CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

www/serf 1.3.10_1

Serf HTTP client library

Port info

Maintainer
michaelo@apache.org
Packages
latest: 1.3.10_1
Upstream
up to date
Last update
to 1.3.10_1 · 8f3a81069c
Quarterly
2026Q4: 1.3.10_1
WWW
https://serf.apache.org/
Links
cgit · VuXML

Install

Package
# pkg install serf
installs 1.3.10_1 from latest; from quarterly (2026Q4) 1.3.10_1
Port
# cd /usr/ports/www/serf && make install clean
# make -C /usr/ports/www/serf config  # change options first
Size
94 KiB download · 528 KiB installed
Depends on
devel/apr1 1.7.6.1.6.3
License
APACHE20
Options
1 of 4 on in the package: DOCS
Show the 3 options that are off
GSSAPI_BASE GSSAPI_HEIMDAL GSSAPI_MIT

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.3.10_11.3.10_1–
FreeBSD 151.3.10_11.3.10_1–
FreeBSD 141.3.10_11.3.10_11.3.10_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.3.10_11.3.10_1–
FreeBSD 141.3.10_11.3.10_11.3.10_1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.3.10_1.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
248501maintainer-feedback? www/serf: appears to build against base krb5 even when Heimdal port is selectedNew2025-11-25

Commits (64)

Olli Hauer (ohauer) · 1.1.1
- update serf to 1.1.1

From changelog:
Serf 1.1.1 [2012-10-04, from /tags/1.1.1]
  Fixed issue 86: ensure requeued requests are correctly handled. This fixes:
    - infinite loop with multiple connection resets or SIGPIPE errors
    - "connection" hang where we would not re-queue requests that are held after
      we re-connect
  Fixed issue 74: test_all goes in an endless loop
  Fix memory leak when conn. is closed explicitly/due to pool cleanups (r1623)
  Fix for https on Windows: handle connection aborts (r1628..-30,-33,-34,-37)
  Add new error codes for the SSL bucket

Serf 1.1.0 [2012-06-07, from /tags/1.1.0]
  New: serf_bucket_request_set_CL() for C-L based, non-chunked requests
  New: serf_ssl_server_cert_chain_callback_set() for full-chain validation

Serf 1.0.3 [2012-03-20, from /tags/1.0.3, r1586]
  Map more OpenSSL errors into SERF_SSL_CERT_UNKNOWNCA (r1573)

Serf 1.0.2
  Not released.

Serf 1.0.1 [2012-02-15, from /tags/1.0.1, r1569]
  FreeBSD fixes in the test suite (r1560, r1565)
  Minor build fixes

Please note there are still some issues in case the SVN repo is located at /
(for example redports.org), a fix was committed to current subversion.
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=463&dsMessageId=2901999

with hat apache@
b7a1e6d660
Philip M. Gollucci (pgollucci) · 1.0.0
- Update to 1.0.0   http://apr.apache.org/versioning.html now applies

note that s/serf-0/serf-1/g AND the shlib version bump.

  HOWEVER

  nothing depends on www/serf with default options
  you need WITH_SERF=yes

  HENCE

  no PORTREVISION bumps

Discussed with:	portmgr (linimon) via #bsdports
With Hat:	apache
Sponsored by:	RideCharge Inc. / TaxiMagic
d40076c1b0
Olli Hauer (ohauer) · 0.7.2
- update to version 0.7.2 - additional bump subversion PORTREVISION

Changes: http://code.google.com/p/serf/source/browse/trunk/CHANGES

Serf 0.7.2 [2011-03-12, branch 0.7.x r1451]
  Actually disable Nagle when creating a connection (r1441).
  Return error when app asks for HTTPS over proxy connection (r1433).

Serf 0.7.1 [2011-01-25, branch 0.7.x r1431]
  Fix memory leak when using SSL (r1408, r1416).
  Fix build for blank apr-util directory (r1421).

