summaryrefslogtreecommitdiff
path: root/security
diff options
context:
space:
mode:
Diffstat (limited to 'security')
-rw-r--r--security/2fa/Makefile2
-rw-r--r--security/amavisd-new/Makefile4
-rw-r--r--security/amavisd-new/distinfo6
-rw-r--r--security/aws-vault/Makefile2
-rw-r--r--security/caldera/Makefile4
-rw-r--r--security/cosign/Makefile5
-rw-r--r--security/cosign/distinfo10
-rw-r--r--security/crowdsec/Makefile5
-rw-r--r--security/crowdsec/distinfo10
-rw-r--r--security/cyrus-sasl2-saslauthd/Makefile9
-rw-r--r--security/fragroute/Makefile2
-rw-r--r--security/gvmd/Makefile4
-rw-r--r--security/lego/Makefile2
-rw-r--r--security/lego/distinfo10
-rw-r--r--security/nss/Makefile2
-rw-r--r--security/nss/distinfo6
-rw-r--r--security/nss/files/patch-bug197310523
-rw-r--r--security/openfortivpn/Makefile2
-rw-r--r--security/openvpn-auth-oauth2/Makefile3
-rw-r--r--security/openvpn-auth-oauth2/distinfo10
-rw-r--r--security/osv-scanner/Makefile12
-rw-r--r--security/osv-scanner/distinfo10
-rw-r--r--security/osv-scanner/files/patch-internal_sourceanalysis_go.go8
-rw-r--r--security/py-bitbox02/Makefile3
-rw-r--r--security/py-bitbox02/distinfo6
-rw-r--r--security/py-cybox/Makefile4
-rw-r--r--security/py-maec/Makefile4
-rw-r--r--security/py-mixbox/Makefile4
-rw-r--r--security/py-ospd-openvas/Makefile3
-rw-r--r--security/py-pykeepass/Makefile3
-rw-r--r--security/py-python-cas/Makefile4
-rw-r--r--security/py-python3-saml/Makefile3
-rw-r--r--security/py-stix/Makefile4
-rw-r--r--security/rats/Makefile2
-rw-r--r--security/rubygem-acme-client-gitlab/Makefile3
-rw-r--r--security/rubygem-acme-client-gitlab/distinfo6
-rw-r--r--security/rubygem-gitlab-cloud-connector/Makefile2
-rw-r--r--security/rubygem-gitlab-cloud-connector/distinfo6
-rw-r--r--security/secure_delete/Makefile2
-rw-r--r--security/smurflog/Makefile2
-rw-r--r--security/sqlninja/Makefile4
-rw-r--r--security/ssss/Makefile2
-rw-r--r--security/step-certificates/Makefile3
-rw-r--r--security/step-certificates/distinfo10
-rw-r--r--security/step-cli/Makefile3
-rw-r--r--security/step-cli/distinfo10
-rw-r--r--security/sudo-rs/Makefile20
-rw-r--r--security/sudo-rs/distinfo10
-rw-r--r--security/tscli/Makefile5
-rw-r--r--security/tscli/distinfo10
-rw-r--r--security/vuxml/vuln/2025.xml77
-rw-r--r--security/wipe/Makefile2
-rw-r--r--security/xray-core/Makefile11
-rw-r--r--security/xray-core/distinfo18
54 files changed, 215 insertions, 182 deletions
diff --git a/security/2fa/Makefile b/security/2fa/Makefile
index 7d3c32d7cb6d..9f4f42346567 100644
--- a/security/2fa/Makefile
+++ b/security/2fa/Makefile
@@ -4,7 +4,7 @@ DISTVERSION= 1.2.0
PORTREVISION= 28
CATEGORIES= security
-MAINTAINER= ports@FreeBSD.org
+MAINTAINER= mauroeldritch@gmail.com
COMMENT= Two-factor authentication on the command line
WWW= https://github.com/rsc/2fa
diff --git a/security/amavisd-new/Makefile b/security/amavisd-new/Makefile
index 698c96f64b45..7a01601fa668 100644
--- a/security/amavisd-new/Makefile
+++ b/security/amavisd-new/Makefile
@@ -1,5 +1,5 @@
PORTNAME= amavisd-new
-DISTVERSION= 2.13.1
+DISTVERSION= 2.14.0
PORTEPOCH= 1
CATEGORIES= security
@@ -23,7 +23,7 @@ USE_PERL5= run
USE_GITLAB= yes
GL_ACCOUNT= amavis
GL_PROJECT= amavis
-GL_TAGNAME= cdd11b069e20a4cb99960614ca9c3eb385d4e200
+GL_TAGNAME= fc0e86edb3fd4fb779e4e906fb1cc61fdf7e6e7f
SHEBANG_FILES= bin/amavisd bin/amavisd-agent bin/amavisd-nanny \
bin/amavisd-release bin/amavisd-snmp-subagent \
diff --git a/security/amavisd-new/distinfo b/security/amavisd-new/distinfo
index 109ac9ef9616..3cde9f37a62e 100644
--- a/security/amavisd-new/distinfo
+++ b/security/amavisd-new/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1747417723
-SHA256 (amavis-amavis-cdd11b069e20a4cb99960614ca9c3eb385d4e200_GL0.tar.gz) = beebeaa0bbdd6d59301d5e140f0d71f716588e6e3fcfe73a26594ff1f2c7704c
-SIZE (amavis-amavis-cdd11b069e20a4cb99960614ca9c3eb385d4e200_GL0.tar.gz) = 1132629
+TIMESTAMP = 1752691896
+SHA256 (amavis-amavis-fc0e86edb3fd4fb779e4e906fb1cc61fdf7e6e7f_GL0.tar.gz) = bd722b9096b52d383efcf6b3f91a75399c08973a396e6e27da6efa9733555ef3
+SIZE (amavis-amavis-fc0e86edb3fd4fb779e4e906fb1cc61fdf7e6e7f_GL0.tar.gz) = 1136776
diff --git a/security/aws-vault/Makefile b/security/aws-vault/Makefile
index fadd02c5fae6..60215a8b20f2 100644
--- a/security/aws-vault/Makefile
+++ b/security/aws-vault/Makefile
@@ -4,7 +4,7 @@ DISTVERSION= 6.6.2
PORTREVISION= 19
CATEGORIES= security
-MAINTAINER= ports@FreeBSD.org
+MAINTAINER= mauroeldritch@gmail.com
COMMENT= Vault for securely storing and accessing AWS credentials
WWW= https://github.com/99designs/aws-vault
diff --git a/security/caldera/Makefile b/security/caldera/Makefile
index ac4548a93b75..8fd14526775c 100644
--- a/security/caldera/Makefile
+++ b/security/caldera/Makefile
@@ -1,6 +1,6 @@
PORTNAME= caldera
DISTVERSION= 5.3.0
-PORTREVISION= 2
+PORTREVISION= 3
CATEGORIES= security python
MAINTAINER= acm@FreeBSD.org
@@ -33,7 +33,7 @@ RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}aiohttp>0:www/py-aiohttp@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}donut-shellcode>0:devel/py-donut-shellcode@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}marshmallow-enum>0:devel/py-marshmallow-enum@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}ldap3>0:net/py-ldap3@${PY_FLAVOR} \
- ${PYTHON_PKGNAMEPREFIX}lxml>0:devel/py-lxml@${PY_FLAVOR} \
+ ${PYTHON_PKGNAMEPREFIX}lxml5>0:devel/py-lxml5@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}reportlab>0:print/py-reportlab@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}svglib>0:converters/py-svglib@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}markdown>0:textproc/py-markdown@${PY_FLAVOR} \
diff --git a/security/cosign/Makefile b/security/cosign/Makefile
index 6ea8e79ac6f6..ae77371b9728 100644
--- a/security/cosign/Makefile
+++ b/security/cosign/Makefile
@@ -1,7 +1,6 @@
PORTNAME= cosign
DISTVERSIONPREFIX= v
-DISTVERSION= 2.5.2
-PORTREVISION= 1
+DISTVERSION= 2.5.3
