summaryrefslogtreecommitdiff
path: root/security
diff options
context:
space:
mode:
Diffstat (limited to 'security')
-rw-r--r--security/2fa/Makefile2
-rw-r--r--security/Makefile1
-rw-r--r--security/aws-vault/Makefile2
-rw-r--r--security/caldera/Makefile4
-rw-r--r--security/cyrus-sasl2-saslauthd/Makefile9
-rw-r--r--security/fizz/Makefile2
-rw-r--r--security/fizz/distinfo6
-rw-r--r--security/fragroute/Makefile2
-rw-r--r--security/gvmd/Makefile4
-rw-r--r--security/keepassxc/Makefile9
-rw-r--r--security/keepassxc/distinfo6
-rw-r--r--security/keepassxc/files/patch-CMakeLists.txt13
-rw-r--r--security/keepassxc276/Makefile72
-rw-r--r--security/keepassxc276/distinfo3
-rw-r--r--security/keepassxc276/files/patch-src_thirdparty_ykcore_CMakeLists.txt11
-rw-r--r--security/keepassxc276/pkg-descr22
-rw-r--r--security/keepassxc276/pkg-plist67
-rw-r--r--security/lego/Makefile4
-rw-r--r--security/lego/distinfo10
-rw-r--r--security/openfortivpn/Makefile2
-rw-r--r--security/openvpn-auth-oauth2/Makefile3
-rw-r--r--security/openvpn-auth-oauth2/distinfo10
-rw-r--r--security/py-cybox/Makefile4
-rw-r--r--security/py-maec/Makefile4
-rw-r--r--security/py-mixbox/Makefile4
-rw-r--r--security/py-ospd-openvas/Makefile3
-rw-r--r--security/py-pykeepass/Makefile3
-rw-r--r--security/py-python-cas/Makefile4
-rw-r--r--security/py-python3-saml/Makefile3
-rw-r--r--security/py-stix/Makefile4
-rw-r--r--security/rats/Makefile2
-rw-r--r--security/secure_delete/Makefile2
-rw-r--r--security/smurflog/Makefile2
-rw-r--r--security/snort3/Makefile3
-rw-r--r--security/snort3/distinfo6
-rw-r--r--security/snort3/pkg-plist2
-rw-r--r--security/sqlninja/Makefile4
-rw-r--r--security/ssss/Makefile2
-rw-r--r--security/vuxml/vuln/2025.xml61
-rw-r--r--security/wipe/Makefile2
-rw-r--r--security/xray-core/Makefile11
-rw-r--r--security/xray-core/distinfo18
-rw-r--r--security/zeek/Makefile3
-rw-r--r--security/zeek/distinfo6
44 files changed, 334 insertions, 83 deletions
diff --git a/security/2fa/Makefile b/security/2fa/Makefile
index 7d3c32d7cb6d..9f4f42346567 100644
--- a/security/2fa/Makefile
+++ b/security/2fa/Makefile
@@ -4,7 +4,7 @@ DISTVERSION= 1.2.0
PORTREVISION= 28
CATEGORIES= security
-MAINTAINER= ports@FreeBSD.org
+MAINTAINER= mauroeldritch@gmail.com
COMMENT= Two-factor authentication on the command line
WWW= https://github.com/rsc/2fa
diff --git a/security/Makefile b/security/Makefile
index 0343c9fd1932..15488729f2b5 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -255,6 +255,7 @@
SUBDIR += keepass
SUBDIR += keepass-plugin-keepassrpc
SUBDIR += keepassxc
+ SUBDIR += keepassxc276
SUBDIR += keybase
SUBDIR += keychain
SUBDIR += keyprint
diff --git a/security/aws-vault/Makefile b/security/aws-vault/Makefile
index fadd02c5fae6..60215a8b20f2 100644
--- a/security/aws-vault/Makefile
+++ b/security/aws-vault/Makefile
@@ -4,7 +4,7 @@ DISTVERSION= 6.6.2
PORTREVISION= 19
CATEGORIES= security
-MAINTAINER= ports@FreeBSD.org
+MAINTAINER= mauroeldritch@gmail.com
COMMENT= Vault for securely storing and accessing AWS credentials
WWW= https://github.com/99designs/aws-vault
diff --git a/security/caldera/Makefile b/security/caldera/Makefile
index ac4548a93b75..8fd14526775c 100644
--- a/security/caldera/Makefile
+++ b/security/caldera/Makefile
@@ -1,6 +1,6 @@
PORTNAME= caldera
DISTVERSION= 5.3.0
-PORTREVISION= 2
+PORTREVISION= 3
CATEGORIES= security python
MAINTAINER= acm@FreeBSD.org
@@ -33,7 +33,7 @@ RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}aiohttp>0:www/py-aiohttp@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}donut-shellcode>0:devel/py-donut-shellcode@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}marshmallow-enum>0:devel/py-marshmallow-enum@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}ldap3>0:net/py-ldap3@${PY_FLAVOR} \
- ${PYTHON_PKGNAMEPREFIX}lxml>0:devel/py-lxml@${PY_FLAVOR} \
+ ${PYTHON_PKGNAMEPREFIX}lxml5>0:devel/py-lxml5@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}reportlab>0:print/py-reportlab@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}svglib>0:converters/py-svglib@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}markdown>0:textproc/py-markdown@${PY_FLAVOR} \
diff --git a/security/cyrus-sasl2-saslauthd/Makefile b/security/cyrus-sasl2-saslauthd/Makefile
index 6c922264b12d..41c6027c54d7 100644
--- a/security/cyrus-sasl2-saslauthd/Makefile
+++ b/security/cyrus-sasl2-saslauthd/Makefile
@@ -1,4 +1,4 @@
-PORTREVISION= 2
+PORTREVISION= 3
PKGNAMESUFFIX= -saslauthd
COMMENT= SASL authentication server for cyrus-sasl2
@@ -53,7 +53,12 @@ OPTIONS_DEFAULT+= GSSAPI_BASE
OPTIONS_RADIO_GSSAPI+= GSSAPI_HEIMDAL GSSAPI_MIT
GSSAPI_BASE_USES= gssapi:base
GSSAPI_BASE_CONFIGURE_ON= --enable-gssapi="${GSSAPIBASEDIR}" \
- --with-gss_impl=heimdal
+
+.if exists(/usr/libexec/krb5kdc)
