summaryrefslogtreecommitdiff
path: root/security
diff options
context:
space:
mode:
Diffstat (limited to 'security')
-rw-r--r--security/Makefile3
-rw-r--r--security/aws-lc/Makefile2
-rw-r--r--security/aws-lc/distinfo6
-rw-r--r--security/beid/Makefile2
-rw-r--r--security/bzrtp/Makefile5
-rw-r--r--security/bzrtp/distinfo6
-rw-r--r--security/certmonger/Makefile3
-rw-r--r--security/clamav-lts/Makefile2
-rw-r--r--security/clamav/Makefile2
-rw-r--r--security/cosign/Makefile6
-rw-r--r--security/cosign/distinfo10
-rw-r--r--security/gsad/Makefile1
-rw-r--r--security/gvm-libs/Makefile4
-rw-r--r--security/kanidm/Makefile2
-rw-r--r--security/kanidm/distinfo6
-rw-r--r--security/kc/Makefile2
-rw-r--r--security/lasso/Makefile2
-rw-r--r--security/lastpass-cli/Makefile1
-rw-r--r--security/libcryptui/Makefile50
-rw-r--r--security/libcryptui/distinfo3
-rw-r--r--security/libcryptui/pkg-descr3
-rw-r--r--security/libcryptui/pkg-plist139
-rw-r--r--security/libpki/Makefile2
-rw-r--r--security/libsectok/Makefile48
-rw-r--r--security/libsectok/distinfo2
-rw-r--r--security/libsectok/pkg-descr3
-rw-r--r--security/lime/Makefile5
-rw-r--r--security/lime/distinfo6
-rw-r--r--security/modsecurity3/Makefile1
-rw-r--r--security/nettle/Makefile2
-rw-r--r--security/nettle/distinfo6
-rw-r--r--security/nettle/files/extra-patch-Makefile.in4
-rw-r--r--security/nettle/files/patch-configure4
-rw-r--r--security/nettle/files/patch-examples-nettle-openssl.c8
-rw-r--r--security/nettle/files/patch-powerpc64-p8-aes-decrypt-internal.asm2
-rw-r--r--security/nettle/files/patch-powerpc64-p8-aes-encrypt-internal.asm6
-rw-r--r--security/nettle/pkg-plist4
-rw-r--r--security/oath-toolkit/Makefile2
-rw-r--r--security/openca-ocspd/Makefile1
-rw-r--r--security/openconnect/Makefile2
-rw-r--r--security/osslsigncode/Makefile2
-rw-r--r--security/osslsigncode/distinfo6
-rw-r--r--security/pwman/Makefile2
-rw-r--r--security/py-keyring/Makefile8
-rw-r--r--security/py-keyring/distinfo6
-rw-r--r--security/py-xmlsec/Makefile1
-rw-r--r--security/rubygem-gitlab-cloud-connector/Makefile2
-rw-r--r--security/rubygem-gitlab-cloud-connector/distinfo6
-rw-r--r--security/sectok/Makefile41
-rw-r--r--security/sectok/distinfo2
-rw-r--r--security/sectok/files/patch-cyberflex.c61
-rw-r--r--security/sectok/pkg-descr3
-rw-r--r--security/snort3/Makefile3
-rw-r--r--security/sssd2/Makefile4
-rw-r--r--security/stoken/Makefile2
-rw-r--r--security/strongswan/Makefile3
-rw-r--r--security/strongswan/distinfo6
-rw-r--r--security/tpm2-tools/Makefile4
-rw-r--r--security/tpm2-tss/Makefile4
-rw-r--r--security/vault/Makefile6
-rw-r--r--security/vault/distinfo34
-rw-r--r--security/vuxml/vuln/2025.xml28
-rw-r--r--security/xmlsec1/Makefile1
63 files changed, 140 insertions, 463 deletions
diff --git a/security/Makefile b/security/Makefile
index 709e49a80ab7..fd6b6dafa7ea 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -287,7 +287,6 @@
SUBDIR += libargon2
SUBDIR += libassuan
SUBDIR += libcaes
- SUBDIR += libcryptui
SUBDIR += libdecaf
SUBDIR += libecc
SUBDIR += libfcrypto
@@ -324,7 +323,6 @@
SUBDIR += libscep
SUBDIR += libscrypt
SUBDIR += libsecret
- SUBDIR += libsectok
SUBDIR += libsodium
SUBDIR += libssh
SUBDIR += libssh2
@@ -1283,7 +1281,6 @@
SUBDIR += seccure
SUBDIR += seclists
SUBDIR += secpanel
- SUBDIR += sectok
SUBDIR += secure_delete
SUBDIR += sedutil
SUBDIR += sequoia
diff --git a/security/aws-lc/Makefile b/security/aws-lc/Makefile
index 803ea2798817..67c1020ba0f6 100644
--- a/security/aws-lc/Makefile
+++ b/security/aws-lc/Makefile
@@ -1,5 +1,5 @@
PORTNAME= aws-lc
-PORTVERSION= 1.53.1
+PORTVERSION= 1.54.0
DISTVERSIONPREFIX= v
CATEGORIES= security
diff --git a/security/aws-lc/distinfo b/security/aws-lc/distinfo
index 7e178c8c2194..2a7e6ae009f0 100644
--- a/security/aws-lc/distinfo
+++ b/security/aws-lc/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1750954130
-SHA256 (aws-aws-lc-v1.53.1_GH0.tar.gz) = 74137613ea4e322600400fdc2e21c83f08f4c68d368ebe006eab264e4e685e01
-SIZE (aws-aws-lc-v1.53.1_GH0.tar.gz) = 127004586
+TIMESTAMP = 1751208136
+SHA256 (aws-aws-lc-v1.54.0_GH0.tar.gz) = d491b6d6b233e88314a15170d435e28259f7cf4f950a427acc80a0e977aa683a
+SIZE (aws-aws-lc-v1.54.0_GH0.tar.gz) = 127011221
diff --git a/security/beid/Makefile b/security/beid/Makefile
index 0729194afca3..0e3dee8dcd46 100644
--- a/security/beid/Makefile
+++ b/security/beid/Makefile
@@ -1,7 +1,7 @@
PORTNAME= beid
DISTVERSIONPREFIX= v
DISTVERSION= 5.1.21
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= security
MAINTAINER= tijl@FreeBSD.org
diff --git a/security/bzrtp/Makefile b/security/bzrtp/Makefile
index 9816979d199c..800884d25be9 100644
--- a/security/bzrtp/Makefile
+++ b/security/bzrtp/Makefile
@@ -1,5 +1,5 @@
PORTNAME= bzrtp
-DISTVERSION= 5.4.2
+DISTVERSION= 5.4.24
CATEGORIES= security
MAINTAINER= bofh@FreeBSD.org
@@ -20,8 +20,7 @@ GL_ACCOUNT= public
USE_GNOME= libxml2
USE_LDCONFIG= yes
-CMAKE_ARGS= -DCMAKE_PREFIX_PATH=${LOCALBASE} \
- -DENABLE_STRICT=NO
+CMAKE_ARGS= -DENABLE_STRICT=NO
post-patch:
@${REINPLACE_CMD} 's/<alloca\.h>/<stdlib.h>/' ${WRKSRC}/src/zidCache.c
diff --git a/security/bzrtp/distinfo b/security/bzrtp/distinfo
index f980a0a7141b..0511c983a7a5 100644
--- a/security/bzrtp/distinfo
+++ b/security/bzrtp/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1743013166
-SHA256 (bzrtp-5.4.2.tar.bz2) = fd7cf3412a541d2866c6adf4d36c3cbb5b56b671ccedefc7e0e8aeff8b26e1c7
-SIZE (bzrtp-5.4.2.tar.bz2) = 154138
+TIMESTAMP = 1751281561
+SHA256 (bzrtp-5.4.24.tar.bz2) = 5fdd590ed302f8f4db3c06902c7a711a307e323a125a265bc3720efeda4ce0d7
+SIZE (bzrtp-5.4.24.tar.bz2) = 154137
diff --git a/security/certmonger/Makefile b/security/certmonger/Makefile
index 6d992e7e3e51..6b810d2ffe9c 100644
--- a/security/certmonger/Makefile
+++ b/security/certmonger/Makefile
@@ -1,5 +1,6 @@
