I'm upstream for nbd-server (and the Linux nbd-client, but that doesn't apply to FreeBSD)
The last update of nbd-server in FreeBSD dates from 2013. Upstream development has not stalled since; the latest version of nbd-server is currently 3.18 (vs 3.5 in FreeBSD). The last update that was not a drive-by update dates from even longer before that (I gave up looking when I reached 2008).
Everything before 3.11 is vulnerable to CVE-2015-0847 (unsafe signal handling, possibility of a DoS). Additionally, more recent versions of NBD support TLS (through GnuTLS).
It would be useful if nbd-server would be updated to something more recent.
I have a patch ready. Had to work on it to compile but will upload when I can
Created attachment 196656 [details]
Update; Add GNUTLS option
* Updated to latest version
* Added new GNUTLS option
Above patch does work on 12-CURRENT
A commit references this bug:
Date: Sun Nov 18 21:08:01 UTC 2018
New revision: 485274
net/nbd-server: Update 3.5=>3.18
- Add LICENSE_FILE
- Add OPTION GNUTLS
- Add USES=gnome
- Pet portlint
Submitted by: firstname.lastname@example.org
Reported by: email@example.com
Committed with minor changes