./security/gnutls [GNU Transport Layer Security library]
[+] Add this package to your ports tracker

[ CVSweb ] [ Homepage ] [ RSS feed ]

Version: 3.7.8, Package name: gnutls-3.7.8
Maintained by: Antoine Jacoutot
Master sites:
Description
GnuTLS is a portable ANSI C based library which implements the TLS 1.0
and SSL 3.0 protocols. The library does not include any patented
algorithms and is available under the GNU Lesser GPL license.

Filesize: 5887.91 KB
Version History (View Complete History)
  • (2022-10-04) Updated to version: gnutls-3.7.8
  • (2022-07-29) Updated to version: gnutls-3.7.7
  • (2022-05-28) Updated to version: gnutls-3.7.6
  • (2022-05-14) Updated to version: gnutls-3.7.5
  • (2022-03-19) Updated to version: gnutls-3.7.4
  • (2022-01-19) Updated to version: gnutls-3.7.3
  • (2021-05-30) Updated to version: gnutls-3.7.2
  • (2021-05-26) Updated to version: gnutls-3.7.1
  • (2020-09-05) Updated to version: gnutls-3.6.15
  • (2020-06-04) Updated to version: gnutls-3.6.14
[show/hide] View available PLISTS (Can be a lot of data)

CVS Commit History:

   2021-05-29 16:43:09 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
Update to gnutls-3.7.2.
   2021-05-25 23:56:49 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
SECURITY update to gnutls-3.7.1.
   2021-05-25 02:16:08 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
SECURITY update to gnutls-3.6.16.
CVE-2021-20305
** libgnutls: Fixed potential miscalculation of ECDSA/EdDSA code backported from
Nettle.  In GnuTLS, as long as it is built and linked against the fixed
version of Nettle, this only affects GOST curves.
GNUTLS-SA-2021-03-10
** libgnutls: Fixed potential use-after-free in sending "key_share"
and "pre_shared_key" extensions. When sending those extensions, the
client may dereference a pointer no longer valid after
realloc. This happens only when the client sends a large Client
Hello message, e.g., when HRR is sent in a resumed session
previously negotiated large FFDHE parameters, because the initial
allocation of the buffer is large enough without having to call
realloc.
   2020-12-14 01:00:03 by Antoine Jacoutot | Files touched by this commit (1)
Log message:
Add LDEP on devel/gettext,-runtime after recent p11-kit changes.
   2020-09-26 04:24:22 by Solene Rapenne | Files touched by this commit (1)
Log message:
Fix a build issue due to the 1271.patch file
that can collide with the previous one.
   2020-09-05 04:36:26 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Merge upstream patch for:
handshake: reject no_renegotiation alert if handshake is incomplete
CVE-2020-24659
   2020-09-05 04:20:28 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
SECURITY update to gnutls-3.6.15.
CVE-2020-24659
   2020-06-04 04:06:31 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Merge fix for CVE-2020-13777.
   2020-06-04 03:08:22 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
SECURITY update to gnutls-3.6.14.
   2020-06-01 08:38:30 by Antoine Jacoutot | Files touched by this commit (1)
Log message:
Handle AddTrust External Root CA certificate expiration; from upstream.
   2020-06-01 08:38:19 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Handle AddTrust External Root CA certificate expiration; from upstream.
   2020-04-01 01:40:53 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
SECURITY update to gnutls-3.6.13 (GNUTLS-SA-2020-03-31):
Fix a DTLS-protocol regression (caused by TLS1.3 support).
The DTLS client would not contribute any randomness to the DTLS negotiation,
breaking the security guarantees of the DTLS protocol.
   2020-04-01 01:05:56 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
SECURITY fix for GNUTLS-SA-2020-03-31:
Fix a DTLS-protocol regression (caused by TLS1.3 support).
The DTLS client would not contribute any randomness to the DTLS negotiation,
breaking the security guarantees of the DTLS protocol
   2020-02-08 05:06:58 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
Update to gnutls-3.6.12.
   2019-12-09 00:56:21 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
Update to gnutls-3.6.11.1.
   2019-09-30 10:05:53 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
Update to gnutls-3.6.10.