PORTNAME= certmonger
DISTVERSION= 0.79.20
+PORTREVISION= 1
CATEGORIES= security
MASTER_SITES= https://pagure.io/certmonger/archive/${DISTVERSION}/
@@ -20,7 +21,7 @@ LIB_DEPENDS= libcurl.so:ftp/curl \
libpopt.so:devel/popt \
libtalloc.so:devel/talloc \
libtevent.so:devel/tevent \
- libuuid.so:misc/e2fsprogs-libuuid
+ libuuid.so:misc/libuuid
USES= autoreconf gettext gnome gssapi:mit iconv pkgconfig ssl
USE_GNOME= libxml2
diff --git a/security/clamav-lts/Makefile b/security/clamav-lts/Makefile
index d4a76df191c8..60a6937de18f 100644
--- a/security/clamav-lts/Makefile
+++ b/security/clamav-lts/Makefile
@@ -1,6 +1,6 @@
PORTNAME= clamav
DISTVERSION= 1.0.8
-PORTREVISION= 3
+PORTREVISION= 4
PORTEPOCH= 1
CATEGORIES= security
MASTER_SITES= https://www.clamav.net/downloads/production/
diff --git a/security/clamav/Makefile b/security/clamav/Makefile
index b0eeb25b33e2..dec2065af9ae 100644
--- a/security/clamav/Makefile
+++ b/security/clamav/Makefile
@@ -1,6 +1,6 @@
PORTNAME= clamav
DISTVERSION= 1.4.2
-PORTREVISION= 3
+PORTREVISION= 4
PORTEPOCH= 1
CATEGORIES= security
MASTER_SITES= https://www.clamav.net/downloads/production/
diff --git a/security/cosign/Makefile b/security/cosign/Makefile
index 5a8e00d37bc2..50bc7042755e 100644
--- a/security/cosign/Makefile
+++ b/security/cosign/Makefile
@@ -1,6 +1,6 @@
PORTNAME= cosign
DISTVERSIONPREFIX= v
-DISTVERSION= 2.5.0
+DISTVERSION= 2.5.1
CATEGORIES= security
MAINTAINER= bofh@FreeBSD.org
@@ -10,7 +10,7 @@ WWW= https://www.sigstore.dev/
LICENSE= APACHE20
LICENSE_FILE= ${WRKSRC}/LICENSE
-USES= cpe go:1.23,modules
+USES= cpe go:modules
CPE_VENDOR= sigstore
GO_MODULE= github.com/sigstore/cosign/v2
@@ -23,7 +23,7 @@ GO_BUILDFLAGS= -ldflags="-buildid= \
PLIST_FILES= bin/${PORTNAME}
-GIT_HASH= 38bb98697005cdc5c092f031594c0e45d039f4a0
+GIT_HASH= a7345fb2ce17b52b5bc687970fa31ff85bc2f7ca
.include <bsd.port.pre.mk>
diff --git a/security/cosign/distinfo b/security/cosign/distinfo
index 6a77534390e6..6094ea46b910 100644
--- a/security/cosign/distinfo
+++ b/security/cosign/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1746276026
-SHA256 (go/security_cosign/cosign-v2.5.0/v2.5.0.mod) = fc290766dd5324141caa63fed997ce4b975b0a5b9eb2345c43db315bd8969e4e
-SIZE (go/security_cosign/cosign-v2.5.0/v2.5.0.mod) = 14751
-SHA256 (go/security_cosign/cosign-v2.5.0/v2.5.0.zip) = 930d7c766f230d56063bc42a2a4cee77260e4fd5d79a6200c531e5e99b354b0c
-SIZE (go/security_cosign/cosign-v2.5.0/v2.5.0.zip) = 1260158
+TIMESTAMP = 1751272854
+SHA256 (go/security_cosign/cosign-v2.5.1/v2.5.1.mod) = 73cd50764e440cee0dc08dd15dbe489d880980170cef56164f3f351a3c861bac
+SIZE (go/security_cosign/cosign-v2.5.1/v2.5.1.mod) = 15329
+SHA256 (go/security_cosign/cosign-v2.5.1/v2.5.1.zip) = d2a7631cb2b26181682af19fc7d067da852b9edee54e3124fddcf1b82c7663d4
+SIZE (go/security_cosign/cosign-v2.5.1/v2.5.1.zip) = 1274453
diff --git a/security/gsad/Makefile b/security/gsad/Makefile
index d09ccc640d2a..93105ab32e2e 100644
--- a/security/gsad/Makefile
+++ b/security/gsad/Makefile
@@ -1,6 +1,7 @@
PORTNAME= gsad
DISTVERSIONPREFIX= v
DISTVERSION= 24.3.0
+PORTREVISION= 1
CATEGORIES= security
MAINTAINER= acm@FreeBSD.org
diff --git a/security/gvm-libs/Makefile b/security/gvm-libs/Makefile
index f11ade33a8ca..f7a8987caa7c 100644
--- a/security/gvm-libs/Makefile
+++ b/security/gvm-libs/Makefile
@@ -1,7 +1,7 @@
PORTNAME= gvm
DISTVERSIONPREFIX= v
DISTVERSION= 22.22.0
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= security
PKGNAMESUFFIX= -libs
@@ -22,7 +22,7 @@ LIB_DEPENDS= libassuan.so:security/libassuan \
libnet.so:net/libnet \
libpaho-mqtt3a.so:net/libpaho-mqtt3 \
libssh.so:security/libssh \
- libuuid.so:misc/e2fsprogs-libuuid \
+ libuuid.so:misc/libuuid \
libjson-glib-1.0.so:devel/json-glib \
libcurl.so:ftp/curl
RUN_DEPENDS= doxygen>0:devel/doxygen
diff --git a/security/kanidm/Makefile b/security/kanidm/Makefile
index 38a6e4d76654..aed265502929 100644
--- a/security/kanidm/Makefile
+++ b/security/kanidm/Makefile
@@ -1,6 +1,6 @@
PORTNAME= kanidm
DISTVERSIONPREFIX= v
-DISTVERSION= 1.6.0
+DISTVERSION= 1.6.1
CATEGORIES= security net
MAINTAINER= bofh@FreeBSD.org
diff --git a/security/kanidm/distinfo b/security/kanidm/distinfo
index 53e5c16ee421..81d7c632cbe6 100644
--- a/security/kanidm/distinfo
+++ b/security/kanidm/distinfo
@@ -1,4 +1,4 @@
-TIMESTAMP = 1749695021
+TIMESTAMP = 1751273631
SHA256 (rust/crates/addr2line-0.24.2.crate) = dfbe277e56a376000877090da837660b4427aad530e3028d44e0bffe4f89a1c1
SIZE (rust/crates/addr2line-0.24.2.crate) = 39015
SHA256 (rust/crates/adler2-2.0.0.crate) = 512761e0bb2578dd7380c6baaa0f4ce03e84f95e960231d1dec8bf4d7d6e2627
@@ -1307,5 +1307,5 @@ SHA256 (Firstyear-libnss-rs-763da4beaadc1e475b89ed876de31a5e393f6d30_GH0.tar.gz)
SIZE (Firstyear-libnss-rs-763da4beaadc1e475b89ed876de31a5e393f6d30_GH0.tar.gz) = 12094
SHA256 (Firstyear-compact-jwt-b3d2b5700cfe567d384c81df35d25537fbf7f110_GH0.tar.gz) = f9308a607e2ad1755c67452f52acd1d7c0f3d30d40f15551d3e7ad3bacc4a3da
SIZE (Firstyear-compact-jwt-b3d2b5700cfe567d384c81df35d25537fbf7f110_GH0.tar.gz) = 62309
-SHA256 (kanidm-kanidm-v1.6.0_GH0.tar.gz) = ece0c090eecddbda54c12d1e50e72daca5c9348bc199c7cb1c0f25935b5c786b
-SIZE (kanidm-kanidm-v1.6.0_GH0.tar.gz) = 8648803
+SHA256 (kanidm-kanidm-v1.6.1_GH0.tar.gz) = 89e993c3b81720122385b82f47f04fff2acbfd5540af25b507a8cab713a70e86
+SIZE (kanidm-kanidm-v1.6.1_GH0.tar.gz) = 8649026
diff --git a/security/kc/Makefile b/security/kc/Makefile
index 6d034b44451e..2d5086a34a0e 100644
--- a/security/kc/Makefile
+++ b/security/kc/Makefile
@@ -1,6 +1,6 @@
PORTNAME= kc
DISTVERSION= 2.5.3
-PORTREVISION= 2
+PORTREVISION= 3
CATEGORIES= security
MAINTAINER= leva@ecentrum.hu
diff --git a/security/lasso/Makefile b/security/lasso/Makefile
index a08a8ac302aa..b8cbb53f54e1 100644
--- a/security/lasso/Makefile
