net/miniupnpc: fix unknown type name size_t PR: 2906249feec8e045
miniupnpc -- integer signedness errorentered 2017-05-22
UPnP IGD client lightweight library
# pkg install miniupnpcinstalls 2.3.3_1 from latest; from quarterly (2026Q4) 2.3.3_1# cd /usr/ports/net/miniupnpc && make install clean| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 2.3.3_1 | 2.3.3_1 | – |
| FreeBSD 15 | 2.3.3_1 | 2.3.3_1 | – |
| FreeBSD 14 | 2.3.3_1 | 2.3.3_1 | 2.3.3_1 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 2.3.3_1 | 2.3.3_1 | – |
| FreeBSD 14 | 2.3.3_1 | 2.3.3_1 | 2.3.3_1 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
The CVE record lists the packaged version 2.3.3_1 as affected, and no VuXML entry names the CVE. What does this mean?
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-110656 | 2.3 | 2026-10-14 | miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseelt function's namespace-prefix handling that skips an end-of-buffe… |
| CVE-2026-110655 | 2.3 | 2026-10-14 | miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffe… |
Listed in VuXML, the packaged version 2.3.3_1 is still in the affected range; pkg audit reports it. What does this mean?
net/miniupnpc: fix unknown type name size_t PR: 2906249feec8e045
net/miniupnpc: Update to 2.3.3d436d13418
net/miniupnpc: Update to 2.3.2c0d51b1f1c
python: bump all USE_PYTHON=distutils consumers after RUN_DEPENDS removal Any missed ports, feel free to bump. Any ports that need setuptools at runtime can have the devel/py-setuptools manually added back to RUN_DEPENDS, but understand that this practice is deprecated; see CHANGES for details.06a08e69f3
net/miniupnpc: Update to 2.3.18e7e21d7b5
net/miniupnpc: Update to 2.3.0 bump API changed025a154e3
net/miniupnpc: Update to 2.2.8a270dbfaa9
net/miniupnpc: use ${PREFIX}/share/manc5e964088fnet/miniupnpc: Update to 2.2.6a4dc4bfd60
net/miniupnpc: extend MASTER_SITES PR: 2733029120af37a6
tinyfugue-devel: update to 5.1.55125218535
net/miniupnpc: Update to 2.2.4ceae395128
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
net/miniupnpc: fix pkgconfig file17ad2e0d3c
net/miniupnpc: drop obsolte patchdc1de40d02
net/miniupnpc: Update to 2.2.3529426676b
net/miniupnpc: Update to 2.2.25413c1b4d7
net/miniupnpc: Add CPE information Approved by: portmgr (blanket)cad168be31
One more small cleanup, forgotten yesterday. Reported by: lwhsucf118ccf87
all: Remove all other $FreeBSD keywords.135fdeebb9
Remove # $FreeBSD$ from Makefiles.305f148f48
- update to 2.2.09ff08c0fdc
- cleanup rc.d scriptae5215e025
- fix sed(1) usage 233460 Jan Beich PR: 233460 Submitted by: Jan Beich Reported by: Kyle Evans58514d9eca
Fix plist after r469430.d04683a6b0
- update to miniupnpc 2.1 PR: 228050 Submitted by: Hung-Yi Chen - fix python build - add LICENSE for slave port - make portlint happier - bump PORTREVISION on ports using the shared libb1026e3cb4
Remove the use of submake, and use the parent's port shared library instead. While there, remove an obsolete sed line that does not match anything. Sponsored by: Absolightac3be951f8
- Security Update to 2.0.20170509 Security: CVE-2017-8798 Security: https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-8798 Reported by: Thomas Bernard MFH: 2017Q2b4ff4d4b02
- update miniupnpc to 2.0.20161216 - bump API change7a97406f03
- Security update to miniupnpc-1.9.20151008 Security: http://talosintel.com/reports/TALOS-2015-0035/ PR: 203705 Submitted by: Bernard Spila02d0704b0
Do not override USES set by slave ports in master ports PR: 19647776a405744e
- update miniupnpc to 1.9 - bump users of shared lib version PR: 194031e09b5271a5
- update LICENSE30342abac0
- use STAGEDIR690de33035
- fix misplaced NO_STAGE in slaveports and ifdefs1e3119b07e
Add NO_STAGE all over the place in preparation for the staging support (cat: net)0c710c7b4e
- Remove MAKE_JOBS_SAFE variable Approved by: portmgr (bdrewery)d4041784dc
- update to 1.8 PR: 175924 Submitted by: Konstantin Belousov0c6a465309
- cleanup comments Feature safe: yes851945b1eb
- cleanup now duplicate defsb586c45145
- update to 1.7 Submitted by: Mikhail T.b3b7b0b5a4
- do not install rc.d script in slave ports Reported by: bapt Feature safe: yese8c92c9ef8
- fix shutdown Submitted by: Andrey Chernov Feature safe: yes9dbc438e7f
- add rc.d script Submitted by: Andrey Chernov Feature safe: yesff0496de0b
- allo MAINTAINER to be overwitten by slave ports Feature safe: yes53f17f46e7
- update to 1.6 Submitted by: Mikhail T.0eb0396989
- update to 1.52fe25fe5cf
- fix installation of manpage Submitted by: mi (Mikhail T.)d99c80949f
- add LICENSEbfea29aeae