   2019-07-30 05:38:48 by Stuart Henderson | Files touched by this commit (1)
Log message:
changes to asm code in gnutls-3.6.9 result in the following error
on i386; link with -Wl,-z,notext for now (this knocks out a large chunk
of the ports tree). ok aja@
ld: error: can't create dynamic relocation R_386_32 against symbol: _gnutls_x86_cpuid_s in readonly segment; recompile object files with -fPIC or pass '-Wl,-z,notext' to allow text relocations in the output
   2019-07-27 03:55:17 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
Update to gnutls-3.6.9.
   2019-07-12 14:49:09 by Stuart Henderson | Files touched by this commit (854)
Log message:
replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes
   2019-06-30 02:34:10 by Antoine Jacoutot | Files touched by this commit (1)
Log message:
Don't pick up autogen, it breaks the build.
reported by naddy@ and sthen@
   2019-05-30 23:54:15 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
Update to gnutls-3.6.8.
   2019-04-29 08:28:57 by Christian Weisgerber | Files touched by this commit (1)
Log message:
drop workaround for gcc4.9 that is no longer needed for gcc8
ok cwen@ ajacoutot@
   2019-03-28 08:53:10 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
SECURITY update to gnutls-3.6.7.
https://www.gnutls.org/security-new.html
- CVE-2019-3836, CVE-2019-3829
   2019-01-27 23:33:34 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
Update to gnutls-3.6.6.
   2018-12-19 01:35:54 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Enable libdane now that with have libunbound.
Survived a bulk.
   2018-12-15 02:00:26 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
Major update to gnutls-3.6.5.
This is the new stable branch.
Survived a bulk.
   2018-11-05 14:29:50 by Christian Weisgerber | Files touched by this commit (1)
Log message:
When building with ports gcc, compile the C parts with -std=gnu11
to match the visibility of max_align_t between C and C++.
GCC 4.9 defaults to C89 and does not accept the "restrict" keyword
by default.  This causes a configure check to add -std=gnu99 to the
compiler flags.  Since max_align_t is from C11, the -std=gnu99 flag
removes it from visibility and gnutls's copy of gnulib then provides
its own replacement definition of max_align_t.  When gnutls builds
its C++ library, the C++ visibility rules are different.  The
max_align_t from stddef.h reappears and collides with the gnulib
replacement.
   2018-11-05 07:57:09 by Christian Weisgerber | Files touched by this commit (1)
Log message:
We no longer need to handle the case that the system compiler is
not clang on amd64.  Also add COMPILER_LIBCXX to WANTLIB on all
archs.
ok sthen@ ajacoutot@
   2018-10-24 08:28:14 by Stuart Henderson | Files touched by this commit (740)
Log message:
Add COMPILER lines to c++ ports which currently use the default. Adjust
some existing COMPILER lines with arch restrictions etc. In the usual
case this is now using "COMPILER = base-clang ports-gcc base-gcc" on
ports with c++ libraries in WANTLIB.
This is basically intended to be a noop on architectures using clang
as the system compiler, but help with other architectures where we
currently have many ports knocked out due to building with an unsuitable
compiler -
- some ports require c++11/newer so the GCC version in base that is used
on these archirtectures is too old.
- some ports have conflicts where an executable is built with one compiler
(e.g. gcc from base) but a library dependency is built with a different
one (e.g. gcc from ports), resulted in mixing incompatible libraries in the
same address space.
devel/gmp is intentionally skipped as it's on the path to building gcc -
the c++ library there is unused in ports (and not built by default upstream)
so intending to disable building gmpcxx in a future commit.
   2018-07-17 02:01:01 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Update to gnutls-3.5.19.
   2018-02-17 05:25:30 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Update to gnutls-3.5.18.
   2018-01-20 04:16:16 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Update to gnutls-3.5.17.
   2017-08-22 12:03:52 by T.J. Townsend | Files touched by this commit (6)
Log message:
prioritize https over http/ftp for distfiles.
ok aja jasper for gnome, aja for gnutls, giovanni for gimp, sthen for the rest
   2017-08-22 02:33:43 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Update to gnutls-3.5.15.
   2017-07-26 16:45:35 by Stuart Henderson | Files touched by this commit (937)
Log message:
bump LIBCXX/LIBECXX/COMPILER_LIBCXX ports.
   2017-07-16 13:19:06 by Marc Espie | Files touched by this commit (880)
Log message:
use COMPILER_LIBCXX where applicable
   2017-07-05 00:45:27 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Update to gnutls-3.5.14.