+++ b/security/lasso/Makefile
@@ -1,6 +1,6 @@
PORTNAME= lasso
PORTVERSION= 2.8.2
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= security
MASTER_SITES= https://dev.entrouvert.org/releases/lasso/
diff --git a/security/lastpass-cli/Makefile b/security/lastpass-cli/Makefile
index 2b94ac6a3b32..ce644ca1e0f7 100644
--- a/security/lastpass-cli/Makefile
+++ b/security/lastpass-cli/Makefile
@@ -1,5 +1,6 @@
PORTNAME= lastpass-cli
PORTVERSION= 1.6.1
+PORTREVISION= 1
CATEGORIES= security
MASTER_SITES= https://github.com/lastpass/lastpass-cli/releases/download/v${PORTVERSION}/
diff --git a/security/libcryptui/Makefile b/security/libcryptui/Makefile
deleted file mode 100644
index b1cbf9ef4783..000000000000
--- a/security/libcryptui/Makefile
+++ /dev/null
@@ -1,50 +0,0 @@
-PORTNAME= libcryptui
-PORTVERSION= 3.12.2
-PORTREVISION= 7
-CATEGORIES= security gnome
-MASTER_SITES= GNOME
-DIST_SUBDIR= gnome
-
-MAINTAINER= gnome@FreeBSD.org
-COMMENT= GNOME application for managing encryption keys (PGP, SSH)
-WWW= https://gitlab.gnome.org/GNOME/libcryptui
-
-DEPRECATED= abandoned project
-EXPIRATION_DATE=2025-06-30
-BROKEN= does not build with gpgme 2.x
-
-BUILD_DEPENDS= seahorse>=3.0.0:security/seahorse \
- gpg:security/gnupg
-LIB_DEPENDS= libgpgme.so:security/gpgme \
- libdbus-glib-1.so:devel/dbus-glib \
- libgnome-keyring.so:security/libgnome-keyring
-RUN_DEPENDS= seahorse>=3.0.0:security/seahorse \
- gpg:security/gnupg
-
-USES= gettext gmake gnome libtool pathfix pkgconfig tar:xz xorg
-USE_GNOME= intlhack gnomeprefix gtk30 introspection:build
-USE_XORG= sm ice
-USE_LDCONFIG= yes
-GNU_CONFIGURE= yes
-GNU_CONFIGURE_MANPREFIX=${PREFIX}/share
-CPPFLAGS+= -I${LOCALBASE}/include
-LDFLAGS+= -L${LOCALBASE}/lib
-INSTALL_TARGET= install-strip
-
-GLIB_SCHEMAS= org.gnome.seahorse.recipients.gschema.xml
-
-OPTIONS_DEFINE= NOTIFY
-
-.include <bsd.port.options.mk>
-
-.if ${PORT_OPTIONS:MNOTIFY}
-LIB_DEPENDS+= libnotify.so:devel/libnotify
-.else
-CONFIGURE_ARGS+=--disable-libnotify
-.endif
-
-post-patch:
- @${REINPLACE_CMD} -e 's|"1.2 1.4 2.0"|"1.2 1.4 2.0 2.1 2.2 2.3 2.4"|g' \
- ${WRKSRC}/configure
-
-.include <bsd.port.mk>
diff --git a/security/libcryptui/distinfo b/security/libcryptui/distinfo
deleted file mode 100644
index 9dd768797115..000000000000
--- a/security/libcryptui/distinfo
+++ /dev/null
@@ -1,3 +0,0 @@
-TIMESTAMP = 1657827035
-SHA256 (gnome/libcryptui-3.12.2.tar.xz) = 71ead1a7b496f07f6c5102ae79945dd2515b7b9342c6edefe58b47318be20866
-SIZE (gnome/libcryptui-3.12.2.tar.xz) = 1163784
diff --git a/security/libcryptui/pkg-descr b/security/libcryptui/pkg-descr
deleted file mode 100644
index 800ba3655572..000000000000
--- a/security/libcryptui/pkg-descr
+++ /dev/null
@@ -1,3 +0,0 @@
-Libcryptui: Interface components for OpenPGP
-
-libcryptui is a library used for prompting for PGP keys.
diff --git a/security/libcryptui/pkg-plist b/security/libcryptui/pkg-plist
deleted file mode 100644
index b43745d9b329..000000000000
--- a/security/libcryptui/pkg-plist
+++ /dev/null
@@ -1,139 +0,0 @@
-bin/seahorse-daemon
-include/libcryptui/cryptui-key-chooser.h
-include/libcryptui/cryptui-key-combo.h
-include/libcryptui/cryptui-key-list.h
-include/libcryptui/cryptui-key-store.h
-include/libcryptui/cryptui-keyset.h
-include/libcryptui/cryptui.h
-lib/girepository-1.0/CryptUI-0.0.typelib
-lib/libcryptui.a
-lib/libcryptui.so
-lib/libcryptui.so.0
-lib/libcryptui.so.0.0.0
-libdata/pkgconfig/cryptui-0.0.pc
-share/man/man1/seahorse-daemon.1.gz
-share/GConf/gsettings/org.gnome.seahorse.recipients.convert
-share/cryptui/ui/seahorse-notify.xml
-share/cryptui/ui/seahorse-pgp-generate.xml
-share/cryptui/ui/seahorse-progress.xml
-share/dbus-1/services/org.gnome.seahorse.service
-share/doc/libcryptui/ch01.html
-share/doc/libcryptui/home.png
-share/doc/libcryptui/index.html
-share/doc/libcryptui/index.sgml
-share/doc/libcryptui/left-insensitive.png
-share/doc/libcryptui/left.png
-share/doc/libcryptui/libcryptui-cryptui-defines.html
-share/doc/libcryptui/libcryptui-cryptui-key-chooser.html
-share/doc/libcryptui/libcryptui-cryptui-key-combo.html
-share/doc/libcryptui/libcryptui-cryptui-key-list.html
-share/doc/libcryptui/libcryptui-cryptui-key-store.html
-share/doc/libcryptui/libcryptui-cryptui-keyset.html
-share/doc/libcryptui/libcryptui-cryptui-marshal.html
-share/doc/libcryptui/libcryptui-cryptui.html
-share/doc/libcryptui/libcryptui.devhelp2
-share/doc/libcryptui/right-insensitive.png
-share/doc/libcryptui/right.png
-share/doc/libcryptui/style.css
-share/doc/libcryptui/up-insensitive.png
-share/doc/libcryptui/up.png
-share/gir-1.0/CryptUI-0.0.gir
-share/locale/ar/LC_MESSAGES/cryptui.mo
-share/locale/as/LC_MESSAGES/cryptui.mo
-share/locale/ast/LC_MESSAGES/cryptui.mo
-share/locale/az/LC_MESSAGES/cryptui.mo
-share/locale/be@latin/LC_MESSAGES/cryptui.mo
-share/locale/bg/LC_MESSAGES/cryptui.mo
-share/locale/bn/LC_MESSAGES/cryptui.mo
-share/locale/bn_IN/LC_MESSAGES/cryptui.mo
-share/locale/br/LC_MESSAGES/cryptui.mo
-share/locale/ca/LC_MESSAGES/cryptui.mo
-share/locale/ca@valencia/LC_MESSAGES/cryptui.mo
-share/locale/cs/LC_MESSAGES/cryptui.mo
-share/locale/cy/LC_MESSAGES/cryptui.mo
-share/locale/da/LC_MESSAGES/cryptui.mo
-share/locale/de/LC_MESSAGES/cryptui.mo
-share/locale/dz/LC_MESSAGES/cryptui.mo
-share/locale/el/LC_MESSAGES/cryptui.mo
-share/locale/en@shaw/LC_MESSAGES/cryptui.mo
-share/locale/en_CA/LC_MESSAGES/cryptui.mo
-share/locale/en_GB/LC_MESSAGES/cryptui.mo
-share/locale/eo/LC_MESSAGES/cryptui.mo
-share/locale/es/LC_MESSAGES/cryptui.mo
-share/locale/et/LC_MESSAGES/cryptui.mo
-share/locale/eu/LC_MESSAGES/cryptui.mo
-share/locale/fi/LC_MESSAGES/cryptui.mo
-share/locale/fr/LC_MESSAGES/cryptui.mo
-share/locale/ga/LC_MESSAGES/cryptui.mo
-share/locale/gl/LC_MESSAGES/cryptui.mo
-share/locale/gu/LC_MESSAGES/cryptui.mo
