- Fix build on FreeBSD 10 Reported by: pointyhat3d7e506643
GnuTLS -- Stack write buffer overflowentered 2025-11-21
GNU Transport Layer Security library
# pkg install gnutlsinstalls 3.8.13 from latest; from quarterly (2026Q4) 3.8.13# cd /usr/ports/security/gnutls && make install clean# make -C /usr/ports/security/gnutls config # change options first
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 3.8.13 | 3.8.13 | – |
| FreeBSD 15 | 3.8.13 | 3.8.13 | – |
| FreeBSD 14 | 3.8.13 | 3.8.13 | 3.8.13 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 3.8.13 | 3.8.13 | – |
| FreeBSD 14 | 3.8.13 | 3.8.13 | 3.8.13 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
pkg audit for the packaged version 3.8.13.CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, CVE-2025-6395
no CVE referenced
no CVE referenced
no CVE referenced
no CVE referenced
no CVE referenced
no CVE referenced
| PR | Summary | Status | Changed |
|---|---|---|---|
| 274610 | maintainer-feedback? security/gnutls: Optionise INFO and MANPAGES | New | 2023-10-20 |
- Fix build on FreeBSD 10 Reported by: pointyhat3d7e506643
Update to 2.12.12.9edecec48c
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS) - Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav6f6fbe4bdfUpdate to 2.12.11.80874408d4
Update to 2.12.10.afa2f37501
Update to 2.12.9.2c478db886
- Switch to nettle as crypto library as it's primary library supported by upstream and additionally there are some inconsistences with libgcrypt 1.5.x. - Bump PORTREVISION0d06d2359a
- Chase the libgcrypt shared lib versione0755b977d
Update to 2.12.7.05e3aa0553
- Bump PORTREVISION for the .pc fixfa82b180c7
Proper fix for gnutls.pc generation by ripping out 'zlib' part from configure as it was originally submitted by Fumiyuki Shimizu in ports/157647. Pointy hat to: novelfdcb7cc1a2
Fix gnutls.pc file by stripping 'zlib' from Requires.private. PR: 157647 (based on) Submitted by: Fumiyuki Shimizu794580c534
Update to 2.12.6.1.aabc2b4486
Sync to new bsd.autotools.mk4a8684e352
Chase security/libgcrypt shlib bump. PR: ports/148755 Submitted by: Hirohisa Yamaguchi <umq@ueo.co.jp>15c1551ea3
Bounce PORTREVISION for gettext-related ports. Have fun, ya'll.8d837132c7
Update to 2.8.6.47b113644d
Introduce WITH_CAMELLIA knob to enable camellia ciphers (off by default). PR: 138721 Submitted by: Ivan Sy Jr <ivan_jr@yahoo.com>cbfda45aa2
Update to 2.8.3.89dbb0c8e2
-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22. -Update libtool and libltdl to 2.2.6a. -Remove devel/libtool15 and devel/libltdl15. -Fix ports build with libtool22/libltdl22. -Bump ports that depend on libltdl22 due to shared library version change. -Explain what to do update in the UPDATING. It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop and applications in the runtime. With help: marcus and kwm Pointyhat-exp: a few times by pav Tested by: pgollucci, "Romain Tartière" <romain@blogreen.org>, and a few MarcusCom CVS users. Also, I might have missed a few. Repocopy by: marcus Approved by: portmgr789d75c728
Update to 2.6.5.b37328918f
Mark MAKE_JOBS_SAFE for SMP compilation. PR: 133001 Submitted by: mm25a25e04c4
Clean out MASTER_SITES. Reported by: Atom Powers <apowers@digipen.edu>b0cc15a039
Update to 2.6.4.31ee2f68d5
Chase libtasn1 shared library version bump.bfdac7a749
- Remove conditional checks for FreeBSD 5.x and olderb2a96c6df1
- Update to 2.6.3 - Remove WITH_OPENCDK knob since it's not relevant anymore - Add WITH_LZO knob PR: 127330 (partially) Submitted by: Yarema <yds@CoolRat.org>87b685f5d4
- Bump PORTREVISION due to share library version bump in security/libgcrypt PR: ports/127478af76562086
- Fix the patch for CVE-2008-4989 not to cause segfaults on runtime anymore PR: ports/128868 Obtained from: vendor3c87dd26c7
- Update to 2.4.2 - Fix CVE-2008-4989 PR: 128868 Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru>b0d0a95407
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script. Specifically, newer autoconf (> 2.13) has different semantic of the configure target. In short, one should use --build=CONFIGURE_TARGET instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning and the old semantic may be removed in later autoconf releases.