CATEGORIES= security
MAINTAINER= bofh@FreeBSD.org
@@ -24,7 +23,7 @@ GO_BUILDFLAGS= -ldflags="-buildid= \
PLIST_FILES= bin/${PORTNAME}
-GIT_HASH= af5a988bb15a03919ccaac7a2ddcad7a9d006f38
+GIT_HASH= 488ef8ceed5ab5d77379e9077a124a0d0df41d06
.include <bsd.port.pre.mk>
diff --git a/security/cosign/distinfo b/security/cosign/distinfo
index 621a1398dec8..162267863be7 100644
--- a/security/cosign/distinfo
+++ b/security/cosign/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1751444102
-SHA256 (go/security_cosign/cosign-v2.5.2/v2.5.2.mod) = 5bc5ad2f641929f53eeb4fcec33fba55b78a51cf707f53f74feae8a0e7ad0bae
-SIZE (go/security_cosign/cosign-v2.5.2/v2.5.2.mod) = 15326
-SHA256 (go/security_cosign/cosign-v2.5.2/v2.5.2.zip) = 91f0aebf97ae40581273a4e44fad958ce7ff02dd232663f9fffd074596efa82e
-SIZE (go/security_cosign/cosign-v2.5.2/v2.5.2.zip) = 1274354
+TIMESTAMP = 1752874321
+SHA256 (go/security_cosign/cosign-v2.5.3/v2.5.3.mod) = 3d3e90c2ad6b9f1dc45c9f83c5408d4296d80ae3728998504d9d3e077dd19afe
+SIZE (go/security_cosign/cosign-v2.5.3/v2.5.3.mod) = 16693
+SHA256 (go/security_cosign/cosign-v2.5.3/v2.5.3.zip) = e0158a5721ba7c8e2b775af499c07d89957ae42177a1794c8382e1e91901b531
+SIZE (go/security_cosign/cosign-v2.5.3/v2.5.3.zip) = 1335557
diff --git a/security/crowdsec/Makefile b/security/crowdsec/Makefile
index e2ad67f55638..9e78e2e9f9a4 100644
--- a/security/crowdsec/Makefile
+++ b/security/crowdsec/Makefile
@@ -1,7 +1,6 @@
PORTNAME= crowdsec
DISTVERSIONPREFIX= v
-DISTVERSION= 1.6.9
-PORTREVISION= 1
+DISTVERSION= 1.6.10
CATEGORIES= security
MAINTAINER= marco@crowdsec.net
@@ -15,7 +14,7 @@ LIB_DEPENDS= libabsl_base.so:devel/abseil \
libre2.so:devel/re2
USES= go:modules pkgconfig
-_COMMIT= 40b8cfe6
+_COMMIT= 79870769
_BUILD_DATE= $$(date -u "+%F_%T")
USE_RC_SUBR= crowdsec
diff --git a/security/crowdsec/distinfo b/security/crowdsec/distinfo
index aae70fd870b6..27803f8b958a 100644
--- a/security/crowdsec/distinfo
+++ b/security/crowdsec/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1750243893
-SHA256 (go/security_crowdsec/crowdsec-v1.6.9/v1.6.9.mod) = 75ab181433766799f3b54e5e9bb6634c8075e310ec3192a8ae31492ad54f1376
-SIZE (go/security_crowdsec/crowdsec-v1.6.9/v1.6.9.mod) = 10924
-SHA256 (go/security_crowdsec/crowdsec-v1.6.9/v1.6.9.zip) = 3f65b6dc339357172eb2b130ad8c4a1842557d317e05730227abf4f703da5d01
-SIZE (go/security_crowdsec/crowdsec-v1.6.9/v1.6.9.zip) = 1767818
+TIMESTAMP = 1752763731
+SHA256 (go/security_crowdsec/crowdsec-v1.6.10/v1.6.10.mod) = e02f57949b178e642aebe6d7d751494c9b9d8d3b3c6cdad66cf1db17ae1d584a
+SIZE (go/security_crowdsec/crowdsec-v1.6.10/v1.6.10.mod) = 10836
+SHA256 (go/security_crowdsec/crowdsec-v1.6.10/v1.6.10.zip) = 67b2de6ea0adacfdd9f673464f9e5dd6b71aa6d71c11c06073130507badc4c27
+SIZE (go/security_crowdsec/crowdsec-v1.6.10/v1.6.10.zip) = 1779682
diff --git a/security/cyrus-sasl2-saslauthd/Makefile b/security/cyrus-sasl2-saslauthd/Makefile
index 6c922264b12d..41c6027c54d7 100644
--- a/security/cyrus-sasl2-saslauthd/Makefile
+++ b/security/cyrus-sasl2-saslauthd/Makefile
@@ -1,4 +1,4 @@
-PORTREVISION= 2
+PORTREVISION= 3
PKGNAMESUFFIX= -saslauthd
COMMENT= SASL authentication server for cyrus-sasl2
@@ -53,7 +53,12 @@ OPTIONS_DEFAULT+= GSSAPI_BASE
OPTIONS_RADIO_GSSAPI+= GSSAPI_HEIMDAL GSSAPI_MIT
GSSAPI_BASE_USES= gssapi:base
GSSAPI_BASE_CONFIGURE_ON= --enable-gssapi="${GSSAPIBASEDIR}" \
- --with-gss_impl=heimdal
+
+.if exists(/usr/libexec/krb5kdc)
+GSSAPI_BASE_CONFIGURE_ON+= --with-gss_impl=mit
+.else
+GSSAPI_BASE_CONFIGURE_ON+= --with-gss_impl=heimdal
+.endif
GSSAPI_HEIMDAL_USES= gssapi:heimdal,flags
GSSAPI_HEIMDAL_CONFIGURE_ON= --enable-gssapi="${GSSAPIBASEDIR}" \
--with-gss_impl=heimdal
diff --git a/security/fragroute/Makefile b/security/fragroute/Makefile
index f3aaba1e5e3d..5d02041d419c 100644
--- a/security/fragroute/Makefile
+++ b/security/fragroute/Makefile
@@ -5,7 +5,7 @@ CATEGORIES= security net
MASTER_SITES= http://monkey.org/~dugsong/fragroute/ \
PACKETSTORM/UNIX/security
-MAINTAINER= ports@FreeBSD.org
+MAINTAINER= mauroeldritch@gmail.com
COMMENT= Tool for intercepting, modifying, and rewriting egress traffic
WWW= https://www.monkey.org/~dugsong/fragroute/
diff --git a/security/gvmd/Makefile b/security/gvmd/Makefile
index 0648b0880e09..0e719b8bddbb 100644
--- a/security/gvmd/Makefile
+++ b/security/gvmd/Makefile
@@ -1,6 +1,6 @@
PORTNAME= gvmd
DISTVERSION= 26.0.0
-PORTREVISION= 1
+PORTREVISION= 2
DISTVERSIONPREFIX= v
CATEGORIES= security
@@ -15,7 +15,7 @@ LIB_DEPENDS= libgvm_base.so:security/gvm-libs \
libgnutls.so:security/gnutls \
libgpgme.so:security/gpgme \
libical.so:devel/libical
-RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}lxml>0:devel/py-lxml@${PY_FLAVOR} \
+RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}lxml5>0:devel/py-lxml5@${PY_FLAVOR} \
${LOCALBASE}/lib/postgresql/libpg-gvm.so:databases/pg-gvm \
doxygen>0:devel/doxygen \
p5-XML-Twig>=0:textproc/p5-XML-Twig \
diff --git a/security/lego/Makefile b/security/lego/Makefile
index f10952e5b645..e2b6deead144 100644
--- a/security/lego/Makefile
+++ b/security/lego/Makefile
@@ -1,6 +1,6 @@
PORTNAME= lego
DISTVERSIONPREFIX= v
-DISTVERSION= 4.23.1
+DISTVERSION= 4.24.0
CATEGORIES= security
MAINTAINER= matt@matthoran.com
diff --git a/security/lego/distinfo b/security/lego/distinfo
index a001c40416e0..ee445fe960dc 100644
--- a/security/lego/distinfo
+++ b/security/lego/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1744909990
-SHA256 (go/security_lego/lego-v4.23.1/v4.23.1.mod) = fbe813f20f296ae07f773c7173d0e32b698990fb403d0c83dca3dc9ca34eacd7
-SIZE (go/security_lego/lego-v4.23.1/v4.23.1.mod) = 10512
-SHA256 (go/security_lego/lego-v4.23.1/v4.23.1.zip) = 7e6b351fe919e632aa1d5acc8a544d1549e8641391eaed58774998d2cbb4f845
-SIZE (go/security_lego/lego-v4.23.1/v4.23.1.zip) = 1461472
+TIMESTAMP = 1752932681
+SHA256 (go/security_lego/lego-v4.24.0/v4.24.0.mod) = 4ee2e188492702303c89e3703b26d3cbb10cbdde9ff002e4e8f842f15b81763f
