Created attachment 225653 [details] Patch for nettle Update nettle to 3.7.3 Update Makefile to follow Porter's Handbook more closely, PORTVERSION --> DISTVERSION Update (lib)gmp requirements to 6.1.0 Ref: https://git.lysator.liu.se/nettle/nettle/-/blob/release-3.7-fixes/configure.ac#L254 Always build examples otherwise "make test" fails Compile and runtime tested on 13.0-STABLE #0 stable/13-n245283-70a2e9a3d44 (arm64) (make, make check-plist, make test) Poudriere testport OK 12.2-RELEASE (amd64) Poudriere testport OK 11.4-RELEASE (amd64)
http://lists.lysator.liu.se/pipermail/nettle-bugs/2021/009546.html (CVE-2021-3580)
Friendly ping, can you at least update build dependency for math/gmp?
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=57f90a0651423cc0c748a1fd88572dc6d1c2504a commit 57f90a0651423cc0c748a1fd88572dc6d1c2504a Author: Po-Chuan Hsieh <sunpoet@FreeBSD.org> AuthorDate: 2021-06-25 13:41:23 +0000 Commit: Po-Chuan Hsieh <sunpoet@FreeBSD.org> CommitDate: 2021-06-25 13:41:23 +0000 security/nettle: Update version requirement of BUILD_DEPENDS PR: 256492 Reported by: Daniel Engberg <daniel.engberg.lists@pyret.net> security/nettle/Makefile | 2 +- security/nettle/a (new) | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-)