+GSSAPI_BASE_CONFIGURE_ON+= --with-gss_impl=mit
+.else
+GSSAPI_BASE_CONFIGURE_ON+= --with-gss_impl=heimdal
+.endif
GSSAPI_HEIMDAL_USES= gssapi:heimdal,flags
GSSAPI_HEIMDAL_CONFIGURE_ON= --enable-gssapi="${GSSAPIBASEDIR}" \
--with-gss_impl=heimdal
diff --git a/security/fizz/Makefile b/security/fizz/Makefile
index 34ec1011e8f7..52d84d866404 100644
--- a/security/fizz/Makefile
+++ b/security/fizz/Makefile
@@ -1,6 +1,6 @@
PORTNAME= fizz
DISTVERSIONPREFIX= v
-DISTVERSION= 2025.07.07.00
+DISTVERSION= 2025.07.21.00
CATEGORIES= security
MAINTAINER= yuri@FreeBSD.org
diff --git a/security/fizz/distinfo b/security/fizz/distinfo
index 3adc96cbaa66..61fd5fd39bbb 100644
--- a/security/fizz/distinfo
+++ b/security/fizz/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1752053888
-SHA256 (facebookincubator-fizz-v2025.07.07.00_GH0.tar.gz) = 86635b14d000c6e8e61a3edfbd9ad51764c9bf84b3702d73ac6dadff97786c99
-SIZE (facebookincubator-fizz-v2025.07.07.00_GH0.tar.gz) = 759365
+TIMESTAMP = 1753158778
+SHA256 (facebookincubator-fizz-v2025.07.21.00_GH0.tar.gz) = 8e2eef377e81913edb70bd2beb53ed0f3b56048411314c557f8d9028c7b983f1
+SIZE (facebookincubator-fizz-v2025.07.21.00_GH0.tar.gz) = 762878
diff --git a/security/fragroute/Makefile b/security/fragroute/Makefile
index f3aaba1e5e3d..5d02041d419c 100644
--- a/security/fragroute/Makefile
+++ b/security/fragroute/Makefile
@@ -5,7 +5,7 @@ CATEGORIES= security net
MASTER_SITES= http://monkey.org/~dugsong/fragroute/ \
PACKETSTORM/UNIX/security
-MAINTAINER= ports@FreeBSD.org
+MAINTAINER= mauroeldritch@gmail.com
COMMENT= Tool for intercepting, modifying, and rewriting egress traffic
WWW= https://www.monkey.org/~dugsong/fragroute/
diff --git a/security/gvmd/Makefile b/security/gvmd/Makefile
index 0648b0880e09..0e719b8bddbb 100644
--- a/security/gvmd/Makefile
+++ b/security/gvmd/Makefile
@@ -1,6 +1,6 @@
PORTNAME= gvmd
DISTVERSION= 26.0.0
-PORTREVISION= 1
+PORTREVISION= 2
DISTVERSIONPREFIX= v
CATEGORIES= security
@@ -15,7 +15,7 @@ LIB_DEPENDS= libgvm_base.so:security/gvm-libs \
libgnutls.so:security/gnutls \
libgpgme.so:security/gpgme \
libical.so:devel/libical
-RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}lxml>0:devel/py-lxml@${PY_FLAVOR} \
+RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}lxml5>0:devel/py-lxml5@${PY_FLAVOR} \
${LOCALBASE}/lib/postgresql/libpg-gvm.so:databases/pg-gvm \
doxygen>0:devel/doxygen \
p5-XML-Twig>=0:textproc/p5-XML-Twig \
diff --git a/security/keepassxc/Makefile b/security/keepassxc/Makefile
index 4cb9c335c67b..1cd13b8eb820 100644
--- a/security/keepassxc/Makefile
+++ b/security/keepassxc/Makefile
@@ -1,5 +1,5 @@
PORTNAME= keepassxc
-DISTVERSION= 2.7.6
+DISTVERSION= 2.7.10
CATEGORIES= security
MASTER_SITES= https://github.com/keepassxreboot/keepassxc/releases/download/${DISTVERSION}/
DISTNAME= ${PORTNAME}-${DISTVERSION}-src
@@ -15,13 +15,10 @@ LICENSE_NAME_NOKIA-LGPL-EXCEPTION= Nokia Qt LGPL Exception version 1.1
LICENSE_FILE_NOKIA-LGPL-EXCEPTION= ${WRKSRC}/LICENSE.NOKIA-LGPL-EXCEPTION
LICENSE_PERMS_NOKIA-LGPL-EXCEPTION= dist-mirror dist-sell pkg-mirror pkg-sell auto-accept
-DEPRECATED= Depends on expired security/botan2
-EXPIRATION_DATE=2025-06-21
-
BUILD_DEPENDS= asciidoctor:textproc/rubygem-asciidoctor
LIB_DEPENDS= libargon2.so:security/libargon2 \
libqrencode.so:graphics/libqrencode \
- libbotan-2.so:security/botan2
+ libbotan-3.so:security/botan3
USES= cmake compiler:c++17-lang desktop-file-utils pkgconfig qt:5 \
readline shared-mime-info tar:xz xorg
@@ -32,7 +29,7 @@ USE_XORG= x11
WRKSRC= ${WRKDIR}/${DISTNAME:S/-src//}
CMAKE_OFF= WITH_XC_UPDATECHECK
-CONFLICTS_INSTALL= keepassx-0.* keepassx2 keepassx
+CONFLICTS_INSTALL= keepassx-0.* keepassx2 keepassx keepassxc276
OPTIONS_DEFINE= AUTOTYPE BROWSER FDOSECRETS KEESHARE NETWORKING SSHAGENT YUBIKEY TEST
OPTIONS_DEFAULT= AUTOTYPE BROWSER FDOSECRETS KEESHARE NETWORKING SSHAGENT YUBIKEY
diff --git a/security/keepassxc/distinfo b/security/keepassxc/distinfo
index 25f70dd938b3..6a354c652cb2 100644
--- a/security/keepassxc/distinfo
+++ b/security/keepassxc/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1692163985
-SHA256 (keepassxc-2.7.6-src.tar.xz) = a58074509fa8e90f152c6247f73e75e126303081f55eedb4ea0cbb6fa980d670
-SIZE (keepassxc-2.7.6-src.tar.xz) = 8474624
+TIMESTAMP = 1751644926
+SHA256 (keepassxc-2.7.10-src.tar.xz) = 5ce76d6440986c24842585f019d5f3cadc166fa71fc911a4fe97b8bbc4819dfa
+SIZE (keepassxc-2.7.10-src.tar.xz) = 9787952
diff --git a/security/keepassxc/files/patch-CMakeLists.txt b/security/keepassxc/files/patch-CMakeLists.txt
new file mode 100644
index 000000000000..38c92ebea387
--- /dev/null
+++ b/security/keepassxc/files/patch-CMakeLists.txt
@@ -0,0 +1,13 @@
+--- CMakeLists.txt.orig 2024-06-19 14:32:55.000000000 -0700
++++ CMakeLists.txt 2024-06-20 07:26:46.907481000 -0700
