summaryrefslogtreecommitdiff
path: root/security
diff options
context:
space:
mode:
Diffstat (limited to 'security')
-rw-r--r--security/Makefile4
-rw-r--r--security/aws-lc/Makefile2
-rw-r--r--security/aws-lc/distinfo6
-rw-r--r--security/dehydrated/Makefile3
-rw-r--r--security/dehydrated/distinfo6
-rw-r--r--security/fizz/Makefile2
-rw-r--r--security/fizz/distinfo6
-rw-r--r--security/keybase/Makefile3
-rw-r--r--security/keybase/distinfo10
-rw-r--r--security/kf6-kdesu/distinfo6
-rw-r--r--security/libfido2/Makefile2
-rw-r--r--security/libfido2/distinfo6
-rw-r--r--security/libfido2/pkg-plist4
-rw-r--r--security/openvpn-auth-oauth2/Makefile27
-rw-r--r--security/openvpn-auth-oauth2/distinfo5
-rw-r--r--security/openvpn-auth-oauth2/files/openvpn_auth_oauth2.in148
-rw-r--r--security/openvpn-auth-oauth2/pkg-descr15
-rw-r--r--security/openvpn-auth-oauth2/pkg-plist3
-rw-r--r--security/py-asyncssh/Makefile2
-rw-r--r--security/py-asyncssh/distinfo6
-rw-r--r--security/py-cryptography-vectors/Makefile2
-rw-r--r--security/py-cryptography-vectors/distinfo6
-rw-r--r--security/py-cryptography/Makefile2
-rw-r--r--security/py-cryptography/Makefile.crates30
-rw-r--r--security/py-cryptography/distinfo66
-rw-r--r--security/rubygem-devise-two-factor-rails-gitlab/Makefile (renamed from security/rubygem-devise-two-factor41-rails70/Makefile)8
-rw-r--r--security/rubygem-devise-two-factor-rails-gitlab/distinfo (renamed from security/rubygem-devise-two-factor41-rails70/distinfo)0
-rw-r--r--security/rubygem-devise-two-factor-rails-gitlab/pkg-descr (renamed from security/rubygem-devise-two-factor41-rails70/pkg-descr)0
-rw-r--r--security/rubygem-doorkeeper-device_authorization_grant/Makefile3
-rw-r--r--security/rubygem-doorkeeper-openid_connect/Makefile3
-rw-r--r--security/rubygem-doorkeeper-rails-gitlab/Makefile22
-rw-r--r--security/rubygem-doorkeeper-rails-gitlab/distinfo3
-rw-r--r--security/rubygem-doorkeeper-rails-gitlab/pkg-descr2
-rw-r--r--security/rubygem-ed25519/Makefile2
-rw-r--r--security/rubygem-ed25519/distinfo6
-rw-r--r--security/rubygem-gitlab-cloud-connector/Makefile4
-rw-r--r--security/rubygem-gitlab-cloud-connector/distinfo6
-rw-r--r--security/rubygem-signet/Makefile2
-rw-r--r--security/rubygem-signet/distinfo6
-rw-r--r--security/vuxml/vuln/2025.xml33
-rw-r--r--security/zeek/Makefile2
-rw-r--r--security/zeek/distinfo6
-rw-r--r--security/zeek/pkg-plist1
43 files changed, 372 insertions, 109 deletions
diff --git a/security/Makefile b/security/Makefile
index 54b0a4ba353f..b742b84e77e2 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -462,6 +462,7 @@
SUBDIR += openvpn
SUBDIR += openvpn-admin
SUBDIR += openvpn-auth-ldap
+ SUBDIR += openvpn-auth-oauth2
SUBDIR += openvpn-auth-radius
SUBDIR += openvpn-auth-script
SUBDIR += openvpn-devel
@@ -1134,15 +1135,16 @@
SUBDIR += rubygem-cvss-suite
SUBDIR += rubygem-declarative_policy
SUBDIR += rubygem-devise-two-factor
+ SUBDIR += rubygem-devise-two-factor-rails-gitlab
SUBDIR += rubygem-devise-two-factor-rails5
SUBDIR += rubygem-devise-two-factor-rails70
- SUBDIR += rubygem-devise-two-factor41-rails70
SUBDIR += rubygem-devise_pam_authenticatable2
SUBDIR += rubygem-digest
SUBDIR += rubygem-digest-crc
SUBDIR += rubygem-doorkeeper
SUBDIR += rubygem-doorkeeper-device_authorization_grant
SUBDIR += rubygem-doorkeeper-openid_connect
+ SUBDIR += rubygem-doorkeeper-rails-gitlab
SUBDIR += rubygem-doorkeeper-rails5
SUBDIR += rubygem-doorkeeper-rails50
SUBDIR += rubygem-doorkeeper-rails70
diff --git a/security/aws-lc/Makefile b/security/aws-lc/Makefile
index d9dc7bef2f0f..106a5798fca9 100644
--- a/security/aws-lc/Makefile
+++ b/security/aws-lc/Makefile
@@ -1,5 +1,5 @@
PORTNAME= aws-lc
-PORTVERSION= 1.50.0
+PORTVERSION= 1.51.2
DISTVERSIONPREFIX= v
CATEGORIES= security
diff --git a/security/aws-lc/distinfo b/security/aws-lc/distinfo
index f8a449cfe01a..a20b2ebd6245 100644
--- a/security/aws-lc/distinfo
+++ b/security/aws-lc/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1745936038
-SHA256 (aws-aws-lc-v1.50.0_GH0.tar.gz) = 613f4a1adeecb290e5ad2b9656fce1cfbb91a5ae9b3a2105f0ec3fde71723a1a
-SIZE (aws-aws-lc-v1.50.0_GH0.tar.gz) = 126283726
+TIMESTAMP = 1747546432
+SHA256 (aws-aws-lc-v1.51.2_GH0.tar.gz) = 7df65427f92a4c3cd3db6923e1d395014e41b1fcc38671806c1e342cb6fa02f6
+SIZE (aws-aws-lc-v1.51.2_GH0.tar.gz) = 126901627
diff --git a/security/dehydrated/Makefile b/security/dehydrated/Makefile
index 91503e154f03..35546b7b1a94 100644
--- a/security/dehydrated/Makefile
+++ b/security/dehydrated/Makefile
@@ -1,7 +1,6 @@
PORTNAME= dehydrated
DISTVERSIONPREFIX= v
-DISTVERSION= 0.7.1-6
-DISTVERSIONSUFFIX= -g4fd777e
+DISTVERSION= 0.7.2
CATEGORIES= security
MAINTAINER= meta@FreeBSD.org
diff --git a/security/dehydrated/distinfo b/security/dehydrated/distinfo
index 9298ccf74384..4d15a725879f 100644
--- a/security/dehydrated/distinfo
+++ b/security/dehydrated/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1709697522
-SHA256 (dehydrated-io-dehydrated-v0.7.1-6-g4fd777e_GH0.tar.gz) = de412c89502df7beb08e20d2d6e6f2b9f314dc60e6a12d08f9e7712b80d569c6
-SIZE (dehydrated-io-dehydrated-v0.7.1-6-g4fd777e_GH0.tar.gz) = 120738
+TIMESTAMP = 1747655926