+SIZE (go/security_lego/lego-v4.24.0/v4.24.0.mod) = 11037
+SHA256 (go/security_lego/lego-v4.24.0/v4.24.0.zip) = f6a58c88e80aa6d4ffb8eba3b4fd313bba2b3ed3a3b1bbfd23b33fad1bbe7642
+SIZE (go/security_lego/lego-v4.24.0/v4.24.0.zip) = 1502515
diff --git a/security/nss/Makefile b/security/nss/Makefile
index b99ebcb77547..f8c7e5630703 100644
--- a/security/nss/Makefile
+++ b/security/nss/Makefile
@@ -1,5 +1,5 @@
PORTNAME= nss
-PORTVERSION= 3.113.1
+PORTVERSION= 3.114
CATEGORIES= security
MASTER_SITES= MOZILLA/security/${PORTNAME}/releases/${DISTNAME:tu:C/[-.]/_/g}_RTM/src
diff --git a/security/nss/distinfo b/security/nss/distinfo
index fe38e674c30a..df00638ab54d 100644
--- a/security/nss/distinfo
+++ b/security/nss/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1751391207
-SHA256 (nss-3.113.1.tar.gz) = b8c586cc0ac60b76477f62483f664f119c26000a8189dd9ef417df7dbd33a2cc
-SIZE (nss-3.113.1.tar.gz) = 76626220
+TIMESTAMP = 1752847969
+SHA256 (nss-3.114.tar.gz) = cac3c0d67028804fb316e9695f81749fa4dc118e731d674b4c4c347bd849c2f1
+SIZE (nss-3.114.tar.gz) = 76653541
diff --git a/security/nss/files/patch-bug1973105 b/security/nss/files/patch-bug1973105
deleted file mode 100644
index ef2eea831b0d..000000000000
--- a/security/nss/files/patch-bug1973105
+++ /dev/null
@@ -1,23 +0,0 @@
-commit 98cb80c5fba9550451f6df711a2ae460608acd5e
-Author: Christoph Moench-Tegeder <cmt@burggraben.net>
-
- Bug 1973105 - remove out-of-function semicolon, r=rrelyea
-
- given the right flags, consumers of nss may fail with
- : /usr/local/include/nss/pkcs11n.h:633:92: error: extra ';' outside of a function [-Werror,-Wextra-semi]
-
- Differential Revision: https://phabricator.services.mozilla.com/D254438
-
-diff --git lib/util/pkcs11n.h lib/util/pkcs11n.h
-index cba3f63ae..9365d697a 100644
---- lib/util/pkcs11n.h
-+++ lib/util/pkcs11n.h
-@@ -630,7 +630,7 @@ _NSS_DEPRECATE_DEFINE_TYPE(CK_TRUST, CKT_NSS_VALID,
- #define CKT_NSS_VALID \
- _NSS_DEPRECATE_DEFINE_VALUE(CKT_NSS_VALID, CKT_NSS_NOT_TRUSTED)
- _NSS_DEPRECATE_DEFINE_TYPE(CK_TRUST, CKT_NSS_MUST_VERIFY,
-- "CKT_NSS_MUST_VERIFY really functions as CKT_NSS_TRUST_UNKNOWN");
-+ "CKT_NSS_MUST_VERIFY really functions as CKT_NSS_TRUST_UNKNOWN")
- #define CKT_NSS_MUST_VERIFY \
- _NSS_DEPRECATE_DEFINE_VALUE(CKT_NSS_MUST_VERIFY, CKT_NSS_TRUST_UNKNOWN)
-
diff --git a/security/openfortivpn/Makefile b/security/openfortivpn/Makefile
index e9f4da01f83b..0e94e48435c8 100644
--- a/security/openfortivpn/Makefile
+++ b/security/openfortivpn/Makefile
@@ -19,7 +19,7 @@ GH_ACCOUNT= adrienverge
GNU_CONFIGURE= yes
CONFIGURE_ENV= ac_cv_path_SED=${LOCALBASE}/bin/gsed \
- OPENSSL_CFLAGS=${OPENSSLINC} \
+ OPENSSL_CFLAGS=-I${OPENSSLINC} \
OPENSSL_LIBS="-L${OPENSSLLIB} -lssl -lcrypto" \
ac_cv_header_net_route_h=yes
diff --git a/security/openvpn-auth-oauth2/Makefile b/security/openvpn-auth-oauth2/Makefile
index 7856f7faa59a..a9d82abdcb09 100644
--- a/security/openvpn-auth-oauth2/Makefile
+++ b/security/openvpn-auth-oauth2/Makefile
@@ -1,7 +1,6 @@
PORTNAME= openvpn-auth-oauth2
DISTVERSIONPREFIX= v
-DISTVERSION= 1.24.0
-PORTREVISION= 1
+DISTVERSION= 1.24.1
CATEGORIES= security net net-vpn
MAINTAINER= otis@FreeBSD.org
diff --git a/security/openvpn-auth-oauth2/distinfo b/security/openvpn-auth-oauth2/distinfo
index 65bdf59a48f1..bf0f18a8f81b 100644
--- a/security/openvpn-auth-oauth2/distinfo
+++ b/security/openvpn-auth-oauth2/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1750538779
-SHA256 (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.0/v1.24.0.mod) = cf3d2994878a3a111e074a20790a0601c70c68202c2a54702aa09fb62dd5d9dd
-SIZE (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.0/v1.24.0.mod) = 1329
-SHA256 (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.0/v1.24.0.zip) = bb420b79a1ca9fc94ecc859c0663eb00b6672ee9aacfad0367c319954f1b047e
-SIZE (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.0/v1.24.0.zip) = 1869608
+TIMESTAMP = 1752923767
+SHA256 (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.1/v1.24.1.mod) = 7d3079b58c7a71ba2ef004c3f19ab7a5a0c48a131e6ae65f353ad2670bb5b090
+SIZE (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.1/v1.24.1.mod) = 1370
+SHA256 (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.1/v1.24.1.zip) = 642cd0ec8b057bfad179541b1920f848c16458cebb1821f334b27e89617695ff
+SIZE (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.1/v1.24.1.zip) = 1873530
diff --git a/security/osv-scanner/Makefile b/security/osv-scanner/Makefile
index 0ce2d86f5e6c..5848bced8ba3 100644
--- a/security/osv-scanner/Makefile
+++ b/security/osv-scanner/Makefile
@@ -1,23 +1,23 @@
PORTNAME= osv-scanner
DISTVERSIONPREFIX= v
-DISTVERSION= 1.9.2
-PORTREVISION= 3
+DISTVERSION= 2.1.0
+PORTREVISION= 1
CATEGORIES= security
-MAINTAINER= lcook@FreeBSD.org
+MAINTAINER= dutra@FreeBSD.org
COMMENT= Vulnerability scanner written in Go which uses the OSV database
WWW= https://github.com/google/osv-scanner
LICENSE= APACHE20
LICENSE_FILE= ${WRKSRC}/LICENSE
-USES= go:1.23,modules
+USES= go:1.24,modules,run
_BUILD_VERSION= ${DISTVERSION}
-_BUILD_COMMIT= 1e295ee
+_BUILD_COMMIT= 9267fda
_BUILD_DATE= $$(date +%Y-%m-%d)
-GO_MODULE= github.com/google/${PORTNAME}
+GO_MODULE= github.com/google/${PORTNAME}/v2
GO_TARGET= ./cmd/${PORTNAME}
GO_BUILDFLAGS= -ldflags "\
-s -w \
diff --git a/security/osv-scanner/distinfo b/security/osv-scanner/distinfo
index a27f12229bee..0bb9d35b4b24 100644
--- a/security/osv-scanner/distinfo
+++ b/security/osv-scanner/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1738079186
-SHA256 (go/security_osv-scanner/osv-scanner-v1.9.2/v1.9.2.mod) = 705bf3761bf62eb440e7b3900383d7d3ceee6e20eb412e69831fa5cdbf74b096
-SIZE (go/security_osv-scanner/osv-scanner-v1.9.2/v1.9.2.mod) = 5010
-SHA256 (go/security_osv-scanner/osv-scanner-v1.9.2/v1.9.2.zip) = 395023fb51425d49745e49d970bd05e39d12473916018d50d4ddd2175514c8b6
-SIZE (go/security_osv-scanner/osv-scanner-v1.9.2/v1.9.2.zip) = 7506952