-share/locale/he/LC_MESSAGES/cryptui.mo
-share/locale/hi/LC_MESSAGES/cryptui.mo
-share/locale/hr/LC_MESSAGES/cryptui.mo
-share/locale/hu/LC_MESSAGES/cryptui.mo
-share/locale/id/LC_MESSAGES/cryptui.mo
-share/locale/it/LC_MESSAGES/cryptui.mo
-share/locale/ja/LC_MESSAGES/cryptui.mo
-share/locale/kn/LC_MESSAGES/cryptui.mo
-share/locale/ko/LC_MESSAGES/cryptui.mo
-share/locale/ku/LC_MESSAGES/cryptui.mo
-share/locale/lt/LC_MESSAGES/cryptui.mo
-share/locale/lv/LC_MESSAGES/cryptui.mo
-share/locale/mai/LC_MESSAGES/cryptui.mo
-share/locale/mk/LC_MESSAGES/cryptui.mo
-share/locale/ml/LC_MESSAGES/cryptui.mo
-share/locale/mr/LC_MESSAGES/cryptui.mo
-share/locale/ms/LC_MESSAGES/cryptui.mo
-share/locale/nb/LC_MESSAGES/cryptui.mo
-share/locale/ne/LC_MESSAGES/cryptui.mo
-share/locale/nl/LC_MESSAGES/cryptui.mo
-share/locale/nn/LC_MESSAGES/cryptui.mo
-share/locale/oc/LC_MESSAGES/cryptui.mo
-share/locale/or/LC_MESSAGES/cryptui.mo
-share/locale/pa/LC_MESSAGES/cryptui.mo
-share/locale/pl/LC_MESSAGES/cryptui.mo
-share/locale/pt/LC_MESSAGES/cryptui.mo
-share/locale/pt_BR/LC_MESSAGES/cryptui.mo
-share/locale/ro/LC_MESSAGES/cryptui.mo
-share/locale/ru/LC_MESSAGES/cryptui.mo
-share/locale/rw/LC_MESSAGES/cryptui.mo
-share/locale/si/LC_MESSAGES/cryptui.mo
-share/locale/sk/LC_MESSAGES/cryptui.mo
-share/locale/sl/LC_MESSAGES/cryptui.mo
-share/locale/sq/LC_MESSAGES/cryptui.mo
-share/locale/sr/LC_MESSAGES/cryptui.mo
-share/locale/sr@latin/LC_MESSAGES/cryptui.mo
-share/locale/sv/LC_MESSAGES/cryptui.mo
-share/locale/ta/LC_MESSAGES/cryptui.mo
-share/locale/te/LC_MESSAGES/cryptui.mo
-share/locale/th/LC_MESSAGES/cryptui.mo
-share/locale/tr/LC_MESSAGES/cryptui.mo
-share/locale/ug/LC_MESSAGES/cryptui.mo
-share/locale/uk/LC_MESSAGES/cryptui.mo
-share/locale/vi/LC_MESSAGES/cryptui.mo
-share/locale/zh_CN/LC_MESSAGES/cryptui.mo
-share/locale/zh_HK/LC_MESSAGES/cryptui.mo
-share/locale/zh_TW/LC_MESSAGES/cryptui.mo
-share/pixmaps/cryptui/22x22/seahorse-key-personal.png
-share/pixmaps/cryptui/22x22/seahorse-key-ssh.png
-share/pixmaps/cryptui/22x22/seahorse-key.png
-share/pixmaps/cryptui/22x22/seahorse-person.png
-share/pixmaps/cryptui/22x22/seahorse-sign-bad.png
-share/pixmaps/cryptui/22x22/seahorse-sign-ok.png
-share/pixmaps/cryptui/22x22/seahorse-sign.png
-share/pixmaps/cryptui/48x48/seahorse-key-personal.png
-share/pixmaps/cryptui/48x48/seahorse-key-ssh.png
-share/pixmaps/cryptui/48x48/seahorse-key.png
-share/pixmaps/cryptui/48x48/seahorse-person.png
-share/pixmaps/cryptui/48x48/seahorse-sign-bad.png
-share/pixmaps/cryptui/48x48/seahorse-sign-ok.png
-share/pixmaps/cryptui/48x48/seahorse-sign-unknown.png
-share/pixmaps/cryptui/48x48/seahorse-sign.png
-share/pixmaps/cryptui/scalable/seahorse-key-personal.svg
-share/pixmaps/cryptui/scalable/seahorse-key-ssh.svg
-share/pixmaps/cryptui/scalable/seahorse-key.svg
-share/pixmaps/cryptui/scalable/seahorse-person.svg
-share/pixmaps/cryptui/scalable/seahorse-sign-bad.svg
-share/pixmaps/cryptui/scalable/seahorse-sign-ok.svg
-share/pixmaps/cryptui/scalable/seahorse-sign-unknown.svg
-share/pixmaps/cryptui/scalable/seahorse-sign.svg
diff --git a/security/libpki/Makefile b/security/libpki/Makefile
index 1fc399318268..0fd4d9e05873 100644
--- a/security/libpki/Makefile
+++ b/security/libpki/Makefile
@@ -1,7 +1,7 @@
PORTNAME= libpki
DISTVERSIONPREFIX= v
DISTVERSION= 0.9.2
-PORTREVISION= 6
+PORTREVISION= 7
CATEGORIES= security
PATCH_SITES= https://github.com/openca/libpki/commit/
diff --git a/security/libsectok/Makefile b/security/libsectok/Makefile
deleted file mode 100644
index 6033a9ba69ac..000000000000
--- a/security/libsectok/Makefile
+++ /dev/null
@@ -1,48 +0,0 @@
-PORTNAME= libsectok
-DISTVERSION= 20030619
-PORTREVISION= 4
-CATEGORIES= security
-MASTER_SITES= http://www.citi.umich.edu/projects/smartcard/
-
-MAINTAINER= ports@FreeBSD.org
-COMMENT= ISO 7816 Smartcard API Library
-WWW= http://www.citi.umich.edu/projects/smartcard/sectok.html
-
-LICENSE= LicenseRef-UMich
-LICENSE_NAME= University of Michigan License
-LICENSE_FILE= ${WRKSRC}/LICENSE
-LICENSE_PERMS= dist-mirror dist-sell pkg-mirror pkg-sell auto-accept
-
-DEPRECATED= Last upstream release in 2003 and no longer maintained
-EXPIRATION_DATE= 2025-06-30
-
-USE_LDCONFIG= yes
-
-LDFLAGS+= -Wl,-soname=${PORTNAME}.so.3
-
-PLIST_FILES= include/sectok.h lib/libsectok.a lib/libsectok.so \
- lib/libsectok.so.3 share/man/man3/sectok.3.gz
-
-post-patch:
- @${REINPLACE_CMD} -e \
- '/^VERSION/s|3.1|3| ; \
- s|^CFLAGS=|CFLAGS+=| ; \
- s|-g |$${CPPFLAGS} | ; \
- s|^LDFLAGS=|LDFLAGS+=| ; \
- s|-x .* -shared|-shared| ; \
- s|^CC=|CC?=| ; \
- /^LD/s|ld|$$(CC)| ; \
- s|-fpic|-fPIC|' ${WRKSRC}/Makefile
-
-do-install:
- (cd ${WRKSRC} && ${INSTALL_DATA} sectok.h \
- ${STAGEDIR}${PREFIX}/include)
- (cd ${WRKSRC} && ${INSTALL_DATA} libsectok.a \
- ${STAGEDIR}${PREFIX}/lib)
- (cd ${WRKSRC} && ${INSTALL_LIB} libsectok.so.3 \
- ${STAGEDIR}${PREFIX}/lib)
- ${LN} -s libsectok.so.3 ${STAGEDIR}${PREFIX}/lib/libsectok.so
- (cd ${WRKSRC} && ${INSTALL_MAN} sectok.3 \
- ${STAGEDIR}${PREFIX}/share/man/man3)
-
-.include <bsd.port.mk>
diff --git a/security/libsectok/distinfo b/security/libsectok/distinfo
deleted file mode 100644
index 3fe44a7762c2..000000000000
--- a/security/libsectok/distinfo
+++ /dev/null
@@ -1,2 +0,0 @@
-SHA256 (libsectok-20030619.tar.gz) = f00b216af71969d90fca089ad7f4255ccff1d985813e0b932c42ce2df82b6d15
-SIZE (libsectok-20030619.tar.gz) = 26633
diff --git a/security/libsectok/pkg-descr b/security/libsectok/pkg-descr
deleted file mode 100644
index 29048936bd09..000000000000
--- a/security/libsectok/pkg-descr
+++ /dev/null
@@ -1,3 +0,0 @@
-This is the libsectok library from citi.umich.edu. Originally targeted
-for OpenBSD. This is a quick port of the library itself; it contains an
-API for working with ISO 7816 Smart Card devices.