+@@ -575,8 +575,8 @@
+ include_directories(SYSTEM ${PCSC_INCLUDE_DIRS})
+
+ if(UNIX AND NOT APPLE)
+- find_library(LIBUSB_LIBRARIES NAMES usb-1.0 REQUIRED)
+- find_path(LIBUSB_INCLUDE_DIR NAMES libusb.h PATH_SUFFIXES "libusb-1.0" "libusb" REQUIRED)
++ find_library(LIBUSB_LIBRARIES NAMES usb REQUIRED)
++ find_path(LIBUSB_INCLUDE_DIR NAMES libusb.h PATH_SUFFIXES "libusb" "libusb" REQUIRED)
+ include_directories(SYSTEM ${LIBUSB_INCLUDE_DIR})
+ endif()
+ endif()
diff --git a/security/keepassxc276/Makefile b/security/keepassxc276/Makefile
new file mode 100644
index 000000000000..e5965d9be9de
--- /dev/null
+++ b/security/keepassxc276/Makefile
@@ -0,0 +1,72 @@
+PORTNAME= keepassxc
+DISTVERSION= 2.7.6
+CATEGORIES= security
+MASTER_SITES= https://github.com/keepassxreboot/keepassxc/releases/download/${DISTVERSION}/
+PKGNAMESUFFIX= 276
+DISTNAME= ${PORTNAME}-${DISTVERSION}-src
+
+MAINTAINER= lwhsu@FreeBSD.org
+COMMENT= KeePass Cross-platform Community Edition
+WWW= https://keepassxc.org
+
+CONFLICTS= keepassxc-[1-9]*
+
+LICENSE= APACHE20 BSD3CLAUSE CC0-1.0 GPLv2 GPLv3 LGPL21 LGPL3 MIT \
+ NOKIA-LGPL-EXCEPTION
+LICENSE_COMB= multi
+LICENSE_NAME_NOKIA-LGPL-EXCEPTION= Nokia Qt LGPL Exception version 1.1
+LICENSE_FILE_NOKIA-LGPL-EXCEPTION= ${WRKSRC}/LICENSE.NOKIA-LGPL-EXCEPTION
+LICENSE_PERMS_NOKIA-LGPL-EXCEPTION= dist-mirror dist-sell pkg-mirror pkg-sell auto-accept
+
+DEPRECATED= Depends on expired security/botan2
+EXPIRATION_DATE=2025-06-21
+
+BUILD_DEPENDS= asciidoctor:textproc/rubygem-asciidoctor
+LIB_DEPENDS= libargon2.so:security/libargon2 \
+ libqrencode.so:graphics/libqrencode \
+ libbotan-2.so:security/botan2
+
+USES= cmake compiler:c++17-lang desktop-file-utils pkgconfig qt:5 \
+ readline shared-mime-info tar:xz xorg
+USE_QT= concurrent core dbus gui network svg widgets buildtools:build \
+ linguisttools:build qmake:build testlib:build x11extras
+USE_XORG= x11
+
+WRKSRC= ${WRKDIR}/${DISTNAME:S/-src//}
+CMAKE_OFF= WITH_XC_UPDATECHECK
+
+CONFLICTS_INSTALL= keepassx-0.* keepassx2 keepassx
+
+OPTIONS_DEFINE= AUTOTYPE BROWSER FDOSECRETS KEESHARE NETWORKING SSHAGENT YUBIKEY TEST
+OPTIONS_DEFAULT= AUTOTYPE BROWSER FDOSECRETS KEESHARE NETWORKING SSHAGENT YUBIKEY
+OPTIONS_SUB= yes
+
+AUTOTYPE_CMAKE_BOOL= WITH_XC_AUTOTYPE
+AUTOTYPE_DESC= Auto-type passwords in input fields
+AUTOTYPE_USE= XORG=xi,xtst
+
+BROWSER_CMAKE_BOOL= WITH_XC_BROWSER
+BROWSER_DESC= Browser integration with KeePassXC-Browser
+
+FDOSECRETS_CMAKE_BOOL= WITH_XC_FDOSECRETS
+FDOSECRETS_DESC= freedesktop.org secrets service support
+
+KEESHARE_CMAKE_BOOL= WITH_XC_KEESHARE
+KEESHARE_DESC= Sharing integration with KeeShare
+KEESHARE_USES= minizip
+
+# Legacy/Deprecated.
+NETWORKING_CMAKE_BOOL= WITH_XC_NETWORKING
+NETWORKING_DESC= Networking support (e.g. for downloading website icons)
+
+SSHAGENT_CMAKE_BOOL= WITH_XC_SSHAGENT
+SSHAGENT_DESC= SSH agent support
+
+YUBIKEY_CMAKE_BOOL= WITH_XC_YUBIKEY
+YUBIKEY_DESC= YubiKey support
+YUBIKEY_LIB_DEPENDS= libpcsclite.so:devel/pcsc-lite
+
+TEST_CMAKE_BOOL= WITH_TESTS WITH_GUI_TESTS
+TEST_TEST_TARGET= test
+
+.include <bsd.port.mk>
diff --git a/security/keepassxc276/distinfo b/security/keepassxc276/distinfo
new file mode 100644
index 000000000000..25f70dd938b3
--- /dev/null
+++ b/security/keepassxc276/distinfo
@@ -0,0 +1,3 @@
+TIMESTAMP = 1692163985
+SHA256 (keepassxc-2.7.6-src.tar.xz) = a58074509fa8e90f152c6247f73e75e126303081f55eedb4ea0cbb6fa980d670
+SIZE (keepassxc-2.7.6-src.tar.xz) = 8474624
diff --git a/security/keepassxc276/files/patch-src_thirdparty_ykcore_CMakeLists.txt b/security/keepassxc276/files/patch-src_thirdparty_ykcore_CMakeLists.txt
new file mode 100644
index 000000000000..af4cb68d5d09
--- /dev/null
+++ b/security/keepassxc276/files/patch-src_thirdparty_ykcore_CMakeLists.txt
@@ -0,0 +1,11 @@
+--- src/thirdparty/ykcore/CMakeLists.txt.orig 2022-03-21 22:47:20 UTC
++++ src/thirdparty/ykcore/CMakeLists.txt
+@@ -27,7 +27,7 @@ elseif(UNIX AND NOT APPLE)
+ elseif(UNIX AND NOT APPLE)
+ target_sources(ykcore PRIVATE ykcore_libusb-1.0.c)
+
+- find_library(LIBUSB_LIBRARY NAMES usb-1.0)
++ find_library(LIBUSB_LIBRARY NAMES usb-1.0 usb)
+ find_path(LIBUSB_INCLUDE_DIR NAMES libusb.h PATH_SUFFIXES "libusb-1.0" "libusb")
+ if(NOT LIBUSB_LIBRARY OR NOT LIBUSB_INCLUDE_DIR)
+ message(FATAL_ERROR "libusb-1.0 dev package required, but not found")
diff --git a/security/keepassxc276/pkg-descr b/security/keepassxc276/pkg-descr
new file mode 100644
index 000000000000..f71cf7e984f7
--- /dev/null
+++ b/security/keepassxc276/pkg-descr
@@ -0,0 +1,22 @@
+KeePassXC is a community fork of KeePassX, a native cross-platform port of
+KeePass Password Safe, with the goal to extend and improve it with new features
+and bugfixes to provide a feature-rich, fully cross-platform and modern
+open-source password manager.
