CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

security/libksba 1.8.1

Library to make X.509 certificates

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 1.8.1
Upstream
up to date
Last update
to 1.8.1 · ea2d6d94ae
Quarterly
2026Q4: 1.8.1
WWW
https://www.gnupg.org/software/libksba/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install libksba
installs 1.8.1 from latest; from quarterly (2026Q4) 1.8.1
Port
# cd /usr/ports/security/libksba && make install clean
Size
202 KiB download · 879 KiB installed
Depends on
print/indexinfo 0.3.1_1, security/libgpg-error 1.61
License
GPLv2 or GPLv3 or LGPL3

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.8.11.8.1–
FreeBSD 151.8.11.8.1–
FreeBSD 141.8.11.8.11.8.1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.8.11.8.1–
FreeBSD 141.8.11.8.11.8.1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.8.1.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
297806maintainer-feedback? security/libksba: (unit) test suit is missingNew2026-08-23

Commits (95)

Greg Larkin (glarkin) · 1.0.4
- Updated to 1.0.4 - Renamed a patch file with "make makepatch"

PR:		ports/127578
Submitted by:	Hirohisa Yamaguchi <umq at ueo dot co dot jp>
Approved by:	beech (mentor, implicit)
cfd351a4f9
Greg Larkin (glarkin) · 1.0.3
- Updated to 1.0.3

PR:		ports/120635
Submitted by:	Hirohisa Yamaguchi <umq at ueo dot co dot jp>
Approved by:	beech (mentor, implicit)
a45d88d555
Mark Linimon (linimon) · 1.0.2_1
Reset lofi due to not commits in over 3 months, PR backlog, and no response to email.

Hat:	portmgr
afc0f19cab
Rong-En Fan (rafan) · 1.0.2_1
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script. Specifically, newer autoconf (> 2.13) has different semantic of the configure target. In short, one should use --build=CONFIGURE_TARGET instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk
 - Remove CONFIGURE_TARGET hack in various bsd.*.mk
 - USE_GNOME=gnometarget is now an no-op

Changes to individual ports, other than removing the CONFIGURE_TARGET hack:

= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
  - comms/gnuradio
  - science/abinit
  - science/elmer-fem
  - science/elmer-matc
  - science/elmer-meshgen2d
  - science/elmerfront
  - science/elmerpost

= use x86_64 as ARCH
  - devel/g-wrap

= other changes
  - print/magicfilter
    GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf

Total # of ports modified:  1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)

PR:		126524 (obsoletes 52917)
Submitted by:	rafan
Tested on:	two pointyhat 7-amd64 exp runs (by pav)
Approved by:	portmgr (pav)
741aa71483
Edwin Groothuis (edwin) · 1.0.2_1
Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)
090059a210
Michael Nottebrock (lofi) · 1.0.2
- Clean up dependencies - Update to 1.0.4

PR:		ports/118363, ports/118624
Submitted by: 	Philip M. Gollucci, Hirohisa Yamaguchi
2794e1abe2
Rong-En Fan (rafan) · 1.0.1_1
- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script   supports them.  This is determined by running ``configure --help'' in   do-configure target and set the shell variable _LATE_CONFIGURE_ARGS   which is then passed to CONFIGURE_ARGS. - Remove --mandir and --infodir in ports' Makefile where applicable   Few ports use REINPLACE_CMD to achieve the same effect, remove them too. - 

PR:		ports/111470
Approved by:	portmgr
Discussed with:	stas (Mk/*), gerald (info related stuffs)
Tested by:	pointyhat exp run
f935a609c5
Michael Nottebrock (lofi) · 1.0.1_1
Set infodir to the ports default.
834d449c13
Michael Nottebrock (lofi) · 1.0.1
Update to 1.0.1
4169636a77
Jean-Yves Lefort (jylefort) · 1.0.0_2
Track libgpg-error shlib version change.
4a6abcecf2
Michael Nottebrock (lofi) · 1.0.0_1
Fix build if dependencies are built WITHOUT_NLS.