+TIMESTAMP = 1752902973
+SHA256 (go/security_osv-scanner/osv-scanner-v2.1.0/v2.1.0.mod) = 47c1c8a3532bdbc1d13ec28192a526fcd369cc0d1ef66183da43912d0e5187a0
+SIZE (go/security_osv-scanner/osv-scanner-v2.1.0/v2.1.0.mod) = 9478
+SHA256 (go/security_osv-scanner/osv-scanner-v2.1.0/v2.1.0.zip) = 26944055bd68077d904d55d8d9b59cde9d4c4273beb2687a2a283ba1ed67e759
+SIZE (go/security_osv-scanner/osv-scanner-v2.1.0/v2.1.0.zip) = 5197089
diff --git a/security/osv-scanner/files/patch-internal_sourceanalysis_go.go b/security/osv-scanner/files/patch-internal_sourceanalysis_go.go
index c1bbfd93f555..04a027230126 100644
--- a/security/osv-scanner/files/patch-internal_sourceanalysis_go.go
+++ b/security/osv-scanner/files/patch-internal_sourceanalysis_go.go
@@ -1,11 +1,11 @@
---- internal/sourceanalysis/go.go.orig 1979-11-29 23:00:00 UTC
+--- internal/sourceanalysis/go.go.orig 1979-11-30 03:00:00 UTC
+++ internal/sourceanalysis/go.go
-@@ -18,7 +18,7 @@ func goAnalysis(r reporter.Reporter, pkgs []models.Pac
+@@ -19,7 +19,7 @@ func goAnalysis(pkgs []models.PackageVulns, source mod
)
- func goAnalysis(r reporter.Reporter, pkgs []models.PackageVulns, source models.SourceInfo) {
+ func goAnalysis(pkgs []models.PackageVulns, source models.SourceInfo) {
- cmd := exec.Command("go", "version")
+ cmd := exec.Command("go%%GO_SUFFIX%%", "version")
_, err := cmd.Output()
if err != nil {
- r.Infof("Skipping call analysis on Go code since Go is not installed.\n")
+ slog.Info("Skipping call analysis on Go code since Go is not installed.")
diff --git a/security/py-bitbox02/Makefile b/security/py-bitbox02/Makefile
index eaaf1176ddc9..4f3cdf714655 100644
--- a/security/py-bitbox02/Makefile
+++ b/security/py-bitbox02/Makefile
@@ -1,6 +1,5 @@
PORTNAME= bitbox02
-PORTVERSION= 6.3.0
-PORTREVISION= 1
+PORTVERSION= 7.0.0
CATEGORIES= security python
MASTER_SITES= PYPI
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
diff --git a/security/py-bitbox02/distinfo b/security/py-bitbox02/distinfo
index d01b3b8fa461..b938507110b9 100644
--- a/security/py-bitbox02/distinfo
+++ b/security/py-bitbox02/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1714984118
-SHA256 (bitbox02-6.3.0.tar.gz) = d03fb2228be5630f1d7c351e5bebdcb9a95bbe62ecf88c92913a661f093699e3
-SIZE (bitbox02-6.3.0.tar.gz) = 51670
+TIMESTAMP = 1752818570
+SHA256 (bitbox02-7.0.0.tar.gz) = 27d5105eb15a553719fa9d3e68921c864b00c861b3a644044d9ac68426f18447
+SIZE (bitbox02-7.0.0.tar.gz) = 66525
diff --git a/security/py-cybox/Makefile b/security/py-cybox/Makefile
index 5380ef49a79a..d6829f5065fc 100644
--- a/security/py-cybox/Makefile
+++ b/security/py-cybox/Makefile
@@ -1,7 +1,7 @@
PORTNAME= cybox
PORTVERSION= 2.1.0.21
DISTVERSIONPREFIX= v
-PORTREVISION= 2
+PORTREVISION= 3
CATEGORIES= security python
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
@@ -13,7 +13,7 @@ LICENSE= BSD3CLAUSE
LICENSE_FILE= ${WRKSRC}/LICENSE.txt
RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}python-dateutil>=0:devel/py-python-dateutil@${PY_FLAVOR} \
- ${PYTHON_PKGNAMEPREFIX}lxml>=2.2.3:devel/py-lxml@${PY_FLAVOR} \
+ ${PYTHON_PKGNAMEPREFIX}lxml5>=2.2.3:devel/py-lxml5@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}mixbox>=1.0.2:security/py-mixbox@${PY_FLAVOR}
TEST_DEPENDS= ${PYTHON_PKGNAMEPREFIX}nose>=0:devel/py-nose@${PY_FLAVOR}
diff --git a/security/py-maec/Makefile b/security/py-maec/Makefile
index f03bb0997f05..eb40a7d2fa9b 100644
--- a/security/py-maec/Makefile
+++ b/security/py-maec/Makefile
@@ -1,6 +1,6 @@
PORTNAME= maec
PORTVERSION= 4.1.0.17
-PORTREVISION= 1
+PORTREVISION= 2
DISTVERSIONPREFIX= v
CATEGORIES= security python
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
@@ -12,7 +12,7 @@ WWW= https://github.com/MAECProject/python-maec
LICENSE= BSD3CLAUSE
LICENSE_FILE= ${WRKSRC}/LICENSE.txt
-RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}lxml>=2.2.3:devel/py-lxml@${PY_FLAVOR} \
+RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}lxml5>=2.2.3:devel/py-lxml5@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}cybox>=2.1.0.13:security/py-cybox@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}mixbox>=0.0.13:security/py-mixbox@${PY_FLAVOR}
TEST_DEPENDS= ${PYTHON_PKGNAMEPREFIX}nose>=0:devel/py-nose@${PY_FLAVOR}
diff --git a/security/py-mixbox/Makefile b/security/py-mixbox/Makefile
index fb026db3022c..af0835f1254e 100644
--- a/security/py-mixbox/Makefile
+++ b/security/py-mixbox/Makefile
@@ -1,6 +1,6 @@
PORTNAME= mixbox
PORTVERSION= 1.0.5
-PORTREVISION= 2
+PORTREVISION= 3
CATEGORIES= security python
MASTER_SITES= PYPI
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
@@ -12,7 +12,7 @@ WWW= https://github.com/CybOXProject/mixbox
LICENSE= BSD3CLAUSE
RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}python-dateutil>=0:devel/py-python-dateutil@${PY_FLAVOR} \
- ${PYTHON_PKGNAMEPREFIX}lxml>=0:devel/py-lxml@${PY_FLAVOR} \
+ ${PYTHON_PKGNAMEPREFIX}lxml5>=0:devel/py-lxml5@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}ordered-set>=0:devel/py-ordered-set@${PY_FLAVOR}
NO_ARCH= yes
diff --git a/security/py-ospd-openvas/Makefile b/security/py-ospd-openvas/Makefile
index f712dc948669..c7029aa90cce 100644
--- a/security/py-ospd-openvas/Makefile
+++ b/security/py-ospd-openvas/Makefile
@@ -1,6 +1,7 @@
PORTNAME= ospd-openvas
DISTVERSION= 22.9.0
DISTVERSIONPREFIX= v
+PORTREVISION= 1
CATEGORIES= security python
#MASTER_SITES= PYPI
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
@@ -18,7 +19,7 @@ RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}redis>=0:databases/py-redis@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}packaging>=0:devel/py-packaging@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}defusedxml>=0:devel/py-defusedxml@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}deprecated>0:devel/py-deprecated@${PY_FLAVOR} \
- ${PYTHON_PKGNAMEPREFIX}lxml>0:devel/py-lxml@${PY_FLAVOR} \