+
+Main Features
+
+ * Secure storage with AES, Twofish or ChaCha20 encryption
+ * File format compatibility with KeePass2, KeePassX, MacPass, KeeWeb and many
+ others (KDBX 3.1 and 4.0)
+ * SSH Agent integration
+ * Passwords synchronization using KeeShare
+ * Auto-Type for automagically filling in login forms
+ * Key file and YubiKey challenge-response support for additional security
+ * TOTP generation (including Steam Guard)
+ * CSV import from other password managers (e.g., LastPass)
+ * Command line interface
+ * Custom icons for database entries and download of website favicons
+ * Database merge functionality
+ * Automatic reload when the database was changed externally
+ * Browser integration with KeePassXC-Browser for Google Chrome, Chromium,
+ Vivaldi, and Mozilla Firefox.
diff --git a/security/keepassxc276/pkg-plist b/security/keepassxc276/pkg-plist
new file mode 100644
index 000000000000..28f44ae6c9c8
--- /dev/null
+++ b/security/keepassxc276/pkg-plist
@@ -0,0 +1,67 @@
+bin/keepassxc
+bin/keepassxc-cli
+%%BROWSER%%bin/keepassxc-proxy
+%%AUTOTYPE%%lib/keepassxc/libkeepassxc-autotype-xcb.so
+share/man/man1/keepassxc-cli.1.gz
+share/man/man1/keepassxc.1.gz
+share/applications/org.keepassxc.KeePassXC.desktop
+share/icons/hicolor/256x256/apps/keepassxc.png
+share/icons/hicolor/scalable/apps/keepassxc-locked.svg
+share/icons/hicolor/scalable/apps/keepassxc-monochrome-dark-locked.svg
+share/icons/hicolor/scalable/apps/keepassxc-monochrome-dark.svg
+share/icons/hicolor/scalable/apps/keepassxc-monochrome-light-locked.svg
+share/icons/hicolor/scalable/apps/keepassxc-monochrome-light.svg
+share/icons/hicolor/scalable/apps/keepassxc-unlocked.svg
+share/icons/hicolor/scalable/apps/keepassxc.svg
+share/icons/hicolor/scalable/mimetypes/application-x-keepassxc.svg
+%%DATADIR%%/docs/KeePassXC_GettingStarted.html
+%%DATADIR%%/docs/KeePassXC_KeyboardShortcuts.html
+%%DATADIR%%/docs/KeePassXC_UserGuide.html
+%%DATADIR%%/icons/application/256x256/apps/keepassxc.png
+%%DATADIR%%/translations/keepassxc_ar.qm
+%%DATADIR%%/translations/keepassxc_bg.qm
+%%DATADIR%%/translations/keepassxc_ca.qm
+%%DATADIR%%/translations/keepassxc_cs.qm
+%%DATADIR%%/translations/keepassxc_da.qm
+%%DATADIR%%/translations/keepassxc_de.qm
+%%DATADIR%%/translations/keepassxc_el.qm
+%%DATADIR%%/translations/keepassxc_en.qm
+%%DATADIR%%/translations/keepassxc_en_GB.qm
+%%DATADIR%%/translations/keepassxc_en_US.qm
+%%DATADIR%%/translations/keepassxc_es.qm
+%%DATADIR%%/translations/keepassxc_et.qm
+%%DATADIR%%/translations/keepassxc_fi.qm
+%%DATADIR%%/translations/keepassxc_fil.qm
+%%DATADIR%%/translations/keepassxc_fr.qm
+%%DATADIR%%/translations/keepassxc_fr_CA.qm
+%%DATADIR%%/translations/keepassxc_he.qm
+%%DATADIR%%/translations/keepassxc_hr.qm
+%%DATADIR%%/translations/keepassxc_hu.qm
+%%DATADIR%%/translations/keepassxc_id.qm
+%%DATADIR%%/translations/keepassxc_it.qm
+%%DATADIR%%/translations/keepassxc_ja.qm
+%%DATADIR%%/translations/keepassxc_km.qm
+%%DATADIR%%/translations/keepassxc_ko.qm
+%%DATADIR%%/translations/keepassxc_lt.qm
+%%DATADIR%%/translations/keepassxc_my.qm
+%%DATADIR%%/translations/keepassxc_nb.qm
+%%DATADIR%%/translations/keepassxc_nl.qm
+%%DATADIR%%/translations/keepassxc_pl.qm
+%%DATADIR%%/translations/keepassxc_pt_BR.qm
+%%DATADIR%%/translations/keepassxc_pt_PT.qm
+%%DATADIR%%/translations/keepassxc_ro.qm
+%%DATADIR%%/translations/keepassxc_ru.qm
+%%DATADIR%%/translations/keepassxc_si.qm
+%%DATADIR%%/translations/keepassxc_sk.qm
+%%DATADIR%%/translations/keepassxc_sl.qm
+%%DATADIR%%/translations/keepassxc_sq.qm
+%%DATADIR%%/translations/keepassxc_sr.qm
+%%DATADIR%%/translations/keepassxc_sv.qm
+%%DATADIR%%/translations/keepassxc_th.qm
+%%DATADIR%%/translations/keepassxc_tr.qm
+%%DATADIR%%/translations/keepassxc_uk.qm
+%%DATADIR%%/translations/keepassxc_zh_CN.qm
+%%DATADIR%%/translations/keepassxc_zh_TW.qm
+%%DATADIR%%/wordlists/eff_large.wordlist
+share/metainfo/org.keepassxc.KeePassXC.appdata.xml
+share/mime/packages/keepassxc.xml
diff --git a/security/lego/Makefile b/security/lego/Makefile
index f10952e5b645..d6919c372941 100644
--- a/security/lego/Makefile
+++ b/security/lego/Makefile
@@ -1,6 +1,6 @@
PORTNAME= lego
DISTVERSIONPREFIX= v
-DISTVERSION= 4.23.1
+DISTVERSION= 4.25.1
CATEGORIES= security
MAINTAINER= matt@matthoran.com
@@ -12,7 +12,7 @@ LICENSE_FILE= ${WRKSRC}/LICENSE
RUN_DEPENDS= ${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
-USES= go:1.23,modules
+USES= go:modules
GO_MODULE= github.com/go-acme/lego/v4
GO_TARGET= ./cmd/lego
GO_BUILDFLAGS= -ldflags '-X "main.version=${DISTVERSION}"'
diff --git a/security/lego/distinfo b/security/lego/distinfo
index a001c40416e0..38327b4fc1b1 100644
--- a/security/lego/distinfo
+++ b/security/lego/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1744909990
-SHA256 (go/security_lego/lego-v4.23.1/v4.23.1.mod) = fbe813f20f296ae07f773c7173d0e32b698990fb403d0c83dca3dc9ca34eacd7
-SIZE (go/security_lego/lego-v4.23.1/v4.23.1.mod) = 10512
-SHA256 (go/security_lego/lego-v4.23.1/v4.23.1.zip) = 7e6b351fe919e632aa1d5acc8a544d1549e8641391eaed58774998d2cbb4f845