Serf 0.7.0 [2010-08-25, r1407]
  Fix double free abort when destroying request buckets.
  Fix test server in unit test framework to avoid random test failures.
  Allow older Serf programs which don't use the new authn framework to still
    handle authn without forcing them to switch to the new framework. (r1401)
  Remove the SERF_DECLARE macros, preferring a .DEF file for Windows
  Barrier buckets now pass read_iovec to their wrapped bucket.
  Fix HTTP header parsing to allow for empty header values.

Serf 0.6.1 [2010-05-14, r1370]
  Generally: this release fixes problems with the 0.4.0 packaging.
  Small compilation fix in outgoing.c for Windows builds.

Serf 0.6.0 [2010-05-14, r1363]
  Not released.

Serf 0.5.0
  Not released.

Serf 0.4.0 [2010-05-13, r1353]
  [NOTE: this release misstated itself as 0.5.0; use a later release instead]

  Provide authn framework, supporting Basic, Digest, Kerberos (SSPI, GSS),
    along with proxy authn using Basic or Digest
  Added experimental listener framework, along with test_server.c
  Improvements and fixes to SSL support, including connection setup changes
  Experimental support for unrequested, arriving ("async") responses
  Experimental BWTP support using the async arrival feature
  Headers are combined on read (not write), to ease certian classes of parsing
  Experimental feature on aggregate buckets for a callback-on-empty
  Fix the bucket allocator for when APR is using its pool debugging features
  Proxy support in the serf_get testing utility
  Fix to include the port number in the Host header
  serf_get propagates errors from the response, instead of aborting (Issue 52)
  Added serf_lib_version() for runtime version tests

PR:		ports/156849
Submitted by:	Zhihao Yuan <lichray _at_ gmail.com>
757efb7ebb
Martin Wilke (miwi) · 0.3.1_2
- Get Rid MD5 support
a9481afc8a
Philip M. Gollucci (pgollucci) · 0.3.1_2
- Chase devel/apr -> devel/apr1 shuffling

PR:             ports/146553
Submitted by:   myself (pgollucci@)
With Hat:       apache@
61bcae45bc
Philip M. Gollucci (pgollucci) · 0.3.1_1
- Convert ports/ to devel/apr1

PR:             ports/146553
Submitted by:   myself (pgollucci@)
With Hat:       apache@
55544fc2be
Philip M. Gollucci (pgollucci) · 0.3.1_1
4/5: Chase devel/apr shlib bump

PR:             ports/146130
Approved by:    portmgr (pav)
Tested by:      -exp run (pav)
With Hat:       apache@
3a2084de1e
Philip M. Gollucci (pgollucci) · 0.3.1
- Update to 0.3.1 [no shlib bump]

With Hat:   apache@
9422230c90
Philip M. Gollucci (pgollucci) · 0.3.0
- Assign some ports to apache@

Note: net/luasocket is a direct requirement for mod_wombat which will be
      very core to httpd 2.4.x+ (www/apache24)
2ef4b1b1d6
Philip M. Gollucci (pgollucci) · 0.3.0
- Mark most of my ports MAKE_JOBS_SAFE=yes

Tested by: several builds in P6 TB
abf5b5ffc0
Philip M. Gollucci (pgollucci) · 0.3.0
- Update to 0.3.0 - Ensure apr 1.x is used - Fix typo in comments - Pass maintainer to submitter (me)

PR:             ports/131100
Approved by:    rodrigc via irc (previous maintainer)
efae20bcd4
Craig Rodrigues (rodrigc) · 0.2.0
Update to 0.2.0

PR:             125160
Submitted by:   Philip M. Gollucci <pgollucci p6m7g8 com>
5be1617d01
Diane Bruce (db) · 0.1.2
- Fixed misplaced MKDIR
170e818a77
Diane Bruce (db) · 0.1.2
The serf library is a C-based HTTP client library built upon the Apache Portable Runtime (APR) library. It multiplexes connections, running the read/write communication asynchronously. Memory copies and transformations are kept to a minimum to provide high performance operation.

WWW: http://serf.googlecode.com

PR:		ports/124059
Submitted by:	Craig Rodrigues <rodrigc at FreeBSD.org>
ddfd8cdbdb