CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/tinc-devel 1.1pre18_4

Virtual Private Network (VPN) daemon

Port info

Maintainer
dinoex@FreeBSD.org
Packages
latest: 1.1pre18_4
Upstream
up to date
Last update
to 1.1pre18_4 · e4fde38c26
Quarterly
2026Q4: 1.1pre18_4
WWW
https://www.tinc-vpn.org/
Links
cgit · VuXML

Install

Package
# pkg install tinc-devel
installs 1.1pre18_4 from latest; from quarterly (2026Q4) 1.1pre18_4
Port
# cd /usr/ports/security/tinc-devel && make install clean
Size
240 KiB download · 668 KiB installed
Depends on
archivers/lzo2 2.10_2, devel/readline 8.3.6, print/indexinfo 0.3.1_1
License
GPLv3+
Creates
user tinc, group tinc

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1pre18_41.1pre18_4–
FreeBSD 151.1pre18_41.1pre18_4–
FreeBSD 141.1pre18_41.1pre18_41.1pre18_4

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1pre18_41.1pre18_4–
FreeBSD 141.1pre18_41.1pre18_41.1pre18_4

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (1)

The CVE record lists the packaged version 1.1pre18_4 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2013-14286.52013-04-26Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a d…

VuXML only (0)

Listed in VuXML, the packaged version 1.1pre18_4 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (25)

Dirk Meyer (dinoex) · 1.1pre18_4
net-p2p/ctorrent: update LICENSE

www/davical: update LICENSE
german/dtaus: update LICENSE
emulators/emu64: update LICENSE
emulators/frodo: update LICENSE
irc/hexchat-fish: update LICENSE
sysutils/loganalyzer: update LICENSE
comms/lrzsz: update LICENSE
security/tinc-devel: update LICENSE
security/tinc: update LICENSE
net/tightvnc: update LICENSE
net/tinyfugue-devel: update LICENSE
net/tinyfugue: update LICENSE
emulators/vice: update LICENSE
comms/vrflash: update LICENSE
www/webalizer: update LICENSE
e4fde38c26
Dirk Meyer (dinoex) · 1.1pre18_4
security/tinc-devel: security/tinc: add user and group tinc

The tinc daemon is now setgid
The daemon can drop privileges with:
sysrc tincd_flags=--user=tinc

Reported by: Poul-Henning Kamp
121c0dbfd3
Dirk Meyer (dinoex) · 1.1pre18_3
security/tinc-devel: use ${PREFIX}/share/man
cf18dd3ad0
Stefan Eßer (se) · 1.1pre18_2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.1pre18_2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Dirk Meyer (dinoex) · 1.1pre18_2
security/tinc-devel: rc script support network argument

PR: 264345
3a13fb289e
Dirk Meyer (dinoex) · 1.1pre18_1
security/tinc-devel: fix regression with some openssl versions

PR: 262107
66b541d491
Dirk Meyer (dinoex) · 1.1pre18
security/tinc-devel: Update to 1.1pre18
68e89421c9
Mathieu Arnold (mat) · 1.1pre17_6
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 1.1pre17_6
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 1.1pre17_6
Remove # $FreeBSD$ from Makefiles.
305f148f48
Dirk Meyer (dinoex) · 1.1pre17_6
- cleanup rc.d script
ae5215e025
Dirk Meyer (dinoex) · 1.1pre17_5
- fix "service tincd status" for multiple instances PR:		245095 Submitted by:	errit@weinberg2.de
38eecc963d
Dirk Meyer (dinoex) · 1.1pre17_4
- fix EVP_DecryptUpdate with OpenSSL versions 1.0.2r and 1.1.1b PR:		242162 Reported by:	arkel.fr Obtained from:	https://github.com/gsliepen/tinc/commit/2b0aeec02d64bb4724da9ff1dbc19b7d35d7c90
3f02e0abb4
Koichiro Iwao (meta) · 1.1pre17_3
Implement new virtual category: net-vpn for VPN related ports

based on discussion at ports@ [1]. As VPN softwares are put in different
physical category net and security. This is a little bit confusing. Let's
give them new virtual category net-vpn.

[1] https://lists.freebsd.org/pipermail/freebsd-ports/2019-April/115915.html

PR:		239395
Submitted by:	myself
Approved by:	portmgr (mat)
Differential Revision:	https://reviews.freebsd.org/D21174
222e095f2a
Dirk Meyer (dinoex) · 1.1pre17_3
- fix restart when shutdown is slow PR:		228357 Reported by:	CUI Hao
844ac0f7df
Dirk Meyer (dinoex) · 1.1pre17_3
- fix __nonnull__ attribute PR:		237602 Submitted by:	pe82.de
cddbd79271
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1pre17_2
Update devel/readline to 8.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://tiswww.case.edu/php/chet/readline/CHANGES
PR:		236156
Exp-run by:	antoine
40c9c7f7eb
Dmitry Marakasov (amdmi3) · 1.1pre17_1
- Fix LICENSE - Add LICENSE_FILE - Switch to USES=localbase

Approved by:	portmgr blanket
c6d6cec93f
Baptiste Daroussin (bapt) · 1.1pre17_1
Install texinfo files (GNU info) into ${PREFIX}/share/info

After a discussion on the mailing list on moving manpages to
${PREFIX}/share/man for consistency with base where it is
installed in usr/share/man, it appeared the same should happen
to GNU info files which were installed under share in base and
not in ports.

Now texinfo is not in base on any of the supported version of FreeBSD
it is possible to proceed to this move and it is easier to do than
the manpage change.

Other benefit than consistency are less patching: all build tools but
cmake are expecting info files to be under share/info and cmake (patched here)
was having an exception for BSD so the patch makes FreeBSD case less
specific for them

Bump revision of all impacted ports

PR:		232907
exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D17816
7990f81066
Dirk Meyer (dinoex) · 1.1pre17
ecurity update to 1.1pre17 Submitted by:	Martin Fischer MFH:		2018Q4 Security:	https://security-tracker.debian.org/tracker/CVE-2018-16738 Security:	https://security-tracker.debian.org/tracker/CVE-2018-16758 Security:	CVE-2018-16738 Security:	CVE-2018-16758
290aea9f14
Dirk Meyer (dinoex) · 1.1pre16
- update to 1.1pre16
a34ac5c4b6
Antoine Brodin (antoine) · 1.1pre15
Fix PKGBASE collision with security/tinc
6dd362d908
Dirk Meyer (dinoex) · 1.1pre15
- fix Makefile from r453537
573c01a1f0
Dirk Meyer (dinoex) · 1.0.32
- add tinc-devel port
45fd7dd40f