+ ${PYTHON_PKGNAMEPREFIX}lxml5>0:devel/py-lxml5@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}paramiko>0:security/py-paramiko@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}python-gnupg>0:security/py-python-gnupg@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}paho-mqtt>0:net/py-paho-mqtt@${PY_FLAVOR} \
diff --git a/security/py-pykeepass/Makefile b/security/py-pykeepass/Makefile
index 6856c073a1a3..84c0e4e45cbe 100644
--- a/security/py-pykeepass/Makefile
+++ b/security/py-pykeepass/Makefile
@@ -1,6 +1,7 @@
PORTNAME= pykeepass
DISTVERSION= 4.1.1
DISTVERSIONSUFFIX= .post1
+PORTREVISION= 1
CATEGORIES= security python
MASTER_SITES= PYPI
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
@@ -17,7 +18,7 @@ BUILD_DEPENDS= ${PY_SETUPTOOLS} \
${PYTHON_PKGNAMEPREFIX}wheel>0:devel/py-wheel@${PY_FLAVOR}
RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}argon2-cffi>=0:security/py-argon2-cffi@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}construct>=0:devel/py-construct@${PY_FLAVOR} \
- ${PYTHON_PKGNAMEPREFIX}lxml>=0:devel/py-lxml@${PY_FLAVOR} \
+ ${PYTHON_PKGNAMEPREFIX}lxml5>=0:devel/py-lxml5@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}pycryptodomex>=0:security/py-pycryptodomex@${PY_FLAVOR}
USES= python
diff --git a/security/py-python-cas/Makefile b/security/py-python-cas/Makefile
index afdb7b8656e8..2f174cd20904 100644
--- a/security/py-python-cas/Makefile
+++ b/security/py-python-cas/Makefile
@@ -1,6 +1,6 @@
PORTNAME= python-cas
PORTVERSION= 1.6.0
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= security python
MASTER_SITES= PYPI
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
@@ -14,7 +14,7 @@ LICENSE_FILE= ${WRKSRC}/LICENSE.txt
RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}six>=1.10.0:devel/py-six@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}requests>=2.11.1:www/py-requests@${PY_FLAVOR} \
- ${PYTHON_PKGNAMEPREFIX}lxml>=3.4:devel/py-lxml@${PY_FLAVOR}
+ ${PYTHON_PKGNAMEPREFIX}lxml5>=3.4:devel/py-lxml5@${PY_FLAVOR}
USES= python
USE_PYTHON= autoplist distutils
diff --git a/security/py-python3-saml/Makefile b/security/py-python3-saml/Makefile
index a2d8be7364ed..2079f1a1cdb0 100644
--- a/security/py-python3-saml/Makefile
+++ b/security/py-python3-saml/Makefile
@@ -1,5 +1,6 @@
PORTNAME= python3-saml
PORTVERSION= 1.16.0
+PORTREVISION= 1
CATEGORIES= security python
MASTER_SITES= PYPI
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
@@ -16,7 +17,7 @@ BUILD_DEPENDS= ${PYTHON_PKGNAMEPREFIX}poetry-core>=1.1.0:devel/py-poetry-core@${
${PYTHON_PKGNAMEPREFIX}setuptools>=40.1.0:devel/py-setuptools@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}wheel>=0:devel/py-wheel@${PY_FLAVOR}
RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}isodate>=0.6.1:devel/py-isodate@${PY_FLAVOR} \
- ${PYTHON_PKGNAMEPREFIX}lxml>=4.6.5:devel/py-lxml@${PY_FLAVOR} \
+ ${PYTHON_PKGNAMEPREFIX}lxml5>=4.6.5:devel/py-lxml5@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}xmlsec>=1.3.9:security/py-xmlsec@${PY_FLAVOR}
TEST_DEPENDS= ${PYTHON_PKGNAMEPREFIX}coverage>=4.5.2:devel/py-coverage@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}flake8>=3.6.0:devel/py-flake8@${PY_FLAVOR} \
diff --git a/security/py-stix/Makefile b/security/py-stix/Makefile
index bebebd778cb9..d32ce7cc2494 100644
--- a/security/py-stix/Makefile
+++ b/security/py-stix/Makefile
@@ -1,7 +1,7 @@
PORTNAME= stix
PORTVERSION= 1.2.0.11
DISTVERSIONPREFIX= v
-PORTREVISION= 2
+PORTREVISION= 3
CATEGORIES= security python
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
@@ -13,7 +13,7 @@ LICENSE= BSD3CLAUSE
LICENSE_FILE= ${WRKSRC}/LICENSE.txt
RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}python-dateutil>=0:devel/py-python-dateutil@${PY_FLAVOR} \
- ${PYTHON_PKGNAMEPREFIX}lxml>=2.3:devel/py-lxml@${PY_FLAVOR} \
+ ${PYTHON_PKGNAMEPREFIX}lxml5>=2.3:devel/py-lxml5@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}cybox>=2.1.0.13:security/py-cybox@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}mixbox>=1.0.2:security/py-mixbox@${PY_FLAVOR}
TEST_DEPENDS= ${PYTHON_PKGNAMEPREFIX}nose>=0:devel/py-nose@${PY_FLAVOR} \
diff --git a/security/rats/Makefile b/security/rats/Makefile
index 9afe4a217cfb..dd321556b766 100644
--- a/security/rats/Makefile
+++ b/security/rats/Makefile
@@ -4,7 +4,7 @@ PORTREVISION= 1
CATEGORIES= security devel
MASTER_SITES= https://storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/rough-auditing-tool-for-security/
-MAINTAINER= ports@FreeBSD.org
+MAINTAINER= mauroeldritch@gmail.com
COMMENT= Source code auditing tool
WWW= https://security.web.cern.ch/security/recommendations/en/codetools/rats.shtml
diff --git a/security/rubygem-acme-client-gitlab/Makefile b/security/rubygem-acme-client-gitlab/Makefile
index 321ed2a0b252..d7bb794558d2 100644
--- a/security/rubygem-acme-client-gitlab/Makefile
+++ b/security/rubygem-acme-client-gitlab/Makefile
@@ -1,6 +1,5 @@
PORTNAME= acme-client
-PORTVERSION= 2.0.21
-PORTREVISION= 1
+PORTVERSION= 2.0.22
CATEGORIES= security rubygems
MASTER_SITES= RG
PKGNAMESUFFIX= -gitlab
diff --git a/security/rubygem-acme-client-gitlab/distinfo b/security/rubygem-acme-client-gitlab/distinfo
index 5bb6fc7d5332..71f01bae6c87 100644
--- a/security/rubygem-acme-client-gitlab/distinfo
+++ b/security/rubygem-acme-client-gitlab/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1744780787
-SHA256 (rubygem/acme-client-2.0.21.gem) = e0a044f993cd26f0ba7f8b13a3b2b007ef864cfaa333075a2d8865b087297641
-SIZE (rubygem/acme-client-2.0.21.gem) = 21504
+TIMESTAMP = 1752678379
+SHA256 (rubygem/acme-client-2.0.22.gem) = 817534b743e2c93b3e498dad6b0f1a96a8e6df273bb04e37525d586a519176f7
+SIZE (rubygem/acme-client-2.0.22.gem) = 21504
diff --git a/security/rubygem-gitlab-cloud-connector/Makefile b/security/rubygem-gitlab-cloud-connector/Makefile
index 17348ef607c0..2f1e70997dda 100644
--- a/security/rubygem-gitlab-cloud-connector/Makefile
+++ b/security/rubygem-gitlab-cloud-connector/Makefile
