Update dns/libidn2 to 2.1.1 - Bump PORTREVISION of dependent ports for shlib change Changes: https://gitlab.com/libidn/libidn2/blob/master/NEWSdc7a01a3c8
GnuTLS -- Stack write buffer overflowentered 2025-11-21
GNU Transport Layer Security library
# pkg install gnutlsinstalls 3.8.13 from latest; from quarterly (2026Q4) 3.8.13# cd /usr/ports/security/gnutls && make install clean# make -C /usr/ports/security/gnutls config # change options first
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 3.8.13 | 3.8.13 | – |
| FreeBSD 15 | 3.8.13 | 3.8.13 | – |
| FreeBSD 14 | 3.8.13 | 3.8.13 | 3.8.13 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 3.8.13 | 3.8.13 | – |
| FreeBSD 14 | 3.8.13 | 3.8.13 | 3.8.13 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
pkg audit for the packaged version 3.8.13.CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, CVE-2025-6395
no CVE referenced
no CVE referenced
no CVE referenced
no CVE referenced
no CVE referenced
no CVE referenced
| PR | Summary | Status | Changed |
|---|---|---|---|
| 274610 | maintainer-feedback? security/gnutls: Optionise INFO and MANPAGES | New | 2023-10-20 |
Update dns/libidn2 to 2.1.1 - Bump PORTREVISION of dependent ports for shlib change Changes: https://gitlab.com/libidn/libidn2/blob/master/NEWSdc7a01a3c8
Update to 3.6.6.4ff1d1354c
Update dns/libidn2 to 2.1.0 - Bump PORTREVISION of dependent ports for shlib change Changes: https://gitlab.com/libidn/libidn2/blob/master/NEWS06e735460e
Update to 3.6.5. PR: 234012 Exp-run by: antoine6cb2e16006
Install texinfo files (GNU info) into ${PREFIX}/share/info
After a discussion on the mailing list on moving manpages to
${PREFIX}/share/man for consistency with base where it is
installed in usr/share/man, it appeared the same should happen
to GNU info files which were installed under share in base and
not in ports.
Now texinfo is not in base on any of the supported version of FreeBSD
it is possible to proceed to this move and it is easier to do than
the manpage change.
Other benefit than consistency are less patching: all build tools but
cmake are expecting info files to be under share/info and cmake (patched here)
was having an exception for BSD so the patch makes FreeBSD case less
specific for them
Bump revision of all impacted ports
PR: 232907
exp-run by: antoine
Differential Revision: https://reviews.freebsd.org/D178167990f81066Update to 3.5.19.6c4e30ccdd
Update to 3.5.18.684a164fb9
Update to 3.5.17.7b7e115250
security/gnutls: revert r431494 per FreeBSD 11.0 EOL PR: 216045 Approved by: portmgr blanket55dbc622c9
Update to 3.5.16.6736afab05
Update to 3.5.15.695cfdcbf9
Update to 3.5.13. MFH: 2017Q2 Security: https://gnutls.org/security.html#GNUTLS-SA-2017-4abe1daa077
Update to 3.5.12.8fb78ac4b4
Update to 3.5.11.41e4c187f1
Update to 3.5.9. Disable use of libidn2 for now because it does not provide a pkgconfig file. PR: 217073 Exp-run by: antoine39442f9c83
Make atomic operations explicit to support old gcc. PR: 216122d5c92c553f
security/gnutls: unbreak aarch64 after r431214 lib/accelerated/aarch64/elf/aes-aarch64.s.tmp.S:5:1: error: unknown directive .arch armv8-a+crypto ^ lib/accelerated/aarch64/elf/aes-aarch64.s.tmp.S:49:2: error: instruction requires: crypto aese v6.16b,v0.16b ^ PR: 216045 Approved by: tijl (maintainer)ce32977b20
Update to 3.5.8. PR: 215909 Submitted by: brnrd Exp-run by: antoine MFH: 2017Q1 Security: 0c5369fc-d671-11e6-a9a5-b499baebfeaf8320e35f01
Update to 3.4.17 and pass the right dlopen path for libtspi to configure.ce97a4e2eb
Update to 3.4.16.ddb6e50888
Add math/gmp to LIB_DEPENDS Q/A warned that bin/certtool was linked to lib/libgmps.so.10 Approved by: swills (mentor) tijl (maintainer) Differential Revision: https://reviews.freebsd.org/D8153dda91049fe
Most commonly used build systems support silent builds, when they hide actual commands executed and only show short summary line (like "CC foo.c"). CMake and ninja enable this by default, some autotools using ports do as well. This is unacceptable because we need complete build logs at any time, so we now switch to verbose build logs unconditionally. Note that this change deliberately affects ALL Change summary: - Always do verbose builds for cmake, ninja and GNU configure (the latter includes check if --disable-silent-rules is actually supported by the configure script; there are isolated cases when it's not true) - Remove CMAKE_VERBOSE, NINJA_VERBOSE and CONFIGURE_ARGS=--disable-silent-rules from all ports which set them for this is no longer needed - Revert hacks for --disable-silent-rules support priorly committed to biology/ncbi-blast+ and net-p2p/mldonkey - no longer needed as well Submitted by: amdmi3 Reviewed by: mat Exp-run by: antoine Approved by: portmgr (mat, antoine) Differential Revision: D753430a00f2227
Update to 3.4.15. MFH: 2016Q3 Security: https://gnutls.org/security.html#GNUTLS-SA-2016-3c4d44c3384
Update to 3.4.14.9ce5be358c
Update to 3.4.13.c381f0cff0
Update to 3.4.12. libpkcs11mock1.so is commented out in pkg-plist because it is part of the testsuite and shouldn't be installed. This has been fixed upstream.6b4ee6265f
Update to 3.4.11.7c1fdb56cd
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.
