Update to 3.2.167b0f5d94f5
GnuTLS -- Stack write buffer overflowentered 2025-11-21
GNU Transport Layer Security library
# pkg install gnutlsinstalls 3.8.13 from latest; from quarterly (2026Q4) 3.8.13# cd /usr/ports/security/gnutls && make install clean# make -C /usr/ports/security/gnutls config # change options first
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 3.8.13 | 3.8.13 | – |
| FreeBSD 15 | 3.8.13 | 3.8.13 | – |
| FreeBSD 14 | 3.8.13 | 3.8.13 | 3.8.13 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 3.8.13 | 3.8.13 | – |
| FreeBSD 14 | 3.8.13 | 3.8.13 | 3.8.13 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
pkg audit for the packaged version 3.8.13.CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, CVE-2025-6395
no CVE referenced
no CVE referenced
no CVE referenced
no CVE referenced
no CVE referenced
no CVE referenced
| PR | Summary | Status | Changed |
|---|---|---|---|
| 274610 | maintainer-feedback? security/gnutls: Optionise INFO and MANPAGES | New | 2023-10-20 |
Update to 3.2.167b0f5d94f5
- Replace security/gnutls with security/gnutls3 and update to 3.2.15 - Bump PORTREVISION on all ports that depend on security/gnutls and adjust all ports that depend on security/gnutls3 - Update mail/anubis to version 4.2 which supports gnutls 3.x - Update mail/libvmime to a development snapshot (recommended by upstream developers) PR: 191274 Exp-run by: antoine Approved by: portmgr (antoine)3ab1b8443e
- Convert security/trousers to USES=libtool and bump dependent ports - Use standard USE_AUTOTOOLS - Add INSTALL_TARGET=install-strip - Drop PTHREAD_LIBS3c18c37a10
Add DOCS to OPTIONS_DEFINE to ports that check for PORT_OPTIONS:MDOCS.5d2373a092
Allow to build with texinfo from ports3983aff8f5
Fix build on system built WITHOUT_INFO With hat: portmgr698f728a34
- Fix build when info files get regenerated, thus causing info-5 to disappear. Depending on which makeinfo version is used it would spit out 6 files or 5 (.info,1-5). It would not always regenerate though. The bundled info files went to -5. Now force regenerate it always using the base makeinfo(1) and use --no-split so only 1 file is used. PR: 190693 Reported by: many5740ccc8b9
- No need for print/texinfo dependency for makeinfo as it is in base Reported by: tijlc618f56e32
Patch CVE-2014-3466 to prevent memory corruption due to server hello parsing. Obtained from: https://gitorious.org/gnutls/gnutls/commit/688ea6428a432c39203d00acd1af0e7684e5ddfd Security: CVE-2014-3466, 9733c480-ebff-11e3-970b-206a8a7203178887883116
- Update to 3.1.25
This fixes a security issue:
http://www.gnutls.org/security.html#GNUTLS-SA-2014-3
Security: 027af74d-eb56-11e3-9032-000c2980a9f3fb8fa75b90- Use proper name for libgnutlsdane.so Reported by: tijl284e0975a0
- Convert to USES=libtool - texinfo is only needed when DOCS is selected [1] PR: ports/189861 [1] Reported by: marino [1]232590eb69
- New LIB_DEPENDS syntax. - USES=libtool:keepla tar:bzip2. - Remove -fPIC flag. Leftover from an old version.4bf5eb7e2f
- Update to 3.1.23 - Convert to USES=tar Changes: http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/7415d8494620a9
- Hide libdane support behind option LIBDANE - Disable by default as it ends up pulling in openssl via unbound, which is odd for gnutls3 to do. PR: ports/188184 Submitted by: Lawrence "The Dreamer" Chen <beastie@tardisi.com> (based on) Discussed with: wg05c72c0613
- Take maintainership for now Approved by: wg (maintainer)f94dd82768
- Update to 3.1.22 This fixes the following vulnerabilities: CVE-2014-0092 - Certificate verification issue CVE-2014-1959 - Certificate verification issue All users are recommended to upgrade ASAP. Security: f645aa90-a3e8-11e3-a422-3c970e169bc2eb60a8b49e
- Add fixes for: CVE-2014-0092 - Certificate verification issue CVE-2014-1959 - Certificate verification issue All users are recommended to upgrade ASAP. Security: f645aa90-a3e8-11e3-a422-3c970e169bc26a52cb9044
Add an additional mirror to MASTER_SITES. PR: 185901 Submitted by: Bruno Machado <bruno@bsd.com.br>7db971bbee
Fix properties on pkg-pliste04b632220
Fix build with perl 5.18. PR: 185595 Reviewed by: marino Obtained from: Debianbae79c3424
