CVE and update status of the FreeBSD ports tree3,296 unaddressed CVEs in 671 portsAll times are CET
Port details

security/nettle 3.10.2

Low-level cryptographic library

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 3.10.2
Upstream
Higher version available: 4.0
Last update
to 3.10.2 · ea346a7a33
Quarterly
2026Q4: 3.10.2
WWW
https://www.lysator.liu.se/~nisse/nettle/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install nettle
installs 3.10.2 from latest; from quarterly (2026Q4) 3.10.2
Port
# cd /usr/ports/security/nettle && make install clean
# make -C /usr/ports/security/nettle config  # change options first
Size
1.7 MiB download · 8.3 MiB installed
Depends on
math/gmp 6.3.0, print/indexinfo 0.3.1_1
License
GPLv2+ and LGPL3
Options
2 of 2 on in the package: DOCS EXAMPLES

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.10.23.10.2–
FreeBSD 153.10.23.10.2–
FreeBSD 143.10.23.10.23.10.2

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.10.23.10.2–
FreeBSD 143.10.23.10.23.10.2

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.10.2.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (102)

Mathieu Arnold (mat) · 2.7.1
MASTER_SITES cleanup.

- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
  of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
  no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.

While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.

Also, replace some EXTRACT_SUFX occurences with USES=tar:*.

Checked by:	make fetch-urlall-list
With hat:	portmgr
Sponsored by:	Absolight
60d1a83c2a
Dmitry Marakasov (amdmi3) · 2.7.1
- Drop @dirrm* from plist

Approved by:	portmgr blanket
71037c72f4
Johan van Selst (johans) · 2.7.1
Fix build on arm, by correcting asm code for clang

PR:		196505
Submitted by:	sbruno
6ff8795f51
Antoine Brodin (antoine) · 2.7.1
Fix build of info page with ports makeinfo
f8aff51c6e
Emanuel Haupt (ehaupt) · 2.7.1
Remove trailing whitespaces from category security
275e0b44c5
Mathieu Arnold (mat) · 2.7.1
Fix up OPTIONS_DEFINE being after bsd.port.pre.mk.

Sponsored by:	Absolight
6e6d450252
Emanuel Haupt (ehaupt) · 2.7.1
According to the Porter's Handbook (5.12.2.3.) default options must be added to OPTIONS_DEFINE. This policy has been implemented only recently that's why we have many ports violating this policy.

This patch adds the default options specified in the Porter's Handbook to
OPTIONS_DEFINE where they are being used. Ports maintained by
gnome@FreeBSD.org, kde@FreeBSD.org and x11@FreeBSD.org have been excluded.

Approved by:    portmgr (bapt)
5005b67362
Johan van Selst (johans) · 2.7.1
Enable stage support; no functional changes
50e820083d
Baptiste Daroussin (bapt) · 2.7.1
Add NO_STAGE all over the place in preparation for the staging support (cat: security)
a65ed2e51b
Johan van Selst (johans) · 2.7.1
Update Nettle to 2.7.1 (bugfix release)
d82b0db767
Johan van Selst (johans) · 2.7
Update Nettle to 2.7
12eca2a428
Carlo Strub (cs) · 2.6
- Remove A/An in COMMENT - Trim Header where applicable
f87124df63
Johan van Selst (johans) · 2.6
Add -fPIC flag to fix compilation on sparc64

Submitted by:	Anton Shterenlikht <mexas@bristol.ac.uk>
a47261c612
Johan van Selst (johans) · 2.6
- Update Nettle to 2.6 - While here, also trim makefile headers

PR:		ports/175360
Submitted by:	Niclas Zeising <zeising@daemonic.se>
6c7dc422a9
Johan van Selst (johans) · 2.5
- Update Nettle to 2.5 release - Remove local patch that is no longer needed - This release is ABI/API compatible with the previous version

PR:		ports/169742
Submitted by:	Niclas Zeising <zeising@daemonic.se>
1955f615c9
Baptiste Daroussin (bapt) · 2.4
Fix build on CURRENT using m4 -g instead of m4

Approved by:	johans
91b4ed8d8a
Johan van Selst (johans) · 2.4
Update Nettle to 2.4 (bugfix release)
b5e8cad7af
Johan van Selst (johans) · 2.3
- Update nettle to 2.3   The library is intended to be binary compatible with nettle-2.2 - Includes *.pc files for pkgconfig
508010664a
Johan van Selst (johans) · 2.2
Fix nettle build with clang on i386: correct assembly

PR:		ports/159773
Submitted by:	rene
0ae7fe0c5b
Johan van Selst (johans) · 2.2
- Add MASTER_SITE_GNU as new site for nettle - Remove duplicated ex modeline
ce93c8c177
Johan van Selst (johans) · 2.2
Update nettle to 2.2
26ee302738
Johan van Selst (johans) · 2.1
- Update nettle to 2.1 release [1]   The latest stable release of GnuTLS requires this version.   This includes a shared library bump - Grab maintainership for myself (to catch any issues that may arise)

PR:		ports/156173 [1]
Submitted by:	Hirohisa Yamaguchi <umq@ueo.co.jp>
Approved by:	Charlie Kester <corky1951@comcast.net> (old maintainer)
844182c4e4
Doug Barton (dougb) · 2.0_1
By Maintainer's request, toss these ports back into the pool
078cf72640
Alex Dupre (ale) · 2.0_1
Switch to use newer GMP version.

PR:		ports/144487
Submitted by:	ale
Approved by:	portmgr (-exp run by erwin)
bf330a57d4
Martin Wilke (miwi) · 2.0
All ports depending on the nettle library have been updated to use nettle 2.0, and there is no longer any reason to keep separate ports for nettle versions 1.x and 2.x.