@@ -1,5 +1,5 @@
PORTNAME= gitlab-cloud-connector
-PORTVERSION= 1.19.0
+PORTVERSION= 1.21.0
CATEGORIES= security rubygems
MASTER_SITES= RG
diff --git a/security/rubygem-gitlab-cloud-connector/distinfo b/security/rubygem-gitlab-cloud-connector/distinfo
index b702ac666f5a..3d7702e96bc0 100644
--- a/security/rubygem-gitlab-cloud-connector/distinfo
+++ b/security/rubygem-gitlab-cloud-connector/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1750912646
-SHA256 (rubygem/gitlab-cloud-connector-1.19.0.gem) = cfa644b4d827062f5c625d391ca3e6904e7667f0f6efe96adab81e051d8d07ad
-SIZE (rubygem/gitlab-cloud-connector-1.19.0.gem) = 18432
+TIMESTAMP = 1752678296
+SHA256 (rubygem/gitlab-cloud-connector-1.21.0.gem) = 16eb2a42f223c6c70efc20a8fd9e2bbe4fa91603894daa8a72f354f425a07709
+SIZE (rubygem/gitlab-cloud-connector-1.21.0.gem) = 19456
diff --git a/security/secure_delete/Makefile b/security/secure_delete/Makefile
index d5e56ed2a309..6a186d10214c 100644
--- a/security/secure_delete/Makefile
+++ b/security/secure_delete/Makefile
@@ -5,7 +5,7 @@ CATEGORIES= security
MASTER_SITES= PACKETSTORM/groups/thc \
http://freeworld.thc.org/releases/
-MAINTAINER= ports@FreeBSD.org
+MAINTAINER= mauroeldritch@gmail.com
COMMENT= Secure data deletion toolkit
WWW= https://www.thc.org/
diff --git a/security/smurflog/Makefile b/security/smurflog/Makefile
index e1d0d11d3d33..556975a2ecd8 100644
--- a/security/smurflog/Makefile
+++ b/security/smurflog/Makefile
@@ -4,7 +4,7 @@ PORTREVISION= 1
CATEGORIES= security
MASTER_SITES= PACKETSTORM/UNIX/loggers
-MAINTAINER= ports@FreeBSD.org
+MAINTAINER= mauroeldritch@gmail.com
COMMENT= Program to assist logging of smurf attacks
USE_CSTD= gnu89
diff --git a/security/sqlninja/Makefile b/security/sqlninja/Makefile
index 6d6da16f0384..59205a4501fc 100644
--- a/security/sqlninja/Makefile
+++ b/security/sqlninja/Makefile
@@ -3,8 +3,8 @@ DISTVERSION= 0.2.6
CATEGORIES= security
MASTER_SITES= SF/${PORTNAME}/${PORTNAME}
-MAINTAINER= ports@FreeBSD.org
-COMMENT= Sql Server exploit toolkit
+MAINTAINER= mauroeldritch@gmail.com
+COMMENT= SQL Server exploit toolkit
WWW= https://sqlninja.sourceforge.net/
LICENSE= GPLv3+
diff --git a/security/ssss/Makefile b/security/ssss/Makefile
index ed70d272644d..0338d50102b3 100644
--- a/security/ssss/Makefile
+++ b/security/ssss/Makefile
@@ -3,7 +3,7 @@ DISTVERSIONPREFIX= releases/v
DISTVERSION= 0.5.7
CATEGORIES= security
-MAINTAINER= ports@FreeBSD.org
+MAINTAINER= mauroeldritch@gmail.com
COMMENT= Shamir's Secret Sharing Scheme
WWW= http://point-at-infinity.org/ssss/
diff --git a/security/step-certificates/Makefile b/security/step-certificates/Makefile
index df61d5e12df2..7b865e0753a4 100644
--- a/security/step-certificates/Makefile
+++ b/security/step-certificates/Makefile
@@ -1,7 +1,6 @@
PORTNAME= step-certificates
DISTVERSIONPREFIX= v
-DISTVERSION= 0.28.1
-PORTREVISION= 4
+DISTVERSION= 0.28.4
CATEGORIES= security
MAINTAINER= mw@wipp.bayern
diff --git a/security/step-certificates/distinfo b/security/step-certificates/distinfo
index 7306fa012d25..a3aecfe30f79 100644
--- a/security/step-certificates/distinfo
+++ b/security/step-certificates/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1736184396
-SHA256 (go/security_step-certificates/step-certificates-v0.28.1/v0.28.1.mod) = 41cf738a27e1f0894ddd48801408f60c78fd8b69dee14e8db55c9eb445959d46
-SIZE (go/security_step-certificates/step-certificates-v0.28.1/v0.28.1.mod) = 8354
-SHA256 (go/security_step-certificates/step-certificates-v0.28.1/v0.28.1.zip) = b1e3a63ae518e9475979006b3665816757e06f62bef180060749fb4eb276dd42
-SIZE (go/security_step-certificates/step-certificates-v0.28.1/v0.28.1.zip) = 1168039
+TIMESTAMP = 1752641981
+SHA256 (go/security_step-certificates/step-certificates-v0.28.4/v0.28.4.mod) = 50e32d08e1b3ade624273e1fe6da9cf6d454010b0a4f67c1255610ac35491bf6
+SIZE (go/security_step-certificates/step-certificates-v0.28.4/v0.28.4.mod) = 8467
+SHA256 (go/security_step-certificates/step-certificates-v0.28.4/v0.28.4.zip) = b32df184ea44ece9713ffb25f17ff81525ce3ced5f1d66c118b889ba53cbdc6d
+SIZE (go/security_step-certificates/step-certificates-v0.28.4/v0.28.4.zip) = 1176880
diff --git a/security/step-cli/Makefile b/security/step-cli/Makefile
index d96b499efa56..d58b502aa605 100644
--- a/security/step-cli/Makefile
+++ b/security/step-cli/Makefile
@@ -1,7 +1,6 @@
PORTNAME= step-cli
DISTVERSIONPREFIX= v
-DISTVERSION= 0.28.2
-PORTREVISION= 3
+DISTVERSION= 0.28.7
CATEGORIES= security
MAINTAINER= mw@wipp.bayern
diff --git a/security/step-cli/distinfo b/security/step-cli/distinfo
index f31164291cef..440e89ff6f72 100644
--- a/security/step-cli/distinfo
+++ b/security/step-cli/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1736183663
-SHA256 (go/security_step-cli/step-cli-v0.28.2/v0.28.2.mod) = 0884cd63ae7621bacf0aad63bd6997736007e81eafdc8f33f7b4f10ae96807c0
-SIZE (go/security_step-cli/step-cli-v0.28.2/v0.28.2.mod) = 7172
-SHA256 (go/security_step-cli/step-cli-v0.28.2/v0.28.2.zip) = 5c4047233c8ef0aeb37cc78bf177cd249fdc0ea72fba1c79b59ed8a4fca21eca
-SIZE (go/security_step-cli/step-cli-v0.28.2/v0.28.2.zip) = 1820402
+TIMESTAMP = 1752642398
+SHA256 (go/security_step-cli/step-cli-v0.28.7/v0.28.7.mod) = 629b69c99baac120cb7844c0db0dacd47b2c7601b57fe443a47f85d33e158106
+SIZE (go/security_step-cli/step-cli-v0.28.7/v0.28.7.mod) = 6943
+SHA256 (go/security_step-cli/step-cli-v0.28.7/v0.28.7.zip) = 4e2541f7ec8e1b2c23ab9326930a942091fca45dd0c148bc02c02b21e78d427d
+SIZE (go/security_step-cli/step-cli-v0.28.7/v0.28.7.zip) = 1824999
diff --git a/security/sudo-rs/Makefile b/security/sudo-rs/Makefile
index 5d6bb16de08b..773a9fe74501 100644
--- a/security/sudo-rs/Makefile
+++ b/security/sudo-rs/Makefile
@@ -1,7 +1,6 @@
PORTNAME= sudo-rs
-PORTVERSION= 0.2.6
+PORTVERSION= 0.2.7
DISTVERSIONPREFIX= v
-PORTREVISION= 2
CATEGORIES= security
MAINTAINER= marc@trifectatech.org
@@ -13,8 +12,6 @@ LICENSE_COMB= dual
LICENSE_FILE_APACHE20= ${WRKSRC}/LICENSE-APACHE