To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.
To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.
Changes to Mk/*:
- Add runtime detection magic in bsd.port.mk
- Remove CONFIGURE_TARGET hack in various bsd.*.mk
- USE_GNOME=gnometarget is now an no-op
Changes to individual ports, other than removing the CONFIGURE_TARGET hack:
= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
- comms/gnuradio
- science/abinit
- science/elmer-fem
- science/elmer-matc
- science/elmer-meshgen2d
- science/elmerfront
- science/elmerpost
= use x86_64 as ARCH
- devel/g-wrap
= other changes
- print/magicfilter
GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf
Total # of ports modified: 1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)
PR: 126524 (obsoletes 52917)
Submitted by: rafan
Tested on: two pointyhat 7-amd64 exp runs (by pav)
Approved by: portmgr (pav)741aa71483Fix broken header installed by gnutls: it would silently break ports that makes use of gnutls_certificate_print_formats_t enum.43e8ecb7b6
- Remove USE_GCC where it can be satisfied with base compiler on following FreeBSD versions: 5.3 and up, 6.x, 7.x, 8-CURRENTefa63f6ba4
Update to 2.4.1.ce356765b5
Update to 2.4.0. Unlike previous major version bumps, this time ABI hasn't changed, so the shared libraries' versions stayed the same. Therefore, this update doesn't requite any special handling.91cf90782c
Add WITHOUT_OPENCDK and WITHOUT_LIBTASN1 knobs to respect if the user wishes to build gnutls with the included versions instead of the ones from ports. PR: 121357 Submitted by: Naram Qashat <cyberbotx@cyberbotx.com>fdf9564130
Bump portrevision due to upgrade of devel/gettext. The affected ports are the ones with gettext as a run-dependency according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT in Makefile (29 of them). PR: ports/124340 Submitted by: edwin@ Approved by: portmgr (pav)090059a210
Update to 2.2.5. PR: 123828 Submitted by: Yoshisato YANAGISAWA <osho@pcc-software.org>42145cbaa2
Update to 2.2.2.4585b4adc0
Add --disable-guild to CONFIGURE_ARGS to avoid build problem with guile. Reported by: marcus893db4083d
Chase libgcrypt library version6c7eeeeeb4
Chase opencdk shared lib version change. Approved by: portmgr (pav) (as a part of security/opencdk commit)1fb5bc60d9
Update to 2.0.2.e57d88f50b
- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script supports them. This is determined by running ``configure --help'' in do-configure target and set the shell variable _LATE_CONFIGURE_ARGS which is then passed to CONFIGURE_ARGS. - Remove --mandir and --infodir in ports' Makefile where applicable Few ports use REINPLACE_CMD to achieve the same effect, remove them too. - PR: ports/111470 Approved by: portmgr Discussed with: stas (Mk/*), gerald (info related stuffs) Tested by: pointyhat exp runf935a609c5
- Update to 1.6.3 - Use ltverhack to avoid unnecessary shared library version changes in future3ee84121a1
Update to 1.6.2.eaa5d0a692
Track libgpg-error shlib version change.4a6abcecf2
Chase security/opencdk update.de55387aa4
- Fix build with 4.X Approved by: novel@2f2fa3cb0a
Update to 1.6.1.47f7062f8d