diff --git a/security/lime/Makefile b/security/lime/Makefile
index d94686d00af0..0315dec4d176 100644
--- a/security/lime/Makefile
+++ b/security/lime/Makefile
@@ -1,5 +1,5 @@
PORTNAME= lime
-DISTVERSION= 5.4.2
+DISTVERSION= 5.4.24
CATEGORIES= security
MAINTAINER= bofh@FreeBSD.org
@@ -20,8 +20,7 @@ USE_GITLAB= yes
GL_SITE= https://gitlab.linphone.org/BC
GL_ACCOUNT= public
-CMAKE_ARGS= -DCMAKE_PREFIX_PATH=${LOCALBASE} \
- -DENABLE_STRICT=NO \
+CMAKE_ARGS= -DENABLE_STRICT=NO \
-DENABLE_UNIT_TESTS=NO
.include <bsd.port.mk>
diff --git a/security/lime/distinfo b/security/lime/distinfo
index c58fa25b259f..ad4f709f3363 100644
--- a/security/lime/distinfo
+++ b/security/lime/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1743023454
-SHA256 (lime-5.4.2.tar.bz2) = 46f03be330a37186ed330dfbfe64fb4887a683bfb889f33aa1bfd3c54780a8a6
-SIZE (lime-5.4.2.tar.bz2) = 677782
+TIMESTAMP = 1751281759
+SHA256 (lime-5.4.24.tar.bz2) = e06de2ad663f8735dc22a06153910aa511834493b17c2f2e1dfce2c247fcc02b
+SIZE (lime-5.4.24.tar.bz2) = 677362
diff --git a/security/modsecurity3/Makefile b/security/modsecurity3/Makefile
index 15147e278ed0..186cfe1dc959 100644
--- a/security/modsecurity3/Makefile
+++ b/security/modsecurity3/Makefile
@@ -1,6 +1,7 @@
PORTNAME= modsecurity
DISTVERSIONPREFIX= v
DISTVERSION= 3.0.14
+PORTREVISION= 1
CATEGORIES= security www
MASTER_SITES= https://github.com/owasp-modsecurity/ModSecurity/releases/download/v${PORTVERSION}/
PKGNAMESUFFIX= 3
diff --git a/security/nettle/Makefile b/security/nettle/Makefile
index 79573ea82af5..ddea868f1be1 100644
--- a/security/nettle/Makefile
+++ b/security/nettle/Makefile
@@ -1,5 +1,5 @@
PORTNAME= nettle
-PORTVERSION= 3.10.1
+PORTVERSION= 3.10.2
CATEGORIES= security
MASTER_SITES= GNU \
https://www.lysator.liu.se/~nisse/archive/
diff --git a/security/nettle/distinfo b/security/nettle/distinfo
index 97625f47b80f..ceeab63d0f14 100644
--- a/security/nettle/distinfo
+++ b/security/nettle/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1735705131
-SHA256 (nettle-3.10.1.tar.gz) = b0fcdd7fc0cdea6e80dcf1dd85ba794af0d5b4a57e26397eee3bc193272d9132
-SIZE (nettle-3.10.1.tar.gz) = 2643267
+TIMESTAMP = 1751208138
+SHA256 (nettle-3.10.2.tar.gz) = fe9ff51cb1f2abb5e65a6b8c10a92da0ab5ab6eaf26e7fc2b675c45f1fb519b5
+SIZE (nettle-3.10.2.tar.gz) = 2644644
diff --git a/security/nettle/files/extra-patch-Makefile.in b/security/nettle/files/extra-patch-Makefile.in
index 2974b822043a..2c1480398adf 100644
--- a/security/nettle/files/extra-patch-Makefile.in
+++ b/security/nettle/files/extra-patch-Makefile.in
@@ -1,6 +1,6 @@
---- Makefile.in.orig 2023-06-01 18:40:35 UTC
+--- Makefile.in.orig 2025-06-26 18:29:02 UTC
+++ Makefile.in
-@@ -19,7 +19,7 @@ OPT_NETTLE_SOURCES = @OPT_NETTLE_SOURCES@
+@@ -19,7 +19,7 @@ FAT_TEST_LIST = @FAT_TEST_LIST@
FAT_TEST_LIST = @FAT_TEST_LIST@
diff --git a/security/nettle/files/patch-configure b/security/nettle/files/patch-configure
index 1b8f460d9501..d210a2e1be01 100644
--- a/security/nettle/files/patch-configure
+++ b/security/nettle/files/patch-configure
@@ -1,6 +1,6 @@
---- configure.orig 2023-06-01 18:40:35 UTC
+--- configure.orig 2025-06-26 18:29:02 UTC
+++ configure
-@@ -6638,7 +6638,7 @@ $as_echo "$as_me: WARNING: Cross compiling for linux.
+@@ -7532,7 +7532,7 @@ printf "%s\n" "$as_me: WARNING: Cross compiling for li
# and 64-bit in lib. Don't know about "kfreebsd", does
# it follow the Linux fhs conventions?
*:freebsd*:32)
diff --git a/security/nettle/files/patch-examples-nettle-openssl.c b/security/nettle/files/patch-examples-nettle-openssl.c
index d7cf037c61c3..006e654aa899 100644
--- a/security/nettle/files/patch-examples-nettle-openssl.c
+++ b/security/nettle/files/patch-examples-nettle-openssl.c
@@ -1,6 +1,6 @@
---- examples/nettle-openssl.c.orig 2021-03-21 08:32:25 UTC
+--- examples/nettle-openssl.c.orig 2025-06-26 18:29:03 UTC
+++ examples/nettle-openssl.c
-@@ -374,6 +374,7 @@ openssl_hash_update(void *p,
+@@ -291,6 +291,7 @@ openssl_hash_update(void *p,
EVP_DigestUpdate(ctx->evp, src, length);
}
@@ -8,7 +8,7 @@
#define OPENSSL_HASH(NAME, name) \
static void \
openssl_##name##_init(void *p) \
-@@ -404,6 +405,38 @@ nettle_openssl_##name = { \
+@@ -321,6 +322,38 @@ nettle_openssl_##name = { \
openssl_hash_update, \
openssl_##name##_digest \
};
@@ -46,4 +46,4 @@
+#endif
OPENSSL_HASH(MD5, md5)
- OPENSSL_HASH(SHA, sha1)
+ OPENSSL_HASH(SHA1, sha1)
diff --git a/security/nettle/files/patch-powerpc64-p8-aes-decrypt-internal.asm b/security/nettle/files/patch-powerpc64-p8-aes-decrypt-internal.asm
index 67ceabec79c5..e23c8a8f6463 100644
--- a/security/nettle/files/patch-powerpc64-p8-aes-decrypt-internal.asm
+++ b/security/nettle/files/patch-powerpc64-p8-aes-decrypt-internal.asm
@@ -1,4 +1,4 @@
---- powerpc64/p8/aes-decrypt-internal.asm.orig 2024-06-16 15:27:54 UTC
+--- powerpc64/p8/aes-decrypt-internal.asm.orig 2025-06-26 18:29:03 UTC
+++ powerpc64/p8/aes-decrypt-internal.asm
@@ -64,7 +64,7 @@ PROLOGUE(_nettle_aes_decrypt)
diff --git a/security/nettle/files/patch-powerpc64-p8-aes-encrypt-internal.asm b/security/nettle/files/patch-powerpc64-p8-aes-encrypt-internal.asm
index 313ba61a4f6b..67218e1caaf4 100644
--- a/security/nettle/files/patch-powerpc64-p8-aes-encrypt-internal.asm
+++ b/security/nettle/files/patch-powerpc64-p8-aes-encrypt-internal.asm
@@ -1,6 +1,6 @@
---- powerpc64/p8/aes-encrypt-internal.asm.orig 2022-06-02 17:57:16 UTC
+--- powerpc64/p8/aes-encrypt-internal.asm.orig 2025-06-26 18:29:03 UTC
+++ powerpc64/p8/aes-encrypt-internal.asm
-@@ -63,7 +63,7 @@ define(`S7', `v9')
+@@ -64,7 +64,7 @@ PROLOGUE(_nettle_aes_encrypt)
define(`FUNC_ALIGN', `5')
PROLOGUE(_nettle_aes_encrypt)
@@ -9,7 +9,7 @@
subi ROUNDS,ROUNDS,1
srdi LENGTH,LENGTH,4
-@@ -328,6 +328,6 @@ EPILOGUE(_nettle_aes_encrypt)
+@@ -269,6 +269,6 @@ EPILOGUE(_nettle_aes_encrypt)
.data
.align 4
diff --git a/security/nettle/pkg-plist b/security/nettle/pkg-plist
index 25ba25f62658..48c756c49b45 100644
--- a/security/nettle/pkg-plist
+++ b/security/nettle/pkg-plist
@@ -79,11 +79,11 @@ include/nettle/yarrow.h
lib/libhogweed.a
lib/libhogweed.so
lib/libhogweed.so.6
-lib/libhogweed.so.6.10
+lib/libhogweed.so.6.11
lib/libnettle.a
lib/libnettle.so
lib/libnettle.so.8
-lib/libnettle.so.8.10
+lib/libnettle.so.8.11
libdata/pkgconfig/hogweed.pc
libdata/pkgconfig/nettle.pc
%%PORTDOCS%%%%DOCSDIR%%/NEWS
diff --git a/security/oath-toolkit/Makefile b/security/oath-toolkit/Makefile
index 645c44354cd5..6e7185c29f6b 100644