security/gnutls: Fix hardcoded perl paths Perl was recently added as a build tool for gnutls, and immediately the port fails to build on systems that do not have the /usr/bin/perl symlink. The cause is harded perl path of "/usr/bin/perl". Shebangfix will fix a couple of these, REINPLACE_CMD will fix the other. Committed under the new "Just fix it" blanket, but it was tested in redports.afcfe0e2fa
- Fix possbile DoS in TLS record decoding [1] - Fix installation without NLS [2] - Require gmake and perl for build because in some occasions it will rebuild the documentation that works in a proper way with gmake only and needs perl - Bump PORTREVISION Security: CVE-2013-2116 Reported by: mat [2]6fa779c1b7
- Support stagedir - Add LICENSE - Fix pkg-descr formatting PR: 185409 Submitted by: Takefu <takefu@airport.fm>8f480fffe9
security/gnutls3: make danetool3 work PR: ports/185296a98525e833
security/gnutls3: update to 3.1.18 Changes: http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/7190f2aa42e69d
security/gnutls3: fix build without autogen PR: ports/184279 Submitted by: mandree5d1e07ff80
security/gnutls3: update to 3.1.17 and add support for TPM7854eebfd1
security/gnutls3: fix include in CPPFLAGS Reported by: kwmc4353ca48b
security/gnutls3: try to fix build for some people - gnutls.info-5 was not being generated for some people PR: ports/183577 Submitted by: Mamoru Iwaki <1wkmmr gmail.com>a7d3c78418
security/gnutls3: fix libtasn1 option PR: ports/183992 Submitted by: sunpoete4ddf9d19c
- Chase security/libtasn1 update - Add UPDATING entry7635644b42
security/gnutls3: update to 3.1.16 Security: 9065b930-3d8b-11e3-bd1a-e840f2096bd0cd53cf6b64
security/gnutls3: fix build without CXX option - Fix build without CXX option Submitted by: decke16617a1660
security/gnutls3: update to 3.1.15 - Update to 3.1.15b81cd6e3b3
security/gnutls3: update to 3.1.14 - Update to 3.1.14 - Fix Makefile header - Add missing library for crywrap - Remove duplicated docs entriesc0fe6ed0b3
security/gnutls3: GNU Transport Layer Security library GnuTLS is a portable ANSI C based library which implements the TLS 1.0 and SSL 3.0 protocols. The library does not include any patented algorithms and is available under the GNU Lesser GPL license. Important features of the GnuTLS library include: - Thread safety - Support for both TLS 1.0 and SSL 3.0 protocols - Support for both X.509 and OpenPGP certificates - Support for basic parsing and verification of certificates - Support for SRP for TLS authentication - Support for TLS Extension mechanism - Support for TLS Compression Methods Additionaly GnuTLS provides an emulation API for the widely used OpenSSL library, to ease integration with existing applications. WWW: http://www.gnutls.org/c12f9bb34d
Add NO_STAGE all over the place in preparation for the staging support (cat: security)a65ed2e51b
- Remove MAKE_JOBS_SAFE variable Approved by: portmgr (bdrewery)d4041784dc
- Convert USE_ICONV=yes to USES=iconv - Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig and USE_GETTEXT=yes to USES=gettext while here95e7081976
- Convert USE_GETTEXT to USES (part 4) Approved by: portmgr (bapt)83f02b963c
Finish converting the whole ports tree to USES=pkgconfig992586fa08
- Add UPDATING entry for libtasn1 update - Bump PORTREVISIONs for dependant portsab635f152e
Update to 2.12.23. Security: http://www.gnutls.org/security.html#GNUTLS-SA-2013-10412e1a725
- Drop automatic dependency detection [1] - Do not link to -lphread directly [2] - Use USE_PKGCONFIG [2] - Pet portlint by removing ABI number references [2] - Drop no longer actual --with-lzo=no switch, lzo support is disabled by default anyway [2] - Bump PORTREVISION PR: 170390 [2] Submitted by: Jason E. Hale [2], A.J. Kehoe IV (Nanoman) [1]68a1991ea3
Respect NOPORTEXAMPLES. PR: 166693 Submitted by: scheidell, crees92e600045d
Update to 2.12.18. This update includes a dirty hack to prevent shared library bump which is necessary because of not properly set LIBTOOLFILES. This would be properly fixed after ports slush is over. PR: 166307 Submitted by: delphij Security: CVE-2012-1569, CVE-2012-1573 Feature safe: yes617e8584da
Update to 2.12.16.06753e5a51
- Remove WITH_FBSD10_FIX, is no longer needede1c6649edf
Update to 2.12.14.2b946ea574