diff options
Diffstat (limited to 'security')
26 files changed, 352 insertions, 73 deletions
diff --git a/security/Makefile b/security/Makefile index 39de649f8d2d..0343c9fd1932 100644 --- a/security/Makefile +++ b/security/Makefile @@ -938,6 +938,7 @@ SUBDIR += py-dfdatetime SUBDIR += py-dfwinreg SUBDIR += py-dirhash + SUBDIR += py-distro2sbom SUBDIR += py-django-auth-kerberos SUBDIR += py-docker-pycreds SUBDIR += py-ecdsa @@ -980,6 +981,7 @@ SUBDIR += py-keyring SUBDIR += py-keyrings.alt SUBDIR += py-krb5 + SUBDIR += py-lib4sbom SUBDIR += py-libnacl SUBDIR += py-liboqs-python SUBDIR += py-m2crypto diff --git a/security/amavisd-new/Makefile b/security/amavisd-new/Makefile index 698c96f64b45..7a01601fa668 100644 --- a/security/amavisd-new/Makefile +++ b/security/amavisd-new/Makefile @@ -1,5 +1,5 @@ PORTNAME= amavisd-new -DISTVERSION= 2.13.1 +DISTVERSION= 2.14.0 PORTEPOCH= 1 CATEGORIES= security @@ -23,7 +23,7 @@ USE_PERL5= run USE_GITLAB= yes GL_ACCOUNT= amavis GL_PROJECT= amavis -GL_TAGNAME= cdd11b069e20a4cb99960614ca9c3eb385d4e200 +GL_TAGNAME= fc0e86edb3fd4fb779e4e906fb1cc61fdf7e6e7f SHEBANG_FILES= bin/amavisd bin/amavisd-agent bin/amavisd-nanny \ bin/amavisd-release bin/amavisd-snmp-subagent \ diff --git a/security/amavisd-new/distinfo b/security/amavisd-new/distinfo index 109ac9ef9616..3cde9f37a62e 100644 --- a/security/amavisd-new/distinfo +++ b/security/amavisd-new/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1747417723 -SHA256 (amavis-amavis-cdd11b069e20a4cb99960614ca9c3eb385d4e200_GL0.tar.gz) = beebeaa0bbdd6d59301d5e140f0d71f716588e6e3fcfe73a26594ff1f2c7704c -SIZE (amavis-amavis-cdd11b069e20a4cb99960614ca9c3eb385d4e200_GL0.tar.gz) = 1132629 +TIMESTAMP = 1752691896 +SHA256 (amavis-amavis-fc0e86edb3fd4fb779e4e906fb1cc61fdf7e6e7f_GL0.tar.gz) = bd722b9096b52d383efcf6b3f91a75399c08973a396e6e27da6efa9733555ef3 +SIZE (amavis-amavis-fc0e86edb3fd4fb779e4e906fb1cc61fdf7e6e7f_GL0.tar.gz) = 1136776 diff --git a/security/gnutls/Makefile b/security/gnutls/Makefile index 7f9712b57b9d..1a372e5bb819 100644 --- a/security/gnutls/Makefile +++ b/security/gnutls/Makefile @@ -1,7 +1,10 @@ PORTNAME= gnutls -DISTVERSION= 3.8.9 +DISTVERSION= 3.8.10 CATEGORIES= security net -MASTER_SITES= GNUPG/${PORTNAME}/v${DISTVERSION:C/(\.[^.]*).*/\1/} +MASTER_SITES= GNUPG/${PORTNAME}/v${DISTVERSION:C/(\.[^.]*).*/\1/} \ + https://gitlab.com/gnutls/gnutls/-/raw/${DISTVERSION}/tests/:test +DISTFILES= ${DISTNAME}${EXTRACT_SUFX} ktls_utils.h:test +EXTRACT_ONLY= ${DISTNAME}${EXTRACT_SUFX} MAINTAINER= tijl@FreeBSD.org COMMENT= GNU Transport Layer Security library @@ -12,10 +15,12 @@ LICENSE_COMB= multi LICENSE_FILE_GPLv3+ = ${WRKSRC}/COPYING LICENSE_FILE_LGPL21+ = ${WRKSRC}/COPYING.LESSERv2 -LIB_DEPENDS= libgmp.so:math/gmp \ +LIB_DEPENDS= libbrotlienc.so:archivers/brotli \ + libgmp.so:math/gmp \ libnettle.so:security/nettle \ libtasn1.so:security/libtasn1 \ - libunistring.so:devel/libunistring + libunistring.so:devel/libunistring \ + libzstd.so:archivers/zstd