summaryrefslogtreecommitdiff
path: root/security
diff options
context:
space:
mode:
Diffstat (limited to 'security')
-rw-r--r--security/certificate_maker/Makefile2
-rw-r--r--security/certificate_maker/distinfo10
-rw-r--r--security/certspotter/Makefile2
-rw-r--r--security/certspotter/distinfo10
-rw-r--r--security/lego/Makefile2
-rw-r--r--security/lego/distinfo10
-rw-r--r--security/openfortivpn/Makefile2
-rw-r--r--security/openfortivpn/distinfo6
-rw-r--r--security/tailscale/Makefile2
-rw-r--r--security/tailscale/distinfo10
-rw-r--r--security/vuxml/vuln/2025.xml28
-rw-r--r--security/wazuh-manager/Makefile2
-rw-r--r--security/wazuh-manager/distinfo28
13 files changed, 71 insertions, 43 deletions
diff --git a/security/certificate_maker/Makefile b/security/certificate_maker/Makefile
index 0f7708fe70b4..54e701528fde 100644
--- a/security/certificate_maker/Makefile
+++ b/security/certificate_maker/Makefile
@@ -1,6 +1,6 @@
PORTNAME= certificate_maker
DISTVERSIONPREFIX= v
-DISTVERSION= 1.8.3
+DISTVERSION= 1.8.4
CATEGORIES= security
MAINTAINER= bofh@FreeBSD.org
diff --git a/security/certificate_maker/distinfo b/security/certificate_maker/distinfo
index 8dea80bb072c..d41ccc9e8620 100644
--- a/security/certificate_maker/distinfo
+++ b/security/certificate_maker/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1765019812
-SHA256 (go/security_certificate_maker/certificate_maker-v1.8.3/v1.8.3.mod) = 9be5a1e97be2a86f88c752392ca2655c197031f2fe0fa29b1ed81e41f18b4ce2
-SIZE (go/security_certificate_maker/certificate_maker-v1.8.3/v1.8.3.mod) = 8493
-SHA256 (go/security_certificate_maker/certificate_maker-v1.8.3/v1.8.3.zip) = 14c77573368b3f785e49e770722732f2f44bd5a423249e283128a905066fd385
-SIZE (go/security_certificate_maker/certificate_maker-v1.8.3/v1.8.3.zip) = 1242599
+TIMESTAMP = 1765962373
+SHA256 (go/security_certificate_maker/certificate_maker-v1.8.4/v1.8.4.mod) = 2c3811d15a01545c8100a4e9ae0d89cad1a6ac207f1aa81d5b66446ca0d6b327
+SIZE (go/security_certificate_maker/certificate_maker-v1.8.4/v1.8.4.mod) = 8556
+SHA256 (go/security_certificate_maker/certificate_maker-v1.8.4/v1.8.4.zip) = 1fd3e380518c93016c4b56ee513cedb867064a957a76f51af1dad7dd79337800
+SIZE (go/security_certificate_maker/certificate_maker-v1.8.4/v1.8.4.zip) = 1242730
diff --git a/security/certspotter/Makefile b/security/certspotter/Makefile
index d8583a525b83..ecaa9019d124 100644
--- a/security/certspotter/Makefile
+++ b/security/certspotter/Makefile
@@ -1,6 +1,6 @@
PORTNAME= certspotter
DISTVERSIONPREFIX= v
-DISTVERSION= 0.19.1
+DISTVERSION= 0.23.0
CATEGORIES= security www
MAINTAINER= flo@FreeBSD.org