--- a/security/oath-toolkit/Makefile
+++ b/security/oath-toolkit/Makefile
@@ -1,6 +1,6 @@
PORTNAME= oath-toolkit
PORTVERSION= 2.6.9
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= security
MASTER_SITES= SAVANNAH
diff --git a/security/openca-ocspd/Makefile b/security/openca-ocspd/Makefile
index 9b07cdf85926..83338f75a91a 100644
--- a/security/openca-ocspd/Makefile
+++ b/security/openca-ocspd/Makefile
@@ -1,6 +1,7 @@
PORTNAME= openca-ocspd
DISTVERSIONPREFIX= v
DISTVERSION= 3.1.3
+PORTREVISION= 1
CATEGORIES= security
MAINTAINER= bruno@ruomad.net
diff --git a/security/openconnect/Makefile b/security/openconnect/Makefile
index dde1ab75f49e..729c3f55d101 100644
--- a/security/openconnect/Makefile
+++ b/security/openconnect/Makefile
@@ -1,6 +1,6 @@
PORTNAME= openconnect
PORTVERSION= 9.12
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= security net-vpn
MASTER_SITES= ftp://ftp.infradead.org/pub/openconnect/ \
ZI
diff --git a/security/osslsigncode/Makefile b/security/osslsigncode/Makefile
index 506113da3bfb..90ad102b8086 100644
--- a/security/osslsigncode/Makefile
+++ b/security/osslsigncode/Makefile
@@ -1,5 +1,5 @@
PORTNAME= osslsigncode
-DISTVERSION= 2.9
+DISTVERSION= 2.10
CATEGORIES= security devel
MAINTAINER= bofh@FreeBSD.org
diff --git a/security/osslsigncode/distinfo b/security/osslsigncode/distinfo
index 7fcd2eecd6b3..28a1ff301015 100644
--- a/security/osslsigncode/distinfo
+++ b/security/osslsigncode/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1722080494
-SHA256 (mtrojnar-osslsigncode-2.9_GH0.tar.gz) = 3fe5488e442ad99f91410efeb7b029275366b5df9aa02371dcc89a8f8569ff55
-SIZE (mtrojnar-osslsigncode-2.9_GH0.tar.gz) = 1033420
+TIMESTAMP = 1751273239
+SHA256 (mtrojnar-osslsigncode-2.10_GH0.tar.gz) = 2a864e6127ee2350fb648070fa0d459c534ac6400ca0048886aeab7afb250f65
+SIZE (mtrojnar-osslsigncode-2.10_GH0.tar.gz) = 1038769
diff --git a/security/pwman/Makefile b/security/pwman/Makefile
index f5ae9fa4c85f..ece00f434d62 100644
--- a/security/pwman/Makefile
+++ b/security/pwman/Makefile
@@ -1,6 +1,6 @@
PORTNAME= pwman
DISTVERSION= 0.4.5
-PORTREVISION= 4
+PORTREVISION= 5
CATEGORIES= security
MASTER_SITES= SF/${PORTNAME}/${PORTNAME}/${PORTNAME}-${PORTVERSION}
diff --git a/security/py-keyring/Makefile b/security/py-keyring/Makefile
index 16295f7c5fbd..3351a75034bc 100644
--- a/security/py-keyring/Makefile
+++ b/security/py-keyring/Makefile
@@ -1,6 +1,5 @@
PORTNAME= keyring
-PORTVERSION= 23.9.3
-PORTREVISION= 3
+PORTVERSION= 25.6.0
PORTEPOCH= 1
CATEGORIES= security python
MASTER_SITES= PYPI
@@ -13,7 +12,10 @@ WWW= https://github.com/jaraco/keyring
LICENSE= PSFL
BUILD_DEPENDS= ${PYTHON_PKGNAMEPREFIX}setuptools-scm>=1.15.0:devel/py-setuptools-scm@${PY_FLAVOR}
-RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}jaraco.classes>=0:devel/py-jaraco.classes@${PY_FLAVOR}
+RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}jaraco.classes>=0:devel/py-jaraco.classes@${PY_FLAVOR} \
+ ${PYTHON_PKGNAMEPREFIX}jaraco.context>=0:devel/py-jaraco.context@${PY_FLAVOR} \
+ ${PYTHON_PKGNAMEPREFIX}jaraco.functools>=0:devel/py-jaraco.functools@${PY_FLAVOR} \
+ ${PYTHON_PKGNAMEPREFIX}importlib-metadata>=0:devel/py-importlib-metadata@${PY_FLAVOR}
USES= cpe python
CPE_VENDOR= python
diff --git a/security/py-keyring/distinfo b/security/py-keyring/distinfo
index f1a4b7d2fb95..8c9a3f741e77 100644
--- a/security/py-keyring/distinfo
+++ b/security/py-keyring/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1666640101
-SHA256 (keyring-23.9.3.tar.gz) = 69b01dd83c42f590250fe7a1f503fc229b14de83857314b1933a3ddbf595c4a5
-SIZE (keyring-23.9.3.tar.gz) = 56674
+TIMESTAMP = 1748966316
+SHA256 (keyring-25.6.0.tar.gz) = 0b39998aa941431eb3d9b0d4b2460bc773b9df6fed7621c2dfb291a7e0187a66
+SIZE (keyring-25.6.0.tar.gz) = 62750
diff --git a/security/py-xmlsec/Makefile b/security/py-xmlsec/Makefile
index 188ed4360ba0..b657e758b557 100644
--- a/security/py-xmlsec/Makefile
+++ b/security/py-xmlsec/Makefile
@@ -1,5 +1,6 @@
PORTNAME= xmlsec
DISTVERSION= 1.3.15
+PORTREVISION= 1
CATEGORIES= security python
MASTER_SITES= PYPI
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
diff --git a/security/rubygem-gitlab-cloud-connector/Makefile b/security/rubygem-gitlab-cloud-connector/Makefile
index b59e9cf5734e..17348ef607c0 100644
--- a/security/rubygem-gitlab-cloud-connector/Makefile
+++ b/security/rubygem-gitlab-cloud-connector/Makefile
@@ -1,5 +1,5 @@
PORTNAME= gitlab-cloud-connector
-PORTVERSION= 1.17.0
+PORTVERSION= 1.19.0
CATEGORIES= security rubygems
MASTER_SITES= RG
diff --git a/security/rubygem-gitlab-cloud-connector/distinfo b/security/rubygem-gitlab-cloud-connector/distinfo
index f3bc3876d43c..b702ac666f5a 100644
--- a/security/rubygem-gitlab-cloud-connector/distinfo
+++ b/security/rubygem-gitlab-cloud-connector/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1750222196
-SHA256 (rubygem/gitlab-cloud-connector-1.17.0.gem) = b9eaf5544cebb66667be560cc032fd6e26ccb6c35c0912b3cd1fadb7cbcfbf34
-SIZE (rubygem/gitlab-cloud-connector-1.17.0.gem) = 18432
+TIMESTAMP = 1750912646
+SHA256 (rubygem/gitlab-cloud-connector-1.19.0.gem) = cfa644b4d827062f5c625d391ca3e6904e7667f0f6efe96adab81e051d8d07ad
+SIZE (rubygem/gitlab-cloud-connector-1.19.0.gem) = 18432
diff --git a/security/sectok/Makefile b/security/sectok/Makefile
deleted file mode 100644
index ed27ddb5ed4e..000000000000
--- a/security/sectok/Makefile
+++ /dev/null
@@ -1,41 +0,0 @@
-PORTNAME= sectok
-DISTVERSION= 20030825
-PORTREVISION= 4
-CATEGORIES= security
-MASTER_SITES= http://www.citi.umich.edu/projects/smartcard/
-
-MAINTAINER= ports@FreeBSD.org
-COMMENT= ISO 7816 Smartcard Utility
-WWW= http://www.citi.umich.edu/projects/smartcard/sectok.html
-
-LICENSE= LicenseRef-UMich
-LICENSE_NAME= University of Michigan License
-LICENSE_FILE= ${WRKSRC}/LICENSE
-LICENSE_PERMS= dist-mirror dist-sell pkg-mirror pkg-sell auto-accept
-
-DEPRECATED= Last upstream release in 2003 and no longer maintained
-EXPIRATION_DATE= 2025-06-30
-
-LIB_DEPENDS= libsectok.so:security/libsectok
-
-USES= ssl localbase tar:tgz
-USE_LDCONFIG= yes
-
-MAKE_ARGS= CC="${CC}" CFLAGS="${CFLAGS}"
-
-PLIST_FILES= bin/${PORTNAME} share/man/man1/${PORTNAME}.1.gz
-
-post-patch:
- @${REINPLACE_CMD} \
- -e '/^INCLUDES=/s|$$| ${CPPFLAGS}|' \
- -e '/^LIBS=/s|=|=${LDFLAGS} |' \
- -e '/^LIBS=/s|$$| ${LIBS}|' \
- ${WRKSRC}/Makefile
-
-do-install:
- (cd ${WRKSRC} && ${INSTALL_PROGRAM} ${PORTNAME} \