-SIZE (go/security_lego/lego-v4.23.1/v4.23.1.zip) = 1461472
+TIMESTAMP = 1753224987
+SHA256 (go/security_lego/lego-v4.25.1/v4.25.1.mod) = d4a62b1d418a18edeb1389150c8d2b6726ce7dd8fb4b4f17958562a5e0136884
+SIZE (go/security_lego/lego-v4.25.1/v4.25.1.mod) = 10758
+SHA256 (go/security_lego/lego-v4.25.1/v4.25.1.zip) = 3227df424f99eabfb24cba0a636fb710a5084212fd9051385a63fea6c9f7321b
+SIZE (go/security_lego/lego-v4.25.1/v4.25.1.zip) = 1562186
diff --git a/security/openfortivpn/Makefile b/security/openfortivpn/Makefile
index e9f4da01f83b..0e94e48435c8 100644
--- a/security/openfortivpn/Makefile
+++ b/security/openfortivpn/Makefile
@@ -19,7 +19,7 @@ GH_ACCOUNT= adrienverge
GNU_CONFIGURE= yes
CONFIGURE_ENV= ac_cv_path_SED=${LOCALBASE}/bin/gsed \
- OPENSSL_CFLAGS=${OPENSSLINC} \
+ OPENSSL_CFLAGS=-I${OPENSSLINC} \
OPENSSL_LIBS="-L${OPENSSLLIB} -lssl -lcrypto" \
ac_cv_header_net_route_h=yes
diff --git a/security/openvpn-auth-oauth2/Makefile b/security/openvpn-auth-oauth2/Makefile
index 7856f7faa59a..a9d82abdcb09 100644
--- a/security/openvpn-auth-oauth2/Makefile
+++ b/security/openvpn-auth-oauth2/Makefile
@@ -1,7 +1,6 @@
PORTNAME= openvpn-auth-oauth2
DISTVERSIONPREFIX= v
-DISTVERSION= 1.24.0
-PORTREVISION= 1
+DISTVERSION= 1.24.1
CATEGORIES= security net net-vpn
MAINTAINER= otis@FreeBSD.org
diff --git a/security/openvpn-auth-oauth2/distinfo b/security/openvpn-auth-oauth2/distinfo
index 65bdf59a48f1..bf0f18a8f81b 100644
--- a/security/openvpn-auth-oauth2/distinfo
+++ b/security/openvpn-auth-oauth2/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1750538779
-SHA256 (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.0/v1.24.0.mod) = cf3d2994878a3a111e074a20790a0601c70c68202c2a54702aa09fb62dd5d9dd
-SIZE (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.0/v1.24.0.mod) = 1329
-SHA256 (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.0/v1.24.0.zip) = bb420b79a1ca9fc94ecc859c0663eb00b6672ee9aacfad0367c319954f1b047e
-SIZE (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.0/v1.24.0.zip) = 1869608
+TIMESTAMP = 1752923767
+SHA256 (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.1/v1.24.1.mod) = 7d3079b58c7a71ba2ef004c3f19ab7a5a0c48a131e6ae65f353ad2670bb5b090
+SIZE (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.1/v1.24.1.mod) = 1370
+SHA256 (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.1/v1.24.1.zip) = 642cd0ec8b057bfad179541b1920f848c16458cebb1821f334b27e89617695ff
+SIZE (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.1/v1.24.1.zip) = 1873530
diff --git a/security/py-cybox/Makefile b/security/py-cybox/Makefile
index 5380ef49a79a..d6829f5065fc 100644
--- a/security/py-cybox/Makefile
+++ b/security/py-cybox/Makefile
@@ -1,7 +1,7 @@
PORTNAME= cybox
PORTVERSION= 2.1.0.21
DISTVERSIONPREFIX= v
-PORTREVISION= 2
+PORTREVISION= 3
CATEGORIES= security python
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
@@ -13,7 +13,7 @@ LICENSE= BSD3CLAUSE
LICENSE_FILE= ${WRKSRC}/LICENSE.txt
RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}python-dateutil>=0:devel/py-python-dateutil@${PY_FLAVOR} \
- ${PYTHON_PKGNAMEPREFIX}lxml>=2.2.3:devel/py-lxml@${PY_FLAVOR} \
+ ${PYTHON_PKGNAMEPREFIX}lxml5>=2.2.3:devel/py-lxml5@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}mixbox>=1.0.2:security/py-mixbox@${PY_FLAVOR}
TEST_DEPENDS= ${PYTHON_PKGNAMEPREFIX}nose>=0:devel/py-nose@${PY_FLAVOR}
diff --git a/security/py-maec/Makefile b/security/py-maec/Makefile
index f03bb0997f05..eb40a7d2fa9b 100644
--- a/security/py-maec/Makefile
+++ b/security/py-maec/Makefile
@@ -1,6 +1,6 @@
PORTNAME= maec
PORTVERSION= 4.1.0.17
-PORTREVISION= 1
+PORTREVISION= 2
DISTVERSIONPREFIX= v
CATEGORIES= security python
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
@@ -12,7 +12,7 @@ WWW= https://github.com/MAECProject/python-maec
LICENSE= BSD3CLAUSE
LICENSE_FILE= ${WRKSRC}/LICENSE.txt
-RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}lxml>=2.2.3:devel/py-lxml@${PY_FLAVOR} \
+RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}lxml5>=2.2.3:devel/py-lxml5@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}cybox>=2.1.0.13:security/py-cybox@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}mixbox>=0.0.13:security/py-mixbox@${PY_FLAVOR}
TEST_DEPENDS= ${PYTHON_PKGNAMEPREFIX}nose>=0:devel/py-nose@${PY_FLAVOR}
diff --git a/security/py-mixbox/Makefile b/security/py-mixbox/Makefile
index fb026db3022c..af0835f1254e 100644
--- a/security/py-mixbox/Makefile
+++ b/security/py-mixbox/Makefile
@@ -1,6 +1,6 @@
PORTNAME= mixbox
PORTVERSION= 1.0.5
-PORTREVISION= 2
+PORTREVISION= 3
CATEGORIES= security python
MASTER_SITES= PYPI
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
@@ -12,7 +12,7 @@ WWW= https://github.com/CybOXProject/mixbox
LICENSE= BSD3CLAUSE
RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}python-dateutil>=0:devel/py-python-dateutil@${PY_FLAVOR} \
- ${PYTHON_PKGNAMEPREFIX}lxml>=0:devel/py-lxml@${PY_FLAVOR} \
+ ${PYTHON_PKGNAMEPREFIX}lxml5>=0:devel/py-lxml5@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}ordered-set>=0:devel/py-ordered-set@${PY_FLAVOR}
NO_ARCH= yes
diff --git a/security/py-ospd-openvas/Makefile b/security/py-ospd-openvas/Makefile
