CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

security/gnutls 3.8.13

GNU Transport Layer Security library

Port info

Maintainer
tijl@FreeBSD.org
Packages
latest: 3.8.13
Upstream
up to date
Last update
to 3.8.13 · b2662314eb
Quarterly
2026Q4: 3.8.13
Formerly
security/gnutls3 until 2014-07-22
WWW
https://gnutls.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install gnutls
installs 3.8.13 from latest; from quarterly (2026Q4) 3.8.13
Port
# cd /usr/ports/security/gnutls && make install clean
# make -C /usr/ports/security/gnutls config  # change options first
Size
2.7 MiB download · 7.7 MiB installed
Depends on
archivers/brotli 1.2.1,1, archivers/zstd 1.5.7_2, devel/gettext-runtime 1.0_1, devel/libunistring 1.4.2, dns/libidn2 2.3.8, math/gmp 6.3.0, print/indexinfo 0.3.1_1, security/libtasn1 4.21.0, security/nettle 3.10.2, security/p11-kit 0.26.5_1
License
GPLv3+ and LGPL21+
Options
6 of 8 on in the package: EXAMPLES IDN KTLS MAN3 NLS P11KIT
Show the 2 options that are off
DANE SRP

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.8.133.8.13–
FreeBSD 153.8.133.8.13–
FreeBSD 143.8.133.8.133.8.13

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.8.133.8.13–
FreeBSD 143.8.133.8.133.8.13

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.8.13.

Fixed (25)

Show 25 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
274610maintainer-feedback? security/gnutls: Optionise INFO and MANPAGESNew2023-10-20

Commits (248)

Bryan Drewery (bdrewery) · 3.2.16
Update to 3.2.16
7b0f5d94f5
Tijl Coosemans (tijl) · 3.2.15
- Replace security/gnutls with security/gnutls3 and update to 3.2.15 - Bump PORTREVISION on all ports that depend on security/gnutls and   adjust all ports that depend on security/gnutls3 - Update mail/anubis to version 4.2 which supports gnutls 3.x - Update mail/libvmime to a development snapshot (recommended by upstream   developers)

PR:		191274
Exp-run by:	antoine
Approved by:	portmgr (antoine)
3ab1b8443e
Tijl Coosemans (tijl) · 3.1.25_3 · as security/gnutls3
- Convert security/trousers to USES=libtool and bump dependent ports - Use standard USE_AUTOTOOLS - Add INSTALL_TARGET=install-strip - Drop PTHREAD_LIBS
3c18c37a10
Adam Weinberger (adamw) · 2.12.23_6
Add DOCS to OPTIONS_DEFINE to ports that check for PORT_OPTIONS:MDOCS.
5d2373a092
Baptiste Daroussin (bapt) · 3.1.25_2 · as security/gnutls3
Fix build on system built WITHOUT_INFO

With hat:	portmgr
698f728a34
Bryan Drewery (bdrewery) · 3.1.25_2 · as security/gnutls3
- Fix build when info files get regenerated, thus causing info-5 to   disappear.

Depending on which makeinfo version is used it would spit out 6
  files or 5 (.info,1-5). It would not always regenerate though.
  The bundled info files went to -5. Now force regenerate it always
  using the base makeinfo(1) and use --no-split so only 1 file is used.

PR:		190693
Reported by:	many
5740ccc8b9
Bryan Drewery (bdrewery) · 3.1.25_1 · as security/gnutls3
- No need for print/texinfo dependency for makeinfo as it is in base

Reported by:	tijl
c618f56e32
Cy Schubert (cy) · 2.12.23_6
Patch CVE-2014-3466 to prevent memory corruption due to server hello parsing.

Obtained from:  https://gitorious.org/gnutls/gnutls/commit/688ea6428a432c39203d00acd1af0e7684e5ddfd
Security:       CVE-2014-3466, 9733c480-ebff-11e3-970b-206a8a720317
8887883116
Bryan Drewery (bdrewery) · 3.1.25 · as security/gnutls3
- Update to 3.1.25

This fixes a security issue:
    http://www.gnutls.org/security.html#GNUTLS-SA-2014-3

Security:	027af74d-eb56-11e3-9032-000c2980a9f3
fb8fa75b90
Bryan Drewery (bdrewery) · 3.1.23_2 · as security/gnutls3
- Use proper name for libgnutlsdane.so

Reported by:	tijl
284e0975a0
Bryan Drewery (bdrewery) · 3.1.23_1 · as security/gnutls3
- Convert to USES=libtool - texinfo is only needed when DOCS is selected [1]

