summaryrefslogtreecommitdiff
path: root/security
diff options
context:
space:
mode:
Diffstat (limited to 'security')
-rw-r--r--security/Makefile4
-rw-r--r--security/amavisd-new/Makefile97
-rw-r--r--security/amavisd-new/distinfo6
-rw-r--r--security/amavisd-new/files/patch-amavisd40
-rw-r--r--security/amavisd-new/files/patch-amavisd.conf20
-rw-r--r--security/amavisd-new/pkg-plist73
-rw-r--r--security/aws-lc/Makefile2
-rw-r--r--security/aws-lc/distinfo6
-rw-r--r--security/certspotter/Makefile3
-rw-r--r--security/certspotter/distinfo10
-rw-r--r--security/dehydrated/Makefile3
-rw-r--r--security/dehydrated/distinfo6
-rw-r--r--security/fizz/Makefile2
-rw-r--r--security/fizz/distinfo6
-rw-r--r--security/keybase/Makefile3
-rw-r--r--security/keybase/distinfo10
-rw-r--r--security/kf6-kdesu/distinfo6
-rw-r--r--security/libfido2/Makefile2
-rw-r--r--security/libfido2/distinfo6
-rw-r--r--security/libfido2/pkg-plist4
-rw-r--r--security/openvpn-auth-oauth2/Makefile27
-rw-r--r--security/openvpn-auth-oauth2/distinfo5
-rw-r--r--security/openvpn-auth-oauth2/files/openvpn_auth_oauth2.in148
-rw-r--r--security/openvpn-auth-oauth2/pkg-descr15
-rw-r--r--security/openvpn-auth-oauth2/pkg-plist3
-rw-r--r--security/py-asyncssh/Makefile2
-rw-r--r--security/py-asyncssh/distinfo6
-rw-r--r--security/py-cryptography-vectors/Makefile2
-rw-r--r--security/py-cryptography-vectors/distinfo6
-rw-r--r--security/py-cryptography/Makefile2
-rw-r--r--security/py-cryptography/Makefile.crates30
-rw-r--r--security/py-cryptography/distinfo66
-rw-r--r--security/rubygem-devise-two-factor-rails-gitlab/Makefile (renamed from security/rubygem-devise-two-factor41-rails70/Makefile)8
-rw-r--r--security/rubygem-devise-two-factor-rails-gitlab/distinfo (renamed from security/rubygem-devise-two-factor41-rails70/distinfo)0
-rw-r--r--security/rubygem-devise-two-factor-rails-gitlab/pkg-descr (renamed from security/rubygem-devise-two-factor41-rails70/pkg-descr)0
-rw-r--r--security/rubygem-doorkeeper-device_authorization_grant/Makefile3
-rw-r--r--security/rubygem-doorkeeper-openid_connect/Makefile3
-rw-r--r--security/rubygem-doorkeeper-rails-gitlab/Makefile22
-rw-r--r--security/rubygem-doorkeeper-rails-gitlab/distinfo3
-rw-r--r--security/rubygem-doorkeeper-rails-gitlab/pkg-descr2
-rw-r--r--security/rubygem-ed25519/Makefile2
-rw-r--r--security/rubygem-ed25519/distinfo6
-rw-r--r--security/rubygem-gitlab-cloud-connector/Makefile4
-rw-r--r--security/rubygem-gitlab-cloud-connector/distinfo6
-rw-r--r--security/rubygem-signet/Makefile2
-rw-r--r--security/rubygem-signet/distinfo6
-rw-r--r--security/vuxml/vuln/2025.xml33
47 files changed, 498 insertions, 223 deletions
diff --git a/security/Makefile b/security/Makefile
index 54b0a4ba353f..b742b84e77e2 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -462,6 +462,7 @@
SUBDIR += openvpn
SUBDIR += openvpn-admin
SUBDIR += openvpn-auth-ldap
+ SUBDIR += openvpn-auth-oauth2
SUBDIR += openvpn-auth-radius
SUBDIR += openvpn-auth-script
SUBDIR += openvpn-devel
@@ -1134,15 +1135,16 @@
SUBDIR += rubygem-cvss-suite
SUBDIR += rubygem-declarative_policy
SUBDIR += rubygem-devise-two-factor
+ SUBDIR += rubygem-devise-two-factor-rails-gitlab
SUBDIR += rubygem-devise-two-factor-rails5
SUBDIR += rubygem-devise-two-factor-rails70
- SUBDIR += rubygem-devise-two-factor41-rails70
SUBDIR += rubygem-devise_pam_authenticatable2
SUBDIR += rubygem-digest
SUBDIR += rubygem-digest-crc
SUBDIR += rubygem-doorkeeper
SUBDIR += rubygem-doorkeeper-device_authorization_grant
SUBDIR += rubygem-doorkeeper-openid_connect
+ SUBDIR += rubygem-doorkeeper-rails-gitlab
SUBDIR += rubygem-doorkeeper-rails5
SUBDIR += rubygem-doorkeeper-rails50
SUBDIR += rubygem-doorkeeper-rails70
diff --git a/security/amavisd-new/Makefile b/security/amavisd-new/Makefile
index 84620ebff7bc..698c96f64b45 100644
--- a/security/amavisd-new/Makefile
+++ b/security/amavisd-new/Makefile
@@ -1,6 +1,5 @@
PORTNAME= amavisd-new
-DISTVERSION= 2.12.3
-PORTREVISION= 7
+DISTVERSION= 2.13.1
PORTEPOCH= 1
CATEGORIES= security
@@ -10,45 +9,46 @@ WWW= https://www.ijs.si/software/amavisd/
LICENSE= GPLv2
-RUN_DEPENDS= p5-Unix-Syslog>=0:sysutils/p5-Unix-Syslog \
- p5-MIME-Tools>=0:mail/p5-MIME-Tools \
+RUN_DEPENDS= p5-Archive-Zip>=1.14:archivers/p5-Archive-Zip \
p5-Convert-TNEF>=0:converters/p5-Convert-TNEF \
p5-Convert-UUlib>=1.08,1:converters/p5-Convert-UUlib \
- p5-Archive-Zip>=1.14:archivers/p5-Archive-Zip \
- p5-Net-Server>=2.0:net/p5-Net-Server \
p5-Mail-DKIM>=0.33:mail/p5-Mail-DKIM \
- p5-Net-LibIDN>=0:dns/p5-Net-LibIDN
+ p5-MIME-Tools>=0:mail/p5-MIME-Tools \
+ p5-Net-LibIDN>=0:dns/p5-Net-LibIDN \
+ p5-Net-Server>=2.0:net/p5-Net-Server \
+ p5-Unix-Syslog>=0:sysutils/p5-Unix-Syslog
USES= perl5 shebangfix tar:bz2
-USE_GITLAB= yes
USE_PERL5= run
+USE_GITLAB= yes
GL_ACCOUNT= amavis
GL_PROJECT= amavis
-GL_TAGNAME= 3290c9c2a11a8cc9595b5810b2f86c1dac25a392
+GL_TAGNAME= cdd11b069e20a4cb99960614ca9c3eb385d4e200
-SHEBANG_FILES= amavisd-agent amavisd-nanny amavisd-release p0f-analyzer.pl \
- amavisd-snmp-subagent amavisd
+SHEBANG_FILES= bin/amavisd bin/amavisd-agent bin/amavisd-nanny \
+ bin/amavisd-release bin/amavisd-snmp-subagent \
+ contrib/p0f-analyzer.pl
NO_ARCH= yes
NO_BUILD= yes
-DOCS= AAAREADME.first AMAVIS-MIB.txt INSTALL LDAP.schema LICENSE \
+DOCS= AAAREADME.first AMAVIS-MIB.txt contrib/LDAP.schema LICENSE \
RELEASE_NOTES README_FILES/README.* README_FILES/screen.css \
README_FILES/amavisd-new-docs.html
-AMAVISUSER?= vscan
-AMAVISGROUP?= vscan
-USERS= ${AMAVISUSER}
-GROUPS= ${AMAVISGROUP}
-AMAVISDIR?= /var/amavis
+AMAVISUSER?= vscan
+AMAVISGROUP?= vscan
+USERS= ${AMAVISUSER}
+GROUPS= ${AMAVISGROUP}
+AMAVISDIR?= /var/amavis
AMAVISQUARANTINE?= /var/virusmails
-DAEMON?= /usr/sbin/daemon -p
+DAEMON?= /usr/sbin/daemon -p
-OPTIONS_DEFINE= IPV6 BDB SNMP SQLITE MYSQL PGSQL LDAP SASL SPAMASSASSIN P0F \
- FILE RAR UNRAR ARJ UNARJ LHA ARC NOMARCH CAB RPM ZOO UNZOO LZOP \
- 7ZIP MSWORD TNEF DOCS
-OPTIONS_DEFAULT= BDB SPAMASSASSIN FILE UNRAR ARJ ARC CAB RPM ZOO LZOP \
- 7ZIP MSWORD
+OPTIONS_DEFINE= 7ZIP ARC ARJ BDB CAB DOCS FILE IPV6 LDAP LHA LZOP \
+ MSWORD MYSQL NOMARCH P0F PGSQL RAR RPM SASL SNMP \
+ SPAMASSASSIN SQLITE TNEF UNARJ UNRAR UNZOO ZOO
+OPTIONS_DEFAULT= 7ZIP ARC ARJ BDB CAB FILE LZOP MSWORD RPM SPAMASSASSIN \
+ UNRAR ZOO
BDB_DESC= Use BerkeleyDB for nanny/cache/snmp
SNMP_DESC= Install amavisd snmp subagent
SQLITE_DESC= Use SQLite for lookups
@@ -77,18 +77,18 @@ TNEF_DESC= Add external tnef decoder converters/tnef
SUB_FILES= pkg-deinstall pkg-message
-SUB_LIST+= AMAVISUSER=${AMAVISUSER} \
+SUB_LIST+= AMAVISDIR=${AMAVISDIR} \
