CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

net/quiche 0.24.5_10

Savoury implementation of the QUIC transport protocol and HTTP/3

Port info

Maintainer
junho.choi@gmail.com
Packages
latest: 0.24.5_10
Upstream
Higher version available: 0.30.0
Last update
to 0.24.5_10 · 9c878207a1
Quarterly
2026Q4: 0.24.5_9
WWW
https://crates.io/crates/quiche
Links
cgit · VuXML

Install

Package
# pkg install quiche
installs 0.24.5_10 from latest; from quarterly (2026Q4) 0.24.5_9
Port
# cd /usr/ports/net/quiche && make install clean
# make -C /usr/ports/net/quiche config  # change options first
Size
28 MiB download · 136 MiB installed
Depends on
devel/llvm19 19.1.7_4
License
BSD2CLAUSE
Options
2 of 2 on in the package: DOCS QLOG

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 160.24.5_100.24.5_9–
FreeBSD 150.24.5_100.24.5_10–
FreeBSD 140.24.5_100.24.5_90.24.5_10

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 150.24.5_90.24.5_9–
FreeBSD 140.24.5_90.24.5_90.24.5_9

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 0.24.5_10.

Fixed (3)

Show 3 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (82)

Mikael Urankar (mikael) · 0.24.5_10
lang/rust: Bump revisions after 1.99.0

PR:		299016
9c878207a1
Mikael Urankar (mikael) · 0.24.5_9
lang/rust: Bump revisions after 1.98.1

PR:		298139
7316461925
Piotr Kubaj (pkubaj) · 0.24.5_8
net/quiche: fix powerpc64* build

In file included from /wrkdirs/usr/ports/net/quiche/work/target/release/build/boring-sys-e26f46e56ac7f264/out/boringssl/err_data.c:17:
  /wrkdirs/usr/ports/net/quiche/work/target/release/build/boring-sys-e26f46e56ac7f264/out/boringssl/src/include/openssl/base.h:124:2: error: "Unknown target CPU"
    124 | #error "Unknown target CPU"
        |  ^
  1 error generated.
1900152b6f
Mikael Urankar (mikael) · 0.24.5_8
lang/rust: Bump revisions after 1.97.1

PR:		296645
9c892d2601
Mikael Urankar (mikael) · 0.24.5_7
lang/rust: Bump revisions after 1.96.0

PR:		295694
e29b5eeec3
Mikael Urankar (mikael) · 0.24.5_6
lang/rust: Bump revisions after 1.95.0

PR:		294615
17bf498fd2
Mikael Urankar (mikael) · 0.24.5_5
lang/rust: Bump revisions after 1.94.0

PR:		293615
43f5b4a72f
Mikael Urankar (mikael) · 0.24.5_4
lang/rust: Bump revisions after 1.93.0

PR:		292360
3d631100e8
Mikael Urankar (mikael) · 0.24.5_3
lang/rust: Bump revisions after 1.92.0

PR:		291582
5e496c7707
Mikael Urankar (mikael) · 0.24.5_2
lang/rust: Bump revisions after 1.91.1

PR:		290816
d6b6027df6
Mikael Urankar (mikael) · 0.24.5_1
lang/rust: Bump revisions after 1.90.0

PR:		289709
97b5de4ffc
Florian Smeets (flo) · 0.24.5
net/quiche: update to 0.24.5 (fixes CVE-2025-4820, CVE-2025-4821 and CVE-2025-7054)

PR:	289810
39f8de982c
Mikael Urankar (mikael) · 0.24.2_3
lang/rust: Bump revisions after 1.89.0

PR:		288923
b21956d7db
Mikael Urankar (mikael) · 0.24.2_2
lang/rust: Bump revisions after 1.88.0

PR:		287766
f3f7e555b0
Mikael Urankar (mikael) · 0.24.2_1
lang/rust: Bump revisions after 1.87.0

PR:		286829
3ed29b8185
Zsolt Udvari (uzsolt) · 0.24.2
net/quiche: Update to 0.24.2

Update BoringSSL to e1d6cd95a.
Force libc++ linking via BORING_BSSL_RUST_CPPLIB environment variable.
Now requires git and llvm as a dependency.