PR:		ports/189861 [1]
Reported by:	marino [1]
232590eb69
Tijl Coosemans (tijl) · 2.12.23_5
- New LIB_DEPENDS syntax. - USES=libtool:keepla tar:bzip2. - Remove -fPIC flag.  Leftover from an old version.
4bf5eb7e2f
Bryan Drewery (bdrewery) · 3.1.23 · as security/gnutls3
- Update to 3.1.23 - Convert to USES=tar

Changes:
  http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/7415
d8494620a9
Bryan Drewery (bdrewery) · 3.1.22_1 · as security/gnutls3
- Hide libdane support behind option LIBDANE - Disable by default as it ends up pulling in openssl via unbound, which   is odd for gnutls3 to do.

PR:		ports/188184
Submitted by:	Lawrence "The Dreamer" Chen <beastie@tardisi.com> (based on)
Discussed with:	wg
05c72c0613
Bryan Drewery (bdrewery) · 3.1.22 · as security/gnutls3
- Take maintainership for now

Approved by:	wg (maintainer)
f94dd82768
Bryan Drewery (bdrewery) · 3.1.22 · as security/gnutls3
- Update to 3.1.22   This fixes the following vulnerabilities:     CVE-2014-0092 - Certificate verification issue     CVE-2014-1959 - Certificate verification issue

All users are recommended to upgrade ASAP.

Security:	f645aa90-a3e8-11e3-a422-3c970e169bc2
eb60a8b49e
Bryan Drewery (bdrewery) · 2.12.23_4
- Add fixes for:   CVE-2014-0092 - Certificate verification issue   CVE-2014-1959 - Certificate verification issue

All users are recommended to upgrade ASAP.

Security:	f645aa90-a3e8-11e3-a422-3c970e169bc2
6a52cb9044
Roman Bogorodskiy (novel) · 2.12.23_3
Add an additional mirror to MASTER_SITES.

PR:		185901
Submitted by:	Bruno Machado <bruno@bsd.com.br>
7db971bbee
Baptiste Daroussin (bapt) · 2.12.23_3
Fix properties on pkg-plist
e04b632220
Roman Bogorodskiy (novel) · 2.12.23_3
Fix build with perl 5.18.

PR:		185595
Reviewed by:	marino
Obtained from:	Debian
bae79c3424
John Marino (marino) · 2.12.23_3
security/gnutls: Fix hardcoded perl paths

Perl was recently added as a build tool for gnutls, and immediately the
port fails to build on systems that do not have the /usr/bin/perl
symlink.  The cause is harded perl path of "/usr/bin/perl".  Shebangfix
will fix a couple of these, REINPLACE_CMD will fix the other.  Committed
under the new "Just fix it" blanket, but it was tested in redports.
afcfe0e2fa
Roman Bogorodskiy (novel) · 2.12.23_3
- Fix possbile DoS in TLS record decoding [1] - Fix installation without NLS [2] - Require gmake and perl for build because in some   occasions it will rebuild the documentation that   works in a proper way with gmake only and needs perl - Bump PORTREVISION

Security:	CVE-2013-2116
Reported by:	mat [2]
6fa779c1b7
Roman Bogorodskiy (novel) · 2.12.23_2
- Support stagedir - Add LICENSE - Fix pkg-descr formatting

PR:		185409
Submitted by:	Takefu <takefu@airport.fm>
8f480fffe9
William Grzybowski (wg) · 3.1.18 · as security/gnutls3
security/gnutls3: make danetool3 work

PR:		ports/185296
a98525e833
William Grzybowski (wg) · 3.1.18 · as security/gnutls3
security/gnutls3: update to 3.1.18

Changes: http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/7190
f2aa42e69d
William Grzybowski (wg) · 3.1.17 · as security/gnutls3
security/gnutls3: fix build without autogen

PR:		ports/184279
Submitted by:	mandree
5d1e07ff80
William Grzybowski (wg) · 3.1.17 · as security/gnutls3
security/gnutls3: update to 3.1.17 and add support for TPM
7854eebfd1
William Grzybowski (wg) · 3.1.16_1 · as security/gnutls3
security/gnutls3: fix include in CPPFLAGS

Reported by:	kwm
c4353ca48b
William Grzybowski (wg) · 3.1.16_1 · as security/gnutls3
security/gnutls3: try to fix build for some people

- gnutls.info-5 was not being generated for some people

PR:		ports/183577
Submitted by:	Mamoru Iwaki <1wkmmr gmail.com>
a7d3c78418
William Grzybowski (wg) · 3.1.16_1 · as security/gnutls3
security/gnutls3: fix libtasn1 option

