CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

net/py-miniupnpc 2.3.1_1

Python module for miniupnpc

Port info

Maintainer
dinoex@FreeBSD.org
Packages
latest: 2.3.3_1, update to 2.3.1_1 not built yet
Upstream
up to date
Last update
to 2.3.3_1 via net/miniupnpc · 9feec8e045
Quarterly
2026Q4: 2.3.3_1
WWW
https://miniupnp.tuxfamily.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install py312-miniupnpc
installs 2.3.3_1 from latest; from quarterly (2026Q4) 2.3.3_1
Port
# cd /usr/ports/net/py-miniupnpc && make install clean
Size
29 KiB download · 70 KiB installed
Depends on
lang/python312 3.12.15, net/miniupnpc 2.3.3_1
License
BSD3CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.3.3_12.3.3_1–
FreeBSD 152.3.3_12.3.3_1–
FreeBSD 142.3.3_12.3.3_12.3.3_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.3.3_12.3.3_1–
FreeBSD 142.3.3_12.3.3_12.3.3_1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (2)

The CVE record lists the packaged version 2.3.3_1 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-1106562.32026-10-14miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseelt function's namespace-prefix handling that skips an end-of-buffe…
CVE-2026-1106552.32026-10-14miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffe…

VuXML only (0)

Listed in VuXML, the packaged version 2.3.3_1 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (23)

Charlie Li (vishwin) · 2.3.1_1
python: bump all USE_PYTHON=distutils consumers after RUN_DEPENDS removal

Any missed ports, feel free to bump.

Any ports that need setuptools at runtime can have the devel/py-setuptools
manually added back to RUN_DEPENDS, but understand that this practice
is deprecated; see CHANGES for details.
06a08e69f3
Rene Ladan (rene)
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Bernhard Froehlich (decke)
net/py-miniupnpc: Add CPE information

Approved by:	portmgr (blanket)
835fd6ce3a
Mathieu Arnold (mat)
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat)
Remove # $FreeBSD$ from Makefiles.
305f148f48
Antoine Brodin (antoine)
Drop python 2.7 support from a few ports

With hat:	portmgr
aa7a6c429e
Kai Knoblich (kai)
Relax hardcoded paths to fix build with Python 3.8.7

Since r558913 Python 3.8 incorporates BPO-42604 [1] which changed the
shared libs naming scheme.  This means "EXT_SUFFIX" is now derived from
SOABI and yields with Python 3.8 to ".cpython-38.so" instead of ".so".

The affected ports strip the libaries in the "post-install" target via
hardcoded path(s) and the build fails at the end because the new extension
is not expected at this place.

Remedy the issue by adding wildcards to these paths.  This should also
prepare the ports for future Python releases, which will use the new shared
libs naming scheme.

[1] https://bugs.python.org/issue42604

PR:		252057
Reported by:	John Kennedy
Reviewed by:	fluffy, koobs
Approved by:	koobs (python)
9cb5898561
Dirk Meyer (dinoex)
- update to miniupnpc 2.1 PR:		228050 Submitted by:	Hung-Yi Chen

- fix python build
- add LICENSE for slave port
- make portlint happier

- bump PORTREVISION on ports using the shared lib
b1026e3cb4
Mathieu Arnold (mat)
Remove the use of submake, and use the parent's port shared library instead.

While there, remove an obsolete sed line that does not match anything.

Sponsored by:	Absolight
ac3be951f8
Antoine Brodin (antoine)
Fix after empty FLAVOR as make argument was forbidden
62f4459946
Mathieu Arnold (mat)
Convert Python ports to FLAVORS.

Ports using USE_PYTHON=distutils are now flavored.  They will
  automatically get flavors (py27, py34, py35, py36) depending on what
  versions they support.

  There is also a USE_PYTHON=flavors for ports that do not use distutils
  but need FLAVORS to be set.  A USE_PYTHON=noflavors can be set if
  using distutils but flavors are not wanted.

  A new USE_PYTHON=optsuffix that will add PYTHON_PKGNAMESUFFIX has been
  added to cope with Python ports that did not have the Python
  PKGNAMEPREFIX but are flavored.

  USES=python now also exports a PY_FLAVOR variable that contains the
  current python flavor.  It can be used in dependency lines when the
  port itself is not python flavored.  For example, deskutils/calibre.

  By default, all the flavors are generated.  To only generate flavors
  for the versions in PYTHON2_DEFAULT and PYTHON3_DEFAULT, define
  BUILD_DEFAULT_PYTHON_FLAVORS in your make.conf.

  In all the ports with Python dependencies, the *_DEPENDS entries MUST
  end with the flavor so that the framework knows which to build/use.
  This is done by appending '@${PY_FLAVOR}' after the origin (or
  @${FLAVOR} if in a Python module with Python flavors, as the content
  will be the same).  For example:

    RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}six>0:devel/py-six@${PY_FLAVOR}

PR:		223071
Reviewed by:	portmgr, python
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D12464
551be3c723
Mathieu Arnold (mat)
Fix ports setting WRKDIR themselves to use the new _WRKDIR instead of the litteral "work".

I think it should be really safe to remove both instances because they
they point to directories that are empty anyway.

With hat:	portmgr
Sponsored by:	Absolight
a5d5bda3d8
Mathieu Arnold (mat)
Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.

With hat:	portmgr
Sponsored by:	Absolight
8d6597e0bb
Dirk Meyer (dinoex)
- Makefile.local for slave ports is included by bsd.port.mk r397519
78b97f0b61
Dmitry Marakasov (amdmi3)
- Switch to USE_PYTHON=autoplist to fix stage-qa problem with .egg-info files handling

Approved by:	portmgr blanket
9cf024fe7c
Dirk Meyer (dinoex)
- update miniupnpc to 1.9 - bump users of shared lib version PR:		194031
e09b5271a5
Dirk Meyer (dinoex)
- fix misplaced NO_STAGE in slaveports and ifdefs
1e3119b07e
Baptiste Daroussin (bapt)
Add NO_STAGE all over the place in preparation for the staging support (cat: net)
0c710c7b4e
Dirk Meyer (dinoex)
- cleanup header
d579cd2aaa
Dirk Meyer (dinoex)
- fix package after update PR:		162368 Submitted by:	Jan Beich Feature safe:	yes
51412f2211
Pav Lucistnik (pav)
- Mark BROKEN: does not package   Writing /usr/local/lib/python2.7/site-packages/miniupnpc-1.5-py2.7.egg-info   [..]   tar: lib/python2.7/site-packages/miniupnpc-1.6-py2.7.egg-info: Cannot stat: No such file or directory

Reported by:	pointyhat
a0cba2999c
Dirk Meyer (dinoex)
- add py-miniupnpc to python category. PR:		137756 Submitted by:	Anonymous
87cfe892a9
Dirk Meyer (dinoex)
Python module for miniupnpc

The usage of the miniUPnP client library is useful whenever an application
needs to listen for incoming connections.
Examples : P2P applications, FTP clients for active mode, IRC (for DCC)
or IM applications, network games, any server.

WWW: http://miniupnp.free.fr/
PR:		137612
Submitted by:	Anonymous
b72a7d7ddd