index f712dc948669..c7029aa90cce 100644
--- a/security/py-ospd-openvas/Makefile
+++ b/security/py-ospd-openvas/Makefile
@@ -1,6 +1,7 @@
PORTNAME= ospd-openvas
DISTVERSION= 22.9.0
DISTVERSIONPREFIX= v
+PORTREVISION= 1
CATEGORIES= security python
#MASTER_SITES= PYPI
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
@@ -18,7 +19,7 @@ RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}redis>=0:databases/py-redis@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}packaging>=0:devel/py-packaging@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}defusedxml>=0:devel/py-defusedxml@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}deprecated>0:devel/py-deprecated@${PY_FLAVOR} \
- ${PYTHON_PKGNAMEPREFIX}lxml>0:devel/py-lxml@${PY_FLAVOR} \
+ ${PYTHON_PKGNAMEPREFIX}lxml5>0:devel/py-lxml5@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}paramiko>0:security/py-paramiko@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}python-gnupg>0:security/py-python-gnupg@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}paho-mqtt>0:net/py-paho-mqtt@${PY_FLAVOR} \
diff --git a/security/py-pykeepass/Makefile b/security/py-pykeepass/Makefile
index 6856c073a1a3..84c0e4e45cbe 100644
--- a/security/py-pykeepass/Makefile
+++ b/security/py-pykeepass/Makefile
@@ -1,6 +1,7 @@
PORTNAME= pykeepass
DISTVERSION= 4.1.1
DISTVERSIONSUFFIX= .post1
+PORTREVISION= 1
CATEGORIES= security python
MASTER_SITES= PYPI
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
@@ -17,7 +18,7 @@ BUILD_DEPENDS= ${PY_SETUPTOOLS} \
${PYTHON_PKGNAMEPREFIX}wheel>0:devel/py-wheel@${PY_FLAVOR}
RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}argon2-cffi>=0:security/py-argon2-cffi@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}construct>=0:devel/py-construct@${PY_FLAVOR} \
- ${PYTHON_PKGNAMEPREFIX}lxml>=0:devel/py-lxml@${PY_FLAVOR} \
+ ${PYTHON_PKGNAMEPREFIX}lxml5>=0:devel/py-lxml5@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}pycryptodomex>=0:security/py-pycryptodomex@${PY_FLAVOR}
USES= python
diff --git a/security/py-python-cas/Makefile b/security/py-python-cas/Makefile
index afdb7b8656e8..2f174cd20904 100644
--- a/security/py-python-cas/Makefile
+++ b/security/py-python-cas/Makefile
@@ -1,6 +1,6 @@
PORTNAME= python-cas
PORTVERSION= 1.6.0
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= security python
MASTER_SITES= PYPI
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
@@ -14,7 +14,7 @@ LICENSE_FILE= ${WRKSRC}/LICENSE.txt
RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}six>=1.10.0:devel/py-six@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}requests>=2.11.1:www/py-requests@${PY_FLAVOR} \
- ${PYTHON_PKGNAMEPREFIX}lxml>=3.4:devel/py-lxml@${PY_FLAVOR}
+ ${PYTHON_PKGNAMEPREFIX}lxml5>=3.4:devel/py-lxml5@${PY_FLAVOR}
USES= python
USE_PYTHON= autoplist distutils
diff --git a/security/py-python3-saml/Makefile b/security/py-python3-saml/Makefile
index a2d8be7364ed..2079f1a1cdb0 100644
--- a/security/py-python3-saml/Makefile
+++ b/security/py-python3-saml/Makefile
@@ -1,5 +1,6 @@
PORTNAME= python3-saml
PORTVERSION= 1.16.0
+PORTREVISION= 1
CATEGORIES= security python
MASTER_SITES= PYPI
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
@@ -16,7 +17,7 @@ BUILD_DEPENDS= ${PYTHON_PKGNAMEPREFIX}poetry-core>=1.1.0:devel/py-poetry-core@${
${PYTHON_PKGNAMEPREFIX}setuptools>=40.1.0:devel/py-setuptools@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}wheel>=0:devel/py-wheel@${PY_FLAVOR}
RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}isodate>=0.6.1:devel/py-isodate@${PY_FLAVOR} \
- ${PYTHON_PKGNAMEPREFIX}lxml>=4.6.5:devel/py-lxml@${PY_FLAVOR} \
+ ${PYTHON_PKGNAMEPREFIX}lxml5>=4.6.5:devel/py-lxml5@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}xmlsec>=1.3.9:security/py-xmlsec@${PY_FLAVOR}
TEST_DEPENDS= ${PYTHON_PKGNAMEPREFIX}coverage>=4.5.2:devel/py-coverage@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}flake8>=3.6.0:devel/py-flake8@${PY_FLAVOR} \
diff --git a/security/py-stix/Makefile b/security/py-stix/Makefile
index bebebd778cb9..d32ce7cc2494 100644
--- a/security/py-stix/Makefile
+++ b/security/py-stix/Makefile
@@ -1,7 +1,7 @@
PORTNAME= stix
PORTVERSION= 1.2.0.11
DISTVERSIONPREFIX= v
-PORTREVISION= 2
+PORTREVISION= 3
CATEGORIES= security python
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
@@ -13,7 +13,7 @@ LICENSE= BSD3CLAUSE
LICENSE_FILE= ${WRKSRC}/LICENSE.txt
RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}python-dateutil>=0:devel/py-python-dateutil@${PY_FLAVOR} \
- ${PYTHON_PKGNAMEPREFIX}lxml>=2.3:devel/py-lxml@${PY_FLAVOR} \
+ ${PYTHON_PKGNAMEPREFIX}lxml5>=2.3:devel/py-lxml5@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}cybox>=2.1.0.13:security/py-cybox@${PY_FLAVOR} \
${PYTHON_PKGNAMEPREFIX}mixbox>=1.0.2:security/py-mixbox@${PY_FLAVOR}
TEST_DEPENDS= ${PYTHON_PKGNAMEPREFIX}nose>=0:devel/py-nose@${PY_FLAVOR} \
diff --git a/security/rats/Makefile b/security/rats/Makefile
index 9afe4a217cfb..dd321556b766 100644
--- a/security/rats/Makefile
+++ b/security/rats/Makefile
@@ -4,7 +4,7 @@ PORTREVISION= 1
CATEGORIES= security devel
