CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

net/wireguard-tools 1.0.20260223

Fast, modern and secure VPN Tunnel

Port info

Maintainer
juhani@krekela.fi
Packages
latest: wireguard-tools 1.0.20260223, wireguard-tools-lite 1.0.20260223
Upstream
up to date
Last update
to 1.0.20260223 · f954eb5e1d
Quarterly
2026Q4: wireguard-tools 1.0.20260223, wireguard-tools-lite 1.0.20260223
WWW
https://git.zx2c4.com/wireguard-tools/about/
Links
cgit · VuXML

Install

Package
# pkg install wireguard-tools
# pkg install wireguard-tools-lite
installs wireguard-tools 1.0.20260223, wireguard-tools-lite 1.0.20260223 from latest; from quarterly (2026Q4) wireguard-tools 1.0.20260223, wireguard-tools-lite 1.0.20260223
Port
# cd /usr/ports/net/wireguard-tools && make install clean
# make -C /usr/ports/net/wireguard-tools config  # change options first
Size
58 KiB download · 133 KiB installed
Depends on
shells/bash 5.3.20
License
GPLv2
Options
1 of 1 on in the package: WGQUICK
Note
Size, dependencies, options and messages are those of wireguard-tools.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.0.202602231.0.20260223–
FreeBSD 151.0.202602231.0.20260223–
FreeBSD 141.0.202602231.0.202602231.0.20260223

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.0.202602231.0.20260223–
FreeBSD 141.0.202602231.0.202602231.0.20260223

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.0.20260223.

Fixed (0)

No VuXML entries for this package.

Problem reports (2) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
291437net/wireguard-tools: wg interfaces creates routes in incorrect fib when Table= specifiedNew2026-06-02
269010maintainer-feedback? net/wireguard-tools: add support to RC file for fibs/environment etc. from rc.conf variablesOpen2026-05-22

Commits (22)

Daniel Engberg (diizzy) · 1.0.20260223
net/wireguard-tools: Update to 1.0.20260223

Backport upstream commit 025f00454fec8fd0816607a28c1ee6cd9a54b134

Changelog:
https://github.com/WireGuard/wireguard-tools/compare/v1.0.20250521...v1.0.20260223

Patch initially submitted by Paavo-Einari Kaipila <pkaipila@gmail.com>

Reference:
https://github.com/WireGuard/wireguard-tools/commit/025f00454fec8fd0816607a28c1ee6cd9a54b134

PR:		297034
Reviewed by:	Juhani Krekelä <juhani@krekela.fi> (maintainer)
f954eb5e1d
Vladimir Druzenko (vvd) · 1.0.20250521_1
net/wireguard-tools: Set maintainer

Improve port:
- Replace PORTVERSION with DISTVERSION.
- Remove MAKE_ENV+=MANDIR="${PREFIX}/share/man" - it's default value.
- Fix warnings from portclippy.
- Improve indents.
- Replace ".if ${PORT_OPTIONS:MWGQUICK}" with
  "WGQUICK_VARS= USE_RC_SUBR=wireguard_wgquick".
- Add strip bin/wg.

PR:		292620
Approved by:	Juhani Krekelä <juhani@krekela.fi> (new maintainer)
541a42deaa
Vladimir Druzenko (vvd) · 1.0.20250521
net/wireguard-tools: Add possibility to configure keys in rc script

Add possibility to ingest WireGuard keys from files using the rc script.
It basically adds two more options: "wireguard_<iface>_key" and
"wireguard_<iface>_psk". Both are optional.

PR:	291997
02c29695b5
Bernhard Froehlich (decke) · 1.0.20250521
net/wireguard-*: Release maintainership
17e0883547
Bernhard Froehlich (decke) · 1.0.20250521
net/wireguard-tools: Update to 1.0.20250521

PR:		291285
9922dab261
Michael Gmelin (grembo) · 1.0.20210914_4
net/wireguard-tools: Fix route monitor on FreeBSD 14

PR:		275026
Reported by:	Vedran Miletic <vedran@miletic.net>
Approved by:	decke (maintainer)
Co-authored-by:	Oleg Streejak <oleg@pcbtech.ru>
06dfe625dd
Muhammad Moinur Rahman (bofh) · 1.0.20210914_3
net/wireguard-tools: Sanitize MANPREFIX

Approved by:    portmgr (blanket)
6db9a9aff3
Bernhard Froehlich (decke) · 1.0.20210914_2
net/wireguard-tools: Revert kldunload from rc.d scripts

Unloading if_wg(4) kmod was added to rc.d scripts to make sure that a
service restart also reload the kernel module.

Now we don't have frequent updates anymore and the wireguard-kmod port
will soon be gone but people using this script face issues in VNET jails.

This commit reverts 562d171b9dacad8f63e6e4a45035824b10b59341

PR:		274428
Reported by:	vedad@kajtaz.net
c83f22d493
Stefan Eßer (se) · 1.0.20210914_1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.0.20210914_1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Bernhard Froehlich (decke) · 1.0.20210914_1
net/wireguard-tools: Add status command to rc.d script

PR:		259397
Submitted by:	Patrick M. Hausen <pmh@hausen.com>
af6b7cd3fe
Bernhard Froehlich (decke) · 1.0.20210914
net/wireguard-tools: Update to 1.0.20210914
d80f2ded83
Bernhard Froehlich (decke) · 1.0.20210424
net/wireguard-tools: Update to 1.0.20210424
b7985f90c1
Po-Chuan Hsieh (sunpoet) · 1.0.20210315_4
net/wireguard-tools: Use WRKSRC_SUBDIR

Approved by:	portmgr (blanket)
7b932c360f
Bernhard Froehlich (decke) · 1.0.20210315_4
net/wireguard-tools: Various fixes for the rc.d scripts

- Introduce wireguard_confdir to rc.d script
- Fix variables and load_rc_config order in rc.d script
- Change rc.d scripts to run earlier after NETWORKING is available

Submitted by:	niels@netbox.org
9986bb780c
Mathieu Arnold (mat) · 1.0.20210315_3
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 1.0.20210315_3
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 1.0.20210315_3
Remove # $FreeBSD$ from Makefiles.
305f148f48
Bernhard Froehlich (decke) · 1.0.20210315_3
net/wireguard-tools: Make sure our rc.d script is always called "wireguard" independent if we are using the wg-quick or lite version because it is what users expect and are used to.
889af64b09
Bernhard Froehlich (decke) · 1.0.20210315_2
net/wireguard-tools: Unload if_wg kernel module after stop if it was loaded

This helps to reload also the kernel module after an update with a simple
restart or stop/start of the service.
562d171b9d
Bernhard Froehlich (decke) · 1.0.20210315_1
net/wireguard-tools: Add patches to fix hang at stop/restart

PR:		254328
Submitted by:	Jason A. Donenfeld <Jason@zx2c4.com>
Reported by:	Oleg Strizhak <oleg@pcbtech.ru>
f487c5c7b8
Bernhard Froehlich (decke) · 1.0.20210315
net/wireguard-tools: Repocopy from net/wireguard, flavorize and add rc.d script for lite flavor
2ca6a0ed48