   2017-06-08 01:33:37 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
SECURITY update to gnutls-3.5.13.
GNUTLS-SA-2017-4: decoding a status response TLS extension with valid contents could lead to a crash due to a null pointer dereference
   2017-06-08 01:23:43 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Fix for GNUTLS-SA-2017-4
- decoding a status response TLS extension with valid contents could lead to a crash due to a null pointer dereference
   2017-05-13 03:54:48 by Marc Espie | Files touched by this commit (1)
Log message:
use lang/clang if amd64 and system compiler is not clang
   2017-05-13 02:54:53 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Update to gnutls-3.5.12.
   2017-04-10 05:46:37 by Stuart Henderson | Files touched by this commit (277)
Log message:
use LIBCXX
   2017-04-09 03:13:37 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Update to gnutls-3.5.11.
   2017-03-08 01:11:48 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
Update to gnutls-3.5.10.
   2017-02-18 10:31:59 by Antoine Jacoutot | Files touched by this commit (1)
Log message:
Move to libidn2.
   2017-02-13 03:23:50 by Antoine Jacoutot | Files touched by this commit (1)
Log message:
Proper indent; no change.
   2017-02-13 03:22:12 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
Update to gnutls-3.5.9.
   2017-01-15 10:58:00 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
SECURITY update to gnutls-3.5.8.
- GnuTLS-SA-2017-1
- GnuTLS-SA-2017-2
   2016-12-09 04:26:56 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
Update to gnutls-3.4.17.
   2016-10-10 02:15:05 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Update to gnutls-3.4.16.
   2016-09-09 01:25:51 by Antoine Jacoutot | Files touched by this commit (1)
Log message:
SECURITY update to gnutls-3.4.15.
- GnuTLS-SA-2016-3
- http://lists.gnutls.org/pipermail/gnutls-devel/2016-September/008146.html
   2016-09-09 01:24:48 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
SECURITY update to gnutls-3.4.15.
- GnuTLS-SA-2016-3
- http://lists.gnutls.org/pipermail/gnutls-devel/2016-September/008146.html
   2016-07-06 23:46:45 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Update to gnutls-3.4.14.
(security fix for GNUTLS-SA-2016-2 which does not affect us)
   2016-06-07 02:56:09 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
SECURITY update to gnutls-3.4.13.
http://www.gnutls.org/security.html#GNUTLS-SA-2016-1
Only 3.4.12 is affected.
   2016-05-21 00:48:14 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
Update to gnutls-3.4.12.
   2016-04-16 09:52:51 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Update to gnutls-3.4.11.
   2016-04-08 05:16:15 by Christian Weisgerber | Files touched by this commit (2)
Log message:
Replace gettext module with ordinary dependency.
Fix the gnutls tests without requiring gsed.
ok ajacoutot@
   2016-03-11 13:28:34 by Christian Weisgerber | Files touched by this commit (247)
Log message:
garbage collect CONFIGURE_SHARED
   2016-03-06 05:16:53 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
Major update to the new stable gnutls-3.4.10.
   2016-02-03 23:55:18 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Bugfix update to gnutls-3.3.21.
   2016-01-09 00:38:16 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Update to gnutls-3.3.20.
   2015-11-23 03:07:48 by Stuart Henderson | Files touched by this commit (1)
Log message:
Add an http mirror for gnutls (there was an old commented-out one, but it
didn't update very often - new one should be 4x/day). ok ajacoutot@
   2015-11-22 23:23:57 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Update to gnutls-3.3.19.
   2015-09-14 01:02:14 by Antoine Jacoutot | Files touched by this commit (4)
Log message:
Update to gnutls-3.3.18.
Drop the libgnutls-config script.
   2015-08-24 03:01:33 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Fix for GNUTLS-SA-2015-3.
   2015-08-13 03:27:10 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
SECURITY fix for GNUTLS-SA-2015-3.
   2015-08-12 01:05:12 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
SECURITY update to gnutls-3.3.17.1.
   2015-07-13 01:07:48 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Bug-fix update to gnutls-3.3.16.
   2015-05-04 03:32:04 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Fix for MD5 downgrade in TLS 1.2 signatures [GNUTLS-SA-2015-2].