- ${STAGEDIR}${PREFIX}/bin)
- (cd ${WRKSRC} && ${INSTALL_MAN} ${PORTNAME}.1 \
- ${STAGEDIR}${PREFIX}/share/man/man1)
-
-.include <bsd.port.mk>
diff --git a/security/sectok/distinfo b/security/sectok/distinfo
deleted file mode 100644
index f4d0c56c397b..000000000000
--- a/security/sectok/distinfo
+++ /dev/null
@@ -1,2 +0,0 @@
-SHA256 (sectok-20030825.tgz) = 4951d2b9876d06cb119e3c913325764fa58ea93453252665d9f206378e501e5f
-SIZE (sectok-20030825.tgz) = 17323
diff --git a/security/sectok/files/patch-cyberflex.c b/security/sectok/files/patch-cyberflex.c
deleted file mode 100644
index 30bfa6e6f29c..000000000000
--- a/security/sectok/files/patch-cyberflex.c
+++ /dev/null
@@ -1,61 +0,0 @@
---- cyberflex.c.orig 2003-06-20 00:37:35.000000000 +0200
-+++ cyberflex.c 2015-02-28 15:57:55.093727371 +0100
-@@ -48,7 +48,13 @@
- #define SHA1Init SHA1_Init
- #define SHA1Update SHA1_Update
- #define SHA1Final SHA1_Final
--#else /* __linux */
-+#elif defined(__FreeBSD__)
-+#define SHA1_CTX SHA_CTX
-+#define SHA1Init SHA1_Init
-+#define SHA1Update SHA1_Update
-+#define SHA1Final SHA1_Final
-+#include <openssl/sha.h>
-+#else
- #include <sha1.h>
- #endif
- #else
-@@ -69,7 +75,7 @@
- #include "sc.h"
-
- #ifdef __sun
--#define des_set_key(key, schedule) des_key_sched(key, schedule)
-+#define DES_set_key(key, &schedule) DES_key_sched(key, &schedule)
- #endif
-
- #define JDIRSIZE 40
-@@ -91,7 +97,7 @@
-
- #ifndef __palmos__
- /* default signed applet key of Cyberflex Access */
--static des_cblock app_key = {0x6A, 0x21, 0x36, 0xF5, 0xD8, 0x0C, 0x47, 0x83};
-+static DES_cblock app_key = {0x6A, 0x21, 0x36, 0xF5, 0xD8, 0x0C, 0x47, 0x83};
- #endif
-
- static int
-@@ -663,8 +669,8 @@
- unsigned char aid[16], app_data[MAX_APP_SIZE], data[MAX_BUF_SIZE];
- int i, j, vflag = 0, gotprog = 0, gotcont = 0, fd_app, size, aidlen = 0, sw;
- int cont_size = 1152, inst_size = 1024;
-- des_cblock tmp;
-- des_key_schedule schedule;
-+ DES_cblock tmp;
-+ DES_key_schedule schedule;
- static unsigned char acl[] = {0x81, 0, 0, 0xff, 0, 0, 0, 0};
-
- optind = optreset = 1;
-@@ -777,12 +783,12 @@
- /* chain. DES encrypt one block, XOR the cyphertext with the next block,
- ... continues until the end of the buffer */
-
-- des_set_key (&app_key, schedule);
-+ DES_set_key (&app_key, &schedule);
-
- for (i = 0; i < size/BLOCK_SIZE; i++) {
- for (j = 0; j < BLOCK_SIZE; j++)
- tmp[j] = tmp[j] ^ app_data[i*BLOCK_SIZE + j];
-- des_ecb_encrypt (&tmp, &tmp, schedule, DES_ENCRYPT);
-+ DES_ecb_encrypt (&tmp, &tmp, &schedule, DES_ENCRYPT);
- }
-
- if (vflag) {
diff --git a/security/sectok/pkg-descr b/security/sectok/pkg-descr
deleted file mode 100644
index f71dcd17c35b..000000000000
--- a/security/sectok/pkg-descr
+++ /dev/null
@@ -1,3 +0,0 @@
-This is the sectok tool from citi.umich.edu. Originally targeted
-for OpenBSD. This is a quick port of the basic application; it relies
-upon the libsectok library for ISO 7816 Smart Card device communication.
diff --git a/security/snort3/Makefile b/security/snort3/Makefile
index de56987b3447..50ff68cab2c4 100644
--- a/security/snort3/Makefile
+++ b/security/snort3/Makefile
@@ -1,5 +1,6 @@
PORTNAME= snort
DISTVERSION= 3.8.1.0
+PORTREVISION= 1
PORTEPOCH= 1
CATEGORIES= security
PKGNAMESUFFIX= 3
@@ -17,7 +18,7 @@ LIB_DEPENDS= libdaq.so:net/libdaq \
libhwloc.so:devel/hwloc2 \
libpcap.so:net/libpcap \
libpcre2-8.so:devel/pcre2 \
- libuuid.so:misc/e2fsprogs-libuuid
+ libuuid.so:misc/libuuid
USES= cmake compiler:c++14-lang cpe iconv localbase luajit pathfix pkgconfig \
shebangfix ssl
diff --git a/security/sssd2/Makefile b/security/sssd2/Makefile
index 3c4f642a401b..eacfd0a175da 100644
--- a/security/sssd2/Makefile
+++ b/security/sssd2/Makefile
@@ -1,6 +1,6 @@
PORTNAME= sssd
PORTVERSION= 2.9.6
-PORTREVISION= 3
+PORTREVISION= 4
CATEGORIES= security
PKGNAMESUFFIX= 2
@@ -45,7 +45,7 @@ LIB_DEPENDS= libcares.so:dns/c-ares \
libtdb.so:${SAMBA_TDB_PORT} \
libtevent.so:${SAMBA_TEVENT_PORT} \
libunistring.so:devel/libunistring \
- libuuid.so:misc/e2fsprogs-libuuid
+ libuuid.so:misc/libuuid
RUN_DEPENDS= adcli:net-mgmt/adcli \
cyrus-sasl-gssapi>0:security/cyrus-sasl2-gssapi
diff --git a/security/stoken/Makefile b/security/stoken/Makefile
index eb0280267bd1..8d4eb834d47f 100644
--- a/security/stoken/Makefile
+++ b/security/stoken/Makefile
@@ -1,7 +1,7 @@
PORTNAME= stoken
DISTVERSIONPREFIX= v
DISTVERSION= 0.93
-PORTREVISION= 3
+PORTREVISION= 4
CATEGORIES= security
MAINTAINER= samm@FreeBSD.org
diff --git a/security/strongswan/Makefile b/security/strongswan/Makefile
index b65637df0d71..1eb1f164081d 100644
--- a/security/strongswan/Makefile
+++ b/security/strongswan/Makefile
@@ -1,6 +1,5 @@
PORTNAME= strongswan
-DISTVERSION= 6.0.0
-PORTREVISION= 1
+DISTVERSION= 6.0.1
CATEGORIES= security net-vpn
MASTER_SITES= https://download.strongswan.org/ \
https://download2.strongswan.org/
diff --git a/security/strongswan/distinfo b/security/strongswan/distinfo
index c9460511cb81..6596d8ab97bf 100644
--- a/security/strongswan/distinfo
+++ b/security/strongswan/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1740055222
-SHA256 (strongswan-6.0.0.tar.bz2) = 72fe58b7523155703b65b08c3cc559c2c9a5c96da54afebd8136f6623e7dda82
-SIZE (strongswan-6.0.0.tar.bz2) = 4863821
+TIMESTAMP = 1747651788
+SHA256 (strongswan-6.0.1.tar.bz2) = 212368cbc674fed31f3292210303fff06da8b90acad2d1387375ed855e6879c4
+SIZE (strongswan-6.0.1.tar.bz2) = 4844260
diff --git a/security/tpm2-tools/Makefile b/security/tpm2-tools/Makefile
index 42aa7da55eeb..99cb1ffb5ab0 100644
--- a/security/tpm2-tools/Makefile
+++ b/security/tpm2-tools/Makefile
@@ -1,6 +1,6 @@
PORTNAME= tpm2-tools
DISTVERSION= 5.6
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= security
MASTER_SITES= https://github.com/tpm2-software/tpm2-tools/releases/download/${DISTVERSION}/
@@ -12,7 +12,7 @@ LICENSE= BSD2CLAUSE
LIB_DEPENDS= libtss2-esys.so:security/tpm2-tss \
libcurl.so:ftp/curl \
- libuuid.so:misc/e2fsprogs-libuuid
+ libuuid.so:misc/libuuid
USES= compiler:c11 gmake libtool pkgconfig ssl
diff --git a/security/tpm2-tss/Makefile b/security/tpm2-tss/Makefile
index 8d60a2b418bc..e7f599522a33 100644
--- a/security/tpm2-tss/Makefile
+++ b/security/tpm2-tss/Makefile
@@ -1,6 +1,6 @@
PORTNAME= tpm2-tss
DISTVERSION= 4.0.1
-PORTREVISION= 2
+PORTREVISION= 3
CATEGORIES= security
MASTER_SITES= https://github.com/tpm2-software/tpm2-tss/releases/download/${DISTVERSION}/
@@ -11,7 +11,7 @@ LICENSE= BSD2CLAUSE