Submitted by: dinoex
a32dc0c078
Sergei Kolobov (sergei) · 1.0.0_1
- Chase libgpg-error version bump [1] - Add explicit version to libgpg-error dependency where missing [2] - Bump PORTREVISION [1]

Approved by:	maintainers (arved, lofi, novel,
		ports at mcdermottroe dot com) [1]
Suggested by:	novel, lofi [2]
b1000fb4e6
Michael Nottebrock (lofi) · 1.0.0
Update to 1.0.0
8bb12c2be2
Sergei Kolobov (sergei) · 0.9.13_1
- Chase libgpg-error shlib version bump (.1 -> .2) - Bump PORTREVISION
8620fd9b3b
Ade Lovett (ade) · 0.9.13
Conversion to a single libtool environment.

Approved by:	portmgr (kris)
8503536d38
Michael Nottebrock (lofi) · 0.9.13
- Update libksba to 0.9.13 - Chase shared library bumps - Update gnupg-devel to 1.9.20
5f8bdca174
Ade Lovett (ade) · 0.9.12
Mass-conversion to the USE_AUTOTOOLS New World Order.  The code present in bsd.autotools.mk essentially makes this a no-op given that all the old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in exactly the same way as USE_AUTOTOOLS itself.

Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.

Preliminary documentation can be found at:
	http://people.FreeBSD.org/~ade/autotools.txt

which is in the process of being SGMLized before introduction into the
Porters Handbook.

Light blue touch-paper.  Run.
54a0b86543
Michael Nottebrock (lofi) · 0.9.12
Update to 0.9.12
ebc7d38523
Michael Nottebrock (lofi) · 0.9.11
Update libksba to version 0.9.11. Update gnupg-devel to 1.9.16. Update dirmngr to 0.9.2. Bump PORTREVISION for pinentry (for libksba shared library bump).
26b0060617
David E. O'Brien (obrien) · 0.9.10_1
At Kris's request, back out the MACHINE_ARCH spelling correction until after 5.4-RELEASE.
c3d8037aeb
David E. O'Brien (obrien) · 0.9.10_1
Assist getting more ports working on AMD64 by obeying the Ports Collection documentation and use 'ARCH' rather than 'MACHINE_ARCH'.
f2fc2d60ae
Tilman Keskinoz (arved) · 0.9.10_1
Update libgcrypt to 1.2.1. Changes:         * made the code try to lock secure memory pool not only when running as           root,         * fixed type usage in Serpent,         * made the code mix the PID into the entropy pool for better protection           after a fork,         * fixed memory leak in RSA.         * fixed alignment problems in Rijndael,         * fixed memory leak in gcry_pk_si
8310ee07c9
Michael Nottebrock (lofi) · 0.9.10
Update to 0.9.10
47cd9636f1
Michael Nottebrock (lofi) · 0.9.9
Update to 0.9.9

PR: ports/72534
Submitted by: Jose M Rodriguez <josemi@freebsd.jazztel.es>
d3ecc7593b
Michael Nottebrock (lofi) · 0.9.7
Update to 0.9.7
a64ad3ae8c
Michael Nottebrock (lofi) · 0.9.5
Remove pgp signature checking.
468c69e910
Joe Marcus Clarke (marcus) · 0.9.5
Apply a big libtool patch to allow porters to use the libtool installed by the libtoolX ports instead of the one included with each port.  Ports that set USE_LIBTOOL_VER=X will now use the ports version of libtool instead of the included version.  To restore previous behavior, use the new macro, USE_INC_LIBTOOL_VER.  Both macros accept the same argument: a libtool version.

For example, to use the ports version of libtool-1.5, add the following to
your Makefile:

USE_LIBTOOL_VER=        15

To use the included version of libtool with extra hacks provided by
libtool-1.5, add the following to your Makefile:

USE_INC_LIBTOOL_VER=    15

With this change, ports that had to add additional libtool hacks to prevent
.la files from being installed or to fix certain threading issues can now
delete those hacks (after appropriate testing, of course).