With hat: portmgr
Sponsored by: Absolight597afc47ba- Update security/gnutls to 3.4.10. - Rename the LIBDANE option DANE because that's the name of the protocol supported by libgnutls-dane and gnutls-cli. Also clarify the option description. - Add an IDN option. - libgnutls-openssl has been removed in 3.4. Some ports used this library in their LIB_DEPENDS but no port actually required it. - Some old API functions have been removed. Ports t net-im/jabber: This port used the old API to give users fine grained control over which crypto algorithms were used via a configuration file. It's not immediately obvious how to port this to the new API so the port always uses the defaults now. www/hydra: Mark BROKEN. This uses more removed calls than the other ports, is said to be alpha quality and not fully functional and has been abandoned 10 years ago. PR: 207768 Exp-run by: antoine Approved by: portmgr (antoine)6bc6f3a9e0
- Take maintainer. - Fix a build problem with upcoming libc++. PR: 207768, 208175 Approved by: bdrewery (maintainer)eaeb84f225
- bump PORTREVISION on ports depending on unbound PR: 207948 Submitted by: jaap@NLnetLabs.nl (maintainer)98bbb468b4
- Update unbound to 1.5.7 - Bump PORTREVISIOn on dependent ports Some Upgrade Notes: This release fixes a validation failure for nodata with wildcards and emptynonterminals. Fixes OpenSSL Library compability. Fixes correct response for malformed EDNS queries. For crypto in libunbound there is libnettle support. Qname minimisation is implemented. Use qname-minimisation: yes to enable it. This version sends the full query name when an error is found for intermediate names. It should therefore not fail for names on nonconformant servers. It combines well with harden-below-nxdomain: yes because those nxdomains are probed by the qname minimisation, and that will both stop privacy sensitive traffic and reduce nonsense traffic to authority servers. So consider enabling both. In this implementation IPv6 reverse lookups add several labels per increment, because otherwise those lookups would be very slow. [ Reference https://tools.ietf.org/html/draft-ietf-dnsop-qname-minimisation-08 ] More details at <http://unbound.net> PR: 206347 Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> Approved by: maintainer timeout Sponsored by: DK Hostmaster A/Sd140eabacb
Bump versions to chase Nettle shared library updatec590f0bad9
Update MASTER_SITES to fix fetching problem due to abnormal version number PR: 202332f26ac585a3
- Update to 3.3.17.1 MFH: 2015Q3 Relnotes: http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/8268 Security: ec6a2a1e-429d-11e5-9daa-14dae9d210b8ce0db51f73
- Update to 3.3.16 Changes: http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/8235240ae04027
Fix plist when LIBDANE is defined (PORTREVISION not bumped because package wouldn't be successful in the case). Pointy hat to: delphij Reported by: sunpoet MFH: 2015Q2ec497b127a
Update to 3.3.15. PR: 198875 Approved by: maintainerd63f3ad8aa
GnuTLS tries to use /usr/local/share/certs/ca-root-nss.crt. Instead of maybe using it if it is already installed or if the P11KIT option is selected (which depends on ca_root_nss), just always depend on ca_root_nss. Reported by: Tatsuki Makino309c1749fe
Add CPE information. PR: 153859 Submitted by: shun <shun.fbsd.pr@dropcut.net>ab78a380b2
Update gnutls to 3.2.21 PR: 196400 Approved by: bdrewery (maintainer)0e5fce20c9
- Fix plist for LIBDANE option Approved by: portmgr blanket8846a09bfa
Fix build on systems without stdnoreturn.h Reported by: many745d6e04b6
- Update to 3.2.19098c7e1322
Update to 3.2.18b455206d28
dns/libidn: - Add USES=libtool and bump dependent ports - Add INSTALL_TARGET=install-strip - Always install libidn-components.png because it is used by libidn.info - Add -lintl to Libs.private instead of Libs in libidn.pcf1655c7b7a
- Switch dns/unbound to USES=libtool, drop .la files - Bump dependent ports as .so version has changed - While here, add LICENSE_FILE to dns/getdns Approved by: portmgr blanket13ab9a72d8
security/gnutls: Support OPTIONal library dependencies Factor out libidn, libp11-kit and libtspi into OPTIONal library dependencies, with the CRYWRAP, P11KIT and TPM options respectively, as per the upstream documentation [1]. Make ZLIB an OPTION because we can, and the choice to customise compression support in security software (especially lately) may be very useful for some consumers. Add CRYWRAP, P11KIT, TPM and ZLIB to OPTIONS_DEFAULT to retain current default functionality. [1] http://gnutls.org/manual/html_node/Downloading-and-installing.html Inspired by: Recent gnutls 2 -> 3 change, fan of minimal dependencies PR: 192090 Submitted by: koobs Approved by: maintainer5883d2a2c8
- Update security/libtasn1 to 4.0 - Add USES= libtool and set INSTALL_TARGET to install-strip - Drop useless bsd.port.options.mk include - Bump PORTREVISION of ports that depend on libtasn1 as shlib version has changed - Add an UPDATING entry for that Exp-run by: antoine32290f6fc6
- Fix plist Reported by: many921f399be2