CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

security/tinc 1.0.37

Virtual Private Network (VPN) daemon

Port info

Maintainer
dinoex@FreeBSD.org
Packages
latest: 1.0.37
Upstream
up to date
Last update
to 1.0.37 · e4fde38c26
Quarterly
2026Q4: 1.0.37
WWW
https://www.tinc-vpn.org/
Links
cgit · VuXML

Install

Package
# pkg install tinc
installs 1.0.37 from latest; from quarterly (2026Q4) 1.0.37
Port
# cd /usr/ports/security/tinc && make install clean
Size
104 KiB download · 274 KiB installed
Depends on
archivers/lzo2 2.10_2, print/indexinfo 0.3.1_1
License
GPLv3+
Creates
user tinc, group tinc

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.0.371.0.37–
FreeBSD 151.0.371.0.37–
FreeBSD 141.0.371.0.371.0.37

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.0.371.0.37–
FreeBSD 141.0.371.0.371.0.37

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.0.37.

Fixed (3)

Show 3 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs whose record still lists this version although VuXML considers them fixed (usually a backported fix).
CVECVSSPublishedDescription
CVE-2013-14286.52013-04-26VuXML · Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a d…

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (102)

Dirk Meyer (dinoex) · 1.0.16
- escape shell names
e99e060d34
Doug Barton (dougb) · 1.0.16
In the rc.d scripts, change assignments to rcvar to use the literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
83eb2c3700
Dirk Meyer (dinoex) · 1.0.16
-  use /etc/rc.d/ipfilter quietresync PR:		163959 Submitted by:	Nick Hibma
d08b35d871
Dmitry Marakasov (amdmi3) · 1.0.16
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS) - Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:		157936
Submitted by:	myself
Exp-runs by:	pav
Approved by:	pav
6f6fbe4bdf
Dirk Meyer (dinoex) · 1.0.16
- update to 1.0.16
99ea58b707
Dirk Meyer (dinoex) · 1.0.15
- update to 1.0.15 - remove duplicate LDFLAGS PR:		158292 Submitted by:	Jin-Sih Lin
7201f76960
Dirk Meyer (dinoex) · 1.0.14
- update to 1.0.14
55e3ed41ef
Dirk Meyer (dinoex) · 1.0.13_1
- update tinc to build with lzo2
56182d975f
Dirk Meyer (dinoex) · 1.0.13
- LICENSE GPLv3
cfbe99ab0b
Dirk Meyer (dinoex) · 1.0.13
- update to 1.0.13
03a1333c70
Dirk Meyer (dinoex) · 1.0.12
- update to 1.0.12
3b13e66e59
Dirk Meyer (dinoex) · 1.0.11
- update to 1.0.11
2a8a0fa56c
Dirk Meyer (dinoex) · 1.0.10
- update to 1.0.10 - get rid of getttext
3a3fa5384a
Dirk Meyer (dinoex) · 1.0.9
- add LICENSE:
0a78365e08
Dirk Meyer (dinoex) · 1.0.9
- Update to 1.0.9
aa893b636c
Dirk Meyer (dinoex) · 1.0.8_2
- fix reload and restart targets Submitted by:i	igor <soft[at]antrax-energo.msk.ru>
6f43108f08
Dirk Meyer (dinoex) · 1.0.8_2
- add tincd startup script Submitted by:	igor <soft[at]antrax-energo.msk.ru>
841046e4d5
Rong-En Fan (rafan) · 1.0.8_1
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script. Specifically, newer autoconf (> 2.13) has different semantic of the configure target. In short, one should use --build=CONFIGURE_TARGET instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk
 - Remove CONFIGURE_TARGET hack in various bsd.*.mk
 - USE_GNOME=gnometarget is now an no-op

Changes to individual ports, other than removing the CONFIGURE_TARGET hack:

= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
  - comms/gnuradio
  - science/abinit
  - science/elmer-fem
  - science/elmer-matc
  - science/elmer-meshgen2d
  - science/elmerfront
  - science/elmerpost

= use x86_64 as ARCH
  - devel/g-wrap

= other changes
  - print/magicfilter
    GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf

Total # of ports modified:  1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)

PR:		126524 (obsoletes 52917)
Submitted by:	rafan
Tested on:	two pointyhat 7-amd64 exp runs (by pav)
Approved by:	portmgr (pav)
741aa71483
Pav Lucistnik (pav) · 1.0.8_1
- Remove USE_GCC where it can be satisfied with base compiler on following   FreeBSD versions: 5.3 and up, 6.x, 7.x, 8-CURRENT
efa63f6ba4
Edwin Groothuis (edwin) · 1.0.8_1
Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)
090059a210
Dirk Meyer (dinoex) · 1.0.8
- take maintainership
b82d3d9d38
Rong-En Fan (rafan) · 1.0.8
- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script   supports them.  This is determined by running ``configure --help'' in   do-configure target and set the shell variable _LATE_CONFIGURE_ARGS   which is then passed to CONFIGURE_ARGS. - Remove --mandir and --infodir in ports' Makefile where applicable   Few ports use REINPLACE_CMD to achieve the same effect, remove them too. - 