AMAVISGROUP=${AMAVISGROUP} \
- AMAVISDIR=${AMAVISDIR} \
AMAVISQUARANTINE=${AMAVISQUARANTINE} \
+ AMAVISUSER=${AMAVISUSER} \
DAEMON="${DAEMON}" \
PERL=${PERL}
-PLIST_SUB+= AMAVISUSER=${AMAVISUSER} \
- AMAVISGROUP=${AMAVISGROUP} \
+PLIST_SUB+= AMAVIS_NOP0F=${AMAVIS_NOP0F} \
AMAVISDIR=${AMAVISDIR} \
+ AMAVISGROUP=${AMAVISGROUP} \
AMAVISQUARANTINE=${AMAVISQUARANTINE} \
- AMAVIS_NOP0F=${AMAVIS_NOP0F}
+ AMAVISUSER=${AMAVISUSER}
.include <bsd.port.options.mk>
@@ -151,7 +151,7 @@ RUN_DEPENDS+= file>=4.21:sysutils/file
.if ${ARCH} == "i386" || ${ARCH} == "amd64"
RUN_DEPENDS+= ${LOCALBASE}/bin/rar:archivers/rar
.else
-IGNORE= archivers/rar is a x86 binary port and is not compatible with ${ARCH}
+IGNORE= archivers/rar is a x86 binary port and is not compatible with ${ARCH}
.endif
.endif
@@ -215,40 +215,41 @@ RUN_DEPENDS+= ${LOCALBASE}/bin/tnef:converters/tnef
.include <bsd.port.pre.mk>
post-patch:
- @${REINPLACE_CMD} -e "s|$$daemon_user = 'vscan';|$$daemon_user = '${AMAVISUSER}';|" \
- -e "s|$$daemon_group = 'vscan';|$$daemon_group = '${AMAVISGROUP}';|" \
+ @${REINPLACE_CMD} -e "s|$daemon_user = 'vscan';|$daemon_user = '${AMAVISUSER}';|" \
+ -e "s|@daemon_groups = 'vscan';|@daemon_groups = '${AMAVISGROUP}';|" \
-e "s|/var/amavis|${AMAVISDIR}|" \
- -e "s|/var/lib/amavis|${AMAVISDIR}|" \
-e "s|/var/virusmails|${AMAVISQUARANTINE}|" \
- -e 's|$$localhost_name = .localhost.;|$$localhost_name = $$myhostname;|' \
- -e 's|/var/run/clamav/clamd|/var/run/clamav/clamd|g' \
- ${WRKSRC}/amavisd.conf
- @${REINPLACE_CMD} "s|/var/amavis/db|${AMAVISDIR}/db|" ${WRKSRC}/amavisd-agent
- @${REINPLACE_CMD} "s|/var/amavis/db|${AMAVISDIR}/db|" ${WRKSRC}/amavisd-nanny
+ ${WRKSRC}/conf/amavisd.conf
+ @${REINPLACE_CMD} "s|/var/amavis/db|${AMAVISDIR}/db|" ${WRKSRC}/bin/amavisd-agent
+ @${REINPLACE_CMD} "s|/var/amavis/db|${AMAVISDIR}/db|" ${WRKSRC}/bin/amavisd-nanny
@${REINPLACE_CMD} -e "s|/var/amavis/db|${AMAVISDIR}/db|" \
- ${WRKSRC}/amavisd-snmp-subagent
+ ${WRKSRC}/bin/amavisd-snmp-subagent
@${REINPLACE_CMD} "s|/var/amavis/amavisd.sock|${AMAVISDIR}/amavisd.sock|" \
- ${WRKSRC}/amavisd-release
+ ${WRKSRC}/bin/amavisd-release
@${REINPLACE_CMD} -e "s|/etc/amavisd.conf|${PREFIX}/etc/amavisd.conf|" \
- -e "s|/var/amavis|${AMAVISDIR}|g" \
- -e 's|$$localhost_name = .localhost.;|$$localhost_name = $$myhostname;|' \
- ${WRKSRC}/amavisd
+ -e "s|/var/amavis|${AMAVISDIR}|g" \
+ ${WRKSRC}/lib/Amavis.pm
+ @${REINPLACE_CMD} -e "s|/var/amavis|${AMAVISDIR}|g" \
+ ${WRKSRC}/lib/Amavis/Conf.pm
do-install:
-.for i in amavisd amavisd-agent amavisd-nanny amavisd-release amavisd-snmp-subagent
- ${INSTALL_SCRIPT} ${WRKSRC}/${i} ${STAGEDIR}${PREFIX}/sbin
+.for i in amavisd amavisd-agent amavisd-nanny amavisd-release \
+ amavisd-snmp-subagent
+ ${INSTALL_SCRIPT} ${WRKSRC}/bin/${i} ${STAGEDIR}${PREFIX}/sbin
.endfor
- ${INSTALL_DATA} ${WRKSRC}/amavisd.conf ${STAGEDIR}${PREFIX}/etc/amavisd.conf.sample
- ${INSTALL_DATA} ${WRKSRC}/amavisd.conf-default ${STAGEDIR}${PREFIX}/etc/amavisd.conf-default
- ${INSTALL_DATA} ${WRKSRC}/amavisd-custom.conf ${STAGEDIR}${PREFIX}/etc/amavisd-custom.conf.sample
+ ${INSTALL_DATA} ${WRKSRC}/conf/amavisd.conf ${STAGEDIR}${PREFIX}/etc/amavisd.conf.sample
+ ${INSTALL_DATA} ${WRKSRC}/conf/amavisd.conf-default ${STAGEDIR}${PREFIX}/etc/amavisd.conf-default
+ ${INSTALL_DATA} ${WRKSRC}/conf/amavisd-custom.conf ${STAGEDIR}${PREFIX}/etc/amavisd-custom.conf.sample
${LN} -s ${PREFIX}/sbin/amavisd-release ${STAGEDIR}${PREFIX}/sbin/amavisd-requeue
+ ${MKDIR} ${STAGEDIR}${PREFIX}/${SITE_PERL_REL}/Amavis
+ (cd ${WRKSRC}/lib && ${COPYTREE_SHARE} . ${STAGEDIR}${PREFIX}/${SITE_PERL_REL})
${MKDIR} ${STAGEDIR}${AMAVISDIR}/var
${MKDIR} ${STAGEDIR}${AMAVISDIR}/tmp
${MKDIR} ${STAGEDIR}${AMAVISDIR}/db
${MKDIR} ${STAGEDIR}${AMAVISQUARANTINE}
do-install-P0F-on:
- ${INSTALL_SCRIPT} ${WRKSRC}/p0f-analyzer.pl ${STAGEDIR}${PREFIX}/sbin
+ ${INSTALL_SCRIPT} ${WRKSRC}/contrib/p0f-analyzer.pl ${STAGEDIR}${PREFIX}/sbin
do-install-DOCS-on:
@${MKDIR} ${STAGEDIR}${DOCSDIR}/images
diff --git a/security/amavisd-new/distinfo b/security/amavisd-new/distinfo
index 4787dd57c314..109ac9ef9616 100644
--- a/security/amavisd-new/distinfo
+++ b/security/amavisd-new/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1710676870
-SHA256 (amavis-amavis-3290c9c2a11a8cc9595b5810b2f86c1dac25a392_GL0.tar.gz) = 83a24db2887afa9ae099a1d9842941cb93e162b137903b4d0cd857ec477ff243
-SIZE (amavis-amavis-3290c9c2a11a8cc9595b5810b2f86c1dac25a392_GL0.tar.gz) = 1100231
+TIMESTAMP = 1747417723
+SHA256 (amavis-amavis-cdd11b069e20a4cb99960614ca9c3eb385d4e200_GL0.tar.gz) = beebeaa0bbdd6d59301d5e140f0d71f716588e6e3fcfe73a26594ff1f2c7704c
+SIZE (amavis-amavis-cdd11b069e20a4cb99960614ca9c3eb385d4e200_GL0.tar.gz) = 1132629
diff --git a/security/amavisd-new/files/patch-amavisd b/security/amavisd-new/files/patch-amavisd
deleted file mode 100644
index 84c632588d27..000000000000
--- a/security/amavisd-new/files/patch-amavisd
+++ /dev/null
@@ -1,40 +0,0 @@
---- amavisd.orig 2025-05-11 13:36:08 UTC
-+++ amavisd
-@@ -1741,13 +1741,13 @@ BEGIN {
- ['tnef', \&Amavis::Unpackers::do_tnef],
- # ['lha', \&Amavis::Unpackers::do_lha, \$lha], # not safe, use 7z instead
- # ['sit', \&Amavis::Unpackers::do_unstuff, \$unstuff], # not safe
-- [['zip','kmz'], \&Amavis::Unpackers::do_7zip, ['7za', '7z'] ],
-+ [['zip','kmz'], \&Amavis::Unpackers::do_7zip, ['7za', '7zz', '7z'] ],
- [['zip','kmz'], \&Amavis::Unpackers::do_unzip],
-- ['7z', \&Amavis::Unpackers::do_7zip, ['7zr', '7za', '7z'] ],
-+ ['7z', \&Amavis::Unpackers::do_7zip, ['7zr', '7za', '7zz', '7z'] ],
- [[qw(gz bz2 Z tar)],
-- \&Amavis::Unpackers::do_7zip, ['7za', '7z'] ],
-+ \&Amavis::Unpackers::do_7zip, ['7za', '7zz', '7z'] ],
- [[qw(xz lzma jar cpio arj rar swf lha iso cab deb rpm)],
-- \&Amavis::Unpackers::do_7zip, '7z' ],
-+ \&Amavis::Unpackers::do_7zip, ['7zz', '7z'] ],
- ['exe', \&Amavis::Unpackers::do_executable, \$unrar, \$lha, \$unarj],
- );
-
-@@ -18812,7 +18812,7 @@ sub fetch_modules_extra() {
- auto::Net::SSLeay::dump_peer_certificate));
- }
- push(@modules, qw(Net::DNS::RR::TXT Text::ParseWords
-- auto::Crypt::OpenSSL::RSA::new_public_key)) if $extra_code_dkim;
-+ )) if $extra_code_dkim;
- push(@modules, 'Anomy::Sanitizer') if $enable_anomy_sanitizer;
- Amavis::Boot::fetch_modules('REQUIRED ADDITIONAL MODULES', 1, @modules);
-
-@@ -30849,10 +30849,6 @@ sub getSAPlugins {
- $mod_names{'Mail::SpamAssassin::Plugin::DKIM'}) {
- push(@modules, qw(
- Crypt::OpenSSL::RSA
-- auto::Crypt::OpenSSL::RSA::new_public_key
-- auto::Crypt::OpenSSL::RSA::new_key_from_parameters
