- update to 1.4 PR: 140320 Submitted by: Hung-Yi Chen4c33f16d41
miniupnpc -- integer signedness errorentered 2017-05-22
UPnP IGD client lightweight library
# pkg install miniupnpcinstalls 2.3.3_1 from latest; from quarterly (2026Q4) 2.3.3_1# cd /usr/ports/net/miniupnpc && make install clean| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 2.3.3_1 | 2.3.3_1 | – |
| FreeBSD 15 | 2.3.3_1 | 2.3.3_1 | – |
| FreeBSD 14 | 2.3.3_1 | 2.3.3_1 | 2.3.3_1 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 2.3.3_1 | 2.3.3_1 | – |
| FreeBSD 14 | 2.3.3_1 | 2.3.3_1 | 2.3.3_1 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
The CVE record lists the packaged version 2.3.3_1 as affected, and no VuXML entry names the CVE. What does this mean?
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-110656 | 2.3 | 2026-10-14 | miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseelt function's namespace-prefix handling that skips an end-of-buffe… |
| CVE-2026-110655 | 2.3 | 2026-10-14 | miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffe… |
Listed in VuXML, the packaged version 2.3.3_1 is still in the affected range; pkg audit reports it. What does this mean?
- update to 1.4 PR: 140320 Submitted by: Hung-Yi Chen4c33f16d41
- add py-miniupnpc to python category. PR: 137756 Submitted by: Anonymous87cfe892a9
- compile in FreeBSD version string - add support for slave ports PR: 137612 Submitted by: Anonymousc216e0e34f
- fix build on amd644bd9ef42f5
- update to 1.30f4ef32be4
- update to 1.263326464cf
- udpate to 1.1 PR: 125527 Submitted by: Hung-Yi Chencfe18968a3
- Update to 1.0 PR: 124023 Submitted by: Hung-Yi Chend8b433830f
- fix build on non i386 archf6b5f47fcd
UPnP IGD client lightweight library The usage of the miniUPnP client library is useful whenever an application needs to listen for incoming connections. Examples : P2P applications, FTP clients for active mode, IRC (for DCC) or IM applications, network games, any server. WWW: http://miniupnp.free.fr/1295d20c38