CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

security/p11-kit 0.26.5_1

Library for loading and enumerating of PKCS#11 modules

Port info

Maintainer
novel@FreeBSD.org
Packages
latest: 0.26.5_1
Upstream
up to date
Last update
to 0.26.5_1 · 94d525cb7b
Quarterly
2026Q4: 0.26.5_1
WWW
https://p11-glue.freedesktop.org/p11-kit.html
Links
cgit · VuXML

Install

Package
# pkg install p11-kit
installs 0.26.5_1 from latest; from quarterly (2026Q4) 0.26.5_1
Port
# cd /usr/ports/security/p11-kit && make install clean
# make -C /usr/ports/security/p11-kit config  # change options first
Size
704 KiB download · 4.4 MiB installed
Depends on
devel/libffi 3.8.0, security/libtasn1 4.21.0
License
BSD3CLAUSE
Options
2 of 3 on in the package: DOCS MANPAGES
Show the 1 options that are off
TEST

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 160.26.5_10.26.5_1–
FreeBSD 150.26.5_10.26.5_1–
FreeBSD 140.26.5_10.26.5_10.26.5_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 150.26.5_10.26.5_1–
FreeBSD 140.26.5_10.26.5_10.26.5_1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 0.26.5_1.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (82)

Roman Bogorodskiy (novel) · 0.23.7
security/p11-kit: update to 0.23.7
6a29cc40b8
Roman Bogorodskiy (novel) · 0.23.5
security/p11-kit: update to 0.23.5

Patches dropped for issues fixed upstream.
de68a7d39e
Roman Bogorodskiy (novel) · 0.23.4
security/p11-kit: update to 0.23.4

- Remove patches merged upstream
 - Add a workaround for missing getpeereid() check
 - Fix missing headers for kill(2) and SIGKILL
 - Add a workaround to skip installation of the
   systemd related bits
 - Define TEST_TARGET
c8cee34a54
Roman Bogorodskiy (novel) · 0.23.3
security/p11-kit: update to 0.23.3

- project has moved to github
 - p11-kit-remote and trust-extract-compat were moved
   from lib/p11-kit to libexec/p11-kit
0dd0cd8cee
Mathieu Arnold (mat) · 0.23.2
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight
597afc47ba
Roman Bogorodskiy (novel) · 0.23.2
security/p11-kit: update to 0.23.2

- update to 0.23.2
- fix WWW: line formatting as suggested by portlint
147e982d12
Koop Mast (kwm) · 0.23.1_1
Drop .la files.

Approved by:	maintainer via IRC
Differential Revision:	https://reviews.freebsd.org/D3011
cf62f99b9c
Roman Bogorodskiy (novel) · 0.23.1
Update to 0.23.1.
3a2f31948e
Antoine Brodin (antoine) · 0.22.1
Unbreak on freebsd 8 and 9
b64de8f3ae
Roman Bogorodskiy (novel) · 0.22.1
Update to 0.22.1.
24ed10f509
Roman Bogorodskiy (novel) · 0.20.3_1
- Update security/libtasn1 to 4.0 - Add USES= libtool and set INSTALL_TARGET to install-strip - Drop useless bsd.port.options.mk include - Bump PORTREVISION of ports that depend on libtasn1 as   shlib version has changed - Add an UPDATING entry for that

Exp-run by:	antoine
32290f6fc6
Roman Bogorodskiy (novel) · 0.20.3
Update to 0.20.3.
887f62ced1
Tijl Coosemans (tijl) · 0.20.2_1
Support LIBS like LDFLAGS.

- Add LIBS="${LIBS}" to MAKE_ENV and CONFIGURE_ENV.
- Add an option helper for LIBS.
- Adjust all ports that already use LIBS.  Also remove references to
  PTHREAD_CFLAGS and PTHREAD_LIBS while here.
- Some ports did not support having a LIBS environment variable and
  required additional patches.

Somewhat simplified a linker command line looks like:

${CC} ${src_LDFLAGS} ${LDFLAGS} ${src_LIBS} ${LIBS}

where src_LDFLAGS and src_LIBS are controlled by upstream and LDFLAGS and
LIBS can be controlled by us.  If possible -L and -l flags need to be
added to LIBS to make sure they appear after any -L and -l flags set by
upstream.  Many ports currently add -L${LOCALBASE}/lib to LDFLAGS but this
may appear too early on the command line causing installed libraries to
be linked in instead of freshly built ones.