-- auto::Crypt::OpenSSL::RSA::get_key_parameters
-- auto::Crypt::OpenSSL::RSA::import_random_seed
- Digest::SHA Error));
- }
- # HTML/HeadParser.pm
diff --git a/security/amavisd-new/files/patch-amavisd.conf b/security/amavisd-new/files/patch-amavisd.conf
deleted file mode 100644
index 394c65fea6e8..000000000000
--- a/security/amavisd-new/files/patch-amavisd.conf
+++ /dev/null
@@ -1,20 +0,0 @@
---- amavisd.conf.orig 2021-10-13 08:10:54 UTC
-+++ amavisd.conf
-@@ -348,13 +348,13 @@ $banned_filename_re = new_RE(
- ['tnef', \&do_tnef],
- # ['lha', \&do_lha, 'lha'], # not safe, use 7z instead
- # ['sit', \&do_unstuff, 'unstuff'], # not safe
-- [['zip','kmz'], \&do_7zip, ['7za', '7z'] ],
-+ [['zip','kmz'], \&do_7zip, ['7za', '7zz', '7z'] ],
- [['zip','kmz'], \&do_unzip],
-- ['7z', \&do_7zip, ['7zr', '7za', '7z'] ],
-+ ['7z', \&do_7zip, ['7zr', '7za', '7zz', '7z'] ],
- [[qw(gz bz2 Z tar)],
-- \&do_7zip, ['7za', '7z'] ],
-+ \&do_7zip, ['7za', '7zz', '7z'] ],
- [[qw(xz lzma jar cpio arj rar swf lha iso cab deb rpm)],
-- \&do_7zip, '7z' ],
-+ \&do_7zip, ['7zz', '7z'] ],
- ['exe', \&do_executable, ['unrar','rar'], 'lha', ['unarj','arj'] ],
- );
-
diff --git a/security/amavisd-new/pkg-plist b/security/amavisd-new/pkg-plist
index c76b3c79c5cf..23bf8ce53792 100644
--- a/security/amavisd-new/pkg-plist
+++ b/security/amavisd-new/pkg-plist
@@ -1,6 +1,5 @@
%%PORTDOCS%%%%DOCSDIR%%/AAAREADME.first
%%PORTDOCS%%%%DOCSDIR%%/AMAVIS-MIB.txt
-%%PORTDOCS%%%%DOCSDIR%%/INSTALL
%%PORTDOCS%%%%DOCSDIR%%/LDAP.schema
%%PORTDOCS%%%%DOCSDIR%%/LICENSE
%%PORTDOCS%%%%DOCSDIR%%/README.CVE-2024-28054
@@ -67,6 +66,78 @@
etc/amavisd.conf-default
@sample etc/amavisd.conf.sample
%%AMAVIS_NOP0F%%sbin/p0f-analyzer.pl
+%%SITE_PERL%%/Amavis.pm
+%%SITE_PERL%%/Amavis.pm.bak
+%%SITE_PERL%%/Amavis/AV.pm
+%%SITE_PERL%%/Amavis/Boot.pm
+%%SITE_PERL%%/Amavis/Conf.pm
+%%SITE_PERL%%/Amavis/Conf.pm.bak
+%%SITE_PERL%%/Amavis/Custom.pm
+%%SITE_PERL%%/Amavis/DB.pm
+%%SITE_PERL%%/Amavis/DB/SNMP.pm
+%%SITE_PERL%%/Amavis/DKIM.pm
+%%SITE_PERL%%/Amavis/DKIM/CustomSigner.pm
+%%SITE_PERL%%/Amavis/DbgLog.pm
+%%SITE_PERL%%/Amavis/Expand.pm
+%%SITE_PERL%%/Amavis/IO/FileHandle.pm
+%%SITE_PERL%%/Amavis/IO/RW.pm
+%%SITE_PERL%%/Amavis/IO/SQL.pm
+%%SITE_PERL%%/Amavis/IO/Zlib.pm
+%%SITE_PERL%%/Amavis/In/AMPDP.pm
+%%SITE_PERL%%/Amavis/In/Connection.pm
+%%SITE_PERL%%/Amavis/In/Message.pm
+%%SITE_PERL%%/Amavis/In/Message/PerRecip.pm
+%%SITE_PERL%%/Amavis/In/SMTP.pm
+%%SITE_PERL%%/Amavis/JSON.pm
+%%SITE_PERL%%/Amavis/LDAP/Connection.pm
+%%SITE_PERL%%/Amavis/Log.pm
+%%SITE_PERL%%/Amavis/Lookup.pm
+%%SITE_PERL%%/Amavis/Lookup/DNSxL.pm
+%%SITE_PERL%%/Amavis/Lookup/IP.pm
+%%SITE_PERL%%/Amavis/Lookup/LDAP.pm
+%%SITE_PERL%%/Amavis/Lookup/LDAPattr.pm
+%%SITE_PERL%%/Amavis/Lookup/Label.pm
+%%SITE_PERL%%/Amavis/Lookup/Opaque.pm
+%%SITE_PERL%%/Amavis/Lookup/OpaqueRef.pm
+%%SITE_PERL%%/Amavis/Lookup/RE.pm
+%%SITE_PERL%%/Amavis/Lookup/SQL.pm
+%%SITE_PERL%%/Amavis/Lookup/SQLfield.pm
+%%SITE_PERL%%/Amavis/MIME/Body/OnOpenFh.pm
+%%SITE_PERL%%/Amavis/Notify.pm
+%%SITE_PERL%%/Amavis/OS_Fingerprint.pm
+%%SITE_PERL%%/Amavis/Out.pm
+%%SITE_PERL%%/Amavis/Out/BSMTP.pm
+%%SITE_PERL%%/Amavis/Out/EditHeader.pm
+%%SITE_PERL%%/Amavis/Out/Local.pm
+%%SITE_PERL%%/Amavis/Out/Pipe.pm
+%%SITE_PERL%%/Amavis/Out/SMTP.pm
+%%SITE_PERL%%/Amavis/Out/SMTP/Protocol.pm
+%%SITE_PERL%%/Amavis/Out/SMTP/Session.pm
+%%SITE_PERL%%/Amavis/Out/SQL/Connection.pm
+%%SITE_PERL%%/Amavis/Out/SQL/Log.pm
+%%SITE_PERL%%/Amavis/Out/SQL/Quarantine.pm
+%%SITE_PERL%%/Amavis/ProcControl.pm
+%%SITE_PERL%%/Amavis/Redis.pm
+%%SITE_PERL%%/Amavis/SpamControl.pm
+%%SITE_PERL%%/Amavis/SpamControl/ExtProg.pm
+%%SITE_PERL%%/Amavis/SpamControl/RspamdClient.pm
+%%SITE_PERL%%/Amavis/SpamControl/SpamAssassin.pm
+%%SITE_PERL%%/Amavis/SpamControl/SpamdClient.pm
+%%SITE_PERL%%/Amavis/TempDir.pm
+%%SITE_PERL%%/Amavis/Timing.pm
+%%SITE_PERL%%/Amavis/TinyRedis.pm
+%%SITE_PERL%%/Amavis/Tools.pm
+%%SITE_PERL%%/Amavis/UnmangleSender.pm
+%%SITE_PERL%%/Amavis/Unpackers.pm
+%%SITE_PERL%%/Amavis/Unpackers/MIME.pm
+%%SITE_PERL%%/Amavis/Unpackers/NewFilename.pm
+%%SITE_PERL%%/Amavis/Unpackers/OurFiler.pm
+%%SITE_PERL%%/Amavis/Unpackers/Part.pm
+%%SITE_PERL%%/Amavis/Unpackers/Validity.pm
+%%SITE_PERL%%/Amavis/Util.pm
+%%SITE_PERL%%/Amavis/ZMQ.pm
+%%SITE_PERL%%/Amavis/rfc2821_2822_Tools.pm
+%%SITE_PERL%%/Mail/SpamAssassin/Logger/Amavislog.pm
sbin/amavisd
sbin/amavisd-agent
sbin/amavisd-nanny
diff --git a/security/aws-lc/Makefile b/security/aws-lc/Makefile
index d9dc7bef2f0f..106a5798fca9 100644
--- a/security/aws-lc/Makefile
+++ b/security/aws-lc/Makefile
@@ -1,5 +1,5 @@
PORTNAME= aws-lc
-PORTVERSION= 1.50.0
+PORTVERSION= 1.51.2
DISTVERSIONPREFIX= v
CATEGORIES= security
diff --git a/security/aws-lc/distinfo b/security/aws-lc/distinfo
index f8a449cfe01a..a20b2ebd6245 100644
--- a/security/aws-lc/distinfo
+++ b/security/aws-lc/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1745936038
-SHA256 (aws-aws-lc-v1.50.0_GH0.tar.gz) = 613f4a1adeecb290e5ad2b9656fce1cfbb91a5ae9b3a2105f0ec3fde71723a1a
-SIZE (aws-aws-lc-v1.50.0_GH0.tar.gz) = 126283726
+TIMESTAMP = 1747546432
+SHA256 (aws-aws-lc-v1.51.2_GH0.tar.gz) = 7df65427f92a4c3cd3db6923e1d395014e41b1fcc38671806c1e342cb6fa02f6
+SIZE (aws-aws-lc-v1.51.2_GH0.tar.gz) = 126901627
diff --git a/security/certspotter/Makefile b/security/certspotter/Makefile
index 99dced1ebb49..1e72e32655ca 100644
--- a/security/certspotter/Makefile
+++ b/security/certspotter/Makefile
@@ -1,7 +1,6 @@
PORTNAME= certspotter
DISTVERSIONPREFIX= v
-DISTVERSION= 0.18.0
-PORTREVISION= 9
+DISTVERSION= 0.19.1
CATEGORIES= security www
MAINTAINER= flo@FreeBSD.org
diff --git a/security/certspotter/distinfo b/security/certspotter/distinfo
index d7a980228c6e..772eb53fc419 100644
--- a/security/certspotter/distinfo
+++ b/security/certspotter/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1706474827
-SHA256 (go/security_certspotter/certspotter-v0.18.0/v0.18.0.mod) = 7999f3e078b45dae94b4b4b34bee2dda107e3a23bff847f54b584d0ce3bb549d
-SIZE (go/security_certspotter/certspotter-v0.18.0/v0.18.0.mod) = 165
-SHA256 (go/security_certspotter/certspotter-v0.18.0/v0.18.0.zip) = cd52b973de3ee04cbf5ced8eb87c6634185e77ad2bf4da756a4c72b9881f2c59
-SIZE (go/security_certspotter/certspotter-v0.18.0/v0.18.0.zip) = 89899
+TIMESTAMP = 1747556137
+SHA256 (go/security_certspotter/certspotter-v0.19.1/v0.19.1.mod) = f0897405fbbb66ce90c065989f7e540c9bd41fff60cb898a7f676065f614ca7f
+SIZE (go/security_certspotter/certspotter-v0.19.1/v0.19.1.mod) = 238