MASTER_SITES= https://storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/rough-auditing-tool-for-security/
-MAINTAINER= ports@FreeBSD.org
+MAINTAINER= mauroeldritch@gmail.com
COMMENT= Source code auditing tool
WWW= https://security.web.cern.ch/security/recommendations/en/codetools/rats.shtml
diff --git a/security/secure_delete/Makefile b/security/secure_delete/Makefile
index d5e56ed2a309..6a186d10214c 100644
--- a/security/secure_delete/Makefile
+++ b/security/secure_delete/Makefile
@@ -5,7 +5,7 @@ CATEGORIES= security
MASTER_SITES= PACKETSTORM/groups/thc \
http://freeworld.thc.org/releases/
-MAINTAINER= ports@FreeBSD.org
+MAINTAINER= mauroeldritch@gmail.com
COMMENT= Secure data deletion toolkit
WWW= https://www.thc.org/
diff --git a/security/smurflog/Makefile b/security/smurflog/Makefile
index e1d0d11d3d33..556975a2ecd8 100644
--- a/security/smurflog/Makefile
+++ b/security/smurflog/Makefile
@@ -4,7 +4,7 @@ PORTREVISION= 1
CATEGORIES= security
MASTER_SITES= PACKETSTORM/UNIX/loggers
-MAINTAINER= ports@FreeBSD.org
+MAINTAINER= mauroeldritch@gmail.com
COMMENT= Program to assist logging of smurf attacks
USE_CSTD= gnu89
diff --git a/security/snort3/Makefile b/security/snort3/Makefile
index 6c19698e3065..a8aa50e7c196 100644
--- a/security/snort3/Makefile
+++ b/security/snort3/Makefile
@@ -1,6 +1,5 @@
PORTNAME= snort
-DISTVERSION= 3.9.1.0
-PORTREVISION= 1
+DISTVERSION= 3.9.2.0
PORTEPOCH= 1
CATEGORIES= security
PKGNAMESUFFIX= 3
diff --git a/security/snort3/distinfo b/security/snort3/distinfo
index 948c3a03b335..b0b61e634faf 100644
--- a/security/snort3/distinfo
+++ b/security/snort3/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1751623929
-SHA256 (snort3-snort3-3.9.1.0_GH0.tar.gz) = fc19f20cd34192eb78f28d7f128c79c5d0096733277f2b630a8cf892b10f33ce
-SIZE (snort3-snort3-3.9.1.0_GH0.tar.gz) = 3501016
+TIMESTAMP = 1753181972
+SHA256 (snort3-snort3-3.9.2.0_GH0.tar.gz) = edf0aa5e72d673702bca161e235b7b8f8c3e5a49b81e8ddf2ea7e10736ab0cdd
+SIZE (snort3-snort3-3.9.2.0_GH0.tar.gz) = 3507676
diff --git a/security/snort3/pkg-plist b/security/snort3/pkg-plist
index ac9338536bea..6e0c9db565da 100644
--- a/security/snort3/pkg-plist
+++ b/security/snort3/pkg-plist
@@ -202,6 +202,8 @@ include/snort/pub_sub/eof_event.h
include/snort/pub_sub/eve_process_event.h
include/snort/pub_sub/expect_events.h
include/snort/pub_sub/external_event_ids.h
+include/snort/pub_sub/file_events.h
+include/snort/pub_sub/file_events_ids.h
include/snort/pub_sub/finalize_packet_event.h
include/snort/pub_sub/ftp_events.h
include/snort/pub_sub/http_body_event.h
diff --git a/security/sqlninja/Makefile b/security/sqlninja/Makefile
index 6d6da16f0384..59205a4501fc 100644
--- a/security/sqlninja/Makefile
+++ b/security/sqlninja/Makefile
@@ -3,8 +3,8 @@ DISTVERSION= 0.2.6
CATEGORIES= security
MASTER_SITES= SF/${PORTNAME}/${PORTNAME}
-MAINTAINER= ports@FreeBSD.org
-COMMENT= Sql Server exploit toolkit
+MAINTAINER= mauroeldritch@gmail.com
+COMMENT= SQL Server exploit toolkit
WWW= https://sqlninja.sourceforge.net/
LICENSE= GPLv3+
diff --git a/security/ssss/Makefile b/security/ssss/Makefile
index ed70d272644d..0338d50102b3 100644
--- a/security/ssss/Makefile
+++ b/security/ssss/Makefile
@@ -3,7 +3,7 @@ DISTVERSIONPREFIX= releases/v
DISTVERSION= 0.5.7
CATEGORIES= security
-MAINTAINER= ports@FreeBSD.org
+MAINTAINER= mauroeldritch@gmail.com
COMMENT= Shamir's Secret Sharing Scheme
WWW= http://point-at-infinity.org/ssss/
diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml
index 62da17cbd37a..ee67769de466 100644
--- a/security/vuxml/vuln/2025.xml
+++ b/security/vuxml/vuln/2025.xml
@@ -1,3 +1,62 @@
+ <vuln vid="80411ba2-6729-11f0-a5cb-8c164580114f">
+ <topic>7-Zip -- Multi-byte write heap buffer overflow in NCompress::NRar5::CDecoder</topic>
+ <affects>
+ <package>
+ <name>7-zip</name>
+ <range><lt>25.00</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>security-advisories@github.com reports:</p>
+ <blockquote cite="https://securitylab.github.com/advisories/GHSL-2025-058_7-Zip/">
+ <p>7-Zip is a file archiver with a high compression ratio. Zeroes
+ written outside heap buffer in RAR5 handler may lead to memory
+ corruption and denial of service in versions of 7-Zip prior to
+ 25.0.0. Version 25.0.0 contains a fix for the issue.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2025-53816</cvename>
+ <url>https://nvd.nist.gov/vuln/detail/CVE-2025-53816</url>
+ </references>
+ <dates>
+ <discovery>2025-07-17</discovery>
+ <entry>2025-07-22</entry>
+ </dates>
+ </vuln>
+
+ <vuln vid="605a9d1e-6521-11f0-beb2-ac5afc632ba3">
+ <topic>libwasmtime -- host panic with fd_renumber WASIp1 function</topic>
+ <affects>
+ <package>
+ <name>libwasmtime</name>
+ <range><ge>24.0.0</ge><lt>24.0.4</lt></range>
+ <range><ge>33.0.0</ge><lt>33.0.2</lt></range>
+ <range><ge>34.0.0</ge><lt>34.0.2</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>WasmTime development team reports:</p>
+ <blockquote cite="https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-fm79-3f68-h2fc">
+ <p>A bug in Wasmtime's implementation of the WASIp1 set of import
+ functions can lead to a WebAssembly guest inducing a panic in the