PR:		63944
Based on work by:eik and marcus
Approved by:	ade (autotools maintainer)
Tested by:	kris on pointyhat
Bound to be hidden problems:	You bet
9e5632dd66
Michael Nottebrock (lofi) · 0.9.5
Don't try to extract a signature file.
3d25e1f5df
Michael Nottebrock (lofi) · 0.9.5
Update WWW:
6710e3cbc6
Michael Nottebrock (lofi) · 0.9.5
Add dependency on libgcrypt.

Reported by: bento via kris
a75b934bc7
Michael Nottebrock (lofi) · 0.9.5
Update the Aegypten ports to versions compatible with libgcrypt 1.2.0
d0085641e3
Tilman Keskinoz (arved) · 0.9.5
Update libgcrypt to the new stable version 1.2.0 Retire libgcrypt-devel

Switch back to security/libgcrypt and bump PORTREVISION for
- gnutls
- gnutls-devel
- gsasl
- opencdk
- vpnc

libggz:
- Remove dependency on libgcrypt, because the port does not yet
work with the new libgcrypt

libksba:
- Update to 0.9.5
- Pass maintainership to lofi, who already maintains the other
aegypten ports.

Approved by:	lofi

wmbiff:
Switch to security/libgcrypt but no PORTREVISION bump, because the
dependency is optional and the port does not work with the new
libgcrypt and needs to be updated.

No action, because ports don't work with the new libgcrypt and need
to be updated, maintainers informed:
security/newpg
security/pinentry
security/dirmngr
emulators/fuse
emulators/libspectrum
f75ab7e2f3
Tilman Keskinoz (arved) · 0.4.7
Add SIZE

Submitted by:	trevor
c5066876e0
Ade Lovett (ade) · 0.4.7
Whoa there, boy, that's a mighty big commit y'all have there...

Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".

For ports-in-waiting:

	USE_LIBTOOL=YES		->	USE_LIBTOOL_VER=13
	USE_AUTOCONF=YES	->	USE_AUTOCONF_VER=213
	USE_AUTOMAKE=YES	->	USE_AUTOMAKE_VER=14

Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.
3f651573ad
Tilman Keskinoz (arved) · 0.4.7
Make fetchable

PR:		61453
Submitted by:	Jason Harris
b2a013ddc0
Tilman Keskinoz (arved) · 0.4.7
Create the keyring in ${WRKDIR}
e67f9ddc66
Tilman Keskinoz (arved) · 0.4.7
Use new INFO macros
7a86de8bc7
Tilman Keskinoz (arved) · 0.4.7
Verify GnuPG signature if possible.
6e38ddfc1e
Ade Lovett (ade) · 0.4.7
libtool uber-patch

* kill devel/libtool and move to devel/libtool13, upgrading to 1.3.5
* upgrade repo-copied devel/libtool14 to 1.4.3
* break out libltdl into its own separate port
* move to version-numbered binaries/scripts (ie: there is *no* 'libtool'
  any more -- USE_LIBTOOL and USE_LIBTOOL_VER are your friends)

Approved by:	portmgr (kris) - for the bsd.port.mk hooks
Tested by:	bento 4-exp builds (repeatedly)
b2fd75e438
Tilman Keskinoz (arved) · 0.4.7
Update to 0.4.7

Submitted by:	foxfair
6a179d891e
Tilman Keskinoz (arved) · 0.4.6_1
de-pkg-comment
dac0aac36b
Tilman Keskinoz (arved) · 0.4.6_1
Use MASTER_SITE_GNUPG.
c68e6ec0b0
Tilman Keskinoz (arved) · 0.4.6_1
Add a missing file to pkg-plist

Submitted by:	bento
8630ac100e
Tilman Keskinoz (arved) · 0.4.6
Add USE_AUTOCONF_VER instead of BUILD_DEPENDS Add USE_PERL5_BUILD. That hopefully fixes the problems with autom4te

Reported by:	bento (via kris)
b0ef0361cc
Tilman Keskinoz (arved) · 0.4.6
Add libksba, an X.509 library

PR:	43895
3e53859bbb