+SHA256 (go/security_certspotter/certspotter-v0.19.1/v0.19.1.zip) = f93902e870a04b6ea0f8a336c5636db8d38aedc993a7918e303035712c867676
+SIZE (go/security_certspotter/certspotter-v0.19.1/v0.19.1.zip) = 100957
diff --git a/security/dehydrated/Makefile b/security/dehydrated/Makefile
index 91503e154f03..35546b7b1a94 100644
--- a/security/dehydrated/Makefile
+++ b/security/dehydrated/Makefile
@@ -1,7 +1,6 @@
PORTNAME= dehydrated
DISTVERSIONPREFIX= v
-DISTVERSION= 0.7.1-6
-DISTVERSIONSUFFIX= -g4fd777e
+DISTVERSION= 0.7.2
CATEGORIES= security
MAINTAINER= meta@FreeBSD.org
diff --git a/security/dehydrated/distinfo b/security/dehydrated/distinfo
index 9298ccf74384..4d15a725879f 100644
--- a/security/dehydrated/distinfo
+++ b/security/dehydrated/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1709697522
-SHA256 (dehydrated-io-dehydrated-v0.7.1-6-g4fd777e_GH0.tar.gz) = de412c89502df7beb08e20d2d6e6f2b9f314dc60e6a12d08f9e7712b80d569c6
-SIZE (dehydrated-io-dehydrated-v0.7.1-6-g4fd777e_GH0.tar.gz) = 120738
+TIMESTAMP = 1747655926
+SHA256 (dehydrated-io-dehydrated-v0.7.2_GH0.tar.gz) = 34d0e316dd86108cf302fddfe1c6d7b72c2fa98bed338ddd6c0155da2ec75a94
+SIZE (dehydrated-io-dehydrated-v0.7.2_GH0.tar.gz) = 121861
diff --git a/security/fizz/Makefile b/security/fizz/Makefile
index 69356dd3585d..58cb52d68aeb 100644
--- a/security/fizz/Makefile
+++ b/security/fizz/Makefile
@@ -1,6 +1,6 @@
PORTNAME= fizz
DISTVERSIONPREFIX= v
-DISTVERSION= 2025.05.12.00
+DISTVERSION= 2025.05.19.00
CATEGORIES= security
MAINTAINER= yuri@FreeBSD.org
diff --git a/security/fizz/distinfo b/security/fizz/distinfo
index b92c50f7c07e..74e44fafe591 100644
--- a/security/fizz/distinfo
+++ b/security/fizz/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1747102733
-SHA256 (facebookincubator-fizz-v2025.05.12.00_GH0.tar.gz) = d3608b4595fff4e0d59585b1b12bead6f6ce4bf2d3bee41fb084f7128a28e4b2
-SIZE (facebookincubator-fizz-v2025.05.12.00_GH0.tar.gz) = 754096
+TIMESTAMP = 1747730518
+SHA256 (facebookincubator-fizz-v2025.05.19.00_GH0.tar.gz) = 83ce2e22c993cad1c5cbc5f3ee1aff4c44af99eeeb3dd3d539f1017a7af18647
+SIZE (facebookincubator-fizz-v2025.05.19.00_GH0.tar.gz) = 754906
diff --git a/security/keybase/Makefile b/security/keybase/Makefile
index 97d60dd331ba..69f918a63ca0 100644
--- a/security/keybase/Makefile
+++ b/security/keybase/Makefile
@@ -1,7 +1,6 @@
PORTNAME= keybase
-PORTVERSION= 6.4.0
+PORTVERSION= 6.5.1
DISTVERSIONPREFIX= v
-PORTREVISION= 2
CATEGORIES= security
MAINTAINER= sunpoet@FreeBSD.org
diff --git a/security/keybase/distinfo b/security/keybase/distinfo
index e30d5607aec4..7ed2b21dc196 100644
--- a/security/keybase/distinfo
+++ b/security/keybase/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1725559587
-SHA256 (go/security_keybase/keybase-client-v6.4.0_GH0/go.mod) = e8dd259a850c6e944039deb3a6e0692ef256748397f4a064661e35b6e1bd7ade
-SIZE (go/security_keybase/keybase-client-v6.4.0_GH0/go.mod) = 19073
-SHA256 (go/security_keybase/keybase-client-v6.4.0_GH0/keybase-client-v6.4.0_GH0.tar.gz) = 1fad98fd54c03400ea3ac421a6275867dfcbd2a20b0d2020d7021b769333cdea
-SIZE (go/security_keybase/keybase-client-v6.4.0_GH0/keybase-client-v6.4.0_GH0.tar.gz) = 53772765
+TIMESTAMP = 1747546434
+SHA256 (go/security_keybase/keybase-client-v6.5.1_GH0/go.mod) = a22fc2d20a8f4e6574303e505e0726e84954eb495b30e9ab6a58cc37d0072d44
+SIZE (go/security_keybase/keybase-client-v6.5.1_GH0/go.mod) = 19305
+SHA256 (go/security_keybase/keybase-client-v6.5.1_GH0/keybase-client-v6.5.1_GH0.tar.gz) = bdb5f86d787ff5c4b5c83ddfbe2ca634cbefec25ec5ab53681ab0d200de8f617
+SIZE (go/security_keybase/keybase-client-v6.5.1_GH0/keybase-client-v6.5.1_GH0.tar.gz) = 54141439
diff --git a/security/kf6-kdesu/distinfo b/security/kf6-kdesu/distinfo
index 3204c4e02723..5e596d710465 100644
--- a/security/kf6-kdesu/distinfo
+++ b/security/kf6-kdesu/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1743798879
-SHA256 (KDE/frameworks/6.13.0/kdesu-6.13.0.tar.xz) = 6be91eb21912bb2521f4e4f19267639c3bed33ab5dd09f79f279e2f94c380a62
-SIZE (KDE/frameworks/6.13.0/kdesu-6.13.0.tar.xz) = 56700
+TIMESTAMP = 1746358560
+SHA256 (KDE/frameworks/6.14/kdesu-6.14.0.tar.xz) = 103a06311c035445fd5884845c57369f07229239f9bbebe91cc95b7ce8c5ca23
+SIZE (KDE/frameworks/6.14/kdesu-6.14.0.tar.xz) = 56688
diff --git a/security/libfido2/Makefile b/security/libfido2/Makefile
index df04268c3626..3e9553448b09 100644
--- a/security/libfido2/Makefile
+++ b/security/libfido2/Makefile
@@ -1,5 +1,5 @@
PORTNAME= libfido2
-PORTVERSION= 1.15.0
+PORTVERSION= 1.16.0
CATEGORIES= security
MASTER_SITES= https://developers.yubico.com/libfido2/Releases/
diff --git a/security/libfido2/distinfo b/security/libfido2/distinfo
index aef50eb8538c..03ec7db8c9b8 100644
--- a/security/libfido2/distinfo
+++ b/security/libfido2/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1718580032
-SHA256 (libfido2-1.15.0.tar.gz) = abaab1318d21d262ece416fb8a7132fa9374bda89f6fa52b86a98a2f5712b61e
-SIZE (libfido2-1.15.0.tar.gz) = 670019
+TIMESTAMP = 1747546436
+SHA256 (libfido2-1.16.0.tar.gz) = 8c2b6fb279b5b42e9ac92ade71832e485852647b53607c43baaafbbcecea04e4
+SIZE (libfido2-1.16.0.tar.gz) = 683814
diff --git a/security/libfido2/pkg-plist b/security/libfido2/pkg-plist
index bd4649b63ce3..de8116bc4b62 100644
--- a/security/libfido2/pkg-plist
+++ b/security/libfido2/pkg-plist
@@ -151,6 +151,7 @@ libdata/pkgconfig/libfido2.pc
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_clientdata_hash_ptr.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_display_name.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_empty_exclude_list.html
+%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_entattest.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_exclude.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_flags.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_fmt.html
@@ -173,6 +174,7 @@ libdata/pkgconfig/libfido2.pc
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_set_blob.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_set_clientdata.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_set_clientdata_hash.html
+%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_set_entattest.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_set_extensions.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_set_fmt.html
%%PORTDOCS%%%%DOCSDIR%%/html/fido_cred_set_id.html
@@ -420,6 +422,7 @@ share/man/man3/fido_cred_clientdata_hash_len.3.gz
share/man/man3/fido_cred_clientdata_hash_ptr.3.gz
share/man/man3/fido_cred_display_name.3.gz
share/man/man3/fido_cred_empty_exclude_list.3.gz
+share/man/man3/fido_cred_entattest.3.gz