LIB_DEPENDS= libjson-c.so:devel/json-c \
libcurl.so:ftp/curl \
- libuuid.so:misc/e2fsprogs-libuuid
+ libuuid.so:misc/libuuid
USES= compiler:c11 gmake libtool pkgconfig ssl
USE_LDCONFIG= yes
diff --git a/security/vault/Makefile b/security/vault/Makefile
index 6f65c1a69795..95b5e0e4fea8 100644
--- a/security/vault/Makefile
+++ b/security/vault/Makefile
@@ -1,6 +1,6 @@
PORTNAME= vault
DISTVERSIONPREFIX= v
-DISTVERSION= 1.19.5
+DISTVERSION= 1.20.0
CATEGORIES= security
MASTER_SITES= https://raw.githubusercontent.com/hashicorp/vault/${DISTVERSIONFULL}/ \
LOCAL/bofh/security/${PORTNAME}/:web_ui
@@ -27,7 +27,7 @@ EXTRACT_DEPENDS=npm-node20>0:www/npm-node20 \
yarn-node20>0:www/yarn-node20
.endif
-USES= cpe go:1.24,modules
+USES= cpe go:modules
CPE_VENDOR= hashicorp
USE_GITHUB= yes
GH_ACCOUNT= hashicorp
@@ -46,7 +46,7 @@ GROUPS= vault
PLIST_FILES= bin/${PORTNAME}
-GITID= 7010adf2c67686681908f04ec8e9357f19066f4f
+GITID= 6fdd6b59e97d97a9e19b0fb5304bf879c190295e
.include <bsd.port.pre.mk>
diff --git a/security/vault/distinfo b/security/vault/distinfo
index 91abadf4847a..8ae380ecfa61 100644
--- a/security/vault/distinfo
+++ b/security/vault/distinfo
@@ -1,17 +1,17 @@
-TIMESTAMP = 1749701093
-SHA256 (go/security_vault/hashicorp-vault-v1.19.5_GH0/go.mod) = eb4c04065aeb9f30a71a31229fa197336d6b93f6380ee67afc94a51245423dfc
-SIZE (go/security_vault/hashicorp-vault-v1.19.5_GH0/go.mod) = 29839
-SHA256 (go/security_vault/hashicorp-vault-v1.19.5_GH0/api/go.mod) = 0d652a7ef05e4031f5cc927151101672f29851c4a227e6082263a8aa32918667
-SIZE (go/security_vault/hashicorp-vault-v1.19.5_GH0/api/go.mod) = 1678
-SHA256 (go/security_vault/hashicorp-vault-v1.19.5_GH0/api/auth/approle/go.mod) = 58a8a86c96adddbe7d63ca3aa6be8b4972048639084ed8191522f60610cdb811
-SIZE (go/security_vault/hashicorp-vault-v1.19.5_GH0/api/auth/approle/go.mod) = 1084
-SHA256 (go/security_vault/hashicorp-vault-v1.19.5_GH0/api/auth/kubernetes/go.mod) = 877dd47a4ba1d2e0b4be63bb30178433e7be72e3bf7454619be502af4d05332f
-SIZE (go/security_vault/hashicorp-vault-v1.19.5_GH0/api/auth/kubernetes/go.mod) = 1087
-SHA256 (go/security_vault/hashicorp-vault-v1.19.5_GH0/api/auth/userpass/go.mod) = 380860700e965d112bbb40ed96a0da01a9ff9e16a5127fc7c6496ae3aaa14538
-SIZE (go/security_vault/hashicorp-vault-v1.19.5_GH0/api/auth/userpass/go.mod) = 1085
-SHA256 (go/security_vault/hashicorp-vault-v1.19.5_GH0/sdk/go.mod) = bf6fdc7aade5d5ab3308c1782a4e7831218dd30bc5362aaf9999c68811bc5883
-SIZE (go/security_vault/hashicorp-vault-v1.19.5_GH0/sdk/go.mod) = 6583
-SHA256 (go/security_vault/hashicorp-vault-v1.19.5_GH0/vault-web_ui-1.19.5.tar.gz) = dec3f028c5b1fc021b43f911c7834f6fb96cce19a867c729f7f901bb68471e0a
-SIZE (go/security_vault/hashicorp-vault-v1.19.5_GH0/vault-web_ui-1.19.5.tar.gz) = 3402738
-SHA256 (go/security_vault/hashicorp-vault-v1.19.5_GH0/hashicorp-vault-v1.19.5_GH0.tar.gz) = 195ac1f9cfb2c6618633794b74807d2a06db6e6b5b24eeeb55aaaa4f5faba65d
-SIZE (go/security_vault/hashicorp-vault-v1.19.5_GH0/hashicorp-vault-v1.19.5_GH0.tar.gz) = 37816526
+TIMESTAMP = 1751270126
+SHA256 (go/security_vault/hashicorp-vault-v1.20.0_GH0/go.mod) = 2ba77e161beb4cb09d49a8050c29c3f04e3eebdadfa6acc41c75adffec1305b7
+SIZE (go/security_vault/hashicorp-vault-v1.20.0_GH0/go.mod) = 30423
+SHA256 (go/security_vault/hashicorp-vault-v1.20.0_GH0/api/go.mod) = 4e249690767897bd2050076246927eef319d4b981711c44d1303a2e61b6a8b84
+SIZE (go/security_vault/hashicorp-vault-v1.20.0_GH0/api/go.mod) = 1686
+SHA256 (go/security_vault/hashicorp-vault-v1.20.0_GH0/api/auth/approle/go.mod) = bd0424483d992f8909a0c581079a8cfe0418a83035cd64cad592da71aee024ec
+SIZE (go/security_vault/hashicorp-vault-v1.20.0_GH0/api/auth/approle/go.mod) = 1092
+SHA256 (go/security_vault/hashicorp-vault-v1.20.0_GH0/api/auth/kubernetes/go.mod) = 031d60cabed3e3d38954745e59623cddd02a58c8c0616dd6b8f0834b6180b229
+SIZE (go/security_vault/hashicorp-vault-v1.20.0_GH0/api/auth/kubernetes/go.mod) = 1095
+SHA256 (go/security_vault/hashicorp-vault-v1.20.0_GH0/api/auth/userpass/go.mod) = 35297d2e71346bf96738f03f57a9ba0389a12267852dbc2bf0b6aa314d2274ab
+SIZE (go/security_vault/hashicorp-vault-v1.20.0_GH0/api/auth/userpass/go.mod) = 1093
+SHA256 (go/security_vault/hashicorp-vault-v1.20.0_GH0/sdk/go.mod) = a3da120c91c4a0a9a2ad7e2fac36034da35a1527668359a6c9f19800aa88f2f1
+SIZE (go/security_vault/hashicorp-vault-v1.20.0_GH0/sdk/go.mod) = 6759
+SHA256 (go/security_vault/hashicorp-vault-v1.20.0_GH0/vault-web_ui-1.20.0.tar.gz) = 4bb7caa0ff55170fcc21de4e095ea8e0aa120f6b71ec7005fdc81f2ba6a3e36c
+SIZE (go/security_vault/hashicorp-vault-v1.20.0_GH0/vault-web_ui-1.20.0.tar.gz) = 3586169
+SHA256 (go/security_vault/hashicorp-vault-v1.20.0_GH0/hashicorp-vault-v1.20.0_GH0.tar.gz) = 12e388d5aecdcef7fe24cd1a65964d3a643e952b659e6748d9a85767a4bda0f0
+SIZE (go/security_vault/hashicorp-vault-v1.20.0_GH0/hashicorp-vault-v1.20.0_GH0.tar.gz) = 41609921
diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml
index a13b0b1015ce..e9e2390a00f0 100644
--- a/security/vuxml/vuln/2025.xml
+++ b/security/vuxml/vuln/2025.xml
@@ -1,3 +1,31 @@
+ <vuln vid="6b1b8989-55b0-11f0-ac64-589cfc10a551">
+ <topic>podman -- TLS connection used to pull VM images was not validated</topic>
+ <affects>
+ <package>
+ <name>podman</name>
+ <range><lt>5.5.2</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>RedHat, Inc. reports:</p>
+ <blockquote cite="https://nvd.nist.gov/vuln/detail/CVE-2025-6032">
+ <p>A flaw was found in Podman. The podman machine init command fails to verify the TLS
+ certificate when downloading the VM images from an OCI registry. This issue results
+ in a Man In The Middle attack.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2025-6032</cvename>
+ <url>https://nvd.nist.gov/vuln/detail/CVE-2025-6032</url>
+ </references>
+ <dates>
+ <discovery>2025-06-30</discovery>
+ <entry>2025-06-30</entry>
+ </dates>
+ </vuln>
+
<vuln vid="5e64770c-52aa-11f0-b522-b42e991fc52e">
<topic>MongoDB -- Running certain aggregation operations with the SBE engine may lead to unexpected behavior</topic>
<affects>
diff --git a/security/xmlsec1/Makefile b/security/xmlsec1/Makefile
index a3c3fae2f27c..731d8f136cb4 100644
--- a/security/xmlsec1/Makefile
+++ b/security/xmlsec1/Makefile
@@ -1,5 +1,6 @@
PORTNAME= xmlsec1
DISTVERSION= 1.3.6
+PORTREVISION= 1
CATEGORIES= security
MASTER_SITES= https://github.com/lsh123/xmlsec/releases/download/xmlsec_${DISTVERSION:S,.,_,g}/ \
https://www.aleksey.com/xmlsec/download/