diff --git a/security/certspotter/distinfo b/security/certspotter/distinfo
index 772eb53fc419..85fa733c346b 100644
--- a/security/certspotter/distinfo
+++ b/security/certspotter/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1747556137
-SHA256 (go/security_certspotter/certspotter-v0.19.1/v0.19.1.mod) = f0897405fbbb66ce90c065989f7e540c9bd41fff60cb898a7f676065f614ca7f
-SIZE (go/security_certspotter/certspotter-v0.19.1/v0.19.1.mod) = 238
-SHA256 (go/security_certspotter/certspotter-v0.19.1/v0.19.1.zip) = f93902e870a04b6ea0f8a336c5636db8d38aedc993a7918e303035712c867676
-SIZE (go/security_certspotter/certspotter-v0.19.1/v0.19.1.zip) = 100957
+TIMESTAMP = 1765400823
+SHA256 (go/security_certspotter/certspotter-v0.23.0/v0.23.0.mod) = 6adef04d905acf8e56b1d2bca21b1ce4319005a99da0cbc33856c8c832658f84
+SIZE (go/security_certspotter/certspotter-v0.23.0/v0.23.0.mod) = 284
+SHA256 (go/security_certspotter/certspotter-v0.23.0/v0.23.0.zip) = 3f872be4593fd1f14c78b8a4d1223b7ae7da15e04ba4ed5181784a5af92e488c
+SIZE (go/security_certspotter/certspotter-v0.23.0/v0.23.0.zip) = 111010
diff --git a/security/lego/Makefile b/security/lego/Makefile
index 180e0df2aa65..03ea8cf08885 100644
--- a/security/lego/Makefile
+++ b/security/lego/Makefile
@@ -1,6 +1,6 @@
PORTNAME= lego
DISTVERSIONPREFIX= v
-DISTVERSION= 4.29.0
+DISTVERSION= 4.30.1
CATEGORIES= security
MAINTAINER= matt@matthoran.com
diff --git a/security/lego/distinfo b/security/lego/distinfo
index 1e9f5c6269e4..5f049872bc50 100644
--- a/security/lego/distinfo
+++ b/security/lego/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1764930207
-SHA256 (go/security_lego/lego-v4.29.0/v4.29.0.mod) = a17bdec8e819a9e763c3e7fba4805146f738fa430dda64bc0c64cd617afd25f4
-SIZE (go/security_lego/lego-v4.29.0/v4.29.0.mod) = 11062
-SHA256 (go/security_lego/lego-v4.29.0/v4.29.0.zip) = 96639130d037324c87f6165d95256f03edfe403a1518124424051e4829b125ed
-SIZE (go/security_lego/lego-v4.29.0/v4.29.0.zip) = 1718850
+TIMESTAMP = 1766017656
+SHA256 (go/security_lego/lego-v4.30.1/v4.30.1.mod) = 101a981bbcbd24b76ff6b1227d9a7a2247f07ede6918f6e514d2194be9b7a390
+SIZE (go/security_lego/lego-v4.30.1/v4.30.1.mod) = 11049
+SHA256 (go/security_lego/lego-v4.30.1/v4.30.1.zip) = 9379575d83f852278bfa3cbc208739d8d73f3b5b04f51f863ce6cc32b268d2c1
+SIZE (go/security_lego/lego-v4.30.1/v4.30.1.zip) = 1775133
diff --git a/security/openfortivpn/Makefile b/security/openfortivpn/Makefile
index 0e94e48435c8..5e5494ffc4e7 100644
--- a/security/openfortivpn/Makefile
+++ b/security/openfortivpn/Makefile
@@ -1,6 +1,6 @@
PORTNAME= openfortivpn
DISTVERSIONPREFIX= v