share/man/man3/fido_cred_exclude.3.gz
share/man/man3/fido_cred_flags.3.gz
share/man/man3/fido_cred_fmt.3.gz
@@ -442,6 +445,7 @@ share/man/man3/fido_cred_set_authdata_raw.3.gz
share/man/man3/fido_cred_set_blob.3.gz
share/man/man3/fido_cred_set_clientdata.3.gz
share/man/man3/fido_cred_set_clientdata_hash.3.gz
+share/man/man3/fido_cred_set_entattest.3.gz
share/man/man3/fido_cred_set_extensions.3.gz
share/man/man3/fido_cred_set_fmt.3.gz
share/man/man3/fido_cred_set_id.3.gz
diff --git a/security/openvpn-auth-oauth2/Makefile b/security/openvpn-auth-oauth2/Makefile
new file mode 100644
index 000000000000..c342db717442
--- /dev/null
+++ b/security/openvpn-auth-oauth2/Makefile
@@ -0,0 +1,27 @@
+PORTNAME= openvpn-auth-oauth2
+DISTVERSIONPREFIX= v
+DISTVERSION= 1.23.0
+CATEGORIES= security net net-vpn
+
+MAINTAINER= otis@FreeBSD.org
+COMMENT= Management client for OpenVPN that handles SSO authentication
+WWW= https://github.com/jkroepke/openvpn-auth-oauth2
+
+LICENSE= MIT
+LICENSE_FILE= ${WRKSRC}/LICENSE.txt
+
+EXTRACT_DEPENDS= ${BUILD_DEPENDS}
+
+USES= go:1.24,modules
+
+GO_MODULE= github.com/jkroepke/openvpn-auth-oauth2
+
+SUB_FILES= openvpn_auth_oauth2
+
+do-install:
+ ${INSTALL_PROGRAM} ${WRKDIR}/bin/openvpn-auth-oauth2 ${STAGEDIR}${PREFIX}/sbin
+ ${MKDIR} ${STAGEDIR}${ETCDIR}
+ ${INSTALL_DATA} ${WRKSRC}/config.example.yaml ${STAGEDIR}${ETCDIR}/openvpn-auth-oauth2.yml.sample
+ ${INSTALL_SCRIPT} ${WRKDIR}/openvpn_auth_oauth2 ${STAGEDIR}${PREFIX}/etc/rc.d
+
+.include <bsd.port.mk>
diff --git a/security/openvpn-auth-oauth2/distinfo b/security/openvpn-auth-oauth2/distinfo
new file mode 100644
index 000000000000..c69fcf7f3670
--- /dev/null
+++ b/security/openvpn-auth-oauth2/distinfo
@@ -0,0 +1,5 @@
+TIMESTAMP = 1747749448
+SHA256 (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.23.0/v1.23.0.mod) = 3cfe3d6fcb9c2dadd04584a4dee41a867c33b720a91127efaaa501fd11726f2b
+SIZE (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.23.0/v1.23.0.mod) = 1899
+SHA256 (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.23.0/v1.23.0.zip) = 984bf33860740e9d4f3896db38bfea064a2b21553c85c8c0ea98856933c64b71
+SIZE (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.23.0/v1.23.0.zip) = 1850633
diff --git a/security/openvpn-auth-oauth2/files/openvpn_auth_oauth2.in b/security/openvpn-auth-oauth2/files/openvpn_auth_oauth2.in
new file mode 100644
index 000000000000..40015f4a8e4a
--- /dev/null
+++ b/security/openvpn-auth-oauth2/files/openvpn_auth_oauth2.in
@@ -0,0 +1,148 @@
+#!/bin/sh
+
+# PROVIDE: openvpn_auth_oauth2
+# REQUIRE: FILESYSTEMS defaultroute netwait resolv
+# BEFORE: NETWORKING
+# KEYWORD: shutdown
+
+# Add the following line to /etc/rc.conf to enable openvpn_auth_oauth2:
+#
+# openvpn_auth_oauth2_enable="YES"
+#
+# You also can set alternative config with
+# openvpn_auth_oauth2_config="/path/to/config"
+#
+# Multiple profiles are supported with
+#
+# openvpn_auth_oauth2_profiles="name1 name2"
+# openvpn_auth_oauth2_name1_enable="YES"
+# openvpn_auth_oauth2_name1_config="/path/to/config1"
+# openvpn_auth_oauth2_name2_enable="YES"
+# openvpn_auth_oauth2_name2_config="/path/to/config2"
+#
+
+. /etc/rc.subr
+
+name=openvpn_auth_oauth2
+rcvar=openvpn_auth_oauth2_enable
+desc="Single sign-on for OpenVPN"
+
+eval ": \${${name}_enable:=\"NO\"}"
+eval ": \${${name}_config:=%%ETCDIR%%/openvpn-auth-oauth2.yml}"
+load_rc_config "${name}"
+
+_openvpn_auth_oauth2="%%PREFIX%%/sbin/openvpn-auth-oauth2"
+_common_daemon_args=-Sfc
+_piddir=/var/run/openvpn-auth-oauth2
+
+# Set PID file
+pidfile="${_piddir}/openvpn-auth-oauth2.pid"
+
+required_files=${openvpn_auth_oauth2_config}
+command=/usr/sbin/daemon
+command_args="${_common_daemon_args} -p ${pidfile} -t ${name} \
+${_openvpn_auth_oauth2} --config ${openvpn_auth_oauth2_config}"
+procname="${_openvpn_auth_oauth2}"
+extra_commands=reload
+reload_cmd=openvpn_auth_oauth2_reload
+start_precmd="[ -d ${_piddir} ] || /usr/bin/install -d ${_piddir}"
+
+openvpn_auth_oauth2_reload()
+{
+ if [ "x${openvpn_auth_oauth2_profiles}" != "x" -a "x$1" != "x" ]; then
+ for profile in ${openvpn_auth_oauth2_profiles}; do
+ eval _enable="\${openvpn_auth_oauth2_${profile}_enable}"
+ case "x${_enable:-${openvpn_auth_oauth2_enable}}" in
+ x|x[Nn][Oo]|x[Nn][Oo][Nn][Ee])
+ continue
+ ;;
+ x[Yy][Ee][Ss])
+ ;;
+ *)
+ if test -z "$_enable"; then
+ _var=openvpn_auth_oauth2_enable
+ else
+ _var=openvpn_auth_oauth2_"${profile}"_enable
+ fi
+ echo "Bad value" \
+ "'${_enable:-${openvpn_auth_oauth2_enable}}'" \
+ "for ${_var}. " \
+ "Profile ${profile} skipped."
+ continue
+ ;;
+ esac
+ echo "===> openvpn-auth-oauth2 profile: ${profile}"
+ pidfile="${_piddir}/openvpn-auth-oauth2-${profile}.pid"
+ kill -HUP `cat ${pidfile}`
+ retcode="$?"
+ if [ "0${retcode}" -ne 0 ]; then
+ failed="${profile} (${retcode}) ${failed:-}"
+ else
+ success="${profile} ${success:-}"
+ fi
+ done
+ exit 0
+ else
+ echo "===> openvpn-auth-outh2 profile ${profile} reloading"
+ kill -HUP `cat ${pidfile}`
+ fi
+}
+
+if [ -n "$2" ]; then
+ profile="$2"
+ if [ "x${openvpn_auth_oauth2_profiles}" != "x" ]; then
+ eval openvpn_auth_oauth2_config="\${openvpn_auth_oauth2_${profile}_config:-%%ETCDIR%%/openvpn-auth-oauth2-${profile}.yml}"
+ if [ "x${openvpn_auth_oauth2_config}" = "x" ]; then
+ echo "You must define a configuration file (openvpn_auth_oauth2_${profile}_config)"
+ exit 1
+ fi
+
+ pidfile="${_piddir}/openvpn-auth-oauth2-${profile}.pid"
+
+ [ -f ${pidfile} ] || /usr/bin/install /dev/null "${pidfile}"
+
+ required_files="${openvpn_auth_oauth2_config}"
+ eval openvpn_auth_oauth2_enable="\${openvpn_auth_oauth2_${profile}_enable:-${openvpn_auth_oauth2_enable}}"
+ command_args="${_common_daemon_args} -t ${name}-${profile} -p ${pidfile} \
+ ${_openvpn_auth_oauth2} \
+ --config ${openvpn_auth_oauth2_config}"
+ else
+ echo "$0: extra argument ignored"
+ fi
+else
+ if [ "x${openvpn_auth_oauth2_profiles}" != "x" -a "x$1" != "x" ]; then
+ for profile in ${openvpn_auth_oauth2_profiles}; do
+ eval _enable="\${openvpn_auth_oauth2_${profile}_enable}"
+ case "x${_enable:-${openvpn_auth_oauth2_enable}}" in
+ x|x[Nn][Oo]|x[Nn][Oo][Nn][Ee])
+ continue
+ ;;
+ x[Yy][Ee][Ss])
+ ;;
+ *)
+ if test -z "$_enable"; then
+ _var=openvpn_auth_oauth2_enable
+ else
+ _var=openvpn_auth_oauth2_"${profile}"_enable
+ fi
+ echo "Bad value" \
+ "'${_enable:-${openvpn_auth_oauth2_enable}}'" \
+ "for ${_var}. " \
+ "Profile ${profile} skipped."
+ continue
+ ;;
+ esac
+ echo "===> openvpn-auth-oauth2 profile: ${profile}"
+ %%PREFIX%%/etc/rc.d/openvpn_auth_oauth2 $1 ${profile}
+ retcode="$?"
