30 of 40 on in the package: ALTSVCBROTLICOOKIESDICTDOCSEXAMPLESFTPGOPHERGSSAPI_BASEHTTPHTTP2IDNIMAPIPFSIPV6LIBSSH2MQTTNTLMOPENSSLPOP3PROXYPSLRTSPSMTPSTATICTELNETTFTPTHREADED_RESOLVERWEBSOCKETZSTDShow the 10 options that are off
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by pkg audit for the packaged version 8.23.0.
Fixed (55)
Show 55 fixed
VuXML entries whose affected range the packaged version has left.
ftp/curl: Security update to 8.23.0
SMB support was removed upstream in 8.23.0, drop the SMB option.
Changes: https://curl.se/ch/8.23.0.html
PR: 299376
Security: 14dab969-c797-11f1-a6ea-8447094a420f
With hat: ports-secteam
Sponsored by: Netzkommune GmbH
ftp/curl: Fix build on FreeBSD 13
- Update OPTIONS_DEFAULT:
- Change from OPENSSL to OPENSSL
- Remove LIBSSH2 and TLS_SRP (depends on OPENSSL)
ftp/curl uses OpenSSL by default. However, curl 8.18.0 drops OpenSSL 1.x support
which is used in FreeBSD 13 base system. Therefore, we change the defaults to
wolfSSL instead. This commit can be reverted after FreeBSD 13 EoL (expected Apr
30, 2026).
ftp/curl: update 8.17.0 -> 8.19.0, fix some security bugs
- build moved from GNU autoconf to CMake
- No MFH as it is a big change/update and new quarterly is coming soon
PR: 293734
Changes: https://curl.se/changes.html
Security: CVE-2026-3805
CVE-2026-3784
CVE-2026-3783
CVE-2026-1965
CVE-2025-15224
CVE-2025-15079
CVE-2025-14819
CVE-2025-14524
CVE-2025-14017
CVE-2025-13034
See https://curl.se/docs/security.html for details
Tested by: ulassayginim@gmail.com, george@m5p.com,
freebsd-bugzilla.bugs@kjpetrie.co.uk,
fabian@wenks.ch, jordan@ostreff.info,
einar@isnic.is, void@f-m.fm
Approved by: ports-secteam (joneum)
ftp/curl: Temporarily remove GSSAPI_BASE
Heimdal Kerberos support has been removed in cURL 8.17.0.
The Kerberos in base system will be replaced with MIT.
This option will be re-added when possible.
Reference: https://www.freebsd.org/status/report-2025-04-2025-06/mit_krb5/
https://lists.freebsd.org/archives/freebsd-current/2025-June/007867.html
ftp/curl: Specify default CA path
Add --with-ca-path=/etc/ssl/certs to CONFIGURE_ARGS so GnuTLS and wolfSSL can
find CA certificates by default.
Remove --with-ca-fallback. It has no effect with GnuTLS and with OpenSSL curl
uses the OpenSSL CA path which should also be /etc/ssl/certs so it is redundant
now.
PR: 288861, 288862
ftp/curl: Backport fixes for unit tests and alt-svc
Backport upstream patches 7e0eea7d7b34b81ca02ffb995ebea22c02cb92d2 and
fbdb1e1dbe824a72f41a104fa26e555cb0b6b45a to fix unit tests with ipfs and
alt-svc mode
References:
https://github.com/curl/curl/commit/7e0eea7d7b34b81ca02ffb995ebea22c02cb92d2
https://github.com/curl/curl/commit/fbdb1e1dbe824a72f41a104fa26e555cb0b6b45a
PR: 286233
Approved by: maintainer timeout, 2+ weeks (including separate mail)
ftp/curl: Fix b55113e4038c74da6ab611a932db9cb041b7b967
- Use the upstream commit instead of the pull request
- Use = instead of += for PATCHFILES
- Cosmetic change
ftp/curl: Re-apply modified 2a3bac310439f8de03b945ae6b596ddf6384d411
- Fix libcurl.pc with GSSAPI_BASE enabled
- Bump PORTREVISION for package change
Do not add heimdal-gssapi to libcurl.pc because we do no provide .pc file base GSSAPI library.
ftp/curl: Fix libcurl.pc with GSSAPI_BASE enabled
- Bump PORTREVISION for package change
Do not add heimdal-gssapi to libcurl.pc because we do no provide .pc file base GSSAPI library.
ftp/curl: Update to 8.10.1
- Adjust options:
- Add IPFS
- Enable WEBSOCKET by default: It is no longer experimental
Changes: https://curl.se/changes.html
ftp/curl: Adjust default options
- Add COMPRESSION group
- Enable BROTLI and ZSTD: Add both compression support
- Enable IDN: libidn2 is already part of the dependencies of libpsl (PSL option)
- Bump PORTREVISION for dependency change
ftp/curl: Add LIBUV_IMPLIES=DEBUG
Upstream mentioned that using libuv without debug support enabled is useless.
Therefore, LIBUV option will also enable DEBUG option.
Reported by: adamw
ftp/curl: Clean up patch file after librtmp removal
multimedia/librtmp is removed in 8d01b5458f4660725fcaf562cdbb073debc9b751
RTMP option is removed in ac11b26ab75ddd548c39fe64ccf2e5de66842bd3
ftp/curl: Remove support for librtmp
Remove invalid option as support for librtmp was removed in
8d01b5458f4660725fcaf562cdbb073debc9b751
Approved by: portmgr (blanket)