PR:		139482 139484
Submitted by:	Charlie Kester <corky1951@comcast.net> (maintainer)
22b5db3722
Philip M. Gollucci (pgollucci) · 1.15_2
- Pass maintainer to submitter

PR:				ports/136448
Submitted by:	Charlie Kester <corky1951@comcast.net>
d4b2e4b2fe
Alex Dupre (ale) · 1.15_2
Chase libgmp and bump PORTREVISION.
523a16e2bd
Rong-En Fan (rafan) · 1.15_1
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script. Specifically, newer autoconf (> 2.13) has different semantic of the configure target. In short, one should use --build=CONFIGURE_TARGET instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk
 - Remove CONFIGURE_TARGET hack in various bsd.*.mk
 - USE_GNOME=gnometarget is now an no-op

Changes to individual ports, other than removing the CONFIGURE_TARGET hack:

= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
  - comms/gnuradio
  - science/abinit
  - science/elmer-fem
  - science/elmer-matc
  - science/elmer-meshgen2d
  - science/elmerfront
  - science/elmerpost

= use x86_64 as ARCH
  - devel/g-wrap

= other changes
  - print/magicfilter
    GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf

Total # of ports modified:  1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)

PR:		126524 (obsoletes 52917)
Submitted by:	rafan
Tested on:	two pointyhat 7-amd64 exp runs (by pav)
Approved by:	portmgr (pav)
741aa71483
Pav Lucistnik (pav) · 1.15_1
- Remove USE_GETOPT_LONG which is a no-op since March 2007
6f8a3dbfb1
Rong-En Fan (rafan) · 1.15_1
- Remove --mandir and --infodir from CONFIGURE_ARGS. They are now default   in bsd.port.mk.

Tested with:	my tinderbox on i386 6
Approved by:	portmgr
c925c340dd
Rong-En Fan (rafan) · 1.15_1
- Correct info file path (PREFIX/share/info -> PREFIX/INFO_PATH) - Bump PORTREVISION

Reported by:	pointyhat exp run
026c183623
Martin Wilke (miwi) · 1.15
- Update to 1.15

PR:		112925
Submitted by:	Nils Vogels <nivo+kw+ports.bfa274@is-root.com>
763f1e581f
Mark Linimon (linimon) · 1.14
Reset jim@corebsd.or.id, since he no longer has access to FreeBSD machines. We appreciate the help in the past.

Hat:		portmgr
9cbfcccd9a
Simon L. B. Nielsen (simon) · 1.14
Fix compile with OpenSSL 0.9.8b in -CURRENT.

PR:		ports/101974
Approved by:	maintainer timeout
9029478e56
Martin Wilke (miwi) · 1.14
- Fix build on 4.x - Fix pkg-plist

Submitted by:	pointyhat via kris
Approved by:	krion (mentor)
b0cc626a88
Martin Wilke (miwi) · 1.14
Update to 1.14

PR:		ports/98434
Submitted by:	miwi
Approved by:	krion (mentor), maintainer timeout
95c2fddf66
Alex Dupre (ale) · 1.13_2
Chase gmp library and bump PORTREVISION.
ffcb54b54f
Edwin Groothuis (edwin) · 1.13_1
SHA256ify

Approved by: krion@
41ce2d5cf9
Edwin Groothuis (edwin) · 1.13_1
security/nettle is out of date : port version is 1.7, available is 1.13

Nettle port is out of date. Nettle website has 1.13 for ages.
	Nettle port needs to be updated for software fixes purposes.

Bumped portversion of lang/pike76

PR:		ports/87655
Submitted by:	Xavier beaudouin <kiwi@oav.net>
dd5f0bf084
Trevor Johnson (trevor) · 1.7_2
SIZEify (maintainer timeout)
8232e82f85
Joe Marcus Clarke (marcus) · 1.7_2
Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.

(Part 1)
73f7c91b5d
Sergei Kolobov (sergei) · 1.7_1
- Install shared library (mostly for Pike 7.5 crypto toolkit) - Install documentation and examples - Utilize INFO

PR:		58338
Submitted by:	Xavier Beaudouin <kiwi@plonk.home.oav.net>
Approved by:	maintainer
34cbd67e9d
Dirk Meyer (dinoex) · 1.7
- don't clobber any given LDFLAGS   resolves conflitcs with bsd.openssl.mk Approved by:	jim@corebsd.or.id
be6a9f559a
Foxfair Hu (foxfair) · 1.7
PR:		51650 Submitted by:	Jim Geovedi <jim@corebsd.or.id> Update to 1.7
0882052298
Akinori MUSHA (knu) · 1.5_2
De-pkg-comment.
2c41b9e5f3
Mario Sergio Fujikawa Ferreira (lioux) · 1.5_2
o Rollback PORTCOMMENT modifications while this feature's implementation   is better studied o Turn PORTCOMMENT variable in Makefile back into pkg-comment files

Approved by:	kris (portmgr hat),
		portmgr, re (silence)
f0a1969d34
Adam Weinberger (adamw) · 1.5_2
Use PORTCOMMENT in the Makefile, and whack the pkg-comment.

Approved by:	pat
d9611f9375
Ying-Chieh Liao (ijliao) · 1.5_2
- Support CFLAGS/CXXFLAGS properly - Pass "--no-split" flag to makeinfo

PR:		42896
Submitted by:	Ports Fury
fd774fa7f8
Ying-Chieh Liao (ijliao) · 1.5
bump libgmp4 libversion
03ff469809
Ying-Chieh Liao (ijliao) · 1.5
libgmp3 -> libgmp4
7467468397