+ if [ "0${retcode}" -ne 0 ]; then
+ failed="${profile} (${retcode}) ${failed:-}"
+ else
+ success="${profile} ${success:-}"
+ fi
+ done
+ exit 0
+ fi
+fi
+
+run_rc_command "$1"
diff --git a/security/openvpn-auth-oauth2/pkg-descr b/security/openvpn-auth-oauth2/pkg-descr
new file mode 100644
index 000000000000..52e575e966a1
--- /dev/null
+++ b/security/openvpn-auth-oauth2/pkg-descr
@@ -0,0 +1,15 @@
+openvpn-auth-oauth2 is a management client for OpenVPN that handles the single
+sign-on (SSO) authentication against various OIDC providers. This project aims
+to simplify the process of integrating OpenVPN with OIDC providers such as:
+
+- Microsoft Entra ID (Azure AD)
+- GitHub
+- Okta
+- Google Workspace
+- Zittal
+- Digitalocean
+- Keycloak
+- any other OIDC compatible auth server
+
+For comprehensive documentation, point the browser to:
+https://github.com/jkroepke/openvpn-auth-oauth2/wiki/Configuration
diff --git a/security/openvpn-auth-oauth2/pkg-plist b/security/openvpn-auth-oauth2/pkg-plist
new file mode 100644
index 000000000000..c96f261f8393
--- /dev/null
+++ b/security/openvpn-auth-oauth2/pkg-plist
@@ -0,0 +1,3 @@
+@sample %%ETCDIR%%/openvpn-auth-oauth2.yml.sample
+etc/rc.d/openvpn_auth_oauth2
+sbin/openvpn-auth-oauth2
diff --git a/security/py-asyncssh/Makefile b/security/py-asyncssh/Makefile
index 19a77ae69bd7..787379fb0a79 100644
--- a/security/py-asyncssh/Makefile
+++ b/security/py-asyncssh/Makefile
@@ -1,5 +1,5 @@
PORTNAME= asyncssh
-PORTVERSION= 2.20.0
+PORTVERSION= 2.21.0
CATEGORIES= security python
MASTER_SITES= PYPI
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
diff --git a/security/py-asyncssh/distinfo b/security/py-asyncssh/distinfo
index 47fd05b135e1..6f759f3fb528 100644
--- a/security/py-asyncssh/distinfo
+++ b/security/py-asyncssh/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1739962486
-SHA256 (asyncssh-2.20.0.tar.gz) = 020b6e384b2328ef8683908ad8e73de9ec2b9b62fd964571ea957bba98412983
-SIZE (asyncssh-2.20.0.tar.gz) = 534719
+TIMESTAMP = 1747546578
+SHA256 (asyncssh-2.21.0.tar.gz) = 450fe13bb8d86a8f4e7d7b5fafce7791181ca3e7c92e15bbc45dfb25866e48b3
+SIZE (asyncssh-2.21.0.tar.gz) = 539740
diff --git a/security/py-cryptography-vectors/Makefile b/security/py-cryptography-vectors/Makefile
index dbad90e9d84b..1b811611010d 100644
--- a/security/py-cryptography-vectors/Makefile
+++ b/security/py-cryptography-vectors/Makefile
@@ -1,5 +1,5 @@
PORTNAME= cryptography-vectors
-PORTVERSION= 44.0.2
+PORTVERSION= 44.0.3
CATEGORIES= security python
MASTER_SITES= PYPI
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
diff --git a/security/py-cryptography-vectors/distinfo b/security/py-cryptography-vectors/distinfo
index 8de445af558d..62001ecbbc3a 100644
--- a/security/py-cryptography-vectors/distinfo
+++ b/security/py-cryptography-vectors/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1745178090
-SHA256 (cryptography_vectors-44.0.2.tar.gz) = ab32e156b6e7eaf6d8c727a32245967dcce049487301482fca38c0c5fdc84e4b
-SIZE (cryptography_vectors-44.0.2.tar.gz) = 35318019
+TIMESTAMP = 1747546582
+SHA256 (cryptography_vectors-44.0.3.tar.gz) = 340e790dd7dbe81a0bbec128bfb4ab58e4e10081b05ecb24a8c69380909a3a4b
+SIZE (cryptography_vectors-44.0.3.tar.gz) = 35317973
diff --git a/security/py-cryptography/Makefile b/security/py-cryptography/Makefile
index ff31184f08b8..1616e7fc3244 100644
--- a/security/py-cryptography/Makefile
+++ b/security/py-cryptography/Makefile
@@ -1,5 +1,5 @@
PORTNAME= cryptography
-PORTVERSION= 44.0.2
+PORTVERSION= 44.0.3
PORTEPOCH= 1
CATEGORIES= security python
MASTER_SITES= PYPI
diff --git a/security/py-cryptography/Makefile.crates b/security/py-cryptography/Makefile.crates
index 5d10c57cfc85..5e0a864e16a8 100644
--- a/security/py-cryptography/Makefile.crates
+++ b/security/py-cryptography/Makefile.crates
@@ -2,34 +2,34 @@ CARGO_CRATES= asn1-0.20.0 \
asn1_derive-0.20.0 \
autocfg-1.4.0 \
base64-0.22.1 \
- bitflags-2.9.0 \
- cc-1.2.16 \
+ bitflags-2.9.1 \
+ cc-1.2.23 \
cfg-if-1.0.0 \
foreign-types-0.3.2 \
foreign-types-shared-0.1.1 \
heck-0.5.0 \
- indoc-2.0.5 \
- itoa-1.0.14 \
- libc-0.2.170 \
+ indoc-2.0.6 \
+ itoa-1.0.15 \
+ libc-0.2.172 \
memoffset-0.9.1 \
- once_cell-1.20.3 \
- openssl-0.10.71 \
+ once_cell-1.21.3 \
+ openssl-0.10.72 \
openssl-macros-0.1.1 \
- openssl-sys-0.9.106 \
+ openssl-sys-0.9.108 \
pem-3.0.5 \
- pkg-config-0.3.31 \
+ pkg-config-0.3.32 \
portable-atomic-1.11.0 \
- proc-macro2-1.0.93 \
+ proc-macro2-1.0.95 \
pyo3-0.23.5 \
pyo3-build-config-0.23.5 \
pyo3-ffi-0.23.5 \
pyo3-macros-0.23.5 \
pyo3-macros-backend-0.23.5 \
- quote-1.0.38 \
- self_cell-1.1.0 \
+ quote-1.0.40 \
+ self_cell-1.2.0 \
shlex-1.3.0 \
- syn-2.0.98 \
+ syn-2.0.101 \
target-lexicon-0.12.16 \
- unicode-ident-1.0.17 \
- unindent-0.2.3 \
+ unicode-ident-1.0.18 \
+ unindent-0.2.4 \
vcpkg-0.2.15
diff --git a/security/py-cryptography/distinfo b/security/py-cryptography/distinfo
index a9bd3ff7d327..82d3bbcbeb28 100644
--- a/security/py-cryptography/distinfo
+++ b/security/py-cryptography/distinfo
@@ -1,6 +1,6 @@
-TIMESTAMP = 1745178088
-SHA256 (cryptography-44.0.2.tar.gz) = c63454aa261a0cf0c5b4718349629793e9e634993538db841165b3df74f37ec0
-SIZE (cryptography-44.0.2.tar.gz) = 710807
+TIMESTAMP = 1747546580
+SHA256 (cryptography-44.0.3.tar.gz) = fe19d8bc5536a91a24a8133328880a41831b6c5df54599a8417b62fe015d3053
+SIZE (cryptography-44.0.3.tar.gz) = 711096
SHA256 (rust/crates/asn1-0.20.0.crate) = 2d8b84b4ea1de2bf1dcd2a759737ddb328fb6695b2a95eb7e44fed67e3406f32
SIZE (rust/crates/asn1-0.20.0.crate) = 39382
SHA256 (rust/crates/asn1_derive-0.20.0.crate) = a200809d0138620b3dba989f1d08d0620e76248bc1e62a2ec1b2df5eb1ee08ad
@@ -9,10 +9,10 @@ SHA256 (rust/crates/autocfg-1.4.0.crate) = ace50bade8e6234aa140d9a2f552bbee1db4d
SIZE (rust/crates/autocfg-1.4.0.crate) = 17712
SHA256 (rust/crates/base64-0.22.1.crate) = 72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6
SIZE (rust/crates/base64-0.22.1.crate) = 81597
-SHA256 (rust/crates/bitflags-2.9.0.crate) = 5c8214115b7bf84099f1309324e63141d4c5d7cc26862f97a0a857dbefe165bd
-SIZE (rust/crates/bitflags-2.9.0.crate) = 47654
-SHA256 (rust/crates/cc-1.2.16.crate) = be714c154be609ec7f5dad223a33bf1482fff90472de28f7362806e6d4832b8c
-SIZE (rust/crates/cc-1.2.16.crate) = 103847
+SHA256 (rust/crates/bitflags-2.9.1.crate) = 1b8e56985ec62d17e9c1001dc89c88ecd7dc08e47eba5ec7c29c7b5eeecde967
+SIZE (rust/crates/bitflags-2.9.1.crate) = 47913
+SHA256 (rust/crates/cc-1.2.23.crate) = 5f4ac86a9e5bc1e2b3449ab9d7d3a6a405e3d1bb28d7b9be8614f55846ae3766
+SIZE (rust/crates/cc-1.2.23.crate) = 106527
SHA256 (rust/crates/cfg-if-1.0.0.crate) = baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd
SIZE (rust/crates/cfg-if-1.0.0.crate) = 7934
SHA256 (rust/crates/foreign-types-0.3.2.crate) = f6f339eb8adc052cd2ca78910fda869aefa38d22d5cb648e6485e4d3fc06f3b1
@@ -21,30 +21,30 @@ SHA256 (rust/crates/foreign-types-shared-0.1.1.crate) = 00b0228411908ca8685dba7f
SIZE (rust/crates/foreign-types-shared-0.1.1.crate) = 5672
SHA256 (rust/crates/heck-0.5.0.crate) = 2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea
SIZE (rust/crates/heck-0.5.0.crate) = 11517
-SHA256 (rust/crates/indoc-2.0.5.crate) = b248f5224d1d606005e02c97f5aa4e88eeb230488bcc03bc9ca4d7991399f2b5
-SIZE (rust/crates/indoc-2.0.5.crate) = 14396
-SHA256 (rust/crates/itoa-1.0.14.crate) = d75a2a4b1b190afb6f5425f10f6a8f959d2ea0b9c2b1d79553551850539e4674
-SIZE (rust/crates/itoa-1.0.14.crate) = 11210
