Update to 2003.11.25356be11d8d
liveMedia -- potential remote code executionentered 2018-10-28
Port details
net/liveMedia 2026.10.24,2
LIVE.COM Streaming Media
Port info
- Maintainer
- multimedia@FreeBSD.org
- Packages
- latest: 2026.10.17,2, update to 2026.10.24,2 not built yet
- Upstream
- up to date
- Last update
- to 2026.10.24,2 · 735d14f90d
- Quarterly
- 2026Q4: 2026.10.17,2 · last MFH f0aed12710
- WWW
- http://www.live555.com/liveMedia/
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install liveMediainstalls 2026.10.17,2 fromlatest; fromquarterly(2026Q4) 2026.10.17,2- Port
# cd /usr/ports/net/liveMedia && make install clean- Size
- 556 KiB download · 2.3 MiB installed
- Depends on
- nothing
- License
- LGPL3+
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 2026.10.17,2 | 2026.08.14,2 | – |
| FreeBSD 15 | 2026.10.17,2 | 2026.10.13,2 | – |
| FreeBSD 14 | 2026.10.17,2 | 2026.08.14,2 | 2026.10.17,2 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 2026.10.17,2 | 2026.10.13,2 | – |
| FreeBSD 14 | 2026.10.17,2 | 2026.08.14,2 | 2026.10.17,2 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 2026.10.17,2.Not counted (8)
CVEs that match this port only loosely: inherited from the whole project, or with versions that cannot be compared. What does this mean?
8 with versions that cannot be compared
The CVE record gives dates or the port uses snapshot versions (or the other way round), so the version of this port cannot be placed in the affected range.
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2019-15232 | 9.8 | 2019-08-20 | Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is m… |
| CVE-2013-6933 | 7.5 | 2014-01-23 | The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers… |
| CVE-2013-6934 | 7.5 | 2014-01-23 | The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial … |
| CVE-2025-65407 | 6.5 | 2025-12-01 | A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supp… |
| CVE-2025-65406 | 6.5 | 2025-12-01 | A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) vi… |
| CVE-2025-65408 | 6.5 | 2025-12-01 | A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Deni… |
| CVE-2025-65404 | 6.5 | 2025-12-01 | A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via a crafted MP3 stream. |
| CVE-2025-65405 | 6.5 | 2025-12-01 | A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via … |
Fixed (2)
Show 2 fixed
VuXML entries whose affected range the packaged version has left.
liveMedia -- DoS vulnerabilityentered 2007-12-08
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (417)
Update to 2003.11.19.546187f2ad
USE_REINPLACE need be defined only when REINPLACE_CMD is used.b3ba3ae427
Update to 2003.11.16.38a000937a
Update to 2003.11.13.a81904bef0
Update to 2003.11.06. Correct location of ${RM}/${TOUCH} ${PLIST}.
PR: ports/58934
Submitted by: Simon Barner <barner@in.tum.de>4204e2c4d1Update to 2003.10.27. Submitted by: TAKANO Yuji <takachan@running-dog.net>3ed1330635
Update to 2003.10.24.e00b61e2a8
Update to 2003.10.08.26d16d74ca
Update to 2003.09.30.21a2e661f0
Remove extra \. Submitted by: Herbert J. Skuhra <herbert@bugat.at>526af400c6
Update to 2003.09.25.02f2bd82db
Update to 20030919.ebac8c5727
Update to 2003.09.05.d4b7b17cba
Update to 20030903.1f67d9e26a
Update to 2003.09.010a4318e989
Update to 2003.08.28a.7f321a30d4
Update to 2003.08.28.346e6c44bc
Add missing \. Submitted by: Dan Langille <dan@langille.org>bf95d06417
Update to 2003.08.21.24bd1b56fd
Update to 2003.08.19.df5286a354
Update to 20030816.049a1e7cce
Update to 2003.07.29.ebd04af693
Update to 20030727.928bea5734
Update to 2003.07.14.c0c1479f36
o Update to 2003.07.07. o make PLIST in post-build phase[1]. Submitted by: Sergey Matveychuk <sem@ciam.ru> [1]391e685802
Update to 2003.05.06.20e103e702
Update to 2003.04.26.6a70b058c5
Update to 2003.04.24.5f56df5bad
Update to 2003.04.20.b19cca6e04
Update to 2003.04.18.87c4653579
Update to 2003.04.12.ad922b31a5
Update to 2003.04.11.4ee8af558b
Update to 2003.04.09.dbfd95a8ec
Update to 2003.04.04.cd910b739d
Update to 2003.03.31.1f4fd5d675
Update to 2003.03.28.ea2965a27b
Update to 2003.03.25.922f3eb589
Update to 2003.03.22becfde20cd
Update to 2003.03.03.0364d5b2b7
Update to 2003.02.28. Submitted by: Yonatan Bokovza <Yonatan@xpert.com>714034675d
Update to 2003.02.27.28ed03b028
De-pkg-comment.f859a1e809
Update to 2003.02.17.54d17363ce
Update to 2003.02.16.209342918f
Correct strange permission of installed directory(444->755) [1] and clean up Makefile. Submitted by: nyan [1]c1d64ed240
Update to 2003.02.10. Prompted by: NINOMIYA Hideyuki <nin@jp.FreeBSD.org>8b34188964
Update to 2003.02.08 and use HAS_CONFIGURE=YES.082afda448
Update to 2003.02.06a.07a1d30b4c
Update to 2003.02.06.9061ad2e95