CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

net/miniupnpc 2.3.3_1

UPnP IGD client lightweight library

Port info

Maintainer
dinoex@FreeBSD.org
Packages
latest: 2.3.3_1
Upstream
up to date
Last update
to 2.3.3_1 · 9feec8e045
Quarterly
2026Q4: 2.3.3_1
WWW
https://miniupnp.tuxfamily.org/
Links
cgit · VuXML

Install

Package
# pkg install miniupnpc
installs 2.3.3_1 from latest; from quarterly (2026Q4) 2.3.3_1
Port
# cd /usr/ports/net/miniupnpc && make install clean
Size
58 KiB download · 245 KiB installed
Depends on
nothing
License
BSD3CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.3.3_12.3.3_1–
FreeBSD 152.3.3_12.3.3_1–
FreeBSD 142.3.3_12.3.3_12.3.3_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.3.3_12.3.3_1–
FreeBSD 142.3.3_12.3.3_12.3.3_1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (2)

The CVE record lists the packaged version 2.3.3_1 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-1106562.32026-10-14miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseelt function's namespace-prefix handling that skips an end-of-buffe…
CVE-2026-1106552.32026-10-14miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffe…

VuXML only (0)

Listed in VuXML, the packaged version 2.3.3_1 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (2)

Show 2 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (60)

Dirk Meyer (dinoex) · 2.3.3_1
net/miniupnpc: fix unknown type name size_t

PR: 290624
9feec8e045
Dirk Meyer (dinoex) · 2.3.3
net/miniupnpc: Update to 2.3.3
d436d13418
Dirk Meyer (dinoex) · 2.3.2
net/miniupnpc: Update to 2.3.2
c0d51b1f1c
Charlie Li (vishwin) · 2.3.1
python: bump all USE_PYTHON=distutils consumers after RUN_DEPENDS removal

Any missed ports, feel free to bump.

Any ports that need setuptools at runtime can have the devel/py-setuptools
manually added back to RUN_DEPENDS, but understand that this practice
is deprecated; see CHANGES for details.
06a08e69f3
Dirk Meyer (dinoex) · 2.3.1
net/miniupnpc: Update to 2.3.1
8e7e21d7b5
Dirk Meyer (dinoex) · 2.3.0
net/miniupnpc: Update to 2.3.0

bump API change
d025a154e3
Dirk Meyer (dinoex) · 2.2.8
net/miniupnpc: Update to 2.2.8
a270dbfaa9
Dirk Meyer (dinoex) · 2.2.6_1
net/miniupnpc: use ${PREFIX}/share/man
c5e964088f
Dirk Meyer (dinoex) · 2.2.6
net/miniupnpc: Update to 2.2.6
a4dc4bfd60
Dirk Meyer (dinoex) · 2.2.5
net/miniupnpc: extend MASTER_SITES

PR: 273302
9120af37a6
Dirk Meyer (dinoex) · 2.2.5
tinyfugue-devel: update to 5.1.5
5125218535
Dirk Meyer (dinoex) · 2.2.4
net/miniupnpc: Update to 2.2.4
ceae395128
Stefan Eßer (se) · 2.2.3_1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.2.3_1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Dirk Meyer (dinoex) · 2.2.3_1
net/miniupnpc: fix pkgconfig file
17ad2e0d3c
Dirk Meyer (dinoex) · 2.2.3
net/miniupnpc: drop obsolte patch
dc1de40d02
Dirk Meyer (dinoex) · 2.2.3
net/miniupnpc: Update to 2.2.3
529426676b
Dirk Meyer (dinoex) · 2.2.2
net/miniupnpc: Update to 2.2.2
5413c1b4d7
Bernhard Froehlich (decke) · 2.2.0
net/miniupnpc: Add CPE information

