- Update to 1.4.20100511. PR: ports/148529 Submitted by: Andrew Fernandes <andrew@fernandes.org> Approved by: Tor Halvard Furulund <squat@squat.no> (maintainer)f720f4a734
miniupnpd -- Integer underflow in SOAPAction header parsingentered 2026-10-16
Port details
net/miniupnpd 2.3.11,1
Lightweight UPnP IGD & PCP/NAT-PMP daemon which uses pf
Port info
- Maintainer
- rcm@FreeBSD.org
- Packages
- latest: 2.3.11,1
- Upstream
- up to date
- Last update
- to 2.3.11,1 · 5bbc7e7074
- Quarterly
- 2026Q4: 2.3.11,1 · last MFH 9f91c1de28
- WWW
- http://miniupnp.free.fr/
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install miniupnpdinstalls 2.3.11,1 fromlatest; fromquarterly(2026Q4) 2.3.11,1- Port
# cd /usr/ports/net/miniupnpd && make install clean# make -C /usr/ports/net/miniupnpd config # change options first
- Size
- 74 KiB download · 167 KiB installed
- Depends on
- net/libpfctl 0.17
- License
- BSD3CLAUSE
- Options
- 1 of 5 on in the package: IPV6
Show the 4 options that are off
CHECK_PORTINUSE LEASEFILE UPNP_IGDV2 UPNP_STRICT - pkg-message
Shown after installing
*** !!WARNING!! !!WARNING!! !!WARNING!! *** This port allows machines within your network to create holes in your firewall. Please ensure this is really what you want! *** !!WARNING!! !!WARNING!! !!WARNING!! *** For this daemon to work, you must modify your pf rules to add an anchor in both the NAT and rules section. Both must be called 'miniupnpd'. Example: # NAT section # UPnPd rdr anchor rdr-anchor "miniupnpd" # Rules section # uPnPd rule anchor anchor "miniupnpd"
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 2.3.11,1 | 2.3.9_1,1 | – |
| FreeBSD 15 | 2.3.11,1 | 2.3.11,1 | – |
| FreeBSD 14 | 2.3.11,1 | 2.3.9_1,1 | 2.3.11,1 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 2.3.11,1 | 2.3.11,1 | – |
| FreeBSD 14 | 2.3.11,1 | 2.3.9_1,1 | 2.3.11,1 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed (1)
The CVE record lists the packaged version 2.3.11,1 as affected, and no VuXML entry names the CVE. What does this mean?
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-107159 | 7.1 | 2026-10-07 | MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData() that allows unauthenticated local network attackers to crash th… |
VuXML only (0)
Listed in VuXML, the packaged version 2.3.11,1 is still in the affected range; pkg audit reports it. What does this mean?
None.
Fixed (1)
Show 1 fixed
VuXML entries whose affected range the packaged version has left.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (65)
Begin the process of deprecating sysutils/rc_subr by s#. %%RC_SUBR%%#. /etc/rc.subr#1d6b4b3f91
- Install man page PR: 141346 Submitted by: Nikolai Saoukh <nms+bsd@otdel-1.org> Approved by: maintainer timeout3f646106c8
- Fix build - BUMP PORTREVISION PR: ports/140861 Submitted by: maintainer Approved by: miwi (mentor) Reported by: pointyhat via pavdd3c2cf224
- Update to 1.4 PR: ports/140319 Submitted by: Hung-Yi Chen <gaod@hychen.org> Approved by: maintainer (timeout > 14 days), miwi (mentor)1a7e7ce844
Fix a few "bad example" problems in the rc.d scripts that have been propogated by copy and paste.
1. Primarily the "empty variable" default assignment, which is mostly
${name}_flags="", but fix a few others as well.
2. Where they are not already documented, add the existence of the _flags
(or other deleted empties) option to the comments, and in some cases add
comments from scratch.
3. Replace things that look like:
prefix=%%PREFIX%%
command=${prefix}/sbin/foo
to just use %%PREFIX%%. In many cases the $prefix variable is only used
once, and in some cases it is not used at all.
4. In a few cases remove ${name}_flags from command_args
5. Remove a long-stale comment about putting the port's rc.d script in
/etc/rc.d (which is no longer necessary).
No PORTREVISION bumps because all of these changes are noops.0175383f0a- Update to 1.3 PR: 133854 Submitted by: Tor Halvard Furulund <squat@squat.no> (maintainer)4b084c8308
- Update to 1.1 PR: 123168 Submitted by: Tor Halvard Furulund <squat@squat.no> (maintainer)bceb216d6c
- Update to 1.0 - Set PORTEPOCH (1.0-RC14 -> 1.0 Release) PR: 120076 Submitted by: Tor Halvard Furulund <squat@squat.no> (maintainer)40234ff5d6
- Update to 1.0rc13 PR: 119486 Submitted by: Tor Halvard Furulund <squat@squat.no> (maintainer)8005fdcbd5
- Update to 1.0rc12 PR: ports/118856 Submitted by: Tor Halvard Furulund <squat@squat.no> (maintainer)54934c1621
- Update to 1.0-RC11 - Pass maintainership PR: ports/117529 Submitted by: Tor Halvard Furulund <squat at squat dot no> Approved by: maintainer7eec48a2a7
Update to 1.0-RC9. PR: ports/116825 Submitted by: Tor Halvard Furulund <squat squat no> Approved by: maintainer timeout81f6d4b269
- Update to 1.0-RC8 PR: 115894 Submitted by: Tor Halvard Furulund <squat@squat.no> Approved by: maintainer84736e3aee
New port: net/miniupnpd Minor changes to miniupnpd/pkg-message (grammatical). PR: 110906 Submitted by: Daniel J. O'Connor <darius@dons.net.au> Approved by: philip1908d3a661