LICENSE_FILE_MIT= ${WRKSRC}/LICENSE-MIT
-BUILD_DEPENDS= pandoc:${PORTSDIR}/textproc/hs-pandoc
-
FLAVORS= default coexist
FLAVOR?= ${FLAVORS:[1]}
coexist_PKGNAMESUFFIX= -coexist
@@ -24,11 +21,10 @@ USES= cargo
USE_GITHUB= yes
GH_ACCOUNT= trifectatechfoundation
-GH_TAGNAME= main
CARGO_CRATES= diff-0.1.13 \
glob-0.3.2 \
- libc-0.2.172 \
+ libc-0.2.174 \
log-0.4.27 \
pretty_assertions-1.4.1 \
yansi-1.0.1
@@ -52,17 +48,11 @@ PORTDOCS= CHANGELOG.md CONTRIBUTING.md COPYRIGHT LICENSE-* README.md \
OPTIONS_DEFINE= DOCS
-post-build:
-.for man in sudo.8 visudo.8 sudoers.5
- @${MKDIR} ${WRKDIR}/docs/man
- pandoc -s -t man ${WRKSRC}/docs/man/${man}.md -o ${WRKDIR}/docs/man/${man}
-.endfor
-
post-install:
${MV} ${STAGEDIR}${PREFIX}/bin/visudo ${STAGEDIR}${PREFIX}/sbin/visudo${RS_SUFFIX}
- ${INSTALL_MAN} ${WRKDIR}/docs/man/sudo.8 ${STAGEDIR}${PREFIX}/share/man/man8/sudo${RS_SUFFIX}.8
- ${INSTALL_MAN} ${WRKDIR}/docs/man/visudo.8 ${STAGEDIR}${PREFIX}/share/man/man8/visudo${RS_SUFFIX}.8
- ${INSTALL_MAN} ${WRKDIR}/docs/man/sudoers.5 ${STAGEDIR}${PREFIX}/share/man/man5/sudoers${RS_SUFFIX}.5
+ ${INSTALL_MAN} ${WRKSRC}/docs/man/sudo.8.man ${STAGEDIR}${PREFIX}/share/man/man8/sudo${RS_SUFFIX}.8
+ ${INSTALL_MAN} ${WRKSRC}/docs/man/visudo.8.man ${STAGEDIR}${PREFIX}/share/man/man8/visudo${RS_SUFFIX}.8
+ ${INSTALL_MAN} ${WRKSRC}/docs/man/sudoers.5.man ${STAGEDIR}${PREFIX}/share/man/man5/sudoers${RS_SUFFIX}.5
${MKDIR} ${STAGEDIR}${PREFIX}/etc/sudoers.d
${MKDIR} ${STAGEDIR}${PREFIX}/etc/pam.d
${MKDIR} ${STAGEDIR}/var/run/sudo
diff --git a/security/sudo-rs/distinfo b/security/sudo-rs/distinfo
index 7162c3e88c85..8861ccd86ae0 100644
--- a/security/sudo-rs/distinfo
+++ b/security/sudo-rs/distinfo
@@ -1,15 +1,15 @@
-TIMESTAMP = 1746636640
+TIMESTAMP = 1752137205
SHA256 (rust/crates/diff-0.1.13.crate) = 56254986775e3233ffa9c4d7d3faaf6d36a2c09d30b20687e9f88bc8bafc16c8
SIZE (rust/crates/diff-0.1.13.crate) = 46216
SHA256 (rust/crates/glob-0.3.2.crate) = a8d1add55171497b4705a648c6b583acafb01d58050a51727785f0b2c8e0a2b2
SIZE (rust/crates/glob-0.3.2.crate) = 22359
-SHA256 (rust/crates/libc-0.2.172.crate) = d750af042f7ef4f724306de029d18836c26c1765a54a6a3f094cbd23a7267ffa
-SIZE (rust/crates/libc-0.2.172.crate) = 791646
+SHA256 (rust/crates/libc-0.2.174.crate) = 1171693293099992e19cddea4e8b849964e9846f4acee11b3948bcc337be8776
+SIZE (rust/crates/libc-0.2.174.crate) = 779933
SHA256 (rust/crates/log-0.4.27.crate) = 13dc2df351e3202783a1fe0d44375f7295ffb4049267b0f3018346dc122a1d94
SIZE (rust/crates/log-0.4.27.crate) = 48120
SHA256 (rust/crates/pretty_assertions-1.4.1.crate) = 3ae130e2f271fbc2ac3a40fb1d07180839cdbbe443c7a27e1e3c13c5cac0116d
SIZE (rust/crates/pretty_assertions-1.4.1.crate) = 78952
SHA256 (rust/crates/yansi-1.0.1.crate) = cfe53a6657fd280eaa890a3bc59152892ffa3e30101319d168b781ed6529b049
SIZE (rust/crates/yansi-1.0.1.crate) = 75497
-SHA256 (trifectatechfoundation-sudo-rs-v0.2.6-main_GH0.tar.gz) = e50131984916f272c5bdf376b5093e42bca29cce066431f4902ae60edb5a0df5
-SIZE (trifectatechfoundation-sudo-rs-v0.2.6-main_GH0.tar.gz) = 712201
+SHA256 (trifectatechfoundation-sudo-rs-v0.2.7_GH0.tar.gz) = d4e7b49634bf9c8a897a26afe85118ef941ff0914765b8720798821d2fe8c402
+SIZE (trifectatechfoundation-sudo-rs-v0.2.7_GH0.tar.gz) = 736981
diff --git a/security/tscli/Makefile b/security/tscli/Makefile
index ee95dd798f73..45cb45cbfb11 100644
--- a/security/tscli/Makefile
+++ b/security/tscli/Makefile
@@ -1,7 +1,6 @@
PORTNAME= tscli
DISTVERSIONPREFIX= v
-DISTVERSION= 0.0.12
-PORTREVISION= 1
+DISTVERSION= 0.0.13
CATEGORIES= security
MAINTAINER= dtxdf@FreeBSD.org
@@ -14,6 +13,8 @@ LICENSE_FILE= ${WRKSRC}/LICENSE
USES= go:modules
GO_MODULE= github.com/jaxxstorm/tscli
GO_TARGET= ./cmd/tscli:tscli
+GO_BUILDFLAGS= -ldflags "\
+ -X 'github.com/jaxxstorm/tscli/pkg/version.Version=${DISTVERSIONPREFIX}${DISTVERSION}'"
PLIST_FILES= bin/tscli
diff --git a/security/tscli/distinfo b/security/tscli/distinfo
index c862bdf3bdab..6fe138063978 100644
--- a/security/tscli/distinfo
+++ b/security/tscli/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1751921200
-SHA256 (go/security_tscli/tscli-v0.0.12/v0.0.12.mod) = 4a82a5521c3fa8eb69ab3e22c18b32be4850ade70791cb0a74fd480c44752d68
-SIZE (go/security_tscli/tscli-v0.0.12/v0.0.12.mod) = 3162
-SHA256 (go/security_tscli/tscli-v0.0.12/v0.0.12.zip) = dc19e7ffdc880bce5b0d527acdaebf8070a01a8af0830a52e4764712407479a4
-SIZE (go/security_tscli/tscli-v0.0.12/v0.0.12.zip) = 112412
+TIMESTAMP = 1752625691
+SHA256 (go/security_tscli/tscli-v0.0.13/v0.0.13.mod) = 4a82a5521c3fa8eb69ab3e22c18b32be4850ade70791cb0a74fd480c44752d68
+SIZE (go/security_tscli/tscli-v0.0.13/v0.0.13.mod) = 3162
+SHA256 (go/security_tscli/tscli-v0.0.13/v0.0.13.zip) = 6468bb6f8ed78c6c08b0125334644b309ce69a61310c9b6240d10bebc67969b5
+SIZE (go/security_tscli/tscli-v0.0.13/v0.0.13.zip) = 115698
diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml
index 812764583b54..22b2f0f2fbf0 100644
--- a/security/vuxml/vuln/2025.xml
+++ b/security/vuxml/vuln/2025.xml
@@ -1,3 +1,70 @@
+ <vuln vid="605a9d1e-6521-11f0-beb2-ac5afc632ba3">
+ <topic>libwasmtime -- host panic with fd_renumber WASIp1 function</topic>
+ <affects>
+ <package>
+ <name>libwasmtime</name>
+ <range><ge>24.0.0</ge><lt>24.0.4</lt></range>
+ <range><ge>33.0.0</ge><lt>33.0.2</lt></range>
+ <range><ge>34.0.0</ge><lt>34.0.2</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>WasmTime development team reports:</p>
+ <blockquote cite="https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-fm79-3f68-h2fc">
+ <p>A bug in Wasmtime's implementation of the WASIp1 set of import
+ functions can lead to a WebAssembly guest inducing a panic in the
+ host (embedder).</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2025-53901</cvename>
+ <url>https://nvd.nist.gov/vuln/detail/CVE-2025-53901</url>
+ </references>
+ <dates>
+ <discovery>2025-07-18</discovery>
+ <entry>2025-07-20</entry>
+ </dates>