-DISTVERSION= 1.23.1
+DISTVERSION= 1.24.0
CATEGORIES= security net-vpn
MAINTAINER= atanubiswas484@gmail.com
diff --git a/security/openfortivpn/distinfo b/security/openfortivpn/distinfo
index 49ff9064b57f..63b97c8b007d 100644
--- a/security/openfortivpn/distinfo
+++ b/security/openfortivpn/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1751220886
-SHA256 (adrienverge-openfortivpn-v1.23.1_GH0.tar.gz) = ecacfc7f18d87f4ff503198177e51a83316b59b4646f31caa8140fdbfaa40389
-SIZE (adrienverge-openfortivpn-v1.23.1_GH0.tar.gz) = 175670
+TIMESTAMP = 1766017037
+SHA256 (adrienverge-openfortivpn-v1.24.0_GH0.tar.gz) = d283cab457c326b7b841c707a67b8468be097b732d9a13ea7fe8ad8ef120a3cc
+SIZE (adrienverge-openfortivpn-v1.24.0_GH0.tar.gz) = 177077
diff --git a/security/tailscale/Makefile b/security/tailscale/Makefile
index 5ef921e49eb8..6a0e79071e56 100644
--- a/security/tailscale/Makefile
+++ b/security/tailscale/Makefile
@@ -1,5 +1,5 @@
PORTNAME= tailscale
-PORTVERSION= 1.92.2
+PORTVERSION= 1.92.3
DISTVERSIONPREFIX= v
CATEGORIES= security net-vpn
diff --git a/security/tailscale/distinfo b/security/tailscale/distinfo
index 14a9eda4ec58..f9cde07389a8 100644
--- a/security/tailscale/distinfo
+++ b/security/tailscale/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1765731669
-SHA256 (go/security_tailscale/tailscale-v1.92.2/v1.92.2.mod) = 19a252dc6b0be5ab7c293a656a5e1570234098b824c3bfa98f6ed674135839b2
-SIZE (go/security_tailscale/tailscale-v1.92.2/v1.92.2.mod) = 21667
-SHA256 (go/security_tailscale/tailscale-v1.92.2/v1.92.2.zip) = b88212d0d13a2261e56a981b76a66d92431d570638852d4308d4e6ae59cb54fd
-SIZE (go/security_tailscale/tailscale-v1.92.2/v1.92.2.zip) = 5559507
+TIMESTAMP = 1765970300
+SHA256 (go/security_tailscale/tailscale-v1.92.3/v1.92.3.mod) = 19a252dc6b0be5ab7c293a656a5e1570234098b824c3bfa98f6ed674135839b2
+SIZE (go/security_tailscale/tailscale-v1.92.3/v1.92.3.mod) = 21667
+SHA256 (go/security_tailscale/tailscale-v1.92.3/v1.92.3.zip) = 0bb6221fc39e615255eccd4b3ed3dc31e19ea792d78176edad12a8ffd6b06306
+SIZE (go/security_tailscale/tailscale-v1.92.3/v1.92.3.zip) = 5559575
diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml
index 5e142e5d9e79..4ab5a4d15b86 100644
--- a/security/vuxml/vuln/2025.xml
+++ b/security/vuxml/vuln/2025.xml
@@ -1,3 +1,31 @@
+ <vuln vid="eca46635-db51-11f0-9b8d-40a6b7c3b3b8">
+ <topic>step-clie -- Authorization Bypass in ACME and SCEP Provisioners</topic>
+ <affects>
+<package>
+<name>step-cli</name>
+<range><lt>0.29.0</lt></range>
+</package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>smallstep reports:</p>
