I'm upstream for nbd-server (and the Linux nbd-client, but that doesn't apply to FreeBSD) The last update of nbd-server in FreeBSD dates from 2013. Upstream development has not stalled since; the latest version of nbd-server is currently 3.18 (vs 3.5 in FreeBSD). The last update that was not a drive-by update dates from even longer before that (I gave up looking when I reached 2008). Everything before 3.11 is vulnerable to CVE-2015-0847 (unsafe signal handling, possibility of a DoS). Additionally, more recent versions of NBD support TLS (through GnuTLS). It would be useful if nbd-server would be updated to something more recent.
I have a patch ready. Had to work on it to compile but will upload when I can
Created attachment 196656 [details] Update; Add GNUTLS option net/nbd-server: * Updated to latest version * Added new GNUTLS option
Above patch does work on 12-CURRENT
A commit references this bug: Author: bofh Date: Sun Nov 18 21:08:01 UTC 2018 New revision: 485274 URL: https://svnweb.freebsd.org/changeset/ports/485274 Log: net/nbd-server: Update 3.5=>3.18 - Add LICENSE_FILE - Add OPTION GNUTLS - Add USES=gnome - Pet portlint PR: 230977 Submitted by: ndowens@yahoo.com Reported by: wouter@grep.be Changes: head/net/nbd-server/Makefile head/net/nbd-server/distinfo
Committed with minor changes