Bug 230977 - net/nbd-server: severely outdated
Summary: net/nbd-server: severely outdated
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Muhammad Moinur Rahman
Depends on:
Reported: 2018-08-28 13:30 UTC by Wouter Verhelst
Modified: 2018-11-18 21:09 UTC (History)
2 users (show)

See Also:
bugzilla: maintainer-feedback? (bofh)

Update; Add GNUTLS option (3.39 KB, patch)
2018-08-28 22:35 UTC, Nathan
ndowens04: maintainer-approval? (bofh)
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Wouter Verhelst 2018-08-28 13:30:18 UTC
I'm upstream for nbd-server (and the Linux nbd-client, but that doesn't apply to FreeBSD)

The last update of nbd-server in FreeBSD dates from 2013. Upstream development has not stalled since; the latest version of nbd-server is currently 3.18 (vs 3.5 in FreeBSD). The last update that was not a drive-by update dates from even longer before that (I gave up looking when I reached 2008).

Everything before 3.11 is vulnerable to CVE-2015-0847 (unsafe signal handling, possibility of a DoS). Additionally, more recent versions of NBD support TLS (through GnuTLS).

It would be useful if nbd-server would be updated to something more recent.
Comment 1 Nathan 2018-08-28 17:04:25 UTC
I have a patch ready. Had to work on it to compile but will upload when I can
Comment 2 Nathan 2018-08-28 22:35:40 UTC
Created attachment 196656 [details]
Update; Add GNUTLS option

* Updated to latest version
* Added new GNUTLS option
Comment 3 Nathan 2018-08-28 22:36:36 UTC
Above patch does work on 12-CURRENT
Comment 4 commit-hook freebsd_committer 2018-11-18 21:08:50 UTC
A commit references this bug:

Author: bofh
Date: Sun Nov 18 21:08:01 UTC 2018
New revision: 485274
URL: https://svnweb.freebsd.org/changeset/ports/485274

  net/nbd-server: Update 3.5=>3.18

  - Add USES=gnome
  - Pet portlint

  PR:		230977
  Submitted by:	ndowens@yahoo.com
  Reported by:	wouter@grep.be

Comment 5 Muhammad Moinur Rahman freebsd_committer 2018-11-18 21:09:10 UTC
Committed with minor changes