+ host (embedder).</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2025-53901</cvename>
+ <url>https://nvd.nist.gov/vuln/detail/CVE-2025-53901</url>
+ </references>
+ <dates>
+ <discovery>2025-07-18</discovery>
+ <entry>2025-07-20</entry>
+ </dates>
+ </vuln>
+
<vuln vid="e27ee4fc-cdc9-45a1-8242-09898cdbdc91">
<topic>unbound -- Cache poisoning via the ECS-enabled Rebirthday Attack</topic>
<affects>
@@ -1582,7 +1641,7 @@
<affects>
<package>
<name>openh264</name>
- <range><lt>2.5.1</lt></range>
+ <range><lt>2.5.1,2</lt></range>
</package>
</affects>
<description>
diff --git a/security/wipe/Makefile b/security/wipe/Makefile
index 533b05a8ad96..89fe7d1f449c 100644
--- a/security/wipe/Makefile
+++ b/security/wipe/Makefile
@@ -4,7 +4,7 @@ PORTREVISION= 2
CATEGORIES= security
MASTER_SITES= SF
-MAINTAINER= ports@FreeBSD.org
+MAINTAINER= mauroeldritch@gmail.com
COMMENT= File and block device wiping utility
WWW= https://wipe.sourceforge.net/
diff --git a/security/xray-core/Makefile b/security/xray-core/Makefile
index 7b3b738acd20..52570c54d9cb 100644
--- a/security/xray-core/Makefile
+++ b/security/xray-core/Makefile
@@ -1,10 +1,9 @@
PORTNAME= xray-core
DISTVERSIONPREFIX= v
-DISTVERSION= 25.1.30
-PORTREVISION= 3
+DISTVERSION= 25.3.6
CATEGORIES= security
-MASTER_SITES= https://github.com/v2fly/geoip/releases/download/202501190004/:geoip \
- https://github.com/v2fly/domain-list-community/releases/download/20250124154827/:geosite
+MASTER_SITES= https://github.com/v2fly/geoip/releases/download/202503050126/:geoip \
+ https://github.com/v2fly/domain-list-community/releases/download/20250307074130/:geosite
DISTFILES= geoip.dat:geoip \
dlc.dat:geosite
EXTRACT_ONLY= XTLS-Xray-core-v${DISTVERSION}_GH0.tar.gz
@@ -16,16 +15,16 @@ WWW= https://github.com/XTLS/Xray-core
LICENSE= MPL20
LICENSE_FILE= ${WRKSRC}/LICENSE
-USES= go:1.23,modules
+USES= go:1.24,modules
USE_GITHUB= yes
GH_ACCOUNT= XTLS
GH_PROJECT= Xray-core
USE_RC_SUBR= xray
+GO_MOD_DIST= github
GO_MODULE= github.com/${GH_ACCOUNT}/${PORTNAME}
GO_PKGNAME= github.com/${GH_ACCOUNT}/${PORTNAME}
GO_TARGET= ./main:xray
-GO_MOD_DIST= github
SUB_FILES= pkg-message
SUB_LIST= GROUP="${GROUPS}" \
diff --git a/security/xray-core/distinfo b/security/xray-core/distinfo
index 05e69f842e8f..0652578fce25 100644
--- a/security/xray-core/distinfo
+++ b/security/xray-core/distinfo
@@ -1,9 +1,9 @@
-TIMESTAMP = 1738391641
-SHA256 (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/geoip.dat) = 4f8d16184b6938e635519bc91cb978dcea6884878e39f592f7144135401d6bb6
-SIZE (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/geoip.dat) = 19163759
-SHA256 (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/dlc.dat) = ac12d81edc6058b3c66ae96a0a26ca8281616d96ea86d0d77b2ceff34a3e1a9d
-SIZE (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/dlc.dat) = 2187000
-SHA256 (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/go.mod) = dbfd86f224ecc64911a82afbf4391711c13fd02ba96fa59346795cdfb4cf025a
-SIZE (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/go.mod) = 2475
-SHA256 (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/XTLS-Xray-core-v25.1.30_GH0.tar.gz) = 983ee395f085ed1b7fbe0152cb56a5b605a6f70a5645d427c7186c476f14894e
-SIZE (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/XTLS-Xray-core-v25.1.30_GH0.tar.gz) = 629296
+TIMESTAMP = 1741492331
+SHA256 (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/geoip.dat) = 83337c712b04d8c16351cf5a5394eae5cb9cfa257fb4773485945dce65dcea76
+SIZE (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/geoip.dat) = 20567380
+SHA256 (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/dlc.dat) = 17d78a6b0a64e04f2362b2907788d9a192d41a340301e2e63daca415219cf752
+SIZE (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/dlc.dat) = 2220794
+SHA256 (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/go.mod) = d1c0dd5a9ec03dbd6083a75ca86c6cf5c04e6c48a31591224b845197181d5749
+SIZE (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/go.mod) = 2475
+SHA256 (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/XTLS-Xray-core-v25.3.6_GH0.tar.gz) = d62305348deff713767fe1b3c23538e3f8bfe0c96d092f1f95f48c17bc2f5943
+SIZE (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/XTLS-Xray-core-v25.3.6_GH0.tar.gz) = 633356
diff --git a/security/zeek/Makefile b/security/zeek/Makefile
index 6a84daace7de..e9a2bcc78a26 100644
--- a/security/zeek/Makefile
+++ b/security/zeek/Makefile
@@ -1,6 +1,5 @@
PORTNAME= zeek
-DISTVERSION= 7.0.8
-PORTREVISION= 1
+DISTVERSION= 7.0.9
CATEGORIES= security
MASTER_SITES= https://download.zeek.org/
diff --git a/security/zeek/distinfo b/security/zeek/distinfo
index 556e223ec34a..716e78e681b4 100644
--- a/security/zeek/distinfo
+++ b/security/zeek/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1747772619
-SHA256 (zeek-7.0.8.tar.gz) = 29f918851d671fb3d8fe6b97e3d9fcefaa18660c57cb1ed63adc5e25773175cd
-SIZE (zeek-7.0.8.tar.gz) = 95963798
+TIMESTAMP = 1753129322
+SHA256 (zeek-7.0.9.tar.gz) = bebec9a71242da250ef8476bfce632c43892995c247d8dfafcef80ce42f6adbc
+SIZE (zeek-7.0.9.tar.gz) = 95973519