version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed (14)
The CVE record lists the packaged version 2.14.1 as affected, and no VuXML entry names the CVE. What does this mean?
Update to 2.17 fixes 4 of the 14 unaddressed CVEs.
10 CVEs name no fixed version in the CVE record (for example only a commit).
PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-R…
PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport w…
PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when par…
PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remote out-of-bounds read and write can occur in the SDP negoti…
PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client (http…
PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, on GnuTLS builds, the SIP TLS transport (sip_transport_tls) can acc…
PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is an integer overflow in media stream buffer size calculation …
PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuTLS backends in pjlib/src/pj/ssl_sock_ossl.c and p…
PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser in pjmedia/src/pjmedia/avi_player.c uses an inpu…
PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsip_generic_array_hdr_print() in…
PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap out-of-bounds read vulnerability exists in PJSIP's VP9 RTP u…
PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is an out-of-bounds read when parsing a malformed Content-ID UR…
PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front…
PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front…
VuXML only (0)
Listed in VuXML, the packaged version 2.14.1 is still in the affected range; pkg audit reports it. What does this mean?
None.
Fixed (5)
Show 5 fixed
VuXML entries whose affected range the packaged version has left.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (69)
Tijl Coosemans (tijl) · 2.14.1_1
Templates/config.(guess|sub): Update to 2026-05-17
Also remove our local changes that replaced x86_64 with amd64 because
these complicate porting by forcing port maintainers to replace x86_64
with amd64 in configure scripts.
Additional changes:
bsd.port.mk: Apply S/amd64/x86_64/ to CONFIGURE_TARGET. This is not
required to run configure but some ports need to use this in pkg-plist.
comms/qico, news/fidogate:
CONFIGURE_TARGET shouldn't contain "--build". Just remove it altogether
because the default value is fine.
devel/autoconf, devel/automake:
Bump PORTREVISION because they package config.* scripts.
lang/gauche, math/fricas, math/gap, math/nlopt, math/octave, net/pjsip:
Bump PORTREVISION because pkg-plist depends on CONFIGURE_TARGET.
benchmarks/pathchirp, databases/sqlrelay, devel/pcc-libs, lang/ocaml,
lang/pcc, math/adol-c, math/scilab, math/yices, multimedia/libtheora,
multimedia/libxine, security/beecrypt, sysutils/ltrace,
sysutils/pstacku, textproc/gnugrep:
Add, remove, or change patching related to x86_64 versus amd64.
audio/festalon:
Configuring with x86_64 instead of amd64 enables some MMX code that
isn't entirely correct. Patch it based on the i386 code. While here,
enable building the i386 package.
lang/pfe:
Configuring with x86_64 instead of amd64 enables the use of global
register variables but these are a GCC extension that Clang does not
support. Add --without-regs to disable them. This also fixes the i386
build.
editors/openoffice-*:
The build system runs config.guess and the newer version returns i586
for i386. Let build scripts treat i[3456]86 like i386 as on Linux.
math/reduce-psl:
The build system uses the output of config.guess to create directories
but this script might return something like i586-unknown-freebsd14.5
while the ports tree uses i386-portbld-freebsd14.5. Instead of running
config.guess plug in the value of CONFIGURE_TARGET. The proper fix
would be to let the configure script generate the build scripts so they
can use $host from the configure script but that's more work.
PR: 299273
Exp-run by: antoine
net/pjsip: Update to 2.14.1 and adopt port
Major rework of port for better compliance with Porters Handbook and
general guidelines. Pass maintainership to submitter
Changelog:
https://github.com/pjsip/pjproject/releases/tag/2.14.1
PR: 277445
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.
There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.
The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.
Approved by: portmgr (tcberner)
Clean up some things
- Remove duplicate variables
- Remove nop variables
- Sort categories
- Remove redundant option descriptions that match the default ones
Reported by: portscan
- Update pjsip t 2.10 - Get distfile from github - Add OPUS and VPX options, enabled by default - Make VIDEO and WEBRTC options enabled by default - Fix typo in WEBRTC option description - Fix pkgconfig patch to respect LOCALBASE
PR: 245607
Submitted by: yuri
net/pjsip: Unbreak IPV6 option
- Do not set IPV6_CFLAGS twice
- Turn off IPv6 support when the option is off
Differential Revision: https://reviews.freebsd.org/D22693
- Add to pjsip a customized config_site.h file with values suggested by the asterisk project. This allows WebRTC to work correctly in asterisk out of the box [1] - Also import some patches to pjsip from the asterisk project. These patches have already been integrated in upstream pjsip development sources [2]
Reported by: zhenya1993lzn@yandex.ru [1]
Obtained from: https://github.com/asterisk/asterisk/tree/16.3/third-party/pjproject/patches [2]
MFH: 2019Q2
multimedia/ffmpeg: update to 3.4
Notable changes:
- i386/amd64 now depend on NASM per https://git.ffmpeg.org/gitweb/ffmpeg.git/commitdiff/4f9297ac3b39
- NETCDF is now MYSOFA but the dependency doesn't exist in ports yet
- SCHROEDINGER is gone per https://git.ffmpeg.org/gitweb/ffmpeg.git/commitdiff/220b24c7c9
- DRM, LIBRSVG2, LIBXML2 are new options
- ABI isn't completely compatible: some structs have changed
Minor cleanup:
- Don't pass --disable-{in,out}dev when it's already blocked by disabled dependency
- Drop redundant "Enable" from option descriptions
- Switch CDIO_DESC to use Mk/bsd.options.desc.mk
Changes: https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n3.4:/Changelog
ABI: https://abi-laboratory.pro/tracker/timeline/ffmpeg/
PR: 223057
Exp-run by: antoine
Update pjsip patch to work with libressl after the latest update to 2.7, which broke it.
PR: 216898
Submitted by: OlivierW <olivierw1+bugzilla-freebsd@hotmail.com>
Register conflict with libsrtp.
Reported by: rodrigo
> PR: If and which Problem Report is related.
> Submitted by: If someone else sent in the change.
> Reported by: If someone else reported the issue.
> Reviewed by: If someone else reviewed your modification.
> Approved by: If you needed approval for this commit.
> Obtained from: If the change is from a third party.
> MFC after: N [day[s]|week[s]|month[s]]. Request a reminder email.
> MFH: Ports tree branch name. Request approval for merge.
> Relnotes: Set to 'yes' for mention in release notes.
> Security: Vulnerability reference (one per line) or description.
> Sponsored by: If the change was sponsored by an organization.
> Differential Revision: https://reviews.freebsd.org/D### (*full* phabric URL needed).
> Empty fields above will be automatically removed.
M pjsip/Makefile