Changlogs:
https://github.com/cloudflare/quiche/releases/tag/0.23.1
https://github.com/cloudflare/quiche/releases/tag/0.23.2
https://github.com/cloudflare/quiche/releases/tag/0.23.4
https://github.com/cloudflare/quiche/releases/tag/0.23.5
https://github.com/cloudflare/quiche/releases/tag/0.23.6
https://github.com/cloudflare/quiche/releases/tag/0.23.7
https://github.com/cloudflare/quiche/releases/tag/0.24.0
https://github.com/cloudflare/quiche/releases/tag/0.24.2

PR:		285520
Approved by:	Junho Choi <junho.choi@gmail.com> (maintainer)
05f632b7d2
Mikael Urankar (mikael) · 0.22.0_8
lang/rust: Bump revisions after 1.86.0

PR:		285840
2a5976aebe
Mikael Urankar (mikael) · 0.22.0_7
lang/rust: Bump revisions after 1.85.0

PR:		284884
cf7c4b037d
Mikael Urankar (mikael) · 0.22.0_6
lang/rust: Bump revisions after 1.84.0

PR:		283962
fccaa1b326
Robert Clausecker (fuz) · 0.22.0_5
*/*: fix INSTALL_LIB static library invocations

INSTALL_LIB must not be used to install static libraries as
it strips the installed library; static libraries are useless
when stripped.

PR:		283258
Approved by:	portmgr (infrastructure blanket)
MFH:		2024Q4
dd628b4590
Mikael Urankar (mikael) · 0.22.0_4
lang/rust: Bump revisions after 1.83.0

PR:		283000
1d1fd15a3e
Mikael Urankar (mikael) · 0.22.0_3
lang/rust: Bump revisions after 1.82.0

PR:		282516
ca048c2884
Yuri Victorovich (yuri) · 0.22.0_2
net/quiche: Fix build on i386

Reported by:	fallout
Approved by:	portmgr@ (blanket; unbreak)
4669670ee1
Yuri Victorovich (yuri) · 0.22.0_2
Mk/Uses/cargo.mk: Remove cross-compilation options for Rust-based ports

Reasons:
* Port build shouldn't use cross-compilation mode
  because it buids for the same architecture.
* RUSTFLAGS isn't passed to the build of all or some Rust ports
  in the cross-compilation mode.

Essential changes:
* Remove the CARGO_BUILD_TARGET make variable.
* Remove CARGO_BUILD_TARGET and CARGO_TARGET_* from CARGO_ENV.
* Update many ports that used CARGO_BUILD_TARGET.
* Build paths now don't include the architecture triplet part.

Immadiate benefits:
* Unbreak build on architectures like i386 that sometimes require
  special RUSTFLAGS that were not effective in the cross-compilation
  mode.

Ports that really need cross-compilation for some reason should
enable it on case-by-case basis. Example: net-p2p/cncli
(Not sure why does net-p2p/cncli actually need it, but it only
builds with these options.)

PR:		280305
Approved by:	rust@FreeBSD.org (maintainer's timeout; 98 days)
f99a708957
Mikael Urankar (mikael) · 0.22.0_2
lang/rust: Bump revisions after 1.81.0

PR:		281300
89ab81d0e2
Mikael Urankar (mikael) · 0.22.0_1
lang/rust: Bump revisions after 1.80.1

PR:		280490
7a55f95425
Zsolt Udvari (uzsolt) · 0.22.0
net/quiche: update to 0.22.0

Install .so with a version and make symlink. Now libquiche.so has soname, so need
to set it up correctly.
Replace do-build with a default one.
Add a default test target.
Pet portfmt.