-SHA256 (rust/crates/libc-0.2.170.crate) = 875b3680cb2f8f71bdcf9a30f38d48282f5d3c95cbf9b3fa57269bb5d5c06828
-SIZE (rust/crates/libc-0.2.170.crate) = 760076
+SHA256 (rust/crates/indoc-2.0.6.crate) = f4c7245a08504955605670dbf141fceab975f15ca21570696aebe9d2e71576bd
+SIZE (rust/crates/indoc-2.0.6.crate) = 17164
+SHA256 (rust/crates/itoa-1.0.15.crate) = 4a5f13b858c8d314ee3e8f639011f7ccefe71f97f96e50151fb991f267928e2c
+SIZE (rust/crates/itoa-1.0.15.crate) = 11231
+SHA256 (rust/crates/libc-0.2.172.crate) = d750af042f7ef4f724306de029d18836c26c1765a54a6a3f094cbd23a7267ffa
+SIZE (rust/crates/libc-0.2.172.crate) = 791646
SHA256 (rust/crates/memoffset-0.9.1.crate) = 488016bfae457b036d996092f6cb448677611ce4449e970ceaf42695203f218a
SIZE (rust/crates/memoffset-0.9.1.crate) = 9032
-SHA256 (rust/crates/once_cell-1.20.3.crate) = 945462a4b81e43c4e3ba96bd7b49d834c6f61198356aa858733bc4acf3cbe62e
-SIZE (rust/crates/once_cell-1.20.3.crate) = 33456
-SHA256 (rust/crates/openssl-0.10.71.crate) = 5e14130c6a98cd258fdcb0fb6d744152343ff729cbfcb28c656a9d12b999fbcd
-SIZE (rust/crates/openssl-0.10.71.crate) = 281165
+SHA256 (rust/crates/once_cell-1.21.3.crate) = 42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d
+SIZE (rust/crates/once_cell-1.21.3.crate) = 34534
+SHA256 (rust/crates/openssl-0.10.72.crate) = fedfea7d58a1f73118430a55da6a286e7b044961736ce96a16a17068ea25e5da
+SIZE (rust/crates/openssl-0.10.72.crate) = 283852
SHA256 (rust/crates/openssl-macros-0.1.1.crate) = a948666b637a0f465e8564c73e89d4dde00d72d4d473cc972f390fc3dcee7d9c
SIZE (rust/crates/openssl-macros-0.1.1.crate) = 5601
-SHA256 (rust/crates/openssl-sys-0.9.106.crate) = 8bb61ea9811cc39e3c2069f40b8b8e2e70d8569b361f879786cc7ed48b777cdd
-SIZE (rust/crates/openssl-sys-0.9.106.crate) = 76230
+SHA256 (rust/crates/openssl-sys-0.9.108.crate) = e145e1651e858e820e4860f7b9c5e169bc1d8ce1c86043be79fa7b7634821847
+SIZE (rust/crates/openssl-sys-0.9.108.crate) = 78190
SHA256 (rust/crates/pem-3.0.5.crate) = 38af38e8470ac9dee3ce1bae1af9c1671fffc44ddfd8bd1d0a3445bf349a8ef3
SIZE (rust/crates/pem-3.0.5.crate) = 18140
-SHA256 (rust/crates/pkg-config-0.3.31.crate) = 953ec861398dccce10c670dfeaf3ec4911ca479e9c02154b3a215178c5f566f2
-SIZE (rust/crates/pkg-config-0.3.31.crate) = 20880
+SHA256 (rust/crates/pkg-config-0.3.32.crate) = 7edddbd0b52d732b21ad9a5fab5c704c14cd949e5e9a1ec5929a24fded1b904c
+SIZE (rust/crates/pkg-config-0.3.32.crate) = 21370
SHA256 (rust/crates/portable-atomic-1.11.0.crate) = 350e9b48cbc6b0e028b0473b114454c6316e57336ee184ceab6e53f72c178b3e
SIZE (rust/crates/portable-atomic-1.11.0.crate) = 181258
-SHA256 (rust/crates/proc-macro2-1.0.93.crate) = 60946a68e5f9d28b0dc1c21bb8a97ee7d018a8b322fa57838ba31cc878e22d99
-SIZE (rust/crates/proc-macro2-1.0.93.crate) = 52388
+SHA256 (rust/crates/proc-macro2-1.0.95.crate) = 02b3e5e68a3a1a02aad3ec490a98007cbc13c37cbe84a3cd7b8e406d76e7f778
+SIZE (rust/crates/proc-macro2-1.0.95.crate) = 51820
SHA256 (rust/crates/pyo3-0.23.5.crate) = 7778bffd85cf38175ac1f545509665d0b9b92a198ca7941f131f85f7a4f9a872
SIZE (rust/crates/pyo3-0.23.5.crate) = 1088533
SHA256 (rust/crates/pyo3-build-config-0.23.5.crate) = 94f6cbe86ef3bf18998d9df6e0f3fc1050a8c5efa409bf712e661a4366e010fb
@@ -55,19 +55,19 @@ SHA256 (rust/crates/pyo3-macros-0.23.5.crate) = fbc2201328f63c4710f68abdf653c89d
SIZE (rust/crates/pyo3-macros-0.23.5.crate) = 8856
SHA256 (rust/crates/pyo3-macros-backend-0.23.5.crate) = fca6726ad0f3da9c9de093d6f116a93c1a38e417ed73bf138472cf4064f72028
SIZE (rust/crates/pyo3-macros-backend-0.23.5.crate) = 70938
-SHA256 (rust/crates/quote-1.0.38.crate) = 0e4dccaaaf89514f546c693ddc140f729f958c247918a13380cccc6078391acc
-SIZE (rust/crates/quote-1.0.38.crate) = 31252
-SHA256 (rust/crates/self_cell-1.1.0.crate) = c2fdfc24bc566f839a2da4c4295b82db7d25a24253867d5c64355abb5799bdbe
-SIZE (rust/crates/self_cell-1.1.0.crate) = 16636
+SHA256 (rust/crates/quote-1.0.40.crate) = 1885c039570dc00dcb4ff087a89e185fd56bae234ddc7f056a945bf36467248d
+SIZE (rust/crates/quote-1.0.40.crate) = 31063
+SHA256 (rust/crates/self_cell-1.2.0.crate) = 0f7d95a54511e0c7be3f51e8867aa8cf35148d7b9445d44de2f943e2b206e749
+SIZE (rust/crates/self_cell-1.2.0.crate) = 16883
SHA256 (rust/crates/shlex-1.3.0.crate) = 0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64
SIZE (rust/crates/shlex-1.3.0.crate) = 18713
-SHA256 (rust/crates/syn-2.0.98.crate) = 36147f1a48ae0ec2b5b3bc5b537d267457555a10dc06f3dbc8cb11ba3006d3b1
-SIZE (rust/crates/syn-2.0.98.crate) = 297807
+SHA256 (rust/crates/syn-2.0.101.crate) = 8ce2b7fc941b3a24138a0a7cf8e858bfc6a992e7978a068a5c760deb0ed43caf
+SIZE (rust/crates/syn-2.0.101.crate) = 299250
SHA256 (rust/crates/target-lexicon-0.12.16.crate) = 61c41af27dd6d1e27b1b16b489db798443478cef1f06a660c96db617ba5de3b1
SIZE (rust/crates/target-lexicon-0.12.16.crate) = 26488
-SHA256 (rust/crates/unicode-ident-1.0.17.crate) = 00e2473a93778eb0bad35909dff6a10d28e63f792f16ed15e404fca9d5eeedbe
-SIZE (rust/crates/unicode-ident-1.0.17.crate) = 47704
-SHA256 (rust/crates/unindent-0.2.3.crate) = c7de7d73e1754487cb58364ee906a499937a0dfabd86bcb980fa99ec8c8fa2ce
-SIZE (rust/crates/unindent-0.2.3.crate) = 7306
+SHA256 (rust/crates/unicode-ident-1.0.18.crate) = 5a5f39404a5da50712a4c1eecf25e90dd62b613502b7e925fd4e4d19b5c96512
+SIZE (rust/crates/unicode-ident-1.0.18.crate) = 47743
+SHA256 (rust/crates/unindent-0.2.4.crate) = 7264e107f553ccae879d21fbea1d6724ac785e8c3bfc762137959b5802826ef3
+SIZE (rust/crates/unindent-0.2.4.crate) = 7422
SHA256 (rust/crates/vcpkg-0.2.15.crate) = accd4ea62f7bb7a82fe23066fb0957d48ef677f6eeb8215f372f52e48bb32426
SIZE (rust/crates/vcpkg-0.2.15.crate) = 228735
diff --git a/security/rubygem-devise-two-factor41-rails70/Makefile b/security/rubygem-devise-two-factor-rails-gitlab/Makefile
index dd5d7785d377..08aeabd039a9 100644
--- a/security/rubygem-devise-two-factor41-rails70/Makefile
+++ b/security/rubygem-devise-two-factor-rails-gitlab/Makefile
@@ -2,7 +2,7 @@ PORTNAME= devise-two-factor
PORTVERSION= 4.1.1
CATEGORIES= security rubygems
MASTER_SITES= RG
-PKGNAMESUFFIX= 41-rails70
+PKGNAMESUFFIX= -rails-gitlab
MAINTAINER= mfechner@FreeBSD.org
COMMENT= Barebones two-factor authentication with Devise
@@ -11,10 +11,10 @@ WWW= https://github.com/tinfoil/devise-two-factor
LICENSE= MIT
LICENSE_FILE= ${WRKSRC}/LICENSE
-RUN_DEPENDS= rubygem-activesupport70>=7.0<8:devel/rubygem-activesupport70 \
+RUN_DEPENDS= rubygem-activesupport-gitlab>=7.0<8:devel/rubygem-activesupport-gitlab \
rubygem-attr_encrypted3>=1.3<5:security/rubygem-attr_encrypted3 \
- rubygem-devise-rails70>=4.0<5:devel/rubygem-devise-rails70 \
- rubygem-railties70>=7.0<7.1:www/rubygem-railties70 \
+ rubygem-devise-rails-gitlab>=4.0<5:devel/rubygem-devise-rails-gitlab \
+ rubygem-railties-gitlab>=7.0<8:www/rubygem-railties-gitlab \
rubygem-rotp>=6.0<7:devel/rubygem-rotp
USES= gem
diff --git a/security/rubygem-devise-two-factor41-rails70/distinfo b/security/rubygem-devise-two-factor-rails-gitlab/distinfo
index 64da0593130d..64da0593130d 100644
--- a/security/rubygem-devise-two-factor41-rails70/distinfo
+++ b/security/rubygem-devise-two-factor-rails-gitlab/distinfo
diff --git a/security/rubygem-devise-two-factor41-rails70/pkg-descr b/security/rubygem-devise-two-factor-rails-gitlab/pkg-descr
index 316de9a9d77e..316de9a9d77e 100644
--- a/security/rubygem-devise-two-factor41-rails70/pkg-descr
+++ b/security/rubygem-devise-two-factor-rails-gitlab/pkg-descr
diff --git a/security/rubygem-doorkeeper-device_authorization_grant/Makefile b/security/rubygem-doorkeeper-device_authorization_grant/Makefile