+SHA256 (dehydrated-io-dehydrated-v0.7.2_GH0.tar.gz) = 34d0e316dd86108cf302fddfe1c6d7b72c2fa98bed338ddd6c0155da2ec75a94
+SIZE (dehydrated-io-dehydrated-v0.7.2_GH0.tar.gz) = 121861
diff --git a/security/fizz/Makefile b/security/fizz/Makefile
index 69356dd3585d..58cb52d68aeb 100644
--- a/security/fizz/Makefile
+++ b/security/fizz/Makefile
@@ -1,6 +1,6 @@
PORTNAME= fizz
DISTVERSIONPREFIX= v
-DISTVERSION= 2025.05.12.00
+DISTVERSION= 2025.05.19.00
CATEGORIES= security
MAINTAINER= yuri@FreeBSD.org
diff --git a/security/fizz/distinfo b/security/fizz/distinfo
index b92c50f7c07e..74e44fafe591 100644
--- a/security/fizz/distinfo
+++ b/security/fizz/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1747102733
-SHA256 (facebookincubator-fizz-v2025.05.12.00_GH0.tar.gz) = d3608b4595fff4e0d59585b1b12bead6f6ce4bf2d3bee41fb084f7128a28e4b2
-SIZE (facebookincubator-fizz-v2025.05.12.00_GH0.tar.gz) = 754096
+TIMESTAMP = 1747730518
+SHA256 (facebookincubator-fizz-v2025.05.19.00_GH0.tar.gz) = 83ce2e22c993cad1c5cbc5f3ee1aff4c44af99eeeb3dd3d539f1017a7af18647
+SIZE (facebookincubator-fizz-v2025.05.19.00_GH0.tar.gz) = 754906
diff --git a/security/keybase/Makefile b/security/keybase/Makefile
index 97d60dd331ba..69f918a63ca0 100644
--- a/security/keybase/Makefile
+++ b/security/keybase/Makefile
@@ -1,7 +1,6 @@
PORTNAME= keybase
-PORTVERSION= 6.4.0
+PORTVERSION= 6.5.1
DISTVERSIONPREFIX= v
-PORTREVISION= 2
CATEGORIES= security
MAINTAINER= sunpoet@FreeBSD.org
diff --git a/security/keybase/distinfo b/security/keybase/distinfo
index e30d5607aec4..7ed2b21dc196 100644
--- a/security/keybase/distinfo
+++ b/security/keybase/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1725559587
-SHA256 (go/security_keybase/keybase-client-v6.4.0_GH0/go.mod) = e8dd259a850c6e944039deb3a6e0692ef256748397f4a064661e35b6e1bd7ade
-SIZE (go/security_keybase/keybase-client-v6.4.0_GH0/go.mod) = 19073
-SHA256 (go/security_keybase/keybase-client-v6.4.0_GH0/keybase-client-v6.4.0_GH0.tar.gz) = 1fad98fd54c03400ea3ac421a6275867dfcbd2a20b0d2020d7021b769333cdea
-SIZE (go/security_keybase/keybase-client-v6.4.0_GH0/keybase-client-v6.4.0_GH0.tar.gz) = 53772765
+TIMESTAMP = 1747546434
+SHA256 (go/security_keybase/keybase-client-v6.5.1_GH0/go.mod) = a22fc2d20a8f4e6574303e505e0726e84954eb495b30e9ab6a58cc37d0072d44
+SIZE (go/security_keybase/keybase-client-v6.5.1_GH0/go.mod) = 19305
+SHA256 (go/security_keybase/keybase-client-v6.5.1_GH0/keybase-client-v6.5.1_GH0.tar.gz) = bdb5f86d787ff5c4b5c83ddfbe2ca634cbefec25ec5ab53681ab0d200de8f617
+SIZE (go/security_keybase/keybase-client-v6.5.1_GH0/keybase-client-v6.5.1_GH0.tar.gz) = 54141439
diff --git a/security/kf6-kdesu/distinfo b/security/kf6-kdesu/distinfo
index 3204c4e02723..5e596d710465 100644
--- a/security/kf6-kdesu/distinfo
+++ b/security/kf6-kdesu/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1743798879
-SHA256 (KDE/frameworks/6.13.0/kdesu-6.13.0.tar.xz) = 6be91eb21912bb2521f4e4f19267639c3bed33ab5dd09f79f279e2f94c380a62
-SIZE (KDE/frameworks/6.13.0/kdesu-6.13.0.tar.xz) = 56700
+TIMESTAMP = 1746358560
+SHA256 (KDE/frameworks/6.14/kdesu-6.14.0.tar.xz) = 103a06311c035445fd5884845c57369f07229239f9bbebe91cc95b7ce8c5ca23
+SIZE (KDE/frameworks/6.14/kdesu-6.14.0.tar.xz) = 56688
diff --git a/security/libfido2/Makefile b/security/libfido2/Makefile
index df04268c3626..3e9553448b09 100644
--- a/security/libfido2/Makefile
+++ b/security/libfido2/Makefile
@@ -1,5 +1,5 @@
PORTNAME= libfido2
-PORTVERSION= 1.15.0
+PORTVERSION= 1.16.0
CATEGORIES= security
MASTER_SITES= https://developers.yubico.com/libfido2/Releases/
diff --git a/security/libfido2/distinfo b/security/libfido2/distinfo
index aef50eb8538c..03ec7db8c9b8 100644
--- a/security/libfido2/distinfo
+++ b/security/libfido2/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1718580032
-SHA256 (libfido2-1.15.0.tar.gz) = abaab1318d21d262ece416fb8a7132fa9374bda89f6fa52b86a98a2f5712b61e
-SIZE (libfido2-1.15.0.tar.gz) = 670019
+TIMESTAMP = 1747546436
+SHA256 (libfido2-1.16.0.tar.gz) = 8c2b6fb279b5b42e9ac92ade71832e485852647b53607c43baaafbbcecea04e4
+SIZE (libfido2-1.16.0.tar.gz) = 683814
diff --git a/security/libfido2/pkg-plist b/security/libfido2/pkg-plist
index bd4649b63ce3..de8116bc4b62 100644
--- a/security/libfido2/pkg-plist
+++ b/security/libfido2/pkg-plist
@@ -151,6 +151,7 @@ libdata/pkgconfig/libfido2.pc
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_clientdata_hash_ptr.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_display_name.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_empty_exclude_list.html
+%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_entattest.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_exclude.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_flags.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_fmt.html
@@ -173,6 +174,7 @@ libdata/pkgconfig/libfido2.pc
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_set_blob.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_set_clientdata.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_set_clientdata_hash.html
