CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/rnp 0.18.1_1

RNP is a set of OpenPGP (RFC4880) tools

Port info

Maintainer
se@FreeBSD.org
Packages
latest: 0.18.1_1
Upstream
up to date
Last update
to 0.18.1_1 · 5894670dca
Quarterly
2026Q4: 0.18.1_1
WWW
https://www.rnpgp.com/
Links
cgit · VuXML

Install

Package
# pkg install rnp
installs 0.18.1_1 from latest; from quarterly (2026Q4) 0.18.1_1
Port
# cd /usr/ports/security/rnp && make install clean
# make -C /usr/ports/security/rnp config  # change options first
Size
543 KiB download · 1.7 MiB installed
Depends on
devel/json-c 0.19_1, security/botan3 3.13.0
License
APACHE20 and BSD2CLAUSE and BSD3CLAUSE and OCB_Patent
Options
1 of 1 on in the package: MANPAGES

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 160.18.1_10.18.1_1–
FreeBSD 150.18.1_10.18.1_1–
FreeBSD 140.18.1_10.18.1_10.18.1_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 150.18.1_10.18.1_1–
FreeBSD 140.18.1_10.18.1_10.18.1_1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 0.18.1_1.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (33)

Dima Panov (fluffy) · 0.18.1_1
security/botan3: bump comsumers after botan update
5894670dca
Stefan Eßer (se) · 0.18.1
security/rnp: update to version 0.18.1

This update fixes critical issue where PKESK (public-key encrypted)
session keys were generated as all-zero, allowing trivial decryption
of messages encrypted with public keys only (CVE-2025-13470,
CVE-2025-13402, https://bugzilla.redhat.com/show_bug.cgi?id=2415863).

Security:	CVE-2025-13470
Security:	CVE-2025-13402
4d45ebb298
Dima Panov (fluffy) · 0.18.0_5
security/botan3: bump consumers after update
a5cf85ae7b
Dima Panov (fluffy) · 0.18.0_4
security/botan3: bump consumers after Botan update
e0d59cea93
Dima Panov (fluffy) · 0.18.0_3
*/*: bump consumers after security/botan3 shlib change
208afcb9af
Dima Panov (fluffy) · 0.18.0_2
security/botan3: bump consumers after Botan3 update
b7ee9fbb43
Dima Panov (fluffy) · 0.18.0_1
*/*: bump consumers of security/botan3
cfa125f8c3
Stefan Eßer (se) · 0.18.0
security/rnp: improve Makefile

* Use upstream release archive
* Enable "make test"
* Add USES= pathfix
* Disable detection of git
* Make asciidoctor optional (manpages)

PR:		287734
Reported by:	diizzy
3dbde4ec75
Stefan Eßer (se) · 0.18.0
security/rnp: upgrade to version 0.18.0

The default length of RSA keys has been changed to 3072 bits.

See the release notes for the complete list of changes:

    https://github.com/rnpgp/rnp/releases/tag/v0.18.0
c89ba17f26
Stefan Eßer (se) · 0.17.1_2
security/rnp: use botan3 instead of botan2

This change allows to remove the deprecation notice from this port.
446e40bdbc
Rene Ladan (rene) · 0.17.1_1
all: expire consumers of security/botan2 on 2025-06-21
e9eb4ac833
Stefan Eßer (se) · 0.17.1_1
security/rnp: fix build using c++19 include files

The build failed with:

    libcxx: error: implicit instantiation of undefined template
    'std::char_traits<unsigned char>

This was caused by a restriction of char_traits to a subset of the
integer types that used to be supported (e.g. char, wchar_t), which
no longer includes the type unsigned char.

There has been no new release, yet, but upstream fixed this issue
in commit 20419f7.

PR:		282348
Reported by:	jkim
Obtained from:	https://github.com/rnpgp/rnp/commit/20419f7
ee81e15571
Stefan Eßer (se) · 0.17.1
security/rnp: upgrade to version 0.17.1
a36607ec36
Stefan Eßer (se) · 0.17.0_1
security/rnp: do not install lib/libsexp.a

The static library libsexp.a conflicts with the library of the same
name installed by the devel/sfsexp port. It is only used to build the
rnp and rnpkeys binaries, but not needed for any other port.
5fa214fd32
Stefan Eßer (se) · 0.17.0
security/rnp: update to version 0.17.0
65d7f16e95
Stefan Eßer (se) · 0.16.3
security/rnp: update to version 0.16.3
16a476a9c9
Stefan Eßer (se) · 0.16.2
security/rnp: update to version 0.16.2
88d249c043
Stefan Eßer (se) · 0.16.1
security/rnp: upgrade to version 0.16.1
f5c7b8f181
Stefan Eßer (se) · 0.16.0_1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 0.16.0_1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Dima Panov (fluffy) · 0.16.0_1
*/*: bump all consumers after recent boost upgrade
4cf39decb3
Stefan Eßer (se) · 0.16.0
security/rnp: update to version 0.16.0
434b337fb0
Loïc Bartoletti (lbartoletti) · 0.15.2
devel/cmake: Update to 3.23.0

Update to 3.23.0.
Fix pkg-plist: using the default share/man location

Release Notes:
  https://cmake.org/cmake/help/v3.23/release/3.23.html

PR:		262886
Exp-run by:	antoine
2d34c2bfea
Stefan Eßer (se) · 0.15.2
security/rnp: update to version 0.15.2
5f34d38168
Mathieu Arnold (mat) · 0.14.0_1
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 0.14.0_1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Mark Linimon (linimon) · 0.14.0_1
Add compiler:c++11-lang to USES to fix build on GCC-based architectures:

Target "cmTC_f3032" requires the language dialect "CXX11" , but CMake does
  not know the compile flags to use to enable it.

Approved by:	portmgr (tier-2 blanket)
302a356964
Stefan Eßer (se) · 0.14.0_1
Bump PORTREVISION
5dabc0af27
Stefan Eßer (se) · 0.14.0
Add forgotten USE_LDCONFIG=yes
5fe98f7941
Stefan Eßer (se) · 0.14.0
Fix build in poudriere

Fetching a cmake helper file was (rightfully) blocked when building with
poudriere, leding to an abort in the configure phase.

Instead of fetching the cmake helper as an additional distfile, provide
the relevant functionality in a local version that uses port system
information instead of trying to obtain the version number from the
sources.

Reported by:	kai
79629e9630
Stefan Eßer (se) · 0.14.0
Mark as broken due to pkg-fallout messages indicating a cmake abort

I cannot reproduce the issue due to poudriere failures, which need to be
resolved before I can perform local test builds again.

(Poudriere error: cannot rollback '<zfs file system>': dataset is busy)
109e30df04
Stefan Eßer (se) · 0.14.0
Fix link to project page

Reported by:	kai, olgeni, George L. Yermulnik (yz at yz.kiev.ua)
2f0d922eb1
Stefan Eßer (se) · 0.14.0
New port for rnp, an alternative to gnupg
545aa04ea5