CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

security/gnutls 3.8.13

GNU Transport Layer Security library

Port info

Maintainer
tijl@FreeBSD.org
Packages
latest: 3.8.13
Upstream
up to date
Last update
to 3.8.13 · b2662314eb
Quarterly
2026Q4: 3.8.13
Formerly
security/gnutls3 until 2014-07-22
WWW
https://gnutls.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install gnutls
installs 3.8.13 from latest; from quarterly (2026Q4) 3.8.13
Port
# cd /usr/ports/security/gnutls && make install clean
# make -C /usr/ports/security/gnutls config  # change options first
Size
2.7 MiB download · 7.7 MiB installed
Depends on
archivers/brotli 1.2.1,1, archivers/zstd 1.5.7_2, devel/gettext-runtime 1.0_1, devel/libunistring 1.4.2, dns/libidn2 2.3.8, math/gmp 6.3.0, print/indexinfo 0.3.1_1, security/libtasn1 4.21.0, security/nettle 3.10.2, security/p11-kit 0.26.5_1
License
GPLv3+ and LGPL21+
Options
6 of 8 on in the package: EXAMPLES IDN KTLS MAN3 NLS P11KIT
Show the 2 options that are off
DANE SRP

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.8.133.8.13–
FreeBSD 153.8.133.8.13–
FreeBSD 143.8.133.8.133.8.13

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.8.133.8.13–
FreeBSD 143.8.133.8.133.8.13

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.8.13.

Fixed (25)

Show 25 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
274610maintainer-feedback? security/gnutls: Optionise INFO and MANPAGESNew2023-10-20

Commits (248)

Martin Wilke (miwi) · 2.12.12
- Fix build on FreeBSD 10

Reported by:	pointyhat
3d7e506643
Roman Bogorodskiy (novel) · 2.12.12
Update to 2.12.12.
9edecec48c
Dmitry Marakasov (amdmi3) · 2.12.11
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS) - Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:		157936
Submitted by:	myself
Exp-runs by:	pav
Approved by:	pav
6f6fbe4bdf
Roman Bogorodskiy (novel) · 2.12.11
Update to 2.12.11.
80874408d4
Roman Bogorodskiy (novel) · 2.12.10
Update to 2.12.10.
afa2f37501
Roman Bogorodskiy (novel) · 2.12.9
Update to 2.12.9.
2c478db886
Roman Bogorodskiy (novel) · 2.12.7_2
- Switch to nettle as crypto library as it's primary library   supported by upstream and additionally there are some   inconsistences with libgcrypt 1.5.x. - Bump PORTREVISION
0d06d2359a
Steve Wills (swills) · 2.12.7_1
- Chase the libgcrypt shared lib version
e0755b977d
Roman Bogorodskiy (novel) · 2.12.7
Update to 2.12.7.
05e3aa0553
Pav Lucistnik (pav) · 2.12.6.1_1
- Bump PORTREVISION for the .pc fix
fa82b180c7
Roman Bogorodskiy (novel) · 2.12.6.1
Proper fix for gnutls.pc generation by ripping out 'zlib' part from configure as it was originally submitted by Fumiyuki Shimizu in ports/157647.

Pointy hat to:		novel
fdcb7cc1a2
Roman Bogorodskiy (novel) · 2.12.6.1
Fix gnutls.pc file by stripping 'zlib' from Requires.private.

PR:		157647 (based on)
Submitted by:	Fumiyuki Shimizu
794580c534
Roman Bogorodskiy (novel) · 2.12.6.1
Update to 2.12.6.1.
aabc2b4486
Ade Lovett (ade) · 2.8.6_2
Sync to new bsd.autotools.mk
4a8684e352
Wesley Shields (wxs) · 2.8.6_2
Chase security/libgcrypt shlib bump.

PR:		ports/148755
Submitted by:	Hirohisa Yamaguchi <umq@ueo.co.jp>
15c1551ea3
Ade Lovett (ade) · 2.8.6_1
Bounce PORTREVISION for gettext-related ports.  Have fun, ya'll.
8d837132c7
Roman Bogorodskiy (novel) · 2.8.6
Update to 2.8.6.
47b113644d
Roman Bogorodskiy (novel) · 2.8.3
Introduce WITH_CAMELLIA knob to enable camellia ciphers (off by default).

PR:		138721
Submitted by:	Ivan Sy Jr <ivan_jr@yahoo.com>
cbfda45aa2
Roman Bogorodskiy (novel) · 2.8.3
Update to 2.8.3.
89dbb0c8e2
Jeremy Messenger (mezz) · 2.6.5
-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22. -Update libtool and libltdl to 2.2.6a. -Remove devel/libtool15 and devel/libltdl15. -Fix ports build with libtool22/libltdl22. -Bump ports that depend on libltdl22 due to shared library version change. -Explain what to do update in the UPDATING.

It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.

With help:	marcus and kwm
Pointyhat-exp:	a few times by pav
Tested by:	pgollucci, "Romain Tartière" <romain@blogreen.org>, and
		a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by:	marcus
Approved by:	portmgr
789d75c728
Roman Bogorodskiy (novel) · 2.6.5
Update to 2.6.5.
b37328918f
Roman Bogorodskiy (novel) · 2.6.4
Mark MAKE_JOBS_SAFE for SMP compilation.

PR:		133001
Submitted by:	mm
25a25e04c4
Roman Bogorodskiy (novel) · 2.6.4
Clean out MASTER_SITES.