index e19d18ce95f0..603ab9b5ec8f 100644
--- a/security/rubygem-doorkeeper-device_authorization_grant/Makefile
+++ b/security/rubygem-doorkeeper-device_authorization_grant/Makefile
@@ -1,5 +1,6 @@
PORTNAME= doorkeeper-device_authorization_grant
PORTVERSION= 1.0.3
+PORTREVISION= 1
CATEGORIES= security rubygems
MASTER_SITES= RG
@@ -10,7 +11,7 @@ WWW= https://github.com/exop-group/doorkeeper-device_authorization_grant
LICENSE= MIT
LICENSE_FILE= ${WRKSRC}/MIT-LICENSE
-RUN_DEPENDS= rubygem-doorkeeper-rails70>=5.5<6:security/rubygem-doorkeeper-rails70
+RUN_DEPENDS= rubygem-doorkeeper-rails-gitlab>=5.5<6:security/rubygem-doorkeeper-rails-gitlab
USES= gem
diff --git a/security/rubygem-doorkeeper-openid_connect/Makefile b/security/rubygem-doorkeeper-openid_connect/Makefile
index 2811d31b16f4..176de8383ac2 100644
--- a/security/rubygem-doorkeeper-openid_connect/Makefile
+++ b/security/rubygem-doorkeeper-openid_connect/Makefile
@@ -1,5 +1,6 @@
PORTNAME= doorkeeper-openid_connect
PORTVERSION= 1.8.11
+PORTREVISION= 1
CATEGORIES= security rubygems
MASTER_SITES= RG
@@ -10,7 +11,7 @@ WWW= https://github.com/doorkeeper-gem/doorkeeper-openid_connect
LICENSE= MIT
LICENSE_FILE= ${WRKSRC}/LICENSE.txt
-RUN_DEPENDS= rubygem-doorkeeper-rails70>=5.5<5.9:security/rubygem-doorkeeper-rails70 \
+RUN_DEPENDS= rubygem-doorkeeper-rails-gitlab>=5.5<5.9:security/rubygem-doorkeeper-rails-gitlab \
rubygem-jwt>=2.5:www/rubygem-jwt \
rubygem-ostruct>=0.5:devel/rubygem-ostruct
diff --git a/security/rubygem-doorkeeper-rails-gitlab/Makefile b/security/rubygem-doorkeeper-rails-gitlab/Makefile
new file mode 100644
index 000000000000..be88aa908092
--- /dev/null
+++ b/security/rubygem-doorkeeper-rails-gitlab/Makefile
@@ -0,0 +1,22 @@
+PORTNAME= doorkeeper
+PORTVERSION= 5.8.2
+CATEGORIES= security rubygems
+MASTER_SITES= RG
+PKGNAMESUFFIX= -rails-gitlab
+
+MAINTAINER= mfechner@FreeBSD.org
+COMMENT= OAuth2 provider for Rails and Grape
+WWW= https://github.com/doorkeeper-gem/doorkeeper
+
+LICENSE= MIT
+LICENSE_FILE= ${WRKSRC}/MIT-LICENSE
+
+RUN_DEPENDS= rubygem-railties-gitlab>=5:www/rubygem-railties-gitlab
+
+USES= cpe gem
+
+NO_ARCH= yes
+
+CPE_VENDOR= doorkeeper_project
+
+.include <bsd.port.mk>
diff --git a/security/rubygem-doorkeeper-rails-gitlab/distinfo b/security/rubygem-doorkeeper-rails-gitlab/distinfo
new file mode 100644
index 000000000000..af2ef874822e
--- /dev/null
+++ b/security/rubygem-doorkeeper-rails-gitlab/distinfo
@@ -0,0 +1,3 @@
+TIMESTAMP = 1744289466
+SHA256 (rubygem/doorkeeper-5.8.2.gem) = a73d07aeaf590b1e7e2a35390446f23131c9f37bc0561653e514d3973f4d50d3
+SIZE (rubygem/doorkeeper-5.8.2.gem) = 109056
diff --git a/security/rubygem-doorkeeper-rails-gitlab/pkg-descr b/security/rubygem-doorkeeper-rails-gitlab/pkg-descr
new file mode 100644
index 000000000000..ed39cf3f3049
--- /dev/null
+++ b/security/rubygem-doorkeeper-rails-gitlab/pkg-descr
@@ -0,0 +1,2 @@
+Doorkeeper is a Ruby gem that makes it easy to introduce OAuth 2
+provider functionality to a Rails or Grape application.
diff --git a/security/rubygem-ed25519/Makefile b/security/rubygem-ed25519/Makefile
index 62bd35fbeeab..1d62b63b0e2d 100644
--- a/security/rubygem-ed25519/Makefile
+++ b/security/rubygem-ed25519/Makefile
@@ -1,5 +1,5 @@
PORTNAME= ed25519
-PORTVERSION= 1.3.0
+PORTVERSION= 1.4.0
CATEGORIES= security rubygems
MASTER_SITES= RG
diff --git a/security/rubygem-ed25519/distinfo b/security/rubygem-ed25519/distinfo
index f89c23f69293..ff99d3ba2574 100644
--- a/security/rubygem-ed25519/distinfo
+++ b/security/rubygem-ed25519/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1643134001
-SHA256 (rubygem/ed25519-1.3.0.gem) = 514a5584f84d39daac568a17ec93a4e7261e140c52c562ed8c382c18456e627d
-SIZE (rubygem/ed25519-1.3.0.gem) = 182784
+TIMESTAMP = 1747310910
+SHA256 (rubygem/ed25519-1.4.0.gem) = 16e97f5198689a154247169f3453ef4cfd3f7a47481fde0ae33206cdfdcac506
+SIZE (rubygem/ed25519-1.4.0.gem) = 182272
diff --git a/security/rubygem-gitlab-cloud-connector/Makefile b/security/rubygem-gitlab-cloud-connector/Makefile
index 046d719fff89..9117ca0d6396 100644
--- a/security/rubygem-gitlab-cloud-connector/Makefile
+++ b/security/rubygem-gitlab-cloud-connector/Makefile
@@ -1,5 +1,5 @@
PORTNAME= gitlab-cloud-connector
-PORTVERSION= 1.8.0
+PORTVERSION= 1.13.0
CATEGORIES= security rubygems
MASTER_SITES= RG
@@ -10,7 +10,7 @@ WWW= https://gitlab.com/gitlab-org/cloud-connector/gitlab-cloud-connector
LICENSE= MIT
LICENSE_FILE= ${WRKSRC}/LICENSE
-RUN_DEPENDS= rubygem-activesupport70>=7.0<8:devel/rubygem-activesupport70 \
+RUN_DEPENDS= rubygem-activesupport-gitlab>=7.0<8:devel/rubygem-activesupport-gitlab \
rubygem-jwt29>=2.9.3<2.10:www/rubygem-jwt29
USES= gem
diff --git a/security/rubygem-gitlab-cloud-connector/distinfo b/security/rubygem-gitlab-cloud-connector/distinfo
index 02f2b018735a..58e5f408e7d6 100644
--- a/security/rubygem-gitlab-cloud-connector/distinfo
+++ b/security/rubygem-gitlab-cloud-connector/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1744780700
-SHA256 (rubygem/gitlab-cloud-connector-1.8.0.gem) = d222643e5c0858e453bdce44f04e3ccb58809c2c1c4ab4507648b0aab4b315da
-SIZE (rubygem/gitlab-cloud-connector-1.8.0.gem) = 17408
+TIMESTAMP = 1747311060
+SHA256 (rubygem/gitlab-cloud-connector-1.13.0.gem) = c2b0bcd1bc775208825a119ad0c8b8e2f6eac6c762e9514f8026d63ace9086e8
+SIZE (rubygem/gitlab-cloud-connector-1.13.0.gem) = 17920
diff --git a/security/rubygem-signet/Makefile b/security/rubygem-signet/Makefile
index 8dc28f63badc..b893b776ed00 100644
--- a/security/rubygem-signet/Makefile
+++ b/security/rubygem-signet/Makefile
@@ -1,5 +1,5 @@
PORTNAME= signet
-PORTVERSION= 0.19.0
+PORTVERSION= 0.20.0
CATEGORIES= security rubygems
MASTER_SITES= RG
diff --git a/security/rubygem-signet/distinfo b/security/rubygem-signet/distinfo
index a54077e9930e..9149e7a21965 100644
--- a/security/rubygem-signet/distinfo
+++ b/security/rubygem-signet/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1708450566
-SHA256 (rubygem/signet-0.19.0.gem) = 537f3939f57f141f691e6069a97ec40f34fadafc4c7e5ba94edb06cf4350dd31
-SIZE (rubygem/signet-0.19.0.gem) = 35840
+TIMESTAMP = 1747547520
+SHA256 (rubygem/signet-0.20.0.gem) = bc660e2a6062311348cd35ec1ffafde1c5e2231213e1ca124f57aa4f59ec47a3
+SIZE (rubygem/signet-0.20.0.gem) = 35840
diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml
index 10fce3138813..be35bf612e67 100644
--- a/security/vuxml/vuln/2025.xml
+++ b/security/vuxml/vuln/2025.xml
@@ -1,3 +1,36 @@
+ <vuln vid="07560111-34cc-11f0-af94-b42e991fc52e">
+ <topic>firefox -- out-of-bounds read/write</topic>
+ <affects>
+ <package>
+ <name>firefox</name>
+ <range><lt>138.0.4,2</lt></range>
+ </package>
+ <package>
+ <name>firefox-esr</name>
+ <range><lt>128.10.1</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>security@mozilla.org reports:</p>
+ <blockquote cite="https://bugzilla.mozilla.org/show_bug.cgi?id=1966614">
+ <p>An attacker was able to perform an out-of-bounds read or
+ write on a JavaScript object by confusing array index sizes.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2025-4918</cvename>
+ <url>https://nvd.nist.gov/vuln/detail/CVE-2025-4918</url>
+ <cvename>CVE-2025-4919</cvename>
+ <url>https://nvd.nist.gov/vuln/detail/CVE-2025-4919</url>
+ </references>
+ <dates>
+ <discovery>2025-05-17</discovery>
+ <entry>2025-05-19</entry>
+ </dates>
+ </vuln>
+
<vuln vid="46594aa3-32f7-11f0-a116-8447094a420f">
<topic>WeeChat -- Multiple vulnerabilities</topic>
<affects>