+%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_set_entattest.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_set_extensions.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_set_fmt.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_set_id.html
@@ -420,6 +422,7 @@ share/man/man3/fido_cred_clientdata_hash_len.3.gz
share/man/man3/fido_cred_clientdata_hash_ptr.3.gz
share/man/man3/fido_cred_display_name.3.gz
share/man/man3/fido_cred_empty_exclude_list.3.gz
+share/man/man3/fido_cred_entattest.3.gz
share/man/man3/fido_cred_exclude.3.gz
share/man/man3/fido_cred_flags.3.gz
share/man/man3/fido_cred_fmt.3.gz
@@ -442,6 +445,7 @@ share/man/man3/fido_cred_set_authdata_raw.3.gz
share/man/man3/fido_cred_set_blob.3.gz
share/man/man3/fido_cred_set_clientdata.3.gz
share/man/man3/fido_cred_set_clientdata_hash.3.gz
+share/man/man3/fido_cred_set_entattest.3.gz
share/man/man3/fido_cred_set_extensions.3.gz
share/man/man3/fido_cred_set_fmt.3.gz
share/man/man3/fido_cred_set_id.3.gz
diff --git a/security/openvpn-auth-oauth2/Makefile b/security/openvpn-auth-oauth2/Makefile
new file mode 100644
index 000000000000..c342db717442
--- /dev/null
+++ b/security/openvpn-auth-oauth2/Makefile
@@ -0,0 +1,27 @@
+PORTNAME= openvpn-auth-oauth2
+DISTVERSIONPREFIX= v
+DISTVERSION= 1.23.0
+CATEGORIES= security net net-vpn
+
+MAINTAINER= otis@FreeBSD.org
+COMMENT= Management client for OpenVPN that handles SSO authentication
+WWW= https://github.com/jkroepke/openvpn-auth-oauth2
+
+LICENSE= MIT
+LICENSE_FILE= ${WRKSRC}/LICENSE.txt
+
+EXTRACT_DEPENDS= ${BUILD_DEPENDS}
+
+USES= go:1.24,modules
+
+GO_MODULE= github.com/jkroepke/openvpn-auth-oauth2
+
+SUB_FILES= openvpn_auth_oauth2
+
+do-install:
+ ${INSTALL_PROGRAM} ${WRKDIR}/bin/openvpn-auth-oauth2 ${STAGEDIR}${PREFIX}/sbin
+ ${MKDIR} ${STAGEDIR}${ETCDIR}
+ ${INSTALL_DATA} ${WRKSRC}/config.example.yaml ${STAGEDIR}${ETCDIR}/openvpn-auth-oauth2.yml.sample
+ ${INSTALL_SCRIPT} ${WRKDIR}/openvpn_auth_oauth2 ${STAGEDIR}${PREFIX}/etc/rc.d
+
+.include <bsd.port.mk>
diff --git a/security/openvpn-auth-oauth2/distinfo b/security/openvpn-auth-oauth2/distinfo
new file mode 100644
index 000000000000..c69fcf7f3670
--- /dev/null
+++ b/security/openvpn-auth-oauth2/distinfo
@@ -0,0 +1,5 @@
+TIMESTAMP = 1747749448
+SHA256 (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.23.0/v1.23.0.mod) = 3cfe3d6fcb9c2dadd04584a4dee41a867c33b720a91127efaaa501fd11726f2b
+SIZE (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.23.0/v1.23.0.mod) = 1899
+SHA256 (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.23.0/v1.23.0.zip) = 984bf33860740e9d4f3896db38bfea064a2b21553c85c8c0ea98856933c64b71
+SIZE (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.23.0/v1.23.0.zip) = 1850633
diff --git a/security/openvpn-auth-oauth2/files/openvpn_auth_oauth2.in b/security/openvpn-auth-oauth2/files/openvpn_auth_oauth2.in
new file mode 100644
index 000000000000..40015f4a8e4a
--- /dev/null
+++ b/security/openvpn-auth-oauth2/files/openvpn_auth_oauth2.in
@@ -0,0 +1,148 @@
+#!/bin/sh
+
+# PROVIDE: openvpn_auth_oauth2
+# REQUIRE: FILESYSTEMS defaultroute netwait resolv
+# BEFORE: NETWORKING
+# KEYWORD: shutdown
+
+# Add the following line to /etc/rc.conf to enable openvpn_auth_oauth2:
+#
+# openvpn_auth_oauth2_enable="YES"
+#
+# You also can set alternative config with
+# openvpn_auth_oauth2_config="/path/to/config"
+#
+# Multiple profiles are supported with
+#
+# openvpn_auth_oauth2_profiles="name1 name2"
+# openvpn_auth_oauth2_name1_enable="YES"
+# openvpn_auth_oauth2_name1_config="/path/to/config1"
+# openvpn_auth_oauth2_name2_enable="YES"
+# openvpn_auth_oauth2_name2_config="/path/to/config2"
+#
+
+. /etc/rc.subr
+
+name=openvpn_auth_oauth2
+rcvar=openvpn_auth_oauth2_enable
+desc="Single sign-on for OpenVPN"
+
+eval ": \${${name}_enable:=\"NO\"}"
+eval ": \${${name}_config:=%%ETCDIR%%/openvpn-auth-oauth2.yml}"
+load_rc_config "${name}"
+
+_openvpn_auth_oauth2="%%PREFIX%%/sbin/openvpn-auth-oauth2"
+_common_daemon_args=-Sfc
+_piddir=/var/run/openvpn-auth-oauth2
+
+# Set PID file
+pidfile="${_piddir}/openvpn-auth-oauth2.pid"
+
+required_files=${openvpn_auth_oauth2_config}
+command=/usr/sbin/daemon
+command_args="${_common_daemon_args} -p ${pidfile} -t ${name} \
+${_openvpn_auth_oauth2} --config ${openvpn_auth_oauth2_config}"
+procname="${_openvpn_auth_oauth2}"
+extra_commands=reload
+reload_cmd=openvpn_auth_oauth2_reload
+start_precmd="[ -d ${_piddir} ] || /usr/bin/install -d ${_piddir}"
+
+openvpn_auth_oauth2_reload()
+{
+ if [ "x${openvpn_auth_oauth2_profiles}" != "x" -a "x$1" != "x" ]; then
+ for profile in ${openvpn_auth_oauth2_profiles}; do
+ eval _enable="\${openvpn_auth_oauth2_${profile}_enable}"
+ case "x${_enable:-${openvpn_auth_oauth2_enable}}" in
+ x|x[Nn][Oo]|x[Nn][Oo][Nn][Ee])
+ continue
+ ;;
+ x[Yy][Ee][Ss])
+ ;;
+ *)
+ if test -z "$_enable"; then
+ _var=openvpn_auth_oauth2_enable
+ else
+ _var=openvpn_auth_oauth2_"${profile}"_enable
+ fi
+ echo "Bad value" \
+ "'${_enable:-${openvpn_auth_oauth2_enable}}'" \
+ "for ${_var}. " \
+ "Profile ${profile} skipped."
+ continue
+ ;;
+ esac
+ echo "===> openvpn-auth-oauth2 profile: ${profile}"
+ pidfile="${_piddir}/openvpn-auth-oauth2-${profile}.pid"
+ kill -HUP `cat ${pidfile}`
+ retcode="$?"