Changelogs:
https://github.com/cloudflare/quiche/releases/tag/0.22.0
https://github.com/cloudflare/quiche/releases/tag/0.21.0

PR:		280274
Approved by:	submitter is maintainer
09f836259d
Mikael Urankar (mikael) · 0.20.1_2
lang/rust: Bump revisions after 1.79.0

PR:		279707
21476ca8a9
Mikael Urankar (mikael) · 0.20.1_1
lang/rust: Bump revisions after 1.78.0

PR:		278834
2322b66100
Piotr Kubaj (pkubaj) · 0.20.1
net/quiche: fix build on powerpc64le
7e5edb6fbc
Fernando Apesteguía (fernape) · 0.20.1
net/quiche: update to 0.20.1

Fixes security issues.

 * CVE-2024-1410
 	 * Base Score:  N/A
 	 * Vector:  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

 * CVE-2024-1765
	* Base Score:  N/A
	* Vector:  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

PR:		277692
Reported by:	Ralf van der Enden <tremere@cainites.net>
Approved by:	junho.choi@gmail.com (maintainer)
Security:	CVE-2024-1410 CVE-2024-1765
0e1153d3a5
Mikael Urankar (mikael) · 0.20.0_2
lang/rust: Bump revisions after 1.77.0

PR:		277786
d632fbe55e
Mikael Urankar (mikael) · 0.20.0_1
lang/rust: Bump revisions after 1.76.0

PR:		276920
7f5a7b0e52
Koichiro Iwao (meta) · 0.20.0
net/quiche: Update to 0.20.0

PR:		276826
Approved by:	maintainer
Changes:	https://github.com/cloudflare/quiche/compare/0.18.0...0.20.0
4d8e109f9b
Mikael Urankar (mikael) · 0.18.0_2
lang/rust: Bump revisions after 1.75.0

PR:		276033
109c3d4629
Mikael Urankar (mikael) · 0.18.0_1
lang/rust: Bump revisions after 1.74.1

PR:		275243
b2afd89fb2
Robert Clausecker (fuz) · 0.18.0
net/quiche: update to 0.18.0, move crates to Makefile.crates, pet portfmt, and more

Changelog: https://github.com/cloudflare/quiche/compare/0.12.0...0.18.0

PR:		274821
Approved by:	junho.choi@gmail.com (maintainer)
9e0bf86c63
Mikael Urankar (mikael) · 0.12.0_16
lang/rust: Bump revisions after 1.73.0

PR:		274499
dd10dc88a7
Mikael Urankar (mikael) · 0.12.0_15
lang/rust: Bump revisions after 1.72.0

PR:		273331
aba8da2be1
Mikael Urankar (mikael) · 0.12.0_14
lang/rust: Bump revisions after 1.71.0

PR:		272449
cdf28617b4
Mikael Urankar (mikael) · 0.12.0_13
lang/rust: Bump revisions after 1.70.0

PR:		271797
e1d1045bc7
Mathieu Arnold (mat) · 0.12.0_12
*: regular cleanup for GH_TAGNAME bad usage
0619748960
Mikael Urankar (mikael) · 0.12.0_12
lang/rust: Bump revisions after 1.69.0

PR:		270953
3db55c4e97
Mikael Urankar (mikael) · 0.12.0_11
lang/rust: Bump revisions after 1.68.0

PR:		270080
ebf29acc6c
Mikael Urankar (mikael) · 0.12.0_10
lang/rust: Bump revisions after 1.67.1

PR:		269336
109e35fd59
Daniel Engberg (diizzy) · 0.12.0_9
*/*: Bump rust (cargo) ports to reflect on WITH_LTO

Bump ports in tree so they get rebuilt with new default settings
for cargo ports
12f1c627d4
Mikael Urankar (mikael) · 0.12.0_8
lang/rust: Bump revisions after 1.66.0

PR:		268415
ba14e01a52
Mikael Urankar (mikael) · 0.12.0_7
lang/rust: Bump revisions after 1.65.0

PR:		267622
9bf6a99963
Mikael Urankar (mikael) · 0.12.0_6
lang/rust: Bump revisions after 1.64.0

PR:		267173
afe651cf62
Stefan Eßer (se) · 0.12.0_5
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae