diff options
Diffstat (limited to 'security')
98 files changed, 480 insertions, 129 deletions
diff --git a/security/2fa/Makefile b/security/2fa/Makefile index f7baf8708f3e..49626ceb3c0b 100644 --- a/security/2fa/Makefile +++ b/security/2fa/Makefile @@ -1,7 +1,7 @@ PORTNAME= 2fa DISTVERSIONPREFIX= v DISTVERSION= 1.2.0 -PORTREVISION= 29 +PORTREVISION= 30 CATEGORIES= security MAINTAINER= mauroeldritch@gmail.com diff --git a/security/Makefile b/security/Makefile index c25bff7144da..fbfc8471a1f5 100644 --- a/security/Makefile +++ b/security/Makefile @@ -1435,7 +1435,9 @@ SUBDIR += ylva SUBDIR += yubico-piv-tool SUBDIR += yubikey-agent + SUBDIR += yubikey-manager-qt SUBDIR += yubikey-personalization-gui + SUBDIR += yubioath-desktop SUBDIR += zaproxy SUBDIR += zeek SUBDIR += zeronet diff --git a/security/acmetool/Makefile b/security/acmetool/Makefile index be2f921a29c0..01022633705a 100644 --- a/security/acmetool/Makefile +++ b/security/acmetool/Makefile @@ -1,7 +1,7 @@ PORTNAME= acmetool DISTVERSIONPREFIX= v DISTVERSION= 0.2.2 -PORTREVISION= 19 +PORTREVISION= 20 CATEGORIES= security MAINTAINER= samm@FreeBSD.org diff --git a/security/age/Makefile b/security/age/Makefile index cc387501e1b4..c5571bb026f8 100644 --- a/security/age/Makefile +++ b/security/age/Makefile @@ -1,7 +1,7 @@ PORTNAME= age DISTVERSIONPREFIX= v DISTVERSION= 1.2.1 -PORTREVISION= 6 +PORTREVISION= 7 CATEGORIES= security MAINTAINER= bofh@FreeBSD.org diff --git a/security/assh/Makefile b/security/assh/Makefile index 99abada502ef..a9d3e0166031 100644 --- a/security/assh/Makefile +++ b/security/assh/Makefile @@ -1,7 +1,7 @@ PORTNAME= assh DISTVERSIONPREFIX= v DISTVERSION= 2.15.0 -PORTREVISION= 23 +PORTREVISION= 24 CATEGORIES= security MAINTAINER= ashish@FreeBSD.org diff --git a/security/aws-iam-authenticator/Makefile b/security/aws-iam-authenticator/Makefile index 4dff9e6a0a33..b47641ae1615 100644 --- a/security/aws-iam-authenticator/Makefile +++ b/security/aws-iam-authenticator/Makefile @@ -1,7 +1,7 @@ PORTNAME= aws-iam-authenticator PORTVERSION= 0.7.5 DISTVERSIONPREFIX= v -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= security MAINTAINER= danilo@FreeBSD.org diff --git a/security/aws-vault/Makefile b/security/aws-vault/Makefile index 0db83a5b6da4..44951aa51216 100644 --- a/security/aws-vault/Makefile +++ b/security/aws-vault/Makefile @@ -1,7 +1,7 @@ PORTNAME= aws-vault DISTVERSIONPREFIX= v DISTVERSION= 6.6.2 -PORTREVISION= 20 +PORTREVISION= 21 CATEGORIES= security MAINTAINER= mauroeldritch@gmail.com diff --git a/security/boringssl/Makefile b/security/boringssl/Makefile index 72b0f36c6d29..28e061773d37 100644 --- a/security/boringssl/Makefile +++ b/security/boringssl/Makefile @@ -1,5 +1,6 @@ PORTNAME= boringssl PORTVERSION= 0.20250818.0 +PORTREVISION= 1 CATEGORIES= security EXTRACT_ONLY= ${GH_ACCOUNT}-${PORTNAME}-${PORTVERSION}_GH0.tar.gz diff --git a/security/caldera-ot/Makefile b/security/caldera-ot/Makefile index 549f91706aea..0e6e7fefbb69 100644 --- a/security/caldera-ot/Makefile +++ b/security/caldera-ot/Makefile @@ -1,6 +1,6 @@ PORTNAME= caldera-ot DISTVERSION= 5.3.0 -PORTREVISION= 4 +PORTREVISION= 5 CATEGORIES= security python MAINTAINER= acm@FreeBSD.org diff --git a/security/caldera/Makefile b/security/caldera/Makefile index 871722852a27..d3761c9b6dfc 100644 --- a/security/caldera/Makefile +++ b/security/caldera/Makefile @@ -1,6 +1,6 @@ PORTNAME= caldera DISTVERSION= 5.3.0 -PORTREVISION= 5 +PORTREVISION= 6 CATEGORIES= security python MAINTAINER= acm@FreeBSD.org diff --git a/security/certificate_maker/Makefile b/security/certificate_maker/Makefile index c322ca9d3cd0..73e65a61f456 100644 --- a/security/certificate_maker/Makefile +++ b/security/certificate_maker/Makefile @@ -1,7 +1,7 @@ PORTNAME= certificate_maker DISTVERSIONPREFIX= v DISTVERSION= 1.7.1 -PORTREVISION= 4 +PORTREVISION= 5 CATEGORIES= security MAINTAINER= bofh@FreeBSD.org diff --git a/security/certmgr/Makefile b/security/certmgr/Makefile index 8ef39b4f6fcf..b8899bab302c 100644 --- a/security/certmgr/Makefile +++ b/security/certmgr/Makefile @@ -1,7 +1,7 @@ PORTNAME= certmgr DISTVERSIONPREFIX= v DISTVERSION= 3.0.3 -PORTREVISION= 29 +PORTREVISION= 30 CATEGORIES= security net MAINTAINER= fuz@FreeBSD.org diff --git a/security/cfssl/Makefile b/security/cfssl/Makefile index 71ad591947b1..22400075f2e0 100644 --- a/security/cfssl/Makefile +++ b/security/cfssl/Makefile @@ -1,7 +1,7 @@ PORTNAME= cfssl DISTVERSIONPREFIX= v DISTVERSION= 1.6.5 -PORTREVISION= 12 +PORTREVISION= 13 CATEGORIES= security MAINTAINER= yuri@FreeBSD.org diff --git a/security/cosign/Makefile b/security/cosign/Makefile index 317ebaa1c7d7..af140597692c 100644 --- a/security/cosign/Makefile +++ b/security/cosign/Makefile @@ -1,7 +1,7 @@ PORTNAME= cosign DISTVERSIONPREFIX= v DISTVERSION= 2.5.3 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= security MAINTAINER= bofh@FreeBSD.org diff --git a/security/crlfuzz/Makefile b/security/crlfuzz/Makefile index 2331286ca7fa..99b7c6614272 100644 --- a/security/crlfuzz/Makefile +++ b/security/crlfuzz/Makefile @@ -1,7 +1,7 @@ PORTNAME= crlfuzz PORTVERSION= 1.4.1 DISTVERSIONPREFIX= v -PORTREVISION= 29 +PORTREVISION= 30 CATEGORIES= security MAINTAINER= dutra@FreeBSD.org diff --git a/security/crowdsec-blocklist-mirror/Makefile b/security/crowdsec-blocklist-mirror/Makefile index b91a2ba80ea1..d06cec2b434d 100644 --- a/security/crowdsec-blocklist-mirror/Makefile +++ b/security/crowdsec-blocklist-mirror/Makefile @@ -2,7 +2,7 @@ PORTNAME= crowdsec-blocklist-mirror DISTVERSIONPREFIX= v DISTVERSION= 0.0.2 DISTVERSIONSUFFIX= -freebsd -PORTREVISION= 16 +PORTREVISION= 17 CATEGORIES= security MAINTAINER= marco@crowdsec.net diff --git a/security/crowdsec-firewall-bouncer/Makefile b/security/crowdsec-firewall-bouncer/Makefile index 02b7be73fcd8..9881bf5c0792 100644 --- a/security/crowdsec-firewall-bouncer/Makefile +++ b/security/crowdsec-firewall-bouncer/Makefile @@ -1,7 +1,7 @@ PORTNAME= crowdsec-firewall-bouncer DISTVERSIONPREFIX= v DISTVERSION= 0.0.32 -PORTREVISION= 4 +PORTREVISION= 5 CATEGORIES= security MAINTAINER= marco@crowdsec.net diff --git a/security/crowdsec/Makefile b/security/crowdsec/Makefile index 68b3ba268fef..6def3753de60 100644 --- a/security/crowdsec/Makefile +++ b/security/crowdsec/Makefile @@ -1,7 +1,7 @@ PORTNAME= crowdsec DISTVERSIONPREFIX= v DISTVERSION= 1.6.11 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= security MAINTAINER= marco@crowdsec.net diff --git a/security/ct-submit/Makefile b/security/ct-submit/Makefile index 6350daebccf0..c2edb344b792 100644 --- a/security/ct-submit/Makefile +++ b/security/ct-submit/Makefile @@ -1,6 +1,6 @@ PORTNAME= ct-submit PORTVERSION= 1.1.2 -PORTREVISION= 29 +PORTREVISION= 30 CATEGORIES= security www MAINTAINER= jim@ohlste.in diff --git a/security/enc/Makefile b/security/enc/Makefile index b534f63164eb..e3d13aae3cf9 100644 --- a/security/enc/Makefile +++ b/security/enc/Makefile @@ -1,6 +1,6 @@ PORTNAME= enc DISTVERSION= 1.1.4 -PORTREVISION= 2 +PORTREVISION= 3 CATEGORIES= security MAINTAINER= dtxdf@FreeBSD.org diff --git a/security/ffuf/Makefile b/security/ffuf/Makefile index fbe49eb00c28..176f48536c13 100644 --- a/security/ffuf/Makefile +++ b/security/ffuf/Makefile @@ -1,7 +1,7 @@ PORTNAME= ffuf DISTVERSIONPREFIX=v DISTVERSION= 2.1.0 -PORTREVISION= 14 +PORTREVISION= 15 CATEGORIES= security www MAINTAINER= dutra@FreeBSD.org diff --git a/security/git-credential-azure/Makefile b/security/git-credential-azure/Makefile index ee4448f25181..d9b9156e55cd 100644 --- a/security/git-credential-azure/Makefile +++ b/security/git-credential-azure/Makefile @@ -1,7 +1,7 @@ PORTNAME= git-credential-azure DISTVERSIONPREFIX= v DISTVERSION= 0.3.1 -PORTREVISION= 5 +PORTREVISION= 6 CATEGORIES= security MAINTAINER= ehaupt@FreeBSD.org diff --git a/security/git-credential-oauth/Makefile b/security/git-credential-oauth/Makefile index e3ed01c7fe53..0d9f7f1b24f1 100644 --- a/security/git-credential-oauth/Makefile +++ b/security/git-credential-oauth/Makefile @@ -1,7 +1,7 @@ PORTNAME= git-credential-oauth DISTVERSIONPREFIX= v DISTVERSION= 0.15.1 -PORTREVISION= 4 +PORTREVISION= 5 CATEGORIES= security MAINTAINER= ehaupt@FreeBSD.org diff --git a/security/gitjacker/Makefile b/security/gitjacker/Makefile index 3c1d6102911a..bf9de433f0da 100644 --- a/security/gitjacker/Makefile +++ b/security/gitjacker/Makefile @@ -1,7 +1,7 @@ PORTNAME= gitjacker DISTVERSIONPREFIX= v DISTVERSION= 0.1.0 -PORTREVISION= 29 +PORTREVISION= 30 CATEGORIES= security MAINTAINER= yuri@FreeBSD.org diff --git a/security/go-cve-dictionary/Makefile b/security/go-cve-dictionary/Makefile index 6857e6c8d502..0bd36a5bca62 100644 --- a/security/go-cve-dictionary/Makefile +++ b/security/go-cve-dictionary/Makefile @@ -1,7 +1,7 @@ PORTNAME= go-cve-dictionary DISTVERSIONPREFIX=v DISTVERSION= 0.11.0 -PORTREVISION= 6 +PORTREVISION= 7 CATEGORIES= security MAINTAINER= girgen@FreeBSD.org diff --git a/security/go-tuf/Makefile b/security/go-tuf/Makefile index 7ddc31097234..c60ba8a8793f 100644 --- a/security/go-tuf/Makefile +++ b/security/go-tuf/Makefile @@ -1,7 +1,7 @@ PORTNAME= go-tuf DISTVERSIONPREFIX= v DISTVERSION= 2.1.1 -PORTREVISION= 4 +PORTREVISION= 5 CATEGORIES= security MAINTAINER= bofh@FreeBSD.org diff --git a/security/gokart/Makefile b/security/gokart/Makefile index 83bfcfb43af6..2428dfd745d0 100644 --- a/security/gokart/Makefile +++ b/security/gokart/Makefile @@ -1,7 +1,7 @@ PORTNAME= gokart DISTVERSIONPREFIX= v DISTVERSION= 0.5.1 -PORTREVISION= 23 +PORTREVISION= 24 CATEGORIES= security MAINTAINER= dutra@FreeBSD.org diff --git a/security/gokey/Makefile b/security/gokey/Makefile index 458ef44b4a90..cb8222051743 100644 --- a/security/gokey/Makefile +++ b/security/gokey/Makefile @@ -1,7 +1,7 @@ PORTNAME= gokey DISTVERSIONPREFIX= v DISTVERSION= 0.1.3 -PORTREVISION= 4 +PORTREVISION= 5 CATEGORIES= security MAINTAINER= ports@FreeBSD.org diff --git a/security/gopass/Makefile b/security/gopass/Makefile index 84548014ca1b..b856a4e599cb 100644 --- a/security/gopass/Makefile +++ b/security/gopass/Makefile @@ -1,7 +1,7 @@ PORTNAME= gopass DISTVERSIONPREFIX= v DISTVERSION= 1.15.16 -PORTREVISION= 5 +PORTREVISION= 6 CATEGORIES= security MAINTAINER= eduardo@FreeBSD.org diff --git a/security/gosec/Makefile b/security/gosec/Makefile index e06ce8594cbf..7821519afa1b 100644 --- a/security/gosec/Makefile +++ b/security/gosec/Makefile @@ -1,7 +1,7 @@ PORTNAME= gosec DISTVERSIONPREFIX= v DISTVERSION= 2.22.0 -PORTREVISION= 6 +PORTREVISION= 7 CATEGORIES= security devel MAINTAINER= yuri@FreeBSD.org diff --git a/security/govulncheck/Makefile b/security/govulncheck/Makefile index 83986767631a..0ec895c47fa6 100644 --- a/security/govulncheck/Makefile +++ b/security/govulncheck/Makefile @@ -1,7 +1,7 @@ PORTNAME= govulncheck DISTVERSIONPREFIX= v DISTVERSION= 1.1.4 -PORTREVISION= 3 +PORTREVISION= 4 CATEGORIES= security MAINTAINER= einar@isnic.is diff --git a/security/headscale/Makefile b/security/headscale/Makefile index c678b39eb0f1..f5c71ac4e8f0 100644 --- a/security/headscale/Makefile +++ b/security/headscale/Makefile @@ -1,7 +1,7 @@ PORTNAME= headscale PORTVERSION= 0.26.1 DISTVERSIONPREFIX= v -PORTREVISION= 2 +PORTREVISION= 3 CATEGORIES= security net-vpn MAINTAINER= m.muenz@gmail.com diff --git a/security/hidden-lake/Makefile b/security/hidden-lake/Makefile index 4acd0a642028..3128df93d9f9 100644 --- a/security/hidden-lake/Makefile +++ b/security/hidden-lake/Makefile @@ -1,7 +1,7 @@ PORTNAME= hidden-lake DISTVERSIONPREFIX= v -DISTVERSION= 1.8.6 -PORTREVISION= 2 +DISTVERSION= 1.9.0 +PORTREVISION= 1 CATEGORIES= security net-p2p MAINTAINER= alven@FreeBSD.org @@ -14,13 +14,14 @@ LICENSE_FILE= ${WRKSRC}/LICENSE USES= go:modules GO_MODULE= github.com/number571/hidden-lake -GO_TARGET= ./cmd/hla/hla_tcp:hla_tcp \ +GO_TARGET= ./cmd/hla/hla-http:hla-http \ + ./cmd/hla/hla-tcp:hla-tcp \ ./cmd/hlc:hlc \ - ./cmd/hlf:hlf \ - ./cmd/hlm:hlm \ - ./cmd/hlp:hlp \ - ./cmd/hlr:hlr \ - ./cmd/hls:hls + ./cmd/hlk:hlk \ + ./cmd/hls/hls-filesharer:hls-filesharer \ + ./cmd/hls/hls-messenger:hls-messenger \ + ./cmd/hls/hls-pinger:hls-pinger \ + ./cmd/hls/hls-remoter:hls-remoter TEST_TARGET= test-run diff --git a/security/hidden-lake/distinfo b/security/hidden-lake/distinfo index 45882d770589..e2025a2a90d5 100644 --- a/security/hidden-lake/distinfo +++ b/security/hidden-lake/distinfo @@ -1,5 +1,5 @@ -TIMESTAMP = 1749829911 -SHA256 (go/security_hidden-lake/hidden-lake-v1.8.6/v1.8.6.mod) = af5da6e07886561d70f87bfc232dc0effefc286c3ec66acb6ea5a6ef77a19121 -SIZE (go/security_hidden-lake/hidden-lake-v1.8.6/v1.8.6.mod) = 340 -SHA256 (go/security_hidden-lake/hidden-lake-v1.8.6/v1.8.6.zip) = 33d2c50ad079614d85954af115673ea41a0ce214d4ce21d6e97e32dd5bb334be -SIZE (go/security_hidden-lake/hidden-lake-v1.8.6/v1.8.6.zip) = 11188051 +TIMESTAMP = 1755749357 +SHA256 (go/security_hidden-lake/hidden-lake-v1.9.0/v1.9.0.mod) = 63e461d57f3f49cebe5696f97cf82a652a9afe45e3d17e1aaa7cac4340eca63b +SIZE (go/security_hidden-lake/hidden-lake-v1.9.0/v1.9.0.mod) = 340 +SHA256 (go/security_hidden-lake/hidden-lake-v1.9.0/v1.9.0.zip) = 9cbb358b10607e5b3b20eae34c367f8ad578340bec4bb2203795704c80fcb5a0 +SIZE (go/security_hidden-lake/hidden-lake-v1.9.0/v1.9.0.zip) = 10690371 diff --git a/security/hidden-lake/pkg-plist b/security/hidden-lake/pkg-plist index d2d728bd8408..d5c970a3b5a0 100644 --- a/security/hidden-lake/pkg-plist +++ b/security/hidden-lake/pkg-plist @@ -1,10 +1,11 @@ -bin/hla_tcp +bin/hla-http +bin/hla-tcp bin/hlc -bin/hlf -bin/hlm -bin/hlp -bin/hlr -bin/hls +bin/hlk +bin/hls-filesharer +bin/hls-messenger +bin/hls-pinger +bin/hls-remoter %%PORTDOCS%%%%DOCSDIR%%/CODESTYLE.md %%PORTDOCS%%%%DOCSDIR%%/DEF_PORTS.md %%PORTDOCS%%%%DOCSDIR%%/README.md diff --git a/security/hockeypuck/Makefile b/security/hockeypuck/Makefile index b7506daa1afa..4f76e01013f9 100644 --- a/security/hockeypuck/Makefile +++ b/security/hockeypuck/Makefile @@ -1,6 +1,6 @@ PORTNAME= hockeypuck DISTVERSION= 2.2.4 -PORTREVISION= 2 +PORTREVISION= 3 CATEGORIES= security MAINTAINER= me@svmhdvn.name diff --git a/security/honeytrap/Makefile b/security/honeytrap/Makefile index 4a3352865c03..ea11abf504e2 100644 --- a/security/honeytrap/Makefile +++ b/security/honeytrap/Makefile @@ -1,6 +1,6 @@ PORTNAME= honeytrap DISTVERSION= g20210510 -PORTREVISION= 29 +PORTREVISION= 30 CATEGORIES= security MAINTAINER= ezri.mudde@dutchsec.com diff --git a/security/horcrux/Makefile b/security/horcrux/Makefile index c59ca34bf592..3a26d585fb3a 100644 --- a/security/horcrux/Makefile +++ b/security/horcrux/Makefile @@ -1,7 +1,7 @@ PORTNAME= horcrux DISTVERSIONPREFIX= v DISTVERSION= 0.3 -PORTREVISION= 28 +PORTREVISION= 29 CATEGORIES= security MAINTAINER= lcook@FreeBSD.org diff --git a/security/keybase/Makefile b/security/keybase/Makefile index cbee3c327569..89c01e84b716 100644 --- a/security/keybase/Makefile +++ b/security/keybase/Makefile @@ -1,7 +1,7 @@ PORTNAME= keybase PORTVERSION= 6.5.1 DISTVERSIONPREFIX= v -PORTREVISION= 4 +PORTREVISION= 5 CATEGORIES= security MAINTAINER= sunpoet@FreeBSD.org diff --git a/security/kpmenu/Makefile b/security/kpmenu/Makefile index d34c8fba9960..e2af7f3b7c7b 100644 --- a/security/kpmenu/Makefile +++ b/security/kpmenu/Makefile @@ -1,7 +1,7 @@ PORTNAME= kpmenu DISTVERSIONPREFIX= v DISTVERSION= 1.4.1 -PORTREVISION= 29 +PORTREVISION= 30 CATEGORIES= security MAINTAINER= bapt@FreeBSD.org diff --git a/security/lego/Makefile b/security/lego/Makefile index cdc574d87bc1..3dc4af5aefa6 100644 --- a/security/lego/Makefile +++ b/security/lego/Makefile @@ -1,6 +1,7 @@ PORTNAME= lego DISTVERSIONPREFIX= v DISTVERSION= 4.25.2 +PORTREVISION= 1 CATEGORIES= security MAINTAINER= matt@matthoran.com diff --git a/security/meek/Makefile b/security/meek/Makefile index afb92731ff83..9483477599f1 100644 --- a/security/meek/Makefile +++ b/security/meek/Makefile @@ -1,7 +1,7 @@ PORTNAME= meek DISTVERSIONPREFIX=v DISTVERSION= 0.37.0 -PORTREVISION= 25 +PORTREVISION= 26 CATEGORIES= security net MAINTAINER= egypcio@FreeBSD.org diff --git a/security/metasploit/Makefile b/security/metasploit/Makefile index de9d739a3813..424f1c11602f 100644 --- a/security/metasploit/Makefile +++ b/security/metasploit/Makefile @@ -1,6 +1,6 @@ PORTNAME= metasploit DISTVERSION= 6.4.58 -PORTREVISION= 4 +PORTREVISION= 5 CATEGORIES= security MAINTAINER= tanawts@gmail.com diff --git a/security/naabu/Makefile b/security/naabu/Makefile index 35da9279b69d..383cfec25a03 100644 --- a/security/naabu/Makefile +++ b/security/naabu/Makefile @@ -1,7 +1,7 @@ PORTNAME= naabu DISTVERSIONPREFIX= v DISTVERSION= 2.3.5 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= security MAINTAINER= dutra@FreeBSD.org diff --git a/security/nebula/Makefile b/security/nebula/Makefile index d38485d10c6d..d809fe4e5504 100644 --- a/security/nebula/Makefile +++ b/security/nebula/Makefile @@ -1,7 +1,7 @@ PORTNAME= nebula DISTVERSIONPREFIX= v DISTVERSION= 1.8.2 -PORTREVISION= 13 +PORTREVISION= 14 CATEGORIES= security MAINTAINER= ashish@FreeBSD.org diff --git a/security/netbird/Makefile b/security/netbird/Makefile index 1ea7f5225c50..9a0ac9619973 100644 --- a/security/netbird/Makefile +++ b/security/netbird/Makefile @@ -1,6 +1,7 @@ PORTNAME= netbird DISTVERSIONPREFIX= v DISTVERSION= 0.55.1 +PORTREVISION= 1 CATEGORIES= security net net-vpn MAINTAINER= hakan.external@netbird.io diff --git a/security/obfs4proxy-tor/Makefile b/security/obfs4proxy-tor/Makefile index 964c21c2f3fd..76b061e30825 100644 --- a/security/obfs4proxy-tor/Makefile +++ b/security/obfs4proxy-tor/Makefile @@ -1,6 +1,6 @@ PORTNAME= obfs4proxy DISTVERSION= 0.0.14 -PORTREVISION= 23 +PORTREVISION= 24 CATEGORIES= security net PKGNAMESUFFIX= -tor DISTFILES= ${DISTNAME}${EXTRACT_SUFX} diff --git a/security/onionscan/Makefile b/security/onionscan/Makefile index a3bf6157d030..b08feed23913 100644 --- a/security/onionscan/Makefile +++ b/security/onionscan/Makefile @@ -1,7 +1,7 @@ PORTNAME= onionscan DISTVERSIONPREFIX= OnionScan- DISTVERSION= 0.2 -PORTREVISION= 31 +PORTREVISION= 32 CATEGORIES= security net MAINTAINER= egypcio@FreeBSD.org diff --git a/security/openvpn-auth-oauth2/Makefile b/security/openvpn-auth-oauth2/Makefile index 444fc1962136..921a17d7fca6 100644 --- a/security/openvpn-auth-oauth2/Makefile +++ b/security/openvpn-auth-oauth2/Makefile @@ -1,6 +1,7 @@ PORTNAME= openvpn-auth-oauth2 DISTVERSIONPREFIX= v DISTVERSION= 1.25.2 +PORTREVISION= 1 CATEGORIES= security net net-vpn MAINTAINER= otis@FreeBSD.org diff --git a/security/openvpn-devel/Makefile b/security/openvpn-devel/Makefile index bf3005b49f02..bc04c60e5f14 100644 --- a/security/openvpn-devel/Makefile +++ b/security/openvpn-devel/Makefile @@ -1,5 +1,5 @@ PORTNAME= openvpn -DISTVERSION= g20250801 +DISTVERSION= g20250905 PORTREVISION= 0 # leave in even if 0 to avoid accidental PORTEPOCH bumps PORTEPOCH= 1 CATEGORIES= security net net-vpn @@ -21,7 +21,7 @@ LIB_DEPENDS+= liblzo2.so:archivers/lzo2 USES= autoreconf cpe libtool pkgconfig python:build shebangfix tar:xz IGNORE_SSL= libressl libressl-devel USE_GITLAB= yes -GL_TAGNAME= 7b1b283478ec008fad163c8a54659a1ed97ed727 +GL_TAGNAME= 1e7b9a0fb021f0a64e76369f4efd2001d50ef42b USE_RC_SUBR= openvpn SHEBANG_FILES= sample/sample-scripts/auth-pam.pl \ @@ -63,7 +63,6 @@ OPTIONS_EXCLUDE_FreeBSD_13= DCO # FreeBSD 14 only DCO_DESC= Build with Data Channel Offload (ovpn(4)) support EASYRSA_DESC= Install security/easy-rsa RSA helper package -MBEDTLS_DESC= SSL/TLS via mbedTLS (lacks TLS v1.3) PKCS11_DESC= Use security/pkcs11-helper SMALL_DESC= Build a smaller executable with fewer features X509ALTUSERNAME_DESC= Enable --x509-username-field (OpenSSL only) @@ -77,7 +76,7 @@ EASYRSA_RUN_DEPENDS= easy-rsa>=0:security/easy-rsa LZ4_LIB_DEPENDS+= liblz4.so:archivers/liblz4 LZ4_CONFIGURE_OFF= --disable-lz4 -MBEDTLS_LIB_DEPENDS= libmbedtls.so:security/mbedtls2 +MBEDTLS_LIB_DEPENDS= libmbedtls.so:security/mbedtls3 MBEDTLS_CONFIGURE_ON= --with-crypto-library=mbedtls OPENSSL_USES= ssl diff --git a/security/openvpn-devel/distinfo b/security/openvpn-devel/distinfo index 642485f91297..5af62172f472 100644 --- a/security/openvpn-devel/distinfo +++ b/security/openvpn-devel/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1754042576 -SHA256 (openvpn-openvpn-7b1b283478ec008fad163c8a54659a1ed97ed727_GL0.tar.gz) = 6aae8dff746465fa30cfebece17aee8b5c8b18def9d1f44385403d9a5a17d942 -SIZE (openvpn-openvpn-7b1b283478ec008fad163c8a54659a1ed97ed727_GL0.tar.gz) = 1330547 +TIMESTAMP = 1757057338 +SHA256 (openvpn-openvpn-1e7b9a0fb021f0a64e76369f4efd2001d50ef42b_GL0.tar.gz) = bbc283697162a50ea3a107c00f319216eba8ec0ba4b2ff4ea29ca85f92d60f3a +SIZE (openvpn-openvpn-1e7b9a0fb021f0a64e76369f4efd2001d50ef42b_GL0.tar.gz) = 1333583 diff --git a/security/openvpn/Makefile b/security/openvpn/Makefile index 7c44e64f7dba..44f30253b5b2 100644 --- a/security/openvpn/Makefile +++ b/security/openvpn/Makefile @@ -1,6 +1,6 @@ PORTNAME= openvpn DISTVERSION= 2.6.14 -PORTREVISION?= 1 +PORTREVISION?= 2 CATEGORIES= security net net-vpn MASTER_SITES= https://swupdate.openvpn.org/community/releases/ \ https://build.openvpn.net/downloads/releases/ \ diff --git a/security/openvpn/files/patch-src_openvpn_dco__freebsd.c b/security/openvpn/files/patch-src_openvpn_dco__freebsd.c new file mode 100644 index 000000000000..22c24baa9ec3 --- /dev/null +++ b/security/openvpn/files/patch-src_openvpn_dco__freebsd.c @@ -0,0 +1,96 @@ +--- src/openvpn/dco_freebsd.c.orig 2025-04-02 06:53:10 UTC ++++ src/openvpn/dco_freebsd.c +@@ -72,6 +72,67 @@ sockaddr_to_nvlist(const struct sockaddr *sa) + return (nvl); + } + ++static bool ++nvlist_to_sockaddr(const nvlist_t *nvl, struct sockaddr_storage *ss) ++{ ++ if (!nvlist_exists_number(nvl, "af")) ++ { ++ return (false); ++ } ++ if (!nvlist_exists_binary(nvl, "address")) ++ { ++ return (false); ++ } ++ if (!nvlist_exists_number(nvl, "port")) ++ { ++ return (false); ++ } ++ ++ ss->ss_family = nvlist_get_number(nvl, "af"); ++ ++ switch (ss->ss_family) ++ { ++ case AF_INET: ++ { ++ struct sockaddr_in *in = (struct sockaddr_in *)ss; ++ const void *data; ++ size_t len; ++ ++ in->sin_len = sizeof(*in); ++ data = nvlist_get_binary(nvl, "address", &len); ++ if (len != sizeof(in->sin_addr)) ++ { ++ return (false); ++ } ++ memcpy(&in->sin_addr, data, sizeof(in->sin_addr)); ++ in->sin_port = nvlist_get_number(nvl, "port"); ++ break; ++ } ++ ++ case AF_INET6: ++ { ++ struct sockaddr_in6 *in6 = (struct sockaddr_in6 *)ss; ++ const void *data; ++ size_t len; ++ ++ in6->sin6_len = sizeof(*in6); ++ data = nvlist_get_binary(nvl, "address", &len); ++ if (len != sizeof(in6->sin6_addr)) ++ { ++ return (false); ++ } ++ memcpy(&in6->sin6_addr, data, sizeof(in6->sin6_addr)); ++ in6->sin6_port = nvlist_get_number(nvl, "port"); ++ break; ++ } ++ ++ default: ++ return (false); ++ } ++ ++ return (true); ++} ++ + int + dco_new_peer(dco_context_t *dco, unsigned int peerid, int sd, + struct sockaddr *localaddr, struct sockaddr *remoteaddr, +@@ -570,6 +631,25 @@ dco_do_read(dco_context_t *dco) + case OVPN_NOTIF_ROTATE_KEY: + dco->dco_message_type = OVPN_CMD_SWAP_KEYS; + break; ++ ++ case OVPN_NOTIF_FLOAT: { ++ const nvlist_t *address; ++ ++ if (!nvlist_exists_nvlist(nvl, "address")) ++ { ++ msg(M_WARN, "Float notification without address"); ++ break; ++ } ++ ++ address = nvlist_get_nvlist(nvl, "address"); ++ if (!nvlist_to_sockaddr(address, &dco->dco_float_peer_ss)) ++ { ++ msg(M_WARN, "Failed to parse float notification"); ++ break; ++ } ++ dco->dco_message_type = OVPN_CMD_FLOAT_PEER; ++ break; ++ } + + default: + msg(M_WARN, "Unknown kernel notification %d", type); diff --git a/security/openvpn/files/patch-src_openvpn_dco__freebsd.h b/security/openvpn/files/patch-src_openvpn_dco__freebsd.h new file mode 100644 index 000000000000..32dd08563f27 --- /dev/null +++ b/security/openvpn/files/patch-src_openvpn_dco__freebsd.h @@ -0,0 +1,18 @@ +--- src/openvpn/dco_freebsd.h.orig 2025-04-02 06:53:10 UTC ++++ src/openvpn/dco_freebsd.h +@@ -36,6 +36,7 @@ enum ovpn_message_type_t { + OVPN_CMD_DEL_PEER, + OVPN_CMD_PACKET, + OVPN_CMD_SWAP_KEYS, ++ OVPN_CMD_FLOAT_PEER, + }; + + enum ovpn_del_reason_t { +@@ -55,6 +56,7 @@ typedef struct dco_context { + int dco_message_type; + int dco_message_peer_id; + int dco_del_peer_reason; ++ struct sockaddr_storage dco_float_peer_ss; + uint64_t dco_read_bytes; + uint64_t dco_write_bytes; + } dco_context_t; diff --git a/security/openvpn/files/patch-src_openvpn_forward.c b/security/openvpn/files/patch-src_openvpn_forward.c new file mode 100644 index 000000000000..0734167f6636 --- /dev/null +++ b/security/openvpn/files/patch-src_openvpn_forward.c @@ -0,0 +1,44 @@ +--- src/openvpn/forward.c.orig 2025-04-02 06:53:10 UTC ++++ src/openvpn/forward.c +@@ -1234,6 +1234,41 @@ process_incoming_link(struct context *c) + perf_pop(); + } + ++void ++extract_dco_float_peer_addr(const sa_family_t socket_family, ++ struct openvpn_sockaddr *out_osaddr, ++ const struct sockaddr *float_sa) ++{ ++ if (float_sa->sa_family == AF_INET) ++ { ++ struct sockaddr_in *float4 = (struct sockaddr_in *)float_sa; ++ /* DCO treats IPv4-mapped IPv6 addresses as pure IPv4. However, on a ++ * dual-stack socket, we need to preserve the mapping otherwise openvpn ++ * will not be able to find the peer by its transport address. ++ */ ++ if (socket_family == AF_INET6) ++ { ++ out_osaddr->addr.in6.sin6_family = AF_INET6; ++ out_osaddr->addr.in6.sin6_port = float4->sin_port; ++ ++ memset(&out_osaddr->addr.in6.sin6_addr.s6_addr, 0, 10); ++ out_osaddr->addr.in6.sin6_addr.s6_addr[10] = 0xff; ++ out_osaddr->addr.in6.sin6_addr.s6_addr[11] = 0xff; ++ memcpy(&out_osaddr->addr.in6.sin6_addr.s6_addr[12], ++ &float4->sin_addr.s_addr, sizeof(in_addr_t)); ++ } ++ else ++ { ++ memcpy(&out_osaddr->addr.in4, float4, sizeof(struct sockaddr_in)); ++ } ++ } ++ else ++ { ++ struct sockaddr_in6 *float6 = (struct sockaddr_in6 *)float_sa; ++ memcpy(&out_osaddr->addr.in6, float6, sizeof(struct sockaddr_in6)); ++ } ++} ++ + static void + process_incoming_dco(struct context *c) + { diff --git a/security/openvpn/files/patch-src_openvpn_forward.h b/security/openvpn/files/patch-src_openvpn_forward.h new file mode 100644 index 000000000000..050343949c03 --- /dev/null +++ b/security/openvpn/files/patch-src_openvpn_forward.h @@ -0,0 +1,24 @@ +--- src/openvpn/forward.h.orig 2025-04-02 06:53:10 UTC ++++ src/openvpn/forward.h +@@ -189,6 +189,21 @@ void process_incoming_link_part2(struct context *c, st + void process_incoming_link_part2(struct context *c, struct link_socket_info *lsi, const uint8_t *orig_buf); + + /** ++ * Transfers \c float_sa data extracted from an incoming DCO ++ * PEER_FLOAT_NTF to \c out_osaddr for later processing. ++ * ++ * @param socket_family - The address family of the socket ++ * @param out_osaddr - openvpn_sockaddr struct that will be filled the new ++ * address data ++ * @param float_sa - The sockaddr struct containing the data received from the ++ * DCO notification ++ */ ++void ++extract_dco_float_peer_addr(sa_family_t socket_family, ++ struct openvpn_sockaddr *out_osaddr, ++ const struct sockaddr *float_sa); ++ ++/** + * Write a packet to the external network interface. + * @ingroup external_multiplexer + * diff --git a/security/openvpn/files/patch-src_openvpn_multi.c b/security/openvpn/files/patch-src_openvpn_multi.c new file mode 100644 index 000000000000..22995fb45caf --- /dev/null +++ b/security/openvpn/files/patch-src_openvpn_multi.c @@ -0,0 +1,39 @@ +--- src/openvpn/multi.c.orig 2025-04-02 06:53:10 UTC ++++ src/openvpn/multi.c +@@ -3169,6 +3169,18 @@ multi_process_float(struct multi_context *m, struct mu + goto done; + } + ++ /* It doesn't make sense to let a peer float to the address it already ++ * has, so we disallow it. This can happen if a DCO netlink notification ++ * gets lost and we miss a floating step. ++ */ ++ if (m1->peer_id == m2->peer_id) ++ { ++ msg(M_WARN, "disallowing peer %" PRIu32 " (%s) from floating to " ++ "its own address (%s)", ++ m1->peer_id, tls_common_name(mi->context.c2.tls_multi, false), ++ mroute_addr_print(&mi->real, &gc)); ++ goto done; ++ } + msg(D_MULTI_MEDIUM, "closing instance %s", multi_instance_string(ex_mi, false, &gc)); + multi_close_instance(m, ex_mi, false); + } +@@ -3301,6 +3313,17 @@ multi_process_incoming_dco(struct multi_context *m) + { + process_incoming_del_peer(m, mi, dco); + } ++#if defined(TARGET_FREEBSD) ++ else if (dco->dco_message_type == OVPN_CMD_FLOAT_PEER) ++ { ++ ASSERT(mi->context.c2.link_socket); ++ extract_dco_float_peer_addr(mi->context.c2.link_socket->info.af, ++ &m->top.c2.from.dest, ++ (struct sockaddr *)&dco->dco_float_peer_ss); ++ multi_process_float(m, mi); ++ CLEAR(dco->dco_float_peer_ss); ++ } ++#endif /* if defined(TARGET_LINUX) || defined(TARGET_WIN32) */ + else if (dco->dco_message_type == OVPN_CMD_SWAP_KEYS) + { + tls_session_soft_reset(mi->context.c2.tls_multi); diff --git a/security/openvpn/files/patch-src_openvpn_ovpn__dco__freebsd.h b/security/openvpn/files/patch-src_openvpn_ovpn__dco__freebsd.h new file mode 100644 index 000000000000..1d1ff16e5d8e --- /dev/null +++ b/security/openvpn/files/patch-src_openvpn_ovpn__dco__freebsd.h @@ -0,0 +1,10 @@ +--- src/openvpn/ovpn_dco_freebsd.h.orig 2025-04-02 06:53:10 UTC ++++ src/openvpn/ovpn_dco_freebsd.h +@@ -37,6 +37,7 @@ enum ovpn_notif_type { + enum ovpn_notif_type { + OVPN_NOTIF_DEL_PEER, + OVPN_NOTIF_ROTATE_KEY, ++ OVPN_NOTIF_FLOAT, + }; + + enum ovpn_del_reason { diff --git a/security/osv-scanner/Makefile b/security/osv-scanner/Makefile index a67332b5ff08..e1b4fc3acda3 100644 --- a/security/osv-scanner/Makefile +++ b/security/osv-scanner/Makefile @@ -1,6 +1,7 @@ PORTNAME= osv-scanner DISTVERSIONPREFIX= v DISTVERSION= 2.2.1 +PORTREVISION= 1 CATEGORIES= security MAINTAINER= dutra@FreeBSD.org diff --git a/security/picocrypt/Makefile b/security/picocrypt/Makefile index c713ce6cc77b..f6483ced31b9 100644 --- a/security/picocrypt/Makefile +++ b/security/picocrypt/Makefile @@ -1,6 +1,6 @@ PORTNAME= picocrypt DISTVERSION= 1.49 # Missing modules.txt, generate one with `go mod vendor` and place it in ${FILESDIR} -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= security MAINTAINER= eduardo@FreeBSD.org diff --git a/security/pwdsafety/Makefile b/security/pwdsafety/Makefile index c143543bf2cc..23dfe9f40408 100644 --- a/security/pwdsafety/Makefile +++ b/security/pwdsafety/Makefile @@ -1,7 +1,7 @@ PORTNAME= pwdsafety DISTVERSIONPREFIX= v DISTVERSION= 0.4.0 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= security MAINTAINER= olgeni@FreeBSD.org diff --git a/security/py-yara-python-dex/Makefile b/security/py-yara-python-dex/Makefile index c311734a66db..316aaa8d2e14 100644 --- a/security/py-yara-python-dex/Makefile +++ b/security/py-yara-python-dex/Makefile @@ -1,6 +1,5 @@ PORTNAME= yara-python-dex -PORTVERSION= 1.0.7.1 -PORTREVISION= 1 +PORTVERSION= 1.0.9 CATEGORIES= security python PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX} @@ -26,6 +25,6 @@ USE_PYTHON= distutils LDFLAGS+= -s .endif -PLIST_SUB= VER=${PORTVERSION:R} +PLIST_FILES= %%PYTHON_SITELIBDIR%%/yara%%PYTHON_TAG%%.so .include <bsd.port.mk> diff --git a/security/py-yara-python-dex/distinfo b/security/py-yara-python-dex/distinfo index 5a6611163bd9..d1571c0f5ca6 100644 --- a/security/py-yara-python-dex/distinfo +++ b/security/py-yara-python-dex/distinfo @@ -1,6 +1,6 @@ -TIMESTAMP = 1736800627 -SHA256 (MobSF-yara-python-dex-1.0.7.1_GH0.tar.gz) = 9b2febf8341d724480ee15f94adde22ea6f9f902346f59e2e9b92ec029b7ade2 -SIZE (MobSF-yara-python-dex-1.0.7.1_GH0.tar.gz) = 4505 +TIMESTAMP = 1757003675 +SHA256 (MobSF-yara-python-dex-1.0.9_GH0.tar.gz) = 1e135345d961f019c5dd31a85876aa6552aa471a9604fcc5683c85fab93e7425 +SIZE (MobSF-yara-python-dex-1.0.9_GH0.tar.gz) = 4748 SHA256 (VirusTotal-yara-python-188cb6e85137f715fef563f61c6b4f21ad026562_GH0.tar.gz) = f685495d280ba2105fa4ca31e0ac8173f16c93c28514c2e66b25a57c7d2d45b8 SIZE (VirusTotal-yara-python-188cb6e85137f715fef563f61c6b4f21ad026562_GH0.tar.gz) = 31860 SHA256 (VirusTotal-yara-ed1a1a430c64cf908b61a5fadc3958866a840bc6_GH0.tar.gz) = 282b97f106076f389e8f74e8e957bdcefbe87cc34887a8be6b5efd64cc96f920 diff --git a/security/py-yara-python-dex/pkg-plist b/security/py-yara-python-dex/pkg-plist deleted file mode 100644 index 5f948a5fbca8..000000000000 --- a/security/py-yara-python-dex/pkg-plist +++ /dev/null @@ -1,6 +0,0 @@ -%%PYTHON_SITELIBDIR%%/yara%%PYTHON_TAG%%.so -%%PYTHON_SITELIBDIR%%/yara_python_dex-%%VER%%-py%%PYTHON_VER%%.egg-info/PKG-INFO -%%PYTHON_SITELIBDIR%%/yara_python_dex-%%VER%%-py%%PYTHON_VER%%.egg-info/SOURCES.txt -%%PYTHON_SITELIBDIR%%/yara_python_dex-%%VER%%-py%%PYTHON_VER%%.egg-info/dependency_links.txt -%%PYTHON_SITELIBDIR%%/yara_python_dex-%%VER%%-py%%PYTHON_VER%%.egg-info/not-zip-safe -%%PYTHON_SITELIBDIR%%/yara_python_dex-%%VER%%-py%%PYTHON_VER%%.egg-info/top_level.txt diff --git a/security/rekor/Makefile b/security/rekor/Makefile index 331e75973e2b..558b50c586fc 100644 --- a/security/rekor/Makefile +++ b/security/rekor/Makefile @@ -1,7 +1,7 @@ PORTNAME= rekor DISTVERSIONPREFIX= v DISTVERSION= 1.3.10 -PORTREVISION= 4 +PORTREVISION= 5 CATEGORIES= security MAINTAINER= bofh@FreeBSD.org diff --git a/security/snort3/Makefile b/security/snort3/Makefile index 8a7d723304fe..7064f6c2546e 100644 --- a/security/snort3/Makefile +++ b/security/snort3/Makefile @@ -1,5 +1,5 @@ PORTNAME= snort -DISTVERSION= 3.9.3.0 +DISTVERSION= 3.9.5.0 PORTEPOCH= 1 CATEGORIES= security PKGNAMESUFFIX= 3 diff --git a/security/snort3/distinfo b/security/snort3/distinfo index 5149faaa6b94..4822b69ada6a 100644 --- a/security/snort3/distinfo +++ b/security/snort3/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1754971093 -SHA256 (snort3-snort3-3.9.3.0_GH0.tar.gz) = c7c2f7488b1a9ec5b60b9706fc3f2f3f9c0e1eb57f384e077676c452570468cf -SIZE (snort3-snort3-3.9.3.0_GH0.tar.gz) = 3521227 +TIMESTAMP = 1757072847 +SHA256 (snort3-snort3-3.9.5.0_GH0.tar.gz) = e2e36a8db2c4c26a6ff58ea58839339260319eba25d0eb901ddb7210f4fa4b4c +SIZE (snort3-snort3-3.9.5.0_GH0.tar.gz) = 3525177 diff --git a/security/snowflake-tor/Makefile b/security/snowflake-tor/Makefile index 0049a5ddf87c..0e82f830ff48 100644 --- a/security/snowflake-tor/Makefile +++ b/security/snowflake-tor/Makefile @@ -1,7 +1,7 @@ PORTNAME= snowflake DISTVERSIONPREFIX= v PORTVERSION= 2.5.1 -PORTREVISION= 22 +PORTREVISION= 23 CATEGORIES= security net PKGNAMESUFFIX= -tor diff --git a/security/ssb/Makefile b/security/ssb/Makefile index 734453ff1fd1..d0938babaec5 100644 --- a/security/ssb/Makefile +++ b/security/ssb/Makefile @@ -1,7 +1,7 @@ PORTNAME= ssb DISTVERSIONPREFIX= v DISTVERSION= 0.1.1 -PORTREVISION= 28 +PORTREVISION= 29 CATEGORIES= security MAINTAINER= ports@FreeBSD.org diff --git a/security/ssl-checker/Makefile b/security/ssl-checker/Makefile index c49b5c6df697..93673abb45d9 100644 --- a/security/ssl-checker/Makefile +++ b/security/ssl-checker/Makefile @@ -1,7 +1,7 @@ PORTNAME= ssl-checker DISTVERSIONPREFIX= v DISTVERSION= 0.1.7 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= security MAINTAINER= olgeni@FreeBSD.org diff --git a/security/ssllabs-scan/Makefile b/security/ssllabs-scan/Makefile index 1d6aba12355c..a36d64259294 100644 --- a/security/ssllabs-scan/Makefile +++ b/security/ssllabs-scan/Makefile @@ -1,7 +1,7 @@ PORTNAME= ssllabs-scan DISTVERSIONPREFIX= v DISTVERSION= 1.5.0 -PORTREVISION= 28 +PORTREVISION= 29 CATEGORIES= security net MAINTAINER= egypcio@FreeBSD.org diff --git a/security/stegify/Makefile b/security/stegify/Makefile index 7a63858191d3..06d7e41a9747 100644 --- a/security/stegify/Makefile +++ b/security/stegify/Makefile @@ -2,7 +2,7 @@ PORTNAME= stegify DISTVERSIONPREFIX= v DISTVERSION= 1.2-2 DISTVERSIONSUFFIX= -g62518ca -PORTREVISION= 28 +PORTREVISION= 29 CATEGORIES= security graphics MAINTAINER= yuri@FreeBSD.org diff --git a/security/tailscale/Makefile b/security/tailscale/Makefile index 0673446306c3..a4c4b5d22cae 100644 --- a/security/tailscale/Makefile +++ b/security/tailscale/Makefile @@ -1,6 +1,7 @@ PORTNAME= tailscale PORTVERSION= 1.86.4 DISTVERSIONPREFIX= v +PORTREVISION= 1 CATEGORIES= security net-vpn MAINTAINER= ashish@FreeBSD.org diff --git a/security/teleport/Makefile b/security/teleport/Makefile index 93aaf2da4f8d..498f279fe1dd 100644 --- a/security/teleport/Makefile +++ b/security/teleport/Makefile @@ -1,7 +1,7 @@ PORTNAME= teleport DISTVERSIONPREFIX= v DISTVERSION= 5.2.5 -PORTREVISION= 17 +PORTREVISION= 18 CATEGORIES= security MAINTAINER= kraileth@elderlinux.org diff --git a/security/timestamp-authority/Makefile b/security/timestamp-authority/Makefile index 4d278042cdd3..f121f3c4b9a1 100644 --- a/security/timestamp-authority/Makefile +++ b/security/timestamp-authority/Makefile @@ -1,7 +1,7 @@ PORTNAME= timestamp-authority DISTVERSIONPREFIX= v DISTVERSION= 1.2.8 -PORTREVISION= 3 +PORTREVISION= 4 CATEGORIES= security MAINTAINER= bofh@FreeBSD.org diff --git a/security/totp-cli/Makefile b/security/totp-cli/Makefile index ed3416a3c81c..b6fad616d90f 100644 --- a/security/totp-cli/Makefile +++ b/security/totp-cli/Makefile @@ -1,7 +1,7 @@ PORTNAME= totp-cli PORTVERSION= 1.9.2 DISTVERSIONPREFIX= v -PORTREVISION= 5 +PORTREVISION= 6 CATEGORIES= security MAINTAINER= sunpoet@FreeBSD.org diff --git a/security/trillian/Makefile b/security/trillian/Makefile index 7c587b69320c..7bdeb3e299f9 100644 --- a/security/trillian/Makefile +++ b/security/trillian/Makefile @@ -1,7 +1,7 @@ PORTNAME= trillian DISTVERSIONPREFIX= v DISTVERSION= 1.7.2 -PORTREVISION= 4 +PORTREVISION= 5 CATEGORIES= security MAINTAINER= bofh@FreeBSD.org diff --git a/security/trivy/Makefile b/security/trivy/Makefile index 73dc6b9c2181..a3a64eed48e0 100644 --- a/security/trivy/Makefile +++ b/security/trivy/Makefile @@ -1,6 +1,7 @@ PORTNAME= trivy DISTVERSIONPREFIX= v DISTVERSION= 0.66.0 +PORTREVISION= 1 CATEGORIES= security MAINTAINER= mfechner@FreeBSD.org diff --git a/security/tscli/Makefile b/security/tscli/Makefile index 6ec2f243475d..730a440763dc 100644 --- a/security/tscli/Makefile +++ b/security/tscli/Makefile @@ -1,7 +1,7 @@ PORTNAME= tscli DISTVERSIONPREFIX= v DISTVERSION= 0.0.15 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= security MAINTAINER= dtxdf@FreeBSD.org diff --git a/security/vault/Makefile b/security/vault/Makefile index 590a93f11d40..7906ac22206e 100644 --- a/security/vault/Makefile +++ b/security/vault/Makefile @@ -1,6 +1,6 @@ PORTNAME= vault DISTVERSIONPREFIX= v -DISTVERSION= 1.20.2 +DISTVERSION= 1.20.3 CATEGORIES= security MASTER_SITES= https://raw.githubusercontent.com/hashicorp/vault/${DISTVERSIONFULL}/ \ LOCAL/bofh/security/${PORTNAME}/:web_ui @@ -46,7 +46,7 @@ GROUPS= vault PLIST_FILES= bin/${PORTNAME} -GITID= 824d12909d5b596ddd3f34d9c8f169b4f9701a0c +GITID= 7665ff29d77e5cb3ea9ddbeaed49ee312e53c6b8 .include <bsd.port.pre.mk> diff --git a/security/vault/distinfo b/security/vault/distinfo index c17babae63fa..c8a637c2add4 100644 --- a/security/vault/distinfo +++ b/security/vault/distinfo @@ -1,17 +1,17 @@ -TIMESTAMP = 1754685277 -SHA256 (go/security_vault/hashicorp-vault-v1.20.2_GH0/go.mod) = cd83bd31fc0bfb55d172ae8fc8f8bc3930bc52602a5b73b2cccbf5428e144241 -SIZE (go/security_vault/hashicorp-vault-v1.20.2_GH0/go.mod) = 30390 -SHA256 (go/security_vault/hashicorp-vault-v1.20.2_GH0/api/go.mod) = c0d25838a7b72c0a5450c0c346e22eea9d24074c637f99e13941fd74980330e5 -SIZE (go/security_vault/hashicorp-vault-v1.20.2_GH0/api/go.mod) = 1659 -SHA256 (go/security_vault/hashicorp-vault-v1.20.2_GH0/api/auth/approle/go.mod) = 94d14c8d7b0e143e5cda121829d639935bcd5bab9cc4961ca4ac432ec675a5b9 -SIZE (go/security_vault/hashicorp-vault-v1.20.2_GH0/api/auth/approle/go.mod) = 1065 -SHA256 (go/security_vault/hashicorp-vault-v1.20.2_GH0/api/auth/kubernetes/go.mod) = bb4af50f74cdf95fd886651b1911dff90e118c62270497102ce144f5c76c9b1d -SIZE (go/security_vault/hashicorp-vault-v1.20.2_GH0/api/auth/kubernetes/go.mod) = 1068 -SHA256 (go/security_vault/hashicorp-vault-v1.20.2_GH0/api/auth/userpass/go.mod) = e92fff72dd8294c27b29ba8fc653d28edf322d8f59d98258ea87691dd5777b56 -SIZE (go/security_vault/hashicorp-vault-v1.20.2_GH0/api/auth/userpass/go.mod) = 1066 -SHA256 (go/security_vault/hashicorp-vault-v1.20.2_GH0/sdk/go.mod) = a3da120c91c4a0a9a2ad7e2fac36034da35a1527668359a6c9f19800aa88f2f1 -SIZE (go/security_vault/hashicorp-vault-v1.20.2_GH0/sdk/go.mod) = 6759 -SHA256 (go/security_vault/hashicorp-vault-v1.20.2_GH0/vault-web_ui-1.20.2.tar.gz) = 5d6a244ae81312a78c847abeec525a01cfe92fdf2f7df6d812a884f14561cc96 -SIZE (go/security_vault/hashicorp-vault-v1.20.2_GH0/vault-web_ui-1.20.2.tar.gz) = 3584329 -SHA256 (go/security_vault/hashicorp-vault-v1.20.2_GH0/hashicorp-vault-v1.20.2_GH0.tar.gz) = cff7c65f4cfdebbf2a419e77debe5dda1abd93d48f673e8bbbd4c5e5161233e2 -SIZE (go/security_vault/hashicorp-vault-v1.20.2_GH0/hashicorp-vault-v1.20.2_GH0.tar.gz) = 41645004 +TIMESTAMP = 1756981575 +SHA256 (go/security_vault/hashicorp-vault-v1.20.3_GH0/go.mod) = 7113bb21f1f4e49f214b327ab6bf38e61c7a1d6a90945d800af5c95adfe35ef4 +SIZE (go/security_vault/hashicorp-vault-v1.20.3_GH0/go.mod) = 30603 +SHA256 (go/security_vault/hashicorp-vault-v1.20.3_GH0/api/go.mod) = c0d25838a7b72c0a5450c0c346e22eea9d24074c637f99e13941fd74980330e5 +SIZE (go/security_vault/hashicorp-vault-v1.20.3_GH0/api/go.mod) = 1659 +SHA256 (go/security_vault/hashicorp-vault-v1.20.3_GH0/api/auth/approle/go.mod) = 94d14c8d7b0e143e5cda121829d639935bcd5bab9cc4961ca4ac432ec675a5b9 +SIZE (go/security_vault/hashicorp-vault-v1.20.3_GH0/api/auth/approle/go.mod) = 1065 +SHA256 (go/security_vault/hashicorp-vault-v1.20.3_GH0/api/auth/kubernetes/go.mod) = bb4af50f74cdf95fd886651b1911dff90e118c62270497102ce144f5c76c9b1d +SIZE (go/security_vault/hashicorp-vault-v1.20.3_GH0/api/auth/kubernetes/go.mod) = 1068 +SHA256 (go/security_vault/hashicorp-vault-v1.20.3_GH0/api/auth/userpass/go.mod) = e92fff72dd8294c27b29ba8fc653d28edf322d8f59d98258ea87691dd5777b56 +SIZE (go/security_vault/hashicorp-vault-v1.20.3_GH0/api/auth/userpass/go.mod) = 1066 +SHA256 (go/security_vault/hashicorp-vault-v1.20.3_GH0/sdk/go.mod) = aa3fe5aee6ec08608f8f97f1238b1a132bb89973069985e0ae24d9e492b2df7c +SIZE (go/security_vault/hashicorp-vault-v1.20.3_GH0/sdk/go.mod) = 6786 +SHA256 (go/security_vault/hashicorp-vault-v1.20.3_GH0/vault-web_ui-1.20.3.tar.gz) = 4131d8f602bce1ced7275ea2925e18ccd202d03a0fcc69e3f338fafcbaeb22d8 +SIZE (go/security_vault/hashicorp-vault-v1.20.3_GH0/vault-web_ui-1.20.3.tar.gz) = 3513752 +SHA256 (go/security_vault/hashicorp-vault-v1.20.3_GH0/hashicorp-vault-v1.20.3_GH0.tar.gz) = 024dbc999b4149551da398355008d29827459e52f4379a129eb20c5284647050 +SIZE (go/security_vault/hashicorp-vault-v1.20.3_GH0/hashicorp-vault-v1.20.3_GH0.tar.gz) = 41634047 diff --git a/security/vouch-proxy/Makefile b/security/vouch-proxy/Makefile index 9d4136e4cbdf..f430df7765fd 100644 --- a/security/vouch-proxy/Makefile +++ b/security/vouch-proxy/Makefile @@ -1,7 +1,7 @@ PORTNAME= vouch-proxy DISTVERSIONPREFIX=v DISTVERSION= 0.45.1 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= security MAINTAINER= decke@FreeBSD.org diff --git a/security/vuls/Makefile b/security/vuls/Makefile index f2c58e968a83..ebe25474a906 100644 --- a/security/vuls/Makefile +++ b/security/vuls/Makefile @@ -1,6 +1,6 @@ PORTNAME= vuls DISTVERSIONPREFIX=v -DISTVERSION= 0.33.4 +DISTVERSION= 0.34.0 CATEGORIES= security MAINTAINER= girgen@FreeBSD.org diff --git a/security/vuls/distinfo b/security/vuls/distinfo index 79f5d3b3f61b..07044799c86d 100644 --- a/security/vuls/distinfo +++ b/security/vuls/distinfo @@ -1,5 +1,5 @@ -TIMESTAMP = 1756275976 -SHA256 (go/security_vuls/vuls-v0.33.4/v0.33.4.mod) = 58bcb90a4067f623c6c3bcb960b6aed4fcf08e6b94014667105f74b66f446da6 -SIZE (go/security_vuls/vuls-v0.33.4/v0.33.4.mod) = 20710 -SHA256 (go/security_vuls/vuls-v0.33.4/v0.33.4.zip) = 434e4e0b86a08cb257c2387d541277474903c5d96998638cb7a014fbc4a3a412 -SIZE (go/security_vuls/vuls-v0.33.4/v0.33.4.zip) = 1398525 +TIMESTAMP = 1757153514 +SHA256 (go/security_vuls/vuls-v0.34.0/v0.34.0.mod) = 0ac637cb17c79cc5ca34bbfcd75d05a6e4458ee66523050a2a15461cad6af2df +SIZE (go/security_vuls/vuls-v0.34.0/v0.34.0.mod) = 20230 +SHA256 (go/security_vuls/vuls-v0.34.0/v0.34.0.zip) = 08062c74c713c8087c93bcd3f8031947bd0e159d6ab43f39ef0ac4c8e637aa56 +SIZE (go/security_vuls/vuls-v0.34.0/v0.34.0.zip) = 1400840 diff --git a/security/vulsrepo/Makefile b/security/vulsrepo/Makefile index a8bed60e8097..da2e8927160c 100644 --- a/security/vulsrepo/Makefile +++ b/security/vulsrepo/Makefile @@ -1,7 +1,7 @@ PORTNAME= vulsrepo PORTVERSION= 0.7.1 DISTVERSIONPREFIX=v -PORTREVISION= 12 +PORTREVISION= 13 CATEGORIES= security www MASTER_SITES= https://raw.githubusercontent.com/${GH_ACCOUNT}/${PORTNAME}/v${PORTVERSION}/server/:gomod DISTFILES= go.mod:gomod diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml index a7e620621142..0a19623ed18f 100644 --- a/security/vuxml/vuln/2025.xml +++ b/security/vuxml/vuln/2025.xml @@ -2233,7 +2233,7 @@ <affects> <package> <name>libxslt</name> - <range><lt>2</lt></range> <!-- adjust should libxslt ever be fixed --> + <range><lt>1.1.43_2</lt></range> <!-- adjust should libxslt ever be fixed --> </package> <package> <name>linux-c7-libxslt</name> diff --git a/security/webtunnel-tor/Makefile b/security/webtunnel-tor/Makefile index c7513b884ffd..e8f1ab7cd74f 100644 --- a/security/webtunnel-tor/Makefile +++ b/security/webtunnel-tor/Makefile @@ -1,6 +1,6 @@ PORTNAME= webtunnel PORTVERSION= 0.0.1 -PORTREVISION= 16 +PORTREVISION= 17 CATEGORIES= security net PKGNAMESUFFIX= -tor diff --git a/security/xhash/Makefile b/security/xhash/Makefile index 03808fd1144d..7436f73301cb 100644 --- a/security/xhash/Makefile +++ b/security/xhash/Makefile @@ -1,7 +1,7 @@ PORTNAME= xhash DISTVERSIONPREFIX= v DISTVERSION= 3.6.3 -PORTREVISION= 4 +PORTREVISION= 5 CATEGORIES= security MAINTAINER= rbranco@suse.com diff --git a/security/xray-core/Makefile b/security/xray-core/Makefile index 6030334ae8fc..310320cfe4ab 100644 --- a/security/xray-core/Makefile +++ b/security/xray-core/Makefile @@ -1,7 +1,7 @@ PORTNAME= xray-core DISTVERSIONPREFIX= v DISTVERSION= 25.7.26 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= security MASTER_SITES= https://github.com/v2fly/geoip/releases/download/202507050144/:geoip \ https://github.com/v2fly/domain-list-community/releases/download/20250627153051/:geosite diff --git a/security/yubikey-agent/Makefile b/security/yubikey-agent/Makefile index 06d0f27154a4..5c886fbca140 100644 --- a/security/yubikey-agent/Makefile +++ b/security/yubikey-agent/Makefile @@ -1,7 +1,7 @@ PORTNAME= yubikey-agent DISTVERSIONPREFIX= v DISTVERSION= 0.1.6 -PORTREVISION= 21 +PORTREVISION= 22 CATEGORIES= security sysutils MAINTAINER= egypcio@FreeBSD.org diff --git a/security/yubikey-manager-qt/Makefile b/security/yubikey-manager-qt/Makefile new file mode 100644 index 000000000000..70f1c79cd6e9 --- /dev/null +++ b/security/yubikey-manager-qt/Makefile @@ -0,0 +1,47 @@ +PORTNAME= yubikey-manager-qt +DISTVERSIONPREFIX= yubikey-manager-qt- +DISTVERSION= 1.2.0 +PORTREVISION= 1 +CATEGORIES= security + +MAINTAINER= daniel@shafer.cc +COMMENT= Cross-platform application for configuring any YubiKey +WWW= https://developers.yubico.com/yubikey-manager-qt/ + +LICENSE= BSD2CLAUSE +LICENSE_FILE= ${WRKSRC}/COPYING + +BUILD_DEPENDS= ${PYTHON_PKGNAMEPREFIX}yubikey-manager>0:security/py-yubikey-manager@${PY_FLAVOR} \ + pyotherside-qt5>0:devel/pyotherside-qt5 +RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}yubikey-manager>0:security/py-yubikey-manager@${PY_FLAVOR} \ + pyotherside-qt5>0:devel/pyotherside-qt5 + +USES= compiler:c++11-lang gl pkgconfig python qt:5 qmake \ + shebangfix +USE_GL= gl +USE_QT= core declarative graphicaleffects gui network quickcontrols \ + quickcontrols2 svg widgets buildtools:build + +USE_GITHUB= yes +GH_ACCOUNT= Yubico + +SHEBANG_FILES= ykman-gui/py/yubikey.py \ + ykman-cli/test.py \ + ykman-cli/py/cli.py \ + build_qrc.py + +PLIST_FILES= bin/ykman-gui \ + share/applications/ykman-gui.desktop \ + share/pixmaps/ykman.png + +post-extract: + @${REINPLACE_CMD} -e '/system/s|python|${PYTHON_CMD}|g' ${WRKSRC}/ykman-gui/ykman-gui.pro \ + ${WRKSRC}/ykman-cli/ykman-cli.pro + @${REINPLACE_CMD} -e 's|/usr/bin/ykman-gui|${PREFIX}/bin/ykman-gui|g' ${WRKSRC}/resources/linux/AppRun + @${REINPLACE_CMD} -e 's|target.path = /usr/bin|target.path = ${PREFIX}/bin|g' ${WRKSRC}/ykman-gui/deployment.pri + +post-install: + ${INSTALL_DATA} ${WRKSRC}/resources/ykman-gui.desktop ${STAGEDIR}${PREFIX}/share/applications + ${INSTALL_DATA} ${WRKSRC}/resources/icons/ykman.png ${STAGEDIR}${PREFIX}/share/pixmaps + +.include <bsd.port.mk> diff --git a/security/yubikey-manager-qt/distinfo b/security/yubikey-manager-qt/distinfo new file mode 100644 index 000000000000..d8ad64d7c0ac --- /dev/null +++ b/security/yubikey-manager-qt/distinfo @@ -0,0 +1,3 @@ +TIMESTAMP = 1616216055 +SHA256 (Yubico-yubikey-manager-qt-yubikey-manager-qt-1.2.0_GH0.tar.gz) = 3f3c998f93b74b869c232f5f951a9d7b2f68b007c20be8e39a698e24ea7aae0b +SIZE (Yubico-yubikey-manager-qt-yubikey-manager-qt-1.2.0_GH0.tar.gz) = 17311666 diff --git a/security/yubikey-manager-qt/pkg-descr b/security/yubikey-manager-qt/pkg-descr new file mode 100644 index 000000000000..86b0e115ab9f --- /dev/null +++ b/security/yubikey-manager-qt/pkg-descr @@ -0,0 +1,2 @@ +Cross-platform application for configuring any YubiKey +over all USB interfaces. diff --git a/security/yubikey-manager-qt/pkg-message b/security/yubikey-manager-qt/pkg-message new file mode 100644 index 000000000000..69e21c9701be --- /dev/null +++ b/security/yubikey-manager-qt/pkg-message @@ -0,0 +1,7 @@ +[ +{ type: install + message: <<EOM +In addition to the application itself, you may also need to manually install and start the pcscd service <devel/pcsc-lite> for CCID support. +EOM +} +] diff --git a/security/yubioath-desktop/Makefile b/security/yubioath-desktop/Makefile new file mode 100644 index 000000000000..5f2373a67822 --- /dev/null +++ b/security/yubioath-desktop/Makefile @@ -0,0 +1,45 @@ +PORTNAME= yubioath-desktop +DISTVERSIONPREFIX= yubioath-desktop- +DISTVERSION= 5.0.4 +PORTREVISION= 2 +CATEGORIES= security + +MAINTAINER= daniel@shafer.cc +COMMENT= GUI for displaying OATH codes with a Yubikey +WWW= https://developers.yubico.com/yubioath-desktop/ + +LICENSE= BSD2CLAUSE +LICENSE_FILE= ${WRKSRC}/COPYING + +RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}yubikey-manager>=0.7.0:security/py-yubikey-manager@${PY_FLAVOR} \ + pyotherside-qt5>0:devel/pyotherside-qt5 \ + RSA_SecurID_getpasswd:devel/libccid \ + libffi>0:devel/libffi \ + pcscd:devel/pcsc-lite \ + swig:devel/swig + +USES= compiler:c++11-lang desktop-file-utils gl python qmake qt:5 \ + shebangfix ssl +USE_GL= gl +USE_QT= core declarative gui network quickcontrols2 svg widgets buildtools:build + +USE_GITHUB= yes +GH_ACCOUNT= Yubico + +SHEBANG_FILES= build_qrc.py \ + py/yubikey.py \ + +PLIST_FILES= bin/yubioath-desktop \ + share/applications/com.yubico.yubioath.desktop \ + share/pixmaps/com.yubico.yubioath.png + +post-patch: + @${REINPLACE_CMD} -e '/PYTHON_CMD/s|python3|${PYTHON_CMD}|g' \ + ${WRKSRC}/yubioath-desktop.pro + @${REINPLACE_CMD} -e 's|target.path = /usr/bin|target.path = ${PREFIX}/bin|g' ${WRKSRC}/deployment.pri + +post-install: + ${INSTALL_DATA} ${WRKSRC}/resources/com.yubico.yubioath.desktop ${STAGEDIR}${PREFIX}/share/applications + ${INSTALL_DATA} ${WRKSRC}/resources/icons/com.yubico.yubioath.png ${STAGEDIR}${PREFIX}/share/pixmaps + +.include <bsd.port.mk> diff --git a/security/yubioath-desktop/distinfo b/security/yubioath-desktop/distinfo new file mode 100644 index 000000000000..568b3dd1904e --- /dev/null +++ b/security/yubioath-desktop/distinfo @@ -0,0 +1,3 @@ +TIMESTAMP = 1616213145 +SHA256 (Yubico-yubioath-desktop-yubioath-desktop-5.0.4_GH0.tar.gz) = b47c8715e415b0e0ea0237e6f56d328fc8d3303a87ad89d4540d4f4a93138bd7 +SIZE (Yubico-yubioath-desktop-yubioath-desktop-5.0.4_GH0.tar.gz) = 5657338 diff --git a/security/yubioath-desktop/pkg-descr b/security/yubioath-desktop/pkg-descr new file mode 100644 index 000000000000..8a3575b7be09 --- /dev/null +++ b/security/yubioath-desktop/pkg-descr @@ -0,0 +1,3 @@ +Cross-platform application for generating Open Authentication (OATH) time-based +TOTP and event-based HOTP one-time password codes, with the help of a YubiKey +that protects the shared secrets. diff --git a/security/yubioath-desktop/pkg-message b/security/yubioath-desktop/pkg-message new file mode 100644 index 000000000000..7f4f2a2c4875 --- /dev/null +++ b/security/yubioath-desktop/pkg-message @@ -0,0 +1,7 @@ +[ +{ type: install + message: <<EOM + Before running make sure that the pcscd service is enabled and running +EOM +} +] |