+ if [ "0${retcode}" -ne 0 ]; then
+ failed="${profile} (${retcode}) ${failed:-}"
+ else
+ success="${profile} ${success:-}"
+ fi
+ done
+ exit 0
+ else
+ echo "===> openvpn-auth-outh2 profile ${profile} reloading"
+ kill -HUP `cat ${pidfile}`
+ fi
+}
+
+if [ -n "$2" ]; then
+ profile="$2"
+ if [ "x${openvpn_auth_oauth2_profiles}" != "x" ]; then
+ eval openvpn_auth_oauth2_config="\${openvpn_auth_oauth2_${profile}_config:-%%ETCDIR%%/openvpn-auth-oauth2-${profile}.yml}"
+ if [ "x${openvpn_auth_oauth2_config}" = "x" ]; then
+ echo "You must define a configuration file (openvpn_auth_oauth2_${profile}_config)"
+ exit 1
+ fi
+
+ pidfile="${_piddir}/openvpn-auth-oauth2-${profile}.pid"
+
+ [ -f ${pidfile} ] || /usr/bin/install /dev/null "${pidfile}"
+
+ required_files="${openvpn_auth_oauth2_config}"
+ eval openvpn_auth_oauth2_enable="\${openvpn_auth_oauth2_${profile}_enable:-${openvpn_auth_oauth2_enable}}"
+ command_args="${_common_daemon_args} -t ${name}-${profile} -p ${pidfile} \
+ ${_openvpn_auth_oauth2} \
+ --config ${openvpn_auth_oauth2_config}"
+ else
+ echo "$0: extra argument ignored"
+ fi
+else
+ if [ "x${openvpn_auth_oauth2_profiles}" != "x" -a "x$1" != "x" ]; then
+ for profile in ${openvpn_auth_oauth2_profiles}; do
+ eval _enable="\${openvpn_auth_oauth2_${profile}_enable}"
+ case "x${_enable:-${openvpn_auth_oauth2_enable}}" in
+ x|x[Nn][Oo]|x[Nn][Oo][Nn][Ee])
+ continue
+ ;;
+ x[Yy][Ee][Ss])
+ ;;
+ *)
+ if test -z "$_enable"; then
+ _var=openvpn_auth_oauth2_enable
+ else
+ _var=openvpn_auth_oauth2_"${profile}"_enable
+ fi
+ echo "Bad value" \
+ "'${_enable:-${openvpn_auth_oauth2_enable}}'" \
+ "for ${_var}. " \
+ "Profile ${profile} skipped."
+ continue
+ ;;
+ esac
+ echo "===> openvpn-auth-oauth2 profile: ${profile}"
+ %%PREFIX%%/etc/rc.d/openvpn_auth_oauth2 $1 ${profile}
+ retcode="$?"
+ if [ "0${retcode}" -ne 0 ]; then
+ failed="${profile} (${retcode}) ${failed:-}"
+ else
+ success="${profile} ${success:-}"
+ fi
+ done
+ exit 0
+ fi
+fi
+
+run_rc_command "$1"
diff --git a/security/openvpn-auth-oauth2/pkg-descr b/security/openvpn-auth-oauth2/pkg-descr
new file mode 100644
index 000000000000..52e575e966a1
--- /dev/null
+++ b/security/openvpn-auth-oauth2/pkg-descr
@@ -0,0 +1,15 @@
+openvpn-auth-oauth2 is a management client for OpenVPN that handles the single
+sign-on (SSO) authentication against various OIDC providers. This project aims
+to simplify the process of integrating OpenVPN with OIDC providers such as:
+
+- Microsoft Entra ID (Azure AD)
+- GitHub
+- Okta
+- Google Workspace
+- Zittal
+- Digitalocean
+- Keycloak
+- any other OIDC compatible auth server
+
+For comprehensive documentation, point the browser to:
+https://github.com/jkroepke/openvpn-auth-oauth2/wiki/Configuration
diff --git a/security/openvpn-auth-oauth2/pkg-plist b/security/openvpn-auth-oauth2/pkg-plist
new file mode 100644
index 000000000000..c96f261f8393
--- /dev/null
+++ b/security/openvpn-auth-oauth2/pkg-plist
@@ -0,0 +1,3 @@
+@sample %%ETCDIR%%/openvpn-auth-oauth2.yml.sample
+etc/rc.d/openvpn_auth_oauth2
+sbin/openvpn-auth-oauth2
diff --git a/security/py-asyncssh/Makefile b/security/py-asyncssh/Makefile
index 19a77ae69bd7..787379fb0a79 100644
--- a/security/py-asyncssh/Makefile
+++ b/security/py-asyncssh/Makefile
@@ -1,5 +1,5 @@
PORTNAME= asyncssh
-PORTVERSION= 2.20.0
+PORTVERSION= 2.21.0
CATEGORIES= security python
MASTER_SITES= PYPI
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
diff --git a/security/py-asyncssh/distinfo b/security/py-asyncssh/distinfo
index 47fd05b135e1..6f759f3fb528 100644
--- a/security/py-asyncssh/distinfo
+++ b/security/py-asyncssh/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1739962486
-SHA256 (asyncssh-2.20.0.tar.gz) = 020b6e384b2328ef8683908ad8e73de9ec2b9b62fd964571ea957bba98412983
-SIZE (asyncssh-2.20.0.tar.gz) = 534719
+TIMESTAMP = 1747546578
+SHA256 (asyncssh-2.21.0.tar.gz) = 450fe13bb8d86a8f4e7d7b5fafce7791181ca3e7c92e15bbc45dfb25866e48b3
+SIZE (asyncssh-2.21.0.tar.gz) = 539740
diff --git a/security/py-cryptography-vectors/Makefile b/security/py-cryptography-vectors/Makefile
index dbad90e9d84b..1b811611010d 100644
--- a/security/py-cryptography-vectors/Makefile
+++ b/security/py-cryptography-vectors/Makefile
@@ -1,5 +1,5 @@
PORTNAME= cryptography-vectors
-PORTVERSION= 44.0.2
+PORTVERSION= 44.0.3
CATEGORIES= security python
MASTER_SITES= PYPI
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
diff --git a/security/py-cryptography-vectors/distinfo b/security/py-cryptography-vectors/distinfo
index 8de445af558d..62001ecbbc3a 100644
--- a/security/py-cryptography-vectors/distinfo
+++ b/security/py-cryptography-vectors/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1745178090
-SHA256 (cryptography_vectors-44.0.2.tar.gz) = ab32e156b6e7eaf6d8c727a32245967dcce049487301482fca38c0c5fdc84e4b
-SIZE (cryptography_vectors-44.0.2.tar.gz) = 35318019
+TIMESTAMP = 1747546582