PR:		ports/111470
Approved by:	portmgr
Discussed with:	stas (Mk/*), gerald (info related stuffs)
Tested by:	pointyhat exp run
f935a609c5
Martin Wilke (miwi) · 1.0.8
- Update to 1.0.8

PR:		113747
Submitted by:	Nils Vogels <nivo+kw+ports.bfa274@is-root.com>
20be4043df
Martin Wilke (miwi) · 1.0.7
- Update to 1.0.7

PR:		108871
Submitted by:	Martin Matuska <martin@matuska.org>
bd1df1b959
Edwin Groothuis (edwin) · 1.0.4_2
Remove USE_REINPLACE from all categories starting with S
28dd10dcb4
Pav Lucistnik (pav) · 1.0.4_2
- Add SHA256
d679262e6c
Kirill Ponomarev (krion) · 1.0.4_2
Drop maintainership, since I'm buried in the $REALLIFE stuff.
6b4c016cab
Florent Thoumie (flz) · 1.0.4_2
- Backout latest commit, it needs a repocopy due to API change.

Noticed by:	Matthias Andree <matthias.andree@gmx.de>
4f02559f47
Florent Thoumie (flz) · 1.0.4_1
- Bump lzo lib version. - Bump PORTREVISION.
12a7f133fc
Kirill Ponomarev (krion) · 1.0.4
Update to 1.0.4
d578809221
Kirill Ponomarev (krion) · 1.0.3
Fix WWW: line.
42abae5ca6
Kirill Ponomarev (krion) · 1.0.3
Update to 1.0.3
13af6ab90a
Kirill Ponomarev (krion) · 1.0.2_1
Support WITHOUT_NLS
6e262f48b3
Kirill Ponomarev (krion) · 1.0.2_1
Fix pidfile location

PR:		ports/68740
Submitted by:	anholt
94a6281fe9
Kirill Ponomarev (krion) · 1.0.2_1
- Fix MASTER_SITES

PR:		ports/67201
Submitted by:	Roman Neuhauser <neuhauser@chello.cz>
5e8d2728b1
Kirill Ponomarev (krion) · 1.0.2_1
- Remove USE_SIZE knob
050450676e
Joe Marcus Clarke (marcus) · 1.0.2_1
Add USE_GETTEXT and bump PORTREVISION.

Submitted by:	trevor
Tested by:	bento
186b8ba82f
Kirill Ponomarev (krion) · 1.0.2
- SIZEify
5e147280ef
Trevor Johnson (trevor) · 1.0.2
Now gettext 0.12.1 is gettext-old.
78da40aa98
Kirill Ponomarev (krion) · 1.0.2
- Use LDFLAGS
a13ac05dca
Kirill Ponomarev (krion) · 1.0.2
- Update to version 1.0.2
06d6d2eaae
Dirk Meyer (dinoex) · 1.0.1
- Fix extra " from last commit. pointy hat to me ... commited wrong work dir
8318c98398
Dirk Meyer (dinoex) · 1.0.1
- don't clobber any given LDFLAGS   resolves conflitcs with bsd.openssl.mk Approved by:	krion
97accc70e2
Kirill Ponomarev (krion) · 1.0.1
- Use LIBS in CONFIGURE_ENV

Reported by:	kris via bento
d232206fe0
Kirill Ponomarev (krion) · 1.0.1
- Update to 1.0.1 - Take maintainership
9e03f19df1
Jacques Vidrine (nectar) · 1.0p8_1
In OpenSSL 0.9.7, `OpenSSL_add_all_algorithms' is now a macro.  This causes configure scripts that look for this function in libcrypto to lose.  Use `OpenSSL_add_all_ciphers' instead (which is a function in both OpenSSL 0.9.6 and 0.9.7).
581acb4611
Akinori MUSHA (knu) · 1.0p8_1
De-pkg-comment.
2c41b9e5f3
Mario Sergio Fujikawa Ferreira (lioux) · 1.0p8_1
o Rollback PORTCOMMENT modifications while this feature's implementation   is better studied o Turn PORTCOMMENT variable in Makefile back into pkg-comment files

Approved by:	kris (portmgr hat),
		portmgr, re (silence)
f0a1969d34
Adam Weinberger (adamw) · 1.0p8_1
Use PORTCOMMENT in the Makefile, and whack the pkg-comment.

Approved by:	pat
d9611f9375
Ying-Chieh Liao (ijliao) · 1.0p8_1
build with only 1 info file

PR:		42906
Submitted by:	Ports Fury
79f33bc538