Reported by:	Atom Powers <apowers@digipen.edu>
b0cc15a039
Roman Bogorodskiy (novel) · 2.6.4
Update to 2.6.4.
31ee2f68d5
Roman Bogorodskiy (novel) · 2.6.3_1
Chase libtasn1 shared library version bump.
bfdac7a749
Pav Lucistnik (pav) · 2.6.3
- Remove conditional checks for FreeBSD 5.x and older
b2a96c6df1
Roman Bogorodskiy (novel) · 2.6.3
- Update to 2.6.3 - Remove WITH_OPENCDK knob since it's not relevant anymore - Add WITH_LZO knob

PR:		127330 (partially)
Submitted by:	Yarema <yds@CoolRat.org>
87b685f5d4
Rong-En Fan (rafan) · 2.4.2_2
- Bump PORTREVISION due to share library version bump in security/libgcrypt

PR:		 ports/127478
af76562086
Pav Lucistnik (pav) · 2.4.2_1
- Fix the patch for CVE-2008-4989 not to cause segfaults on runtime anymore

PR:		ports/128868
Obtained from:	vendor
3c87dd26c7
Roman Bogorodskiy (novel) · 2.4.2
- Update to 2.4.2 - Fix CVE-2008-4989

PR:		128868
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>
b0d0a95407
Rong-En Fan (rafan) · 2.4.1_1
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script. Specifically, newer autoconf (> 2.13) has different semantic of the configure target. In short, one should use --build=CONFIGURE_TARGET instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk
 - Remove CONFIGURE_TARGET hack in various bsd.*.mk
 - USE_GNOME=gnometarget is now an no-op

Changes to individual ports, other than removing the CONFIGURE_TARGET hack:

= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
  - comms/gnuradio
  - science/abinit
  - science/elmer-fem
  - science/elmer-matc
  - science/elmer-meshgen2d
  - science/elmerfront
  - science/elmerpost

= use x86_64 as ARCH
  - devel/g-wrap

= other changes
  - print/magicfilter
    GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf

Total # of ports modified:  1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)

PR:		126524 (obsoletes 52917)
Submitted by:	rafan
Tested on:	two pointyhat 7-amd64 exp runs (by pav)
Approved by:	portmgr (pav)
741aa71483
Xin LI (delphij) · 2.4.1_1
Fix broken header installed by gnutls: it would silently break ports that makes use of gnutls_certificate_print_formats_t enum.
43e8ecb7b6
Pav Lucistnik (pav) · 2.4.1
- Remove USE_GCC where it can be satisfied with base compiler on following   FreeBSD versions: 5.3 and up, 6.x, 7.x, 8-CURRENT
efa63f6ba4
Roman Bogorodskiy (novel) · 2.4.1
Update to 2.4.1.
ce356765b5
Roman Bogorodskiy (novel) · 2.4.0
Update to 2.4.0.

Unlike previous major version bumps, this time ABI hasn't changed, so
the shared libraries' versions stayed the same. Therefore, this update
doesn't requite any special handling.
91cf90782c
Roman Bogorodskiy (novel) · 2.2.5_1
Add WITHOUT_OPENCDK and WITHOUT_LIBTASN1 knobs to respect if the user wishes to build gnutls with the included versions instead of the ones from ports.

PR:		121357
Submitted by:	Naram Qashat <cyberbotx@cyberbotx.com>
fdf9564130
Edwin Groothuis (edwin) · 2.2.5_1
Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)
090059a210
Roman Bogorodskiy (novel) · 2.2.5
Update to 2.2.5.

PR:		123828
Submitted by:	Yoshisato YANAGISAWA <osho@pcc-software.org>
42145cbaa2
Roman Bogorodskiy (novel) · 2.2.2
Update to 2.2.2.
4585b4adc0
Roman Bogorodskiy (novel) · 2.0.2_2
Add --disable-guild to CONFIGURE_ARGS to avoid build problem with guile.

Reported by:	marcus
893db4083d
Tilman Keskinoz (arved) · 2.0.2_2
Chase libgcrypt library version
6c7eeeeeb4
Roman Bogorodskiy (novel) · 2.0.2_1
Chase opencdk shared lib version change.

Approved by:	portmgr (pav) (as a part of security/opencdk commit)
1fb5bc60d9
Roman Bogorodskiy (novel) · 2.0.2
Update to 2.0.2.
e57d88f50b
Rong-En Fan (rafan) · 1.6.3
- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script   supports them.  This is determined by running ``configure --help'' in   do-configure target and set the shell variable _LATE_CONFIGURE_ARGS   which is then passed to CONFIGURE_ARGS. - Remove --mandir and --infodir in ports' Makefile where applicable   Few ports use REINPLACE_CMD to achieve the same effect, remove them too. - 

PR:		ports/111470
Approved by:	portmgr
Discussed with:	stas (Mk/*), gerald (info related stuffs)
Tested by:	pointyhat exp run
f935a609c5
Roman Bogorodskiy (novel) · 1.6.3
- Update to 1.6.3 - Use ltverhack to avoid unnecessary shared library version changes   in future
3ee84121a1
Roman Bogorodskiy (novel) · 1.6.2
Update to 1.6.2.
eaa5d0a692
Jean-Yves Lefort (jylefort) · 1.6.1_2
Track libgpg-error shlib version change.
4a6abcecf2
Roman Bogorodskiy (novel) · 1.6.1_1
Chase security/opencdk update.
de55387aa4
Martin Wilke (miwi) · 1.6.1
- Fix build with 4.X

Approved by:	novel@
2f2fa3cb0a
Roman Bogorodskiy (novel) · 1.6.1
Update to 1.6.1.
47f7062f8d