+ </vuln>
+
+ <vuln vid="e27ee4fc-cdc9-45a1-8242-09898cdbdc91">
+ <topic>unbound -- Cache poisoning via the ECS-enabled Rebirthday Attack</topic>
+ <affects>
+ <package>
+ <name>unbound</name>
+ <range><gt>1.6.1</gt><lt>1.23.0</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>sep@nlnetlabs.nl reports:</p>
+ <blockquote cite="https://nlnetlabs.nl/downloads/unbound/CVE-2025-5994.txt">
+ <p>A multi-vendor cache poisoning vulnerability named &apos;Rebirthday
+ Attack&apos; has been discovered in caching resolvers that support
+ EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled
+ with ECS support, i.e., &apos;--enable-subnet&apos;, AND configured
+ to send ECS information along with queries to upstream name servers,
+ i.e., at least one of the &apos;send-client-subnet&apos;,
+ &apos;client-subnet-zone&apos; or &apos;client-subnet-always-forward&apos;
+ options is used. Resolvers supporting ECS need to segregate outgoing
+ queries to accommodate for different outgoing ECS information. This
+ re-opens up resolvers to a birthday paradox attack (Rebirthday
+ Attack) that tries to match the DNS transaction ID in order to cache
+ non-ECS poisonous replies.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2025-5994</cvename>
+ <url>https://nvd.nist.gov/vuln/detail/CVE-2025-5994</url>
+ </references>
+ <dates>
+ <discovery>2025-07-16</discovery>
+ <entry>2025-07-18</entry>
+ </dates>
+ </vuln>
+
<vuln vid="aeac223e-60e1-11f0-8baa-8447094a420f">
<topic>liboqs -- Secret-dependent branching in HQC</topic>
<affects>
@@ -267,18 +334,15 @@
<affects>
<package>
<name>tomcat110</name>
- <range><gt>11.0.0</gt></range>
- <range><lt>11.0.9</lt></range>
+ <range><ge>11.0.0</ge><lt>11.0.9</lt></range>
</package>
<package>
<name>tomcat101</name>
- <range><gt>10.1.0</gt></range>
- <range><lt>10.1.43</lt></range>
+ <range><ge>10.1.0</ge><lt>10.1.43</lt></range>
</package>
<package>
<name>tomcat9</name>
- <range><gt>9.0.0</gt></range>
- <range><lt>9.0.107</lt></range>
+ <range><ge>9.0.0</ge><lt>9.0.107</lt></range>
</package>
</affects>
<description>
@@ -311,6 +375,7 @@
<dates>
<discovery>2025-07-10</discovery>
<entry>2025-07-10</entry>
+ <modified>2025-07-15</modified>
</dates>
</vuln>
diff --git a/security/wipe/Makefile b/security/wipe/Makefile
index 533b05a8ad96..89fe7d1f449c 100644
--- a/security/wipe/Makefile
+++ b/security/wipe/Makefile
@@ -4,7 +4,7 @@ PORTREVISION= 2
CATEGORIES= security
MASTER_SITES= SF
-MAINTAINER= ports@FreeBSD.org
+MAINTAINER= mauroeldritch@gmail.com
COMMENT= File and block device wiping utility
WWW= https://wipe.sourceforge.net/
diff --git a/security/xray-core/Makefile b/security/xray-core/Makefile
index 7b3b738acd20..52570c54d9cb 100644
--- a/security/xray-core/Makefile
+++ b/security/xray-core/Makefile
@@ -1,10 +1,9 @@
PORTNAME= xray-core
DISTVERSIONPREFIX= v
-DISTVERSION= 25.1.30
-PORTREVISION= 3
+DISTVERSION= 25.3.6
CATEGORIES= security
-MASTER_SITES= https://github.com/v2fly/geoip/releases/download/202501190004/:geoip \
- https://github.com/v2fly/domain-list-community/releases/download/20250124154827/:geosite
+MASTER_SITES= https://github.com/v2fly/geoip/releases/download/202503050126/:geoip \
+ https://github.com/v2fly/domain-list-community/releases/download/20250307074130/:geosite
DISTFILES= geoip.dat:geoip \
dlc.dat:geosite
EXTRACT_ONLY= XTLS-Xray-core-v${DISTVERSION}_GH0.tar.gz
@@ -16,16 +15,16 @@ WWW= https://github.com/XTLS/Xray-core
LICENSE= MPL20
LICENSE_FILE= ${WRKSRC}/LICENSE
-USES= go:1.23,modules
+USES= go:1.24,modules
USE_GITHUB= yes
GH_ACCOUNT= XTLS
GH_PROJECT= Xray-core
USE_RC_SUBR= xray
+GO_MOD_DIST= github
GO_MODULE= github.com/${GH_ACCOUNT}/${PORTNAME}
GO_PKGNAME= github.com/${GH_ACCOUNT}/${PORTNAME}
GO_TARGET= ./main:xray
-GO_MOD_DIST= github
SUB_FILES= pkg-message
SUB_LIST= GROUP="${GROUPS}" \
diff --git a/security/xray-core/distinfo b/security/xray-core/distinfo
index 05e69f842e8f..0652578fce25 100644
--- a/security/xray-core/distinfo
+++ b/security/xray-core/distinfo
@@ -1,9 +1,9 @@
-TIMESTAMP = 1738391641
-SHA256 (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/geoip.dat) = 4f8d16184b6938e635519bc91cb978dcea6884878e39f592f7144135401d6bb6
-SIZE (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/geoip.dat) = 19163759
-SHA256 (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/dlc.dat) = ac12d81edc6058b3c66ae96a0a26ca8281616d96ea86d0d77b2ceff34a3e1a9d
-SIZE (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/dlc.dat) = 2187000
-SHA256 (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/go.mod) = dbfd86f224ecc64911a82afbf4391711c13fd02ba96fa59346795cdfb4cf025a
-SIZE (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/go.mod) = 2475
-SHA256 (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/XTLS-Xray-core-v25.1.30_GH0.tar.gz) = 983ee395f085ed1b7fbe0152cb56a5b605a6f70a5645d427c7186c476f14894e
-SIZE (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/XTLS-Xray-core-v25.1.30_GH0.tar.gz) = 629296
+TIMESTAMP = 1741492331
+SHA256 (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/geoip.dat) = 83337c712b04d8c16351cf5a5394eae5cb9cfa257fb4773485945dce65dcea76
+SIZE (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/geoip.dat) = 20567380
+SHA256 (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/dlc.dat) = 17d78a6b0a64e04f2362b2907788d9a192d41a340301e2e63daca415219cf752
+SIZE (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/dlc.dat) = 2220794
+SHA256 (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/go.mod) = d1c0dd5a9ec03dbd6083a75ca86c6cf5c04e6c48a31591224b845197181d5749
+SIZE (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/go.mod) = 2475
+SHA256 (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/XTLS-Xray-core-v25.3.6_GH0.tar.gz) = d62305348deff713767fe1b3c23538e3f8bfe0c96d092f1f95f48c17bc2f5943
+SIZE (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/XTLS-Xray-core-v25.3.6_GH0.tar.gz) = 633356