+SHA256 (cryptography_vectors-44.0.3.tar.gz) = 340e790dd7dbe81a0bbec128bfb4ab58e4e10081b05ecb24a8c69380909a3a4b
+SIZE (cryptography_vectors-44.0.3.tar.gz) = 35317973
diff --git a/security/py-cryptography/Makefile b/security/py-cryptography/Makefile
index ff31184f08b8..1616e7fc3244 100644
--- a/security/py-cryptography/Makefile
+++ b/security/py-cryptography/Makefile
@@ -1,5 +1,5 @@
PORTNAME= cryptography
-PORTVERSION= 44.0.2
+PORTVERSION= 44.0.3
PORTEPOCH= 1
CATEGORIES= security python
MASTER_SITES= PYPI
diff --git a/security/py-cryptography/Makefile.crates b/security/py-cryptography/Makefile.crates
index 5d10c57cfc85..5e0a864e16a8 100644
--- a/security/py-cryptography/Makefile.crates
+++ b/security/py-cryptography/Makefile.crates
@@ -2,34 +2,34 @@ CARGO_CRATES= asn1-0.20.0 \
asn1_derive-0.20.0 \
autocfg-1.4.0 \
base64-0.22.1 \
- bitflags-2.9.0 \
- cc-1.2.16 \
+ bitflags-2.9.1 \
+ cc-1.2.23 \
cfg-if-1.0.0 \
foreign-types-0.3.2 \
foreign-types-shared-0.1.1 \
heck-0.5.0 \
- indoc-2.0.5 \
- itoa-1.0.14 \
- libc-0.2.170 \
+ indoc-2.0.6 \
+ itoa-1.0.15 \
+ libc-0.2.172 \
memoffset-0.9.1 \
- once_cell-1.20.3 \
- openssl-0.10.71 \
+ once_cell-1.21.3 \
+ openssl-0.10.72 \
openssl-macros-0.1.1 \
- openssl-sys-0.9.106 \
+ openssl-sys-0.9.108 \
pem-3.0.5 \
- pkg-config-0.3.31 \
+ pkg-config-0.3.32 \
portable-atomic-1.11.0 \
- proc-macro2-1.0.93 \
+ proc-macro2-1.0.95 \
pyo3-0.23.5 \
pyo3-build-config-0.23.5 \
pyo3-ffi-0.23.5 \
pyo3-macros-0.23.5 \
pyo3-macros-backend-0.23.5 \
- quote-1.0.38 \
- self_cell-1.1.0 \
+ quote-1.0.40 \
+ self_cell-1.2.0 \
shlex-1.3.0 \
- syn-2.0.98 \
+ syn-2.0.101 \
target-lexicon-0.12.16 \
- unicode-ident-1.0.17 \
- unindent-0.2.3 \
+ unicode-ident-1.0.18 \
+ unindent-0.2.4 \
vcpkg-0.2.15
diff --git a/security/py-cryptography/distinfo b/security/py-cryptography/distinfo
index a9bd3ff7d327..82d3bbcbeb28 100644
--- a/security/py-cryptography/distinfo
+++ b/security/py-cryptography/distinfo
@@ -1,6 +1,6 @@
-TIMESTAMP = 1745178088
-SHA256 (cryptography-44.0.2.tar.gz) = c63454aa261a0cf0c5b4718349629793e9e634993538db841165b3df74f37ec0
-SIZE (cryptography-44.0.2.tar.gz) = 710807
+TIMESTAMP = 1747546580
+SHA256 (cryptography-44.0.3.tar.gz) = fe19d8bc5536a91a24a8133328880a41831b6c5df54599a8417b62fe015d3053
+SIZE (cryptography-44.0.3.tar.gz) = 711096
SHA256 (rust/crates/asn1-0.20.0.crate) = 2d8b84b4ea1de2bf1dcd2a759737ddb328fb6695b2a95eb7e44fed67e3406f32
SIZE (rust/crates/asn1-0.20.0.crate) = 39382
SHA256 (rust/crates/asn1_derive-0.20.0.crate) = a200809d0138620b3dba989f1d08d0620e76248bc1e62a2ec1b2df5eb1ee08ad
@@ -9,10 +9,10 @@ SHA256 (rust/crates/autocfg-1.4.0.crate) = ace50bade8e6234aa140d9a2f552bbee1db4d
SIZE (rust/crates/autocfg-1.4.0.crate) = 17712
SHA256 (rust/crates/base64-0.22.1.crate) = 72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6
SIZE (rust/crates/base64-0.22.1.crate) = 81597
-SHA256 (rust/crates/bitflags-2.9.0.crate) = 5c8214115b7bf84099f1309324e63141d4c5d7cc26862f97a0a857dbefe165bd
-SIZE (rust/crates/bitflags-2.9.0.crate) = 47654
-SHA256 (rust/crates/cc-1.2.16.crate) = be714c154be609ec7f5dad223a33bf1482fff90472de28f7362806e6d4832b8c
-SIZE (rust/crates/cc-1.2.16.crate) = 103847
+SHA256 (rust/crates/bitflags-2.9.1.crate) = 1b8e56985ec62d17e9c1001dc89c88ecd7dc08e47eba5ec7c29c7b5eeecde967
+SIZE (rust/crates/bitflags-2.9.1.crate) = 47913
+SHA256 (rust/crates/cc-1.2.23.crate) = 5f4ac86a9e5bc1e2b3449ab9d7d3a6a405e3d1bb28d7b9be8614f55846ae3766
+SIZE (rust/crates/cc-1.2.23.crate) = 106527
SHA256 (rust/crates/cfg-if-1.0.0.crate) = baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd
SIZE (rust/crates/cfg-if-1.0.0.crate) = 7934
SHA256 (rust/crates/foreign-types-0.3.2.crate) = f6f339eb8adc052cd2ca78910fda869aefa38d22d5cb648e6485e4d3fc06f3b1
@@ -21,30 +21,30 @@ SHA256 (rust/crates/foreign-types-shared-0.1.1.crate) = 00b0228411908ca8685dba7f
SIZE (rust/crates/foreign-types-shared-0.1.1.crate) = 5672
SHA256 (rust/crates/heck-0.5.0.crate) = 2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea
SIZE (rust/crates/heck-0.5.0.crate) = 11517
-SHA256 (rust/crates/indoc-2.0.5.crate) = b248f5224d1d606005e02c97f5aa4e88eeb230488bcc03bc9ca4d7991399f2b5
-SIZE (rust/crates/indoc-2.0.5.crate) = 14396
-SHA256 (rust/crates/itoa-1.0.14.crate) = d75a2a4b1b190afb6f5425f10f6a8f959d2ea0b9c2b1d79553551850539e4674
-SIZE (rust/crates/itoa-1.0.14.crate) = 11210
-SHA256 (rust/crates/libc-0.2.170.crate) = 875b3680cb2f8f71bdcf9a30f38d48282f5d3c95cbf9b3fa57269bb5d5c06828
-SIZE (rust/crates/libc-0.2.170.crate) = 760076
+SHA256 (rust/crates/indoc-2.0.6.crate) = f4c7245a08504955605670dbf141fceab975f15ca21570696aebe9d2e71576bd
+SIZE (rust/crates/indoc-2.0.6.crate) = 17164
+SHA256 (rust/crates/itoa-1.0.15.crate) = 4a5f13b858c8d314ee3e8f639011f7ccefe71f97f96e50151fb991f267928e2c
+SIZE (rust/crates/itoa-1.0.15.crate) = 11231
+SHA256 (rust/crates/libc-0.2.172.crate) = d750af042f7ef4f724306de029d18836c26c1765a54a6a3f094cbd23a7267ffa
+SIZE (rust/crates/libc-0.2.172.crate) = 791646