   2015-05-04 02:30:13 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
SECURITY update to gnutls-3.3.15.
   2015-04-09 01:07:08 by Antoine Jacoutot | Files touched by this commit (4)
Log message:
Update to gnutls-3.3.14.
   2014-12-12 00:05:59 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Update to gnutls-3.2.21.
   2014-11-13 03:14:27 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Merge upstream fix for CVE-2014-8564.
   2014-11-13 02:33:09 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
SECURITY update to gnutls-3.2.20.
   2014-10-14 01:38:54 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Update to gnutls-3.2.19.
   2011-06-21 03:55:43 by Antoine Jacoutot | Files touched by this commit (5)
Log message:
Bugfix update to gnutls-2.12.7.
   2011-06-02 11:09:32 by Matthias Kilian | Files touched by this commit (58)
Log message:
--disable-silent-rules is now added to CONFIGURE_ARGS per default,
if CONFIGURE_STYLE = gnu.
   2011-05-17 13:08:08 by Antoine Jacoutot | Files touched by this commit (4)
Log message:
Maintenance update to gnutls-2.12.5.
   2011-05-04 09:48:10 by Antoine Jacoutot | Files touched by this commit (26)
Log message:
Bugfix update to gnutls-2.12.3.
Incidentally fixes a build breakage when libgcrypt wasn't installed as
spotted by jasper@
   2011-04-15 10:09:39 by Antoine Jacoutot | Files touched by this commit (7)
Log message:
Major update to gnutls-2.12.2.
tested by landry@ in a bulk, thanks!
ok jasper@ landry@
   2011-03-10 08:38:58 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Fix pkg-config file.
This unbreaks libprelude as reported by Markus Lude.
   2011-03-10 00:16:46 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Bugfix update to gnutls-2.10.5.
   2010-12-12 09:29:59 by Antoine Jacoutot | Files touched by this commit (4)
Log message:
Bugfix update to gnutls-2.10.4.
   2010-11-20 10:22:46 by Marc Espie | Files touched by this commit (296)
Log message:
new depends
   2010-10-25 11:28:00 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
Maintainance update gnutls-2.10.2.
   2010-10-18 15:41:48 by Marc Espie | Files touched by this commit (144)
Log message:
USE_GROFF=Yes
   2010-08-31 14:01:41 by Antoine Jacoutot | Files touched by this commit (5)
Log message:
Major update to gnutls-2.10.1.
tested by landry@ in a bulk, thanks!
   2010-08-25 14:27:16 by Stuart Henderson | Files touched by this commit (6)
Log message:
add missing wantlibs, new-style lib_depends/revision, bump
   2010-08-03 05:49:44 by Stephan A. Rickauer | Files touched by this commit (1)
Log message:
revert to 1.24, prodded by espie@ - we are in lock.
   2010-08-03 03:05:13 by Mark Lumsden | Files touched by this commit (1)
Log message:
LIB_DEPEND + WANTLIB clean up.
   2010-04-20 15:10:32 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
Update to gnutls-2.8.6.
   2010-03-21 04:19:42 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Update to gnutls-2.8.5.
   2009-10-11 07:17:00 by Matthias Kilian | Files touched by this commit (1)
Log message:
Forcibly disable guile.
No effect with the version of guile we've currently in the tree.
   2009-10-09 17:05:20 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
Major update to gnutls-2.8.4.
A bulk is about to start with this update and any fallout will be dealt
with during p2k9.
'put it in' jasper@
   2009-07-24 08:37:23 by Stuart Henderson | Files touched by this commit (4)
Log message:
move to archivers/lzo2, bump
   2009-05-12 01:50:57 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
- maintainance update to gnutls-2.6.6
Fixes several bugs, and possible memory corruptions and crashes.
   2009-05-01 04:37:22 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
- bugfix update to gnutls-2.6.5
tested on amd64 by pea@, thanks
regress is still happy
   2008-11-18 02:01:53 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
- bugfix update to gnutls-2.6.2
a bug was introduced with previous security release
ok naddy@
   2008-11-12 10:09:25 by Jasper Lievisse Adriaanse | Files touched by this commit (3)
Log message:
- SECURITY UPDATE of gnutls to 2.6.1
fixes CVE-2008-4989: GnuTLS Library X.509 Certificate Chain Validation
Vulnerability
ok landry@ naddy@
   2008-10-26 04:50:37 by Landry Breuil | Files touched by this commit (6)
Log message:
Update gnutls to 2.6.0.