Additional changes:
benchmarks/netio: Replace WITH_IPV6 with an IPV6 option.
comms/gnokii: Replace some patches with USES=pathfix.  Also remove -fPIC.
graphics/gimageview: USES=libtool and install desktop file in DESKTOPDIR.
graphics/visionworkbench: Remove FreeBSD 7 support.
multimedia/libmovtar: New LIB_DEPENDS syntax.
multimedia/opencinematools: Use standard do-build.
net/siproxd: USES=libtool:keepla (port actually needs .la files for plugins)
net-mgmt/nagios: Remove -fPIC.
net-mgmt/nagios4: Remove -fPIC.
print/cups-base: Only add -lssp_nonshared on i386 and OSVERSION < 1000036.
security/p11-kit: Replace PTHREAD_LIBS in CONFIGURE_ENV with
ac_cv_func_pthread_mutexattr_init=no in CONFIGURE_ARGS.  This skips a test
in configure that falsely detects pthread_mutexattr_init in our libc.
sysutils/dar: Fix iconv detection.
x11/rxvt-unicode: Remove -lstdc++ and patch configure to remove a FreeBSD
hack and use $CXX as linker as on other platforms.

PR:		190592
Exp-run by:	antoine
Approved by:	portmgr (antoine)
9f8b4bcde3
Tijl Coosemans (tijl) · 0.20.2_1
When linking a library libA with a library libB using libtool, if libB.la exists, libtool will add all libraries libB.la refers to (dependency_libs field) to the linker command line and store them in the dependency_libs field of libA.la.  So everything that subsequently links with libA will also link to these extra libraries.  This causes too much overlinking.

This commit modifies Mk/Uses/libtool.mk so it empties the dependency_libs
field in .la libraries during staging.  However, because .la libraries have
very limited use when dependency_libs is empty it makes sense to completely
remove them during staging.

So with this commit USES=libtool is modified to remove .la libraries and a
new form (USES=libtool:keepla) is introduced in case they need to be kept
(dependency_libs is still emptied).

PORTREVISION is bumped on all ports with USES=libtool that install .la
libraries.  Most ports are also changed to add :keepla because .la
libraries have to be kept around as long as there are dependent ports with
.la libraries that refer to them in their dependency_libs field.  In most
cases :keepla can be removed again as soon as all dependent ports that
install .la libraries have some form of USES=libtool added to their
Makefile.

PR:		ports/188759
Exp-run:	bdrewery
Approved by:	portmgr (bdrewery)
aad09bc5e2
Roman Bogorodskiy (novel) · 0.20.2
- Update to 0.20.2 - Convert to new-style LIB_DEPENDS - Drop USE_AUTOTOOLS, USE_GMAKE and USE_GMAKE in favor of USES
f9ae06232f
Roman Bogorodskiy (novel) · 0.20.1
Update to 0.20.1.
fcbc65f143
Baptiste Daroussin (bapt) · 0.16.3
Add NO_STAGE all over the place in preparation for the staging support (cat: security)
a65ed2e51b
Baptiste Daroussin (bapt) · 0.16.3
Add an explicit dependency to pkgconf

Submitted by:	antoine (irc)
2b136bb9ec
Roman Bogorodskiy (novel) · 0.16.3
Fix build with FORCE_MAKE_JOBS.
423bd5a30f
Roman Bogorodskiy (novel) · 0.16.3
Update to 0.16.3.
c5d32c6cc5
Roman Bogorodskiy (novel) · 0.14
Update to 0.14.
5edb885f84
Carlo Strub (cs) · 0.13
- Fix typos in COMMENT - Enforce the now clarified rules from the Porter's Handbook (e.g. no dots, no   A/An, etc.)
344b32ccd9
Roman Bogorodskiy (novel) · 0.13
Update to 0.13.
82581f5272
Roman Bogorodskiy (novel) · 0.11
Update to 0.11.
83c80f10a0
Roman Bogorodskiy (novel) · 0.10
- Update to 0.10 - Disable debug build
908b5e9745
Roman Bogorodskiy (novel) · 0.9
Update to 0.9.

Feature safe:	yes
46c53c2a6b
Roman Bogorodskiy (novel) · 0.8
Update to 0.8.
85011ca233
Roman Bogorodskiy (novel) · 0.7
Update to 0.7.
37efc66b85
Roman Bogorodskiy (novel) · 0.6
Update to 0.6.
be26d6d8b6
Roman Bogorodskiy (novel) · 0.5
Update to 0.5.

PR:		160334 (based on)
Submitted by:	Kurt Jaeger <fbsd-ports@opsec.eu>
58472ecd1f
Roman Bogorodskiy (novel) · 0.3
Update to 0.3.
152be9df88
Roman Bogorodskiy (novel) · 0.2
Add security/p11-kit, a library which provides a way to load and enumerate PKCS#11 modules and provides a standard configuration setup for installing PKCS#11 modules in such a way that they're discoverable.
ab3ead5ebb