SHA256 (rust/crates/memoffset-0.9.1.crate) = 488016bfae457b036d996092f6cb448677611ce4449e970ceaf42695203f218a
SIZE (rust/crates/memoffset-0.9.1.crate) = 9032
-SHA256 (rust/crates/once_cell-1.20.3.crate) = 945462a4b81e43c4e3ba96bd7b49d834c6f61198356aa858733bc4acf3cbe62e
-SIZE (rust/crates/once_cell-1.20.3.crate) = 33456
-SHA256 (rust/crates/openssl-0.10.71.crate) = 5e14130c6a98cd258fdcb0fb6d744152343ff729cbfcb28c656a9d12b999fbcd
-SIZE (rust/crates/openssl-0.10.71.crate) = 281165
+SHA256 (rust/crates/once_cell-1.21.3.crate) = 42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d
+SIZE (rust/crates/once_cell-1.21.3.crate) = 34534
+SHA256 (rust/crates/openssl-0.10.72.crate) = fedfea7d58a1f73118430a55da6a286e7b044961736ce96a16a17068ea25e5da
+SIZE (rust/crates/openssl-0.10.72.crate) = 283852
SHA256 (rust/crates/openssl-macros-0.1.1.crate) = a948666b637a0f465e8564c73e89d4dde00d72d4d473cc972f390fc3dcee7d9c
SIZE (rust/crates/openssl-macros-0.1.1.crate) = 5601
-SHA256 (rust/crates/openssl-sys-0.9.106.crate) = 8bb61ea9811cc39e3c2069f40b8b8e2e70d8569b361f879786cc7ed48b777cdd
-SIZE (rust/crates/openssl-sys-0.9.106.crate) = 76230
+SHA256 (rust/crates/openssl-sys-0.9.108.crate) = e145e1651e858e820e4860f7b9c5e169bc1d8ce1c86043be79fa7b7634821847
+SIZE (rust/crates/openssl-sys-0.9.108.crate) = 78190
SHA256 (rust/crates/pem-3.0.5.crate) = 38af38e8470ac9dee3ce1bae1af9c1671fffc44ddfd8bd1d0a3445bf349a8ef3
SIZE (rust/crates/pem-3.0.5.crate) = 18140
-SHA256 (rust/crates/pkg-config-0.3.31.crate) = 953ec861398dccce10c670dfeaf3ec4911ca479e9c02154b3a215178c5f566f2
-SIZE (rust/crates/pkg-config-0.3.31.crate) = 20880
+SHA256 (rust/crates/pkg-config-0.3.32.crate) = 7edddbd0b52d732b21ad9a5fab5c704c14cd949e5e9a1ec5929a24fded1b904c
+SIZE (rust/crates/pkg-config-0.3.32.crate) = 21370
SHA256 (rust/crates/portable-atomic-1.11.0.crate) = 350e9b48cbc6b0e028b0473b114454c6316e57336ee184ceab6e53f72c178b3e
SIZE (rust/crates/portable-atomic-1.11.0.crate) = 181258
-SHA256 (rust/crates/proc-macro2-1.0.93.crate) = 60946a68e5f9d28b0dc1c21bb8a97ee7d018a8b322fa57838ba31cc878e22d99
-SIZE (rust/crates/proc-macro2-1.0.93.crate) = 52388
+SHA256 (rust/crates/proc-macro2-1.0.95.crate) = 02b3e5e68a3a1a02aad3ec490a98007cbc13c37cbe84a3cd7b8e406d76e7f778
+SIZE (rust/crates/proc-macro2-1.0.95.crate) = 51820
SHA256 (rust/crates/pyo3-0.23.5.crate) = 7778bffd85cf38175ac1f545509665d0b9b92a198ca7941f131f85f7a4f9a872
SIZE (rust/crates/pyo3-0.23.5.crate) = 1088533
SHA256 (rust/crates/pyo3-build-config-0.23.5.crate) = 94f6cbe86ef3bf18998d9df6e0f3fc1050a8c5efa409bf712e661a4366e010fb
@@ -55,19 +55,19 @@ SHA256 (rust/crates/pyo3-macros-0.23.5.crate) = fbc2201328f63c4710f68abdf653c89d
SIZE (rust/crates/pyo3-macros-0.23.5.crate) = 8856
SHA256 (rust/crates/pyo3-macros-backend-0.23.5.crate) = fca6726ad0f3da9c9de093d6f116a93c1a38e417ed73bf138472cf4064f72028
SIZE (rust/crates/pyo3-macros-backend-0.23.5.crate) = 70938
-SHA256 (rust/crates/quote-1.0.38.crate) = 0e4dccaaaf89514f546c693ddc140f729f958c247918a13380cccc6078391acc
-SIZE (rust/crates/quote-1.0.38.crate) = 31252
-SHA256 (rust/crates/self_cell-1.1.0.crate) = c2fdfc24bc566f839a2da4c4295b82db7d25a24253867d5c64355abb5799bdbe
-SIZE (rust/crates/self_cell-1.1.0.crate) = 16636
+SHA256 (rust/crates/quote-1.0.40.crate) = 1885c039570dc00dcb4ff087a89e185fd56bae234ddc7f056a945bf36467248d
+SIZE (rust/crates/quote-1.0.40.crate) = 31063
+SHA256 (rust/crates/self_cell-1.2.0.crate) = 0f7d95a54511e0c7be3f51e8867aa8cf35148d7b9445d44de2f943e2b206e749
+SIZE (rust/crates/self_cell-1.2.0.crate) = 16883
SHA256 (rust/crates/shlex-1.3.0.crate) = 0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64
SIZE (rust/crates/shlex-1.3.0.crate) = 18713
-SHA256 (rust/crates/syn-2.0.98.crate) = 36147f1a48ae0ec2b5b3bc5b537d267457555a10dc06f3dbc8cb11ba3006d3b1
-SIZE (rust/crates/syn-2.0.98.crate) = 297807
+SHA256 (rust/crates/syn-2.0.101.crate) = 8ce2b7fc941b3a24138a0a7cf8e858bfc6a992e7978a068a5c760deb0ed43caf
+SIZE (rust/crates/syn-2.0.101.crate) = 299250
SHA256 (rust/crates/target-lexicon-0.12.16.crate) = 61c41af27dd6d1e27b1b16b489db798443478cef1f06a660c96db617ba5de3b1
SIZE (rust/crates/target-lexicon-0.12.16.crate) = 26488
-SHA256 (rust/crates/unicode-ident-1.0.17.crate) = 00e2473a93778eb0bad35909dff6a10d28e63f792f16ed15e404fca9d5eeedbe
-SIZE (rust/crates/unicode-ident-1.0.17.crate) = 47704
-SHA256 (rust/crates/unindent-0.2.3.crate) = c7de7d73e1754487cb58364ee906a499937a0dfabd86bcb980fa99ec8c8fa2ce
-SIZE (rust/crates/unindent-0.2.3.crate) = 7306
+SHA256 (rust/crates/unicode-ident-1.0.18.crate) = 5a5f39404a5da50712a4c1eecf25e90dd62b613502b7e925fd4e4d19b5c96512
+SIZE (rust/crates/unicode-ident-1.0.18.crate) = 47743
+SHA256 (rust/crates/unindent-0.2.4.crate) = 7264e107f553ccae879d21fbea1d6724ac785e8c3bfc762137959b5802826ef3
+SIZE (rust/crates/unindent-0.2.4.crate) = 7422
SHA256 (rust/crates/vcpkg-0.2.15.crate) = accd4ea62f7bb7a82fe23066fb0957d48ef677f6eeb8215f372f52e48bb32426
SIZE (rust/crates/vcpkg-0.2.15.crate) = 228735
