update to 2004.02.09. o Unbroken [1] [2] by substitute #include <sstream> instead of <strstream.h>. [3] PR: ports/60884 [1] Submitted by: Chris BeHanna <chris@behanna.org> [1] Joseph Gelinas <scirocco@tasam.com> [2] Approved by: Ross Finlayson <finlayson@live.com> (author) [3]75fb56a43c
BROKEN on 5.x: does not compile1fcc14cc4b
Update to 2004.02.05.a3087fb98d
Update to 2004.02.04. Submitted by: TAKANO Yuji <takachan@running-dog.net>09ed216f0c
Update to 2004.02.03.94d9ada819
Update to 2004.01.28.035f978d20
Update to 2004.01.27. Submitted by: Yoshihiko Sarumaru <sarumaru@yamayuri.org>456588d74d
Update to 2004.01.24. Submitted by: lev, Simon Barner <barner@in.tum.de>5b09f4f14d
Update to 2004.01.22.94e6e6740d
Update to 2004.01.21.4af9b3d2f3
Update to 2004.01.10.a76c357e3a
Update to 2004.01.09.d5fe3e849e
Update to 2004.01.06.768c6b547f
Update to 2003.12.26.4467d5c96a
Update to 2003.12.20. PR: ports/60418 Submitted by: Michael Johnson <ahze@ahze.net>b206b54c73
Update to 2003.12.19.1377628df3
Update to 2003.12.16. Submitted by: Jiri Novak <jiri.novak@i.cz>f10e01f91e