Use in-tree security/libtasn1 and archivers/lzo instead of the included ones.
Backport a patch from upstream git to fix symbol conflicts.
ok naddy@ ajacoutot@
   2007-12-03 13:57:33 by Landry Breuil | Files touched by this commit (12)
Log message:
Long due update to GnuTLS 2.0.4, based on a submission by Giovanni Bechis.
Reformat DESCR, remove unneeded patches and LIB*ALIAS goo, reformat Makefile
Tested by many, thanks naddy for alpha, kili for zaurus and powerpc, okan
for amd64 and sparc64, sthen for sparc64 and others i forgot.
Ports depending on it have been vastly tested, thanks sthen for iksemel,
aanriot for prelude, Sebastian Reitenbach for heartbeat, and surely others.
ok kili@ okan@
   2007-09-15 17:30:01 by Michael Erdely | Files touched by this commit (170)
Log message:
Remove surrounding quotes in NO_REGRESS/COMMENT*/PERMIT_*
From Darrin Chandler
   2007-04-05 11:26:27 by Marc Espie | Files touched by this commit (815)
Log message:
more base64 checksums
   2007-03-15 05:30:08 by Jolan Luff | Files touched by this commit (35)
Log message:
remove Jim Geovedi as maintainer from all ports' Makefiles per his
request.
   2006-08-03 17:28:12 by Marc Espie | Files touched by this commit (43)
Log message:
new lib specs
   2005-12-24 13:52:59 by Nikolay Sturm | Files touched by this commit (21)
Log message:
SHARED_LIBS
USE_LIBTOOL where appropriate
   2005-05-23 16:40:58 by Robert Nagy | Files touched by this commit (2)
Log message:
SECURITY: update to 1.0.25
fixes a denial of service vulnerability
http://www.vuxml.org/openbsd/086072e4-c180-11d9-aaa3-00065bd5b0b6.html
ok brad@
   2005-05-11 05:16:07 by Robert Nagy | Files touched by this commit (7)
Log message:
SECURITY:
update gnutls to 1.0.25; regen patches while i am here
http://www.vuxml.org/openbsd/086072e4-c180-11d9-aaa3-00065bd5b0b6.html
ok Jim Geovedi (maintainer)
   2005-02-21 10:15:44 by Aleksander Piotrowski | Files touched by this commit (1)
Log message:
- LIB_DEPENDS=archivers/lzo is not needed as this port uses included
version of lzo library
- Bump PKGNAME
   2005-01-05 10:26:49 by Christian Weisgerber | Files touched by this commit (129)
Log message:
SIZE
   2004-12-27 06:28:36 by Aleksander Piotrowski | Files touched by this commit (76)
Log message:
Add WANTLIB markers
   2004-09-22 02:06:41 by Robert Nagy | Files touched by this commit (5)
Log message:
SECURITY:
upgrade to 1.0.20;
Mr.   Hornik   has   discovered  error  in  X.509  certificate chain
verification procedure in GnuTLS library. The certificate chain should
be verified from last root certificate to the first certificate.
Otherwise  a lot of unauthorized CPU processing can be forced to check
certificate signatures signed with arbitrary RSA/DSA keys chosen by
attacker.;
ok maintainer
   2004-09-15 12:36:03 by Marc Espie | Files touched by this commit (133)
Log message:
new plists.
gnutls depends on lzo.
   2004-08-21 16:04:37 by Christian Weisgerber | Files touched by this commit (1)
Log message:
Don't pick up external liblzo, always use included one.
XXX  This might warrant reconsideration later on.
   2004-05-08 00:43:40 by Nikolay Sturm | Files touched by this commit (8)
Log message:
update to gnutls 1.0.13
from me and maintainer Jim Geovedi
   2003-12-15 11:18:54 by Christian Weisgerber | Files touched by this commit (4)
Log message:
@dirrm shared directories
   2003-10-11 20:18:49 by Brad Smith | Files touched by this commit (2)
Log message:
the MAINTAINER of this port was bad and used the wrong version of libtasn1 (too new),
and this breaks gnutls. Use the included copy of libtasn1 for now as a workaround.