PR:		ports/183992
Submitted by:	sunpoet
e4ddf9d19c
Roman Bogorodskiy (novel) · 2.12.23_2
- Chase security/libtasn1 update - Add UPDATING entry
7635644b42
William Grzybowski (wg) · 3.1.16 · as security/gnutls3
security/gnutls3: update to 3.1.16

Security:	9065b930-3d8b-11e3-bd1a-e840f2096bd0
cd53cf6b64
William Grzybowski (wg) · 3.1.15 · as security/gnutls3
security/gnutls3: fix build without CXX option

- Fix build without CXX option

Submitted by:	decke
16617a1660
William Grzybowski (wg) · 3.1.15 · as security/gnutls3
security/gnutls3: update to 3.1.15

- Update to 3.1.15
b81cd6e3b3
William Grzybowski (wg) · 3.1.14 · as security/gnutls3
security/gnutls3: update to 3.1.14

- Update to 3.1.14
- Fix Makefile header
- Add missing library for crywrap
- Remove duplicated docs entries
c0fe6ed0b3
William Grzybowski (wg) · 3.1.9.1 · as security/gnutls3
security/gnutls3: GNU Transport Layer Security library

GnuTLS is a portable ANSI C based library which implements the TLS 1.0 and
SSL 3.0 protocols. The library does not include any patented algorithms and
is available under the GNU Lesser GPL license.

Important features of the GnuTLS library include:
- Thread safety
- Support for both TLS 1.0 and SSL 3.0 protocols
- Support for both X.509 and OpenPGP certificates
- Support for basic parsing and verification of certificates
- Support for SRP for TLS authentication
- Support for TLS Extension mechanism
- Support for TLS Compression Methods

Additionaly GnuTLS provides an emulation API for the widely used
OpenSSL library, to ease integration with existing applications.

WWW:	http://www.gnutls.org/
c12f9bb34d
Baptiste Daroussin (bapt) · 2.12.23_1
Add NO_STAGE all over the place in preparation for the staging support (cat: security)
a65ed2e51b
Alex Kozlov (ak) · 2.12.23_1
- Remove MAKE_JOBS_SAFE variable

Approved by:	portmgr (bdrewery)
d4041784dc
Marcus von Appen (mva) · 2.12.23_1
- Convert USE_ICONV=yes to USES=iconv - Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig and   USE_GETTEXT=yes to USES=gettext while here
95e7081976
Alex Kozlov (ak) · 2.12.23_1
- Convert USE_GETTEXT to USES (part 4)

Approved by:	portmgr (bapt)
83f02b963c
Baptiste Daroussin (bapt) · 2.12.23_1
Finish converting the whole ports tree to USES=pkgconfig
992586fa08
Roman Bogorodskiy (novel) · 2.12.23_1
- Add UPDATING entry for libtasn1 update - Bump PORTREVISIONs for dependant ports
ab635f152e
Roman Bogorodskiy (novel) · 2.12.23
Update to 2.12.23.

Security:	http://www.gnutls.org/security.html#GNUTLS-SA-2013-1
0412e1a725
Roman Bogorodskiy (novel) · 2.12.18_1
- Drop automatic dependency detection [1] - Do not link to -lphread directly [2] - Use USE_PKGCONFIG [2] - Pet portlint by removing ABI number references [2] - Drop no longer actual --with-lzo=no switch, lzo support   is disabled by default anyway [2] - Bump PORTREVISION

PR:		170390 [2]
Submitted by:	Jason E. Hale [2], A.J. Kehoe IV (Nanoman) [1]
68a1991ea3
Roman Bogorodskiy (novel) · 2.12.18
Respect NOPORTEXAMPLES.

PR:		166693
Submitted by:	scheidell, crees
92e600045d
Roman Bogorodskiy (novel) · 2.12.18
Update to 2.12.18. This update includes a dirty hack to prevent shared library bump which is necessary because of not properly set LIBTOOLFILES. This would be properly fixed after ports slush is over.

PR:		166307
Submitted by:	delphij
Security:	CVE-2012-1569, CVE-2012-1573
Feature safe:	yes
617e8584da
Roman Bogorodskiy (novel) · 2.12.16
Update to 2.12.16.
06753e5a51
Martin Wilke (miwi) · 2.12.14
- Remove WITH_FBSD10_FIX, is no longer needed
e1c6649edf
Roman Bogorodskiy (novel) · 2.12.14
Update to 2.12.14.
2b946ea574