diff --git a/security/rubygem-devise-two-factor41-rails70/Makefile b/security/rubygem-devise-two-factor-rails-gitlab/Makefile
index dd5d7785d377..08aeabd039a9 100644
--- a/security/rubygem-devise-two-factor41-rails70/Makefile
+++ b/security/rubygem-devise-two-factor-rails-gitlab/Makefile
@@ -2,7 +2,7 @@ PORTNAME= devise-two-factor
PORTVERSION= 4.1.1
CATEGORIES= security rubygems
MASTER_SITES= RG
-PKGNAMESUFFIX= 41-rails70
+PKGNAMESUFFIX= -rails-gitlab
MAINTAINER= mfechner@FreeBSD.org
COMMENT= Barebones two-factor authentication with Devise
@@ -11,10 +11,10 @@ WWW= https://github.com/tinfoil/devise-two-factor
LICENSE= MIT
LICENSE_FILE= ${WRKSRC}/LICENSE
-RUN_DEPENDS= rubygem-activesupport70>=7.0<8:devel/rubygem-activesupport70 \
+RUN_DEPENDS= rubygem-activesupport-gitlab>=7.0<8:devel/rubygem-activesupport-gitlab \
rubygem-attr_encrypted3>=1.3<5:security/rubygem-attr_encrypted3 \
- rubygem-devise-rails70>=4.0<5:devel/rubygem-devise-rails70 \
- rubygem-railties70>=7.0<7.1:www/rubygem-railties70 \
+ rubygem-devise-rails-gitlab>=4.0<5:devel/rubygem-devise-rails-gitlab \
+ rubygem-railties-gitlab>=7.0<8:www/rubygem-railties-gitlab \
rubygem-rotp>=6.0<7:devel/rubygem-rotp
USES= gem
diff --git a/security/rubygem-devise-two-factor41-rails70/distinfo b/security/rubygem-devise-two-factor-rails-gitlab/distinfo
index 64da0593130d..64da0593130d 100644
--- a/security/rubygem-devise-two-factor41-rails70/distinfo
+++ b/security/rubygem-devise-two-factor-rails-gitlab/distinfo
diff --git a/security/rubygem-devise-two-factor41-rails70/pkg-descr b/security/rubygem-devise-two-factor-rails-gitlab/pkg-descr
index 316de9a9d77e..316de9a9d77e 100644
--- a/security/rubygem-devise-two-factor41-rails70/pkg-descr
+++ b/security/rubygem-devise-two-factor-rails-gitlab/pkg-descr
diff --git a/security/rubygem-doorkeeper-device_authorization_grant/Makefile b/security/rubygem-doorkeeper-device_authorization_grant/Makefile
index e19d18ce95f0..603ab9b5ec8f 100644
--- a/security/rubygem-doorkeeper-device_authorization_grant/Makefile
+++ b/security/rubygem-doorkeeper-device_authorization_grant/Makefile
@@ -1,5 +1,6 @@
PORTNAME= doorkeeper-device_authorization_grant
PORTVERSION= 1.0.3
+PORTREVISION= 1
CATEGORIES= security rubygems
MASTER_SITES= RG
@@ -10,7 +11,7 @@ WWW= https://github.com/exop-group/doorkeeper-device_authorization_grant
LICENSE= MIT
LICENSE_FILE= ${WRKSRC}/MIT-LICENSE
-RUN_DEPENDS= rubygem-doorkeeper-rails70>=5.5<6:security/rubygem-doorkeeper-rails70
+RUN_DEPENDS= rubygem-doorkeeper-rails-gitlab>=5.5<6:security/rubygem-doorkeeper-rails-gitlab
USES= gem
diff --git a/security/rubygem-doorkeeper-openid_connect/Makefile b/security/rubygem-doorkeeper-openid_connect/Makefile
index 2811d31b16f4..176de8383ac2 100644
--- a/security/rubygem-doorkeeper-openid_connect/Makefile
+++ b/security/rubygem-doorkeeper-openid_connect/Makefile
@@ -1,5 +1,6 @@
PORTNAME= doorkeeper-openid_connect
PORTVERSION= 1.8.11
+PORTREVISION= 1
CATEGORIES= security rubygems
MASTER_SITES= RG
@@ -10,7 +11,7 @@ WWW= https://github.com/doorkeeper-gem/doorkeeper-openid_connect
LICENSE= MIT
LICENSE_FILE= ${WRKSRC}/LICENSE.txt
-RUN_DEPENDS= rubygem-doorkeeper-rails70>=5.5<5.9:security/rubygem-doorkeeper-rails70 \
+RUN_DEPENDS= rubygem-doorkeeper-rails-gitlab>=5.5<5.9:security/rubygem-doorkeeper-rails-gitlab \
rubygem-jwt>=2.5:www/rubygem-jwt \
rubygem-ostruct>=0.5:devel/rubygem-ostruct
diff --git a/security/rubygem-doorkeeper-rails-gitlab/Makefile b/security/rubygem-doorkeeper-rails-gitlab/Makefile
new file mode 100644
index 000000000000..be88aa908092
--- /dev/null
+++ b/security/rubygem-doorkeeper-rails-gitlab/Makefile
@@ -0,0 +1,22 @@
+PORTNAME= doorkeeper
+PORTVERSION= 5.8.2
+CATEGORIES= security rubygems
+MASTER_SITES= RG
+PKGNAMESUFFIX= -rails-gitlab
+
+MAINTAINER= mfechner@FreeBSD.org
+COMMENT= OAuth2 provider for Rails and Grape
+WWW= https://github.com/doorkeeper-gem/doorkeeper
+
+LICENSE= MIT
+LICENSE_FILE= ${WRKSRC}/MIT-LICENSE
+
+RUN_DEPENDS= rubygem-railties-gitlab>=5:www/rubygem-railties-gitlab
+
+USES= cpe gem
+
+NO_ARCH= yes
+
+CPE_VENDOR= doorkeeper_project
+
+.include <bsd.port.mk>
diff --git a/security/rubygem-doorkeeper-rails-gitlab/distinfo b/security/rubygem-doorkeeper-rails-gitlab/distinfo
new file mode 100644
index 000000000000..af2ef874822e
--- /dev/null
+++ b/security/rubygem-doorkeeper-rails-gitlab/distinfo
@@ -0,0 +1,3 @@
+TIMESTAMP = 1744289466
+SHA256 (rubygem/doorkeeper-5.8.2.gem) = a73d07aeaf590b1e7e2a35390446f23131c9f37bc0561653e514d3973f4d50d3
+SIZE (rubygem/doorkeeper-5.8.2.gem) = 109056
diff --git a/security/rubygem-doorkeeper-rails-gitlab/pkg-descr b/security/rubygem-doorkeeper-rails-gitlab/pkg-descr
new file mode 100644
index 000000000000..ed39cf3f3049
--- /dev/null
+++ b/security/rubygem-doorkeeper-rails-gitlab/pkg-descr
@@ -0,0 +1,2 @@
+Doorkeeper is a Ruby gem that makes it easy to introduce OAuth 2
+provider functionality to a Rails or Grape application.