+ <blockquote cite="https://github.com/smallstep/certificates/security/advisories/GHSA-h8cp-697h-8c8p">
+ <p>An attacker can bypass authorization checks and force a Step CA
+ ACME or SCEP provisioner to create certificates without completing
+ certain protocol authorization checks.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2025-44005</cvename>
+ <url>https://github.com/advisories/ghsa-h8cp-697h-8c8p</url>
+ </references>
+ <dates>
+ <discovery>2025-12-03</discovery>
+ <entry>2025-12-17</entry>
+ </dates>
+ </vuln>
+
<vuln vid="6c9318c7-dae9-11f0-80b8-bc241121aa0a">
<topic>FreeBSD -- Remote code execution via ND6 Router Advertisements</topic>
<affects>
diff --git a/security/wazuh-manager/Makefile b/security/wazuh-manager/Makefile
index 545a0c313124..4e9e8b7c2414 100644
--- a/security/wazuh-manager/Makefile
+++ b/security/wazuh-manager/Makefile
@@ -148,7 +148,7 @@ WZPYTHONWHEELS= cffi-1.15.1-cp311-cp311-${FBSD_VERSION_BASE}_${ARCH_BASE}.whl \
greenlet-2.0.2-cp311-cp311-${FBSD_VERSION_BASE}_${ARCH_BASE}.whl \
grpcio-1.69.0-cp311-cp311-${FBSD_VERSION_BASE}_${ARCH_BASE}.whl \
lazy_object_proxy-1.10.0-cp311-cp311-${FBSD_VERSION_BASE}_${ARCH_BASE}.whl \
- MarkupSafe-2.1.2-cp311-cp311-${FBSD_VERSION_BASE}_${ARCH_BASE}.whl \
+ markupsafe-2.1.2-cp311-cp311-${FBSD_VERSION_BASE}_${ARCH_BASE}.whl \
multidict-5.2.0-cp311-cp311-${FBSD_VERSION_BASE}_${ARCH_BASE}.whl \
numpy-1.26.4-cp311-cp311-${FBSD_VERSION_BASE}_${ARCH_BASE}.whl \
psutil-5.9.0-cp311-cp311-${FBSD_VERSION_BASE}_${ARCH_BASE}.whl \
diff --git a/security/wazuh-manager/distinfo b/security/wazuh-manager/distinfo
index a2b9940817fb..b6ada3611ec3 100644
--- a/security/wazuh-manager/distinfo
+++ b/security/wazuh-manager/distinfo
@@ -59,20 +59,20 @@ SHA256 (wazuh-4.14.1/wazuh-cache-any-4.14.1.tar.gz) = 79ef4769856c7c7af6b9f2c2ef
SIZE (wazuh-4.14.1/wazuh-cache-any-4.14.1.tar.gz) = 21536265
SHA256 (wazuh-4.14.1/wazuh-python-4.14.1.tar.gz) = 676478c4aa564cd8ab001e7e8d5ec64a7bce0f9aa6d2de1e77d81749e53eec68
SIZE (wazuh-4.14.1/wazuh-python-4.14.1.tar.gz) = 480480
-SHA256 (wazuh-4.14.1/wazuh-cache-fbsd13-amd64-4.12.0.tar.gz) = 493cc92d6ddfde1b1f796060b9ff7e704c0a13add072e46780541a7f18ca2116
-SIZE (wazuh-4.14.1/wazuh-cache-fbsd13-amd64-4.12.0.tar.gz) = 26641501
-SHA256 (wazuh-4.14.1/wazuh-cache-fbsd14-aarch64-4.12.0.tar.gz) = edee8a08b775aa5d85e1154a4bfc0bb680eb99e390f5e0d8fb4774200748f404
-SIZE (wazuh-4.14.1/wazuh-cache-fbsd14-aarch64-4.12.0.tar.gz) = 24707799
-SHA256 (wazuh-4.14.1/wazuh-cache-fbsd14-amd64-4.14.1.tar.gz) = dc2ec959287223de38bd4cbdc39bb98b0747b54d577ced191f4524fd7e824770