Approved by:    portmgr (blanket)
cad168be31
Mathieu Arnold (mat) · 2.2.0
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 2.2.0
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 2.2.0
Remove # $FreeBSD$ from Makefiles.
305f148f48
Dirk Meyer (dinoex) · 2.2.0
- update to 2.2.0
9ff08c0fdc
Dirk Meyer (dinoex) · 2.1_2
- cleanup rc.d script
ae5215e025
Dirk Meyer (dinoex) · 2.1_1
- fix sed(1) usage 233460  Jan Beich PR:		233460 Submitted by:	Jan Beich Reported by:	Kyle Evans
58514d9eca
Raphael Kubo da Costa (rakuco) · 2.1_1
Fix plist after r469430.
d04683a6b0
Dirk Meyer (dinoex) · 2.1
- update to miniupnpc 2.1 PR:		228050 Submitted by:	Hung-Yi Chen

- fix python build
- add LICENSE for slave port
- make portlint happier

- bump PORTREVISION on ports using the shared lib
b1026e3cb4
Mathieu Arnold (mat) · 2.0.20170509
Remove the use of submake, and use the parent's port shared library instead.

While there, remove an obsolete sed line that does not match anything.

Sponsored by:	Absolight
ac3be951f8
Dirk Meyer (dinoex) · 2.0.20170509
- Security Update to 2.0.20170509 Security: CVE-2017-8798 Security: https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-8798 Reported by:	Thomas Bernard MFH:		2017Q2
b4ff4d4b02
Dirk Meyer (dinoex) · 2.0.20161216
- update miniupnpc to 2.0.20161216 - bump API change
7a97406f03
Dirk Meyer (dinoex) · 1.9.20151008
- Security update to miniupnpc-1.9.20151008 Security: http://talosintel.com/reports/TALOS-2015-0035/ PR:		203705 Submitted by:	Bernard Spil
a02d0704b0
Antoine Brodin (antoine) · 1.9
Do not override USES set by slave ports in master ports

PR:		196477
76a405744e
Dirk Meyer (dinoex) · 1.9
- update miniupnpc to 1.9 - bump users of shared lib version PR:		194031
e09b5271a5
Dirk Meyer (dinoex) · 1.8
- update LICENSE
30342abac0
Dirk Meyer (dinoex) · 1.8
- use STAGEDIR
690de33035
Dirk Meyer (dinoex) · 1.8
- fix misplaced NO_STAGE in slaveports and ifdefs
1e3119b07e
Baptiste Daroussin (bapt) · 1.8
Add NO_STAGE all over the place in preparation for the staging support (cat: net)
0c710c7b4e
Alex Kozlov (ak) · 1.8
- Remove MAKE_JOBS_SAFE variable

Approved by:	portmgr (bdrewery)
d4041784dc
Dirk Meyer (dinoex) · 1.8
- update to 1.8 PR:		175924 Submitted by:	Konstantin Belousov
0c6a465309
Dirk Meyer (dinoex) · 1.7
- cleanup comments Feature safe: yes
851945b1eb
Dirk Meyer (dinoex) · 1.7
- cleanup now duplicate defs
b586c45145
Dirk Meyer (dinoex) · 1.7
- update to 1.7 Submitted by:	Mikhail T.
b3b7b0b5a4
Dirk Meyer (dinoex) · 1.6
- do not install rc.d script in slave ports Reported by:	bapt Feature safe:	yes
e8c92c9ef8
Dirk Meyer (dinoex) · 1.6
- fix shutdown Submitted by:	Andrey Chernov Feature safe:	yes
9dbc438e7f
Dirk Meyer (dinoex) · 1.6
- add rc.d script Submitted by:	Andrey Chernov Feature safe:	yes
ff0496de0b
Dirk Meyer (dinoex) · 1.6
- allo MAINTAINER to be overwitten by slave ports Feature safe:	yes
53f17f46e7
Dirk Meyer (dinoex) · 1.6
- update to 1.6 Submitted by:	Mikhail T.
0eb0396989
Dirk Meyer (dinoex) · 1.5
- update to 1.5
2fe25fe5cf
Dirk Meyer (dinoex) · 1.4
- fix installation of manpage Submitted by:	mi (Mikhail T.)
d99c80949f
Dirk Meyer (dinoex) · 1.4
- add LICENSE
bfea29aeae