diff --git a/security/rubygem-ed25519/Makefile b/security/rubygem-ed25519/Makefile
index 62bd35fbeeab..1d62b63b0e2d 100644
--- a/security/rubygem-ed25519/Makefile
+++ b/security/rubygem-ed25519/Makefile
@@ -1,5 +1,5 @@
PORTNAME= ed25519
-PORTVERSION= 1.3.0
+PORTVERSION= 1.4.0
CATEGORIES= security rubygems
MASTER_SITES= RG
diff --git a/security/rubygem-ed25519/distinfo b/security/rubygem-ed25519/distinfo
index f89c23f69293..ff99d3ba2574 100644
--- a/security/rubygem-ed25519/distinfo
+++ b/security/rubygem-ed25519/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1643134001
-SHA256 (rubygem/ed25519-1.3.0.gem) = 514a5584f84d39daac568a17ec93a4e7261e140c52c562ed8c382c18456e627d
-SIZE (rubygem/ed25519-1.3.0.gem) = 182784
+TIMESTAMP = 1747310910
+SHA256 (rubygem/ed25519-1.4.0.gem) = 16e97f5198689a154247169f3453ef4cfd3f7a47481fde0ae33206cdfdcac506
+SIZE (rubygem/ed25519-1.4.0.gem) = 182272
diff --git a/security/rubygem-gitlab-cloud-connector/Makefile b/security/rubygem-gitlab-cloud-connector/Makefile
index 046d719fff89..9117ca0d6396 100644
--- a/security/rubygem-gitlab-cloud-connector/Makefile
+++ b/security/rubygem-gitlab-cloud-connector/Makefile
@@ -1,5 +1,5 @@
PORTNAME= gitlab-cloud-connector
-PORTVERSION= 1.8.0
+PORTVERSION= 1.13.0
CATEGORIES= security rubygems
MASTER_SITES= RG
@@ -10,7 +10,7 @@ WWW= https://gitlab.com/gitlab-org/cloud-connector/gitlab-cloud-connector
LICENSE= MIT
LICENSE_FILE= ${WRKSRC}/LICENSE
-RUN_DEPENDS= rubygem-activesupport70>=7.0<8:devel/rubygem-activesupport70 \
+RUN_DEPENDS= rubygem-activesupport-gitlab>=7.0<8:devel/rubygem-activesupport-gitlab \
rubygem-jwt29>=2.9.3<2.10:www/rubygem-jwt29
USES= gem
diff --git a/security/rubygem-gitlab-cloud-connector/distinfo b/security/rubygem-gitlab-cloud-connector/distinfo
index 02f2b018735a..58e5f408e7d6 100644
--- a/security/rubygem-gitlab-cloud-connector/distinfo
+++ b/security/rubygem-gitlab-cloud-connector/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1744780700
-SHA256 (rubygem/gitlab-cloud-connector-1.8.0.gem) = d222643e5c0858e453bdce44f04e3ccb58809c2c1c4ab4507648b0aab4b315da
-SIZE (rubygem/gitlab-cloud-connector-1.8.0.gem) = 17408
+TIMESTAMP = 1747311060
+SHA256 (rubygem/gitlab-cloud-connector-1.13.0.gem) = c2b0bcd1bc775208825a119ad0c8b8e2f6eac6c762e9514f8026d63ace9086e8
+SIZE (rubygem/gitlab-cloud-connector-1.13.0.gem) = 17920
diff --git a/security/rubygem-signet/Makefile b/security/rubygem-signet/Makefile
index 8dc28f63badc..b893b776ed00 100644
--- a/security/rubygem-signet/Makefile
+++ b/security/rubygem-signet/Makefile
@@ -1,5 +1,5 @@
PORTNAME= signet
-PORTVERSION= 0.19.0
+PORTVERSION= 0.20.0
CATEGORIES= security rubygems
MASTER_SITES= RG
diff --git a/security/rubygem-signet/distinfo b/security/rubygem-signet/distinfo
index a54077e9930e..9149e7a21965 100644
--- a/security/rubygem-signet/distinfo
+++ b/security/rubygem-signet/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1708450566
-SHA256 (rubygem/signet-0.19.0.gem) = 537f3939f57f141f691e6069a97ec40f34fadafc4c7e5ba94edb06cf4350dd31
-SIZE (rubygem/signet-0.19.0.gem) = 35840
+TIMESTAMP = 1747547520
+SHA256 (rubygem/signet-0.20.0.gem) = bc660e2a6062311348cd35ec1ffafde1c5e2231213e1ca124f57aa4f59ec47a3
+SIZE (rubygem/signet-0.20.0.gem) = 35840
diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml
index 10fce3138813..be35bf612e67 100644
--- a/security/vuxml/vuln/2025.xml
+++ b/security/vuxml/vuln/2025.xml
@@ -1,3 +1,36 @@
+ <vuln vid="07560111-34cc-11f0-af94-b42e991fc52e">
+ <topic>firefox -- out-of-bounds read/write</topic>
+ <affects>
+ <package>
+ <name>firefox</name>
+ <range><lt>138.0.4,2</lt></range>
+ </package>
+ <package>
+ <name>firefox-esr</name>
+ <range><lt>128.10.1</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>security@mozilla.org reports:</p>
+ <blockquote cite="https://bugzilla.mozilla.org/show_bug.cgi?id=1966614">
+ <p>An attacker was able to perform an out-of-bounds read or
+ write on a JavaScript object by confusing array index sizes.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2025-4918</cvename>
+ <url>https://nvd.nist.gov/vuln/detail/CVE-2025-4918</url>
+ <cvename>CVE-2025-4919</cvename>
+ <url>https://nvd.nist.gov/vuln/detail/CVE-2025-4919</url>
+ </references>
+ <dates>
+ <discovery>2025-05-17</discovery>
+ <entry>2025-05-19</entry>
+ </dates>
+ </vuln>
+
<vuln vid="46594aa3-32f7-11f0-a116-8447094a420f">
<topic>WeeChat -- Multiple vulnerabilities</topic>
<affects>
diff --git a/security/zeek/Makefile b/security/zeek/Makefile
index ec556142d2c1..37568d7fdf72 100644
--- a/security/zeek/Makefile
+++ b/security/zeek/Makefile
@@ -1,5 +1,5 @@
PORTNAME= zeek
-DISTVERSION= 7.0.7
+DISTVERSION= 7.0.8
CATEGORIES= security
MASTER_SITES= https://download.zeek.org/
diff --git a/security/zeek/distinfo b/security/zeek/distinfo
index a89bf538df6d..556e223ec34a 100644
--- a/security/zeek/distinfo
+++ b/security/zeek/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1746809493
-SHA256 (zeek-7.0.7.tar.gz) = 8eb07cfb73b976d92bdcbce37051667a072b8323ab59dc1b2bf46b76703765c0
-SIZE (zeek-7.0.7.tar.gz) = 95962543
+TIMESTAMP = 1747772619
+SHA256 (zeek-7.0.8.tar.gz) = 29f918851d671fb3d8fe6b97e3d9fcefaa18660c57cb1ed63adc5e25773175cd
+SIZE (zeek-7.0.8.tar.gz) = 95963798
diff --git a/security/zeek/pkg-plist b/security/zeek/pkg-plist
index 0d7ee7a549f7..9305a9eda9d9 100644
--- a/security/zeek/pkg-plist
+++ b/security/zeek/pkg-plist
@@ -1928,7 +1928,6 @@ share/man/man8/zeek.8.gz
%%DATADIR%%/cmake/CommonCMakeConfig.cmake
%%DATADIR%%/cmake/ConfigurePackaging.cmake
%%DATADIR%%/cmake/ConfigureSpicyBuild.cmake
-%%DATADIR%%/cmake/FindBIND.cmake
%%DATADIR%%/cmake/FindBinPAC.cmake
%%DATADIR%%/cmake/FindCAres.cmake
%%DATADIR%%/cmake/FindCapstats.cmake