-SIZE (wazuh-4.14.1/wazuh-cache-fbsd14-amd64-4.14.1.tar.gz) = 25054864
-SHA256 (wazuh-4.14.1/wazuh-cache-fbsd15-aarch64-4.12.0.tar.gz) = c63484af8fd157f61b6bf0297b4233c3e2a3eee481f35c7d15fcb5b90d711489
-SIZE (wazuh-4.14.1/wazuh-cache-fbsd15-aarch64-4.12.0.tar.gz) = 24690859
-SHA256 (wazuh-4.14.1/wazuh-cache-fbsd15-amd64-4.12.0.tar.gz) = bf77697d47df3eeb6ccc0d1e43841f5dd3570a7e11e8dd669d5098890b985657
-SIZE (wazuh-4.14.1/wazuh-cache-fbsd15-amd64-4.12.0.tar.gz) = 26650464
-SHA256 (wazuh-4.14.1/wazuh-cache-fbsd16-aarch64-4.12.0.tar.gz) = 1510ef710bcae78e22db88f443504d006e9e4b45d27c66bb84984211409f7e65
-SIZE (wazuh-4.14.1/wazuh-cache-fbsd16-aarch64-4.12.0.tar.gz) = 24863114
-SHA256 (wazuh-4.14.1/wazuh-cache-fbsd16-amd64-4.12.0.tar.gz) = f706a10b1e31dc959e1751a015b3ec2e74ddbda0362ab192ba3918852731635c
-SIZE (wazuh-4.14.1/wazuh-cache-fbsd16-amd64-4.12.0.tar.gz) = 26653845
+SHA256 (wazuh-4.14.1/wazuh-cache-fbsd13-amd64-4.14.1.tar.gz) = 493cc92d6ddfde1b1f796060b9ff7e704c0a13add072e46780541a7f18ca2116
+SIZE (wazuh-4.14.1/wazuh-cache-fbsd13-amd64-4.14.1.tar.gz) = 26641501
+SHA256 (wazuh-4.14.1/wazuh-cache-fbsd14-aarch64-4.14.1.tar.gz) = edee8a08b775aa5d85e1154a4bfc0bb680eb99e390f5e0d8fb4774200748f404
+SIZE (wazuh-4.14.1/wazuh-cache-fbsd14-aarch64-4.14.1.tar.gz) = 24707799
+SHA256 (wazuh-4.14.1/wazuh-cache-fbsd14-amd64-4.14.1.tar.gz) = f2b26a36b116348e3443e7133017713956e8ed2e26eed90e4f396eb55a241eda
+SIZE (wazuh-4.14.1/wazuh-cache-fbsd14-amd64-4.14.1.tar.gz) = 25055515
+SHA256 (wazuh-4.14.1/wazuh-cache-fbsd15-aarch64-4.14.1.tar.gz) = c63484af8fd157f61b6bf0297b4233c3e2a3eee481f35c7d15fcb5b90d711489
+SIZE (wazuh-4.14.1/wazuh-cache-fbsd15-aarch64-4.14.1.tar.gz) = 24690859
+SHA256 (wazuh-4.14.1/wazuh-cache-fbsd15-amd64-4.14.1.tar.gz) = bf77697d47df3eeb6ccc0d1e43841f5dd3570a7e11e8dd669d5098890b985657
+SIZE (wazuh-4.14.1/wazuh-cache-fbsd15-amd64-4.14.1.tar.gz) = 26650464
+SHA256 (wazuh-4.14.1/wazuh-cache-fbsd16-aarch64-4.14.1.tar.gz) = 1510ef710bcae78e22db88f443504d006e9e4b45d27c66bb84984211409f7e65
+SIZE (wazuh-4.14.1/wazuh-cache-fbsd16-aarch64-4.14.1.tar.gz) = 24863114
+SHA256 (wazuh-4.14.1/wazuh-cache-fbsd16-amd64-4.14.1.tar.gz) = f706a10b1e31dc959e1751a015b3ec2e74ddbda0362ab192ba3918852731635c
+SIZE (wazuh-4.14.1/wazuh-cache-fbsd16-amd64-4.14.1.tar.gz) = 26653845
SHA256 (wazuh-4.14.1/wazuh-wazuh-v4.14.1_GH0.tar.gz) = aa59cb2baa7e7d38d8bb4ff6a22afbf2945de4fb555f9b8bb2657b6f89a773ed
SIZE (wazuh-4.14.1/wazuh-wazuh-v4.14.1_GH0.tar.gz) = 19810038
SHA256 (wazuh-4.14.1/alonsobsd-wazuh-freebsd-2f1307c_GH0.tar.gz) = a955c569217122779ab5b6b58bdfabbfa1cd452b4719cc35c791f7047b1f364f