USES= compiler:c11 cpe gmake iconv libtool localbase makeinfo \ pkgconfig tar:xz @@ -28,11 +33,11 @@ CONFIGURE_ARGS= --disable-rpath \ --enable-openssl-compatibility \ --with-default-trust-store-dir=/etc/ssl/certs \ --with-system-priority-file=${PREFIX}/etc/gnutls/config \ - --without-brotli \ + --with-brotli \ --without-included-libtasn1 \ --without-tpm \ --without-tpm2 \ - --without-zstd + --with-zstd MAKE_ENV= MAKEINFOFLAGS=--no-split INSTALL_TARGET= install-strip @@ -73,6 +78,7 @@ P11KIT_CONFIGURE_WITH= p11-kit SRP_CONFIGURE_ENABLE= srp-authentication post-patch: + @${CP} -p ${DISTDIR}/ktls_utils.h ${WRKSRC}/tests/ @${RM} ${WRKSRC}/doc/*.info* @${REINPLACE_CMD} 's,/usr/share,${PREFIX}/share,' \ ${WRKSRC}/doc/manpages/*.[13] diff --git a/security/gnutls/distinfo b/security/gnutls/distinfo index fe6e2e9317b8..a67d8f2ab573 100644 --- a/security/gnutls/distinfo +++ b/security/gnutls/distinfo @@ -1,3 +1,5 @@ -TIMESTAMP = 1739176636 -SHA256 (gnutls-3.8.9.tar.xz) = 69e113d802d1670c4d5ac1b99040b1f2d5c7c05daec5003813c049b5184820ed -SIZE (gnutls-3.8.9.tar.xz) = 6847364 +TIMESTAMP = 1752249814 +SHA256 (gnutls-3.8.10.tar.xz) = db7fab7cce791e7727ebbef2334301c821d79a550ec55c9ef096b610b03eb6b7 +SIZE (gnutls-3.8.10.tar.xz) = 6909856 +SHA256 (ktls_utils.h) = e41d33289c63573c59d2d02b4110a2f63651add28001031e6dc20327d096b734 +SIZE (ktls_utils.h) = 1983 diff --git a/security/gnutls/files/patch-lib_system_ktls.c b/security/gnutls/files/patch-lib_system_ktls.c new file mode 100644 index 000000000000..3c0dbc6a8734 --- /dev/null +++ b/security/gnutls/files/patch-lib_system_ktls.c @@ -0,0 +1,18 @@ +--- lib/system/ktls.c.orig 2025-04-11 11:51:08 UTC ++++ lib/system/ktls.c +@@ -1076,6 +1076,7 @@ int _gnutls_ktls_recv_control_msg(gnutls_session_t ses + default: + return GNUTLS_E_PULL_ERROR; + } ++#ifdef EKEYEXPIRED + } else if (unlikely(ret == -EKEYEXPIRED)) { + /* This will be received until a keyupdate is performed on the + scoket. */ +@@ -1083,6 +1084,7 @@ int _gnutls_ktls_recv_control_msg(gnutls_session_t ses + "updated keys\n"); + gnutls_assert(); + return GNUTLS_E_AGAIN; ++#endif + } + + /* connection closed */ diff --git a/security/gnutls/pkg-plist b/security/gnutls/pkg-plist index 14edcf814711..45fd3c64ee3a 100644 --- a/security/gnutls/pkg-plist +++ b/security/gnutls/pkg-plist @@ -35,7 +35,7 @@ lib/libgnutls-openssl.so.27 lib/libgnutls-openssl.so.27.0.2 lib/libgnutls.so lib/libgnutls.so.30 -lib/libgnutls.so.30.40.3 +lib/libgnutls.so.30.40.4 lib/libgnutlsxx.so lib/libgnutlsxx.so.30 lib/libgnutlsxx.so.30.0.0 diff --git a/security/kf6-kdesu/distinfo b/security/kf6-kdesu/distinfo index bea35261fd90..52e78e907b29 100644 --- a/security/kf6-kdesu/distinfo +++ b/security/kf6-kdesu/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1749476629 -SHA256 (KDE/frameworks/6.15/kdesu-6.15.0.tar.xz) = 9eb4c11a1742af2cb17cf1e7e18bb0fbdb45ee16f083739c418cbe9d45af1806 -SIZE (KDE/frameworks/6.15/kdesu-6.15.0.tar.xz) = 57012 +TIMESTAMP = 1752529520 +SHA256 (KDE/frameworks/6.16/kdesu-6.16.0.tar.xz) = f9cbfae88596cfd00b269744c89a042dfbc048273e35f1c7e158429db55c8d68 +SIZE (KDE/frameworks/6.16/kdesu-6.16.0.tar.xz) = 57016 diff --git a/security/plasma6-kscreenlocker/distinfo b/security/plasma6-kscreenlocker/distinfo index b29b38d6d151..cd888278e07e 100644 --- a/security/plasma6-kscreenlocker/distinfo +++ b/security/plasma6-kscreenlocker/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1751380541 -SHA256 (KDE/plasma/6.4.2/kscreenlocker-6.4.2.tar.xz) = ef2bc8c2f1f0df75c67778c4208a5ee02c0546356ef8352dd1ffdee867283cc4 -SIZE (KDE/plasma/6.4.2/kscreenlocker-6.4.2.tar.xz) = 183732 +TIMESTAMP = 1752584471 +SHA256 (KDE/plasma/6.4.3/kscreenlocker-6.4.3.tar.xz) = 3441174426fd18524ca59fa2246f9ee99c31dec0fd89eaa79705e6a32d1dcac3 +SIZE (KDE/plasma/6.4.3/kscreenlocker-6.4.3.tar.xz) = 183744 diff --git a/security/plasma6-ksshaskpass/distinfo b/security/plasma6-ksshaskpass/distinfo index 87b4a2ee1759..85e6bb88f3e3 100644 --- a/security/plasma6-ksshaskpass/distinfo +++ b/security/plasma6-ksshaskpass/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1751380542 -SHA256 (KDE/plasma/6.4.2/ksshaskpass-6.4.2.tar.xz) = 6ef3811239c2ec505859f6c483927d6d69a59fbd8d6da41b385a977c231efffc -SIZE (KDE/plasma/6.4.2/ksshaskpass-6.4.2.tar.xz) = 30792 +TIMESTAMP = 1752584472 +SHA256 (KDE/plasma/6.4.3/ksshaskpass-6.4.3.tar.xz) = 965f89a01aa91c07ed5b8aed2be3521f88e98b22e1277846f12440c9760baf10 +SIZE (KDE/plasma/6.4.3/ksshaskpass-6.4.3.tar.xz) = 30796 diff --git a/security/plasma6-kwallet-pam/distinfo b/security/plasma6-kwallet-pam/distinfo index 3eb96bb2863b..2311ddd3d4b4 100644 --- a/security/plasma6-kwallet-pam/distinfo +++ b/security/plasma6-kwallet-pam/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1751380542 -SHA256 (KDE/plasma/6.4.2/kwallet-pam-6.4.2.tar.xz) = fc5578ae860d74ce7695cf0b561a72bcf4730636694d8debfc10c85e97296ae9 -SIZE (KDE/plasma/6.4.2/kwallet-pam-6.4.2.tar.xz) = 22396 +TIMESTAMP = 1752584472 +SHA256 (KDE/plasma/6.4.3/kwallet-pam-6.4.3.tar.xz) = 08151ca03e7b8a8e7696927e3aadc3095cf48081748c983798dac35ab5fd0cde +SIZE (KDE/plasma/6.4.3/kwallet-pam-6.4.3.tar.xz) = 22396 diff --git a/security/py-distro2sbom/Makefile b/security/py-distro2sbom/Makefile new file mode 100644 index 000000000000..01cfe2f6630a --- /dev/null +++ b/security/py-distro2sbom/Makefile @@ -0,0 +1,26 @@ +PORTNAME= distro2sbom +DISTVERSIONPREFIX= v +DISTVERSION= 0.6.0 +CATEGORIES= security python +PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX} + +MAINTAINER= tuukka.pasanen@ilmi.fi +COMMENT= Generates SBOM files from system packaging information +WWW= https://github.com/anthonyharrison/distro2sbom + +LICENSE= APACHE20 +LICENSE_FILE= ${WRKSRC}/LICENSE + +BUILD_DEPENDS= ${PY_SETUPTOOLS} \ + ${PYTHON_PKGNAMEPREFIX}wheel>=0:devel/py-wheel@${PY_FLAVOR} +RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}lib4sbom>=0.8.4:security/py-lib4sbom@${PY_FLAVOR} + +USES= python +USE_GITHUB= yes +GH_ACCOUNT= anthonyharrison +GH_PROJECT= distro2SBOM +USE_PYTHON= autoplist concurrent pep517 + +NO_ARCH= yes + +.include <bsd.port.mk> diff --git a/security/py-distro2sbom/distinfo b/security/py-distro2sbom/distinfo new file mode 100644 index 000000000000..77fc17d09d58 --- /dev/null +++ b/security/py-distro2sbom/distinfo @@ -0,0 +1,3 @@ +TIMESTAMP = 1746491634 +SHA256 (anthonyharrison-distro2SBOM-v0.6.0_GH0.tar.gz) = e810bf8bf29bd85f52e8df9221ababc4605affc5b7ea1177c15c580486c13057 +SIZE (anthonyharrison-distro2SBOM-v0.6.0_GH0.tar.gz) = 24911 diff --git a/security/py-distro2sbom/pkg-descr b/security/py-distro2sbom/pkg-descr new file mode 100644 index 000000000000..4f3c5b3f7bc9 --- /dev/null +++ b/security/py-distro2sbom/pkg-descr @@ -0,0 +1,10 @@ +The DISTRO2SBOM generates a SBOM (Software Bill of Materials) for either an +installed application or a complete system installation in a number of +formats including SPDX and CycloneDX. + +An SBOM for an installed package will identify all of its dependent components. + +It is intended to be used as part of a continuous integration system to enable +accurate records of SBOMs to be maintained and also to support subsequent +audit needs to determine if a particular component (and version) +has been used. diff --git a/security/py-lib4sbom/Makefile b/security/py-lib4sbom/Makefile new file mode 100644 index 000000000000..b4a0f5a61a6d --- /dev/null +++ b/security/py-lib4sbom/Makefile @@ -0,0 +1,86 @@ +PORTNAME= lib4sbom +DISTVERSIONPREFIX= v +DISTVERSION= 0.8.7 +CATEGORIES= security python +PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX} + +MAINTAINER= tuukka.pasanen@ilmi.fi +COMMENT= Software bill of material (SBOM) generator and consumer library +WWW= https://github.com/anthonyharrison/lib4sbom + +LICENSE= APACHE20 +LICENSE_FILE= ${WRKSRC}/LICENSE + +BUILD_DEPENDS= ${PY_SETUPTOOLS} \ + ${PYTHON_PKGNAMEPREFIX}wheel>=0:devel/py-wheel@${PY_FLAVOR} +RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}defusedxml>0:devel/py-defusedxml@${PY_FLAVOR} \ + ${PYTHON_PKGNAMEPREFIX}pyyaml>0:devel/py-pyyaml@${PY_FLAVOR} \ + ${PYTHON_PKGNAMEPREFIX}requests>=2.32:www/py-requests@${PY_FLAVOR} \ + ${PYTHON_PKGNAMEPREFIX}semantic-version>=2.8<3:devel/py-semantic-version@${PY_FLAVOR} \ + ${PYTHON_PKGNAMEPREFIX}xmlschema>0:textproc/py-xmlschema@${PY_FLAVOR} + +USES= python +USE_GITHUB= yes +GH_ACCOUNT= anthonyharrison +USE_PYTHON= autoplist concurrent pep517 pytest +PYTEST_BROKEN_TESTS= test_set_checksum test_set_type test_set_supplier \ + test_set_originator test_set_downloadlocation \ + test_set_homepage test_set_checksum \ + test_set_checksum_multiple test_set_externalreference \ + test_set_checksum test_set_type test_set_supplier \ + test_set_originator test_set_downloadlocation \ + test_set_homepage test_set_checksum \ + test_set_checksum_multiple test_set_externalreference +# There is blank tests are are not implemented yet +PYTEST_IGNORED_TESTS= test_store test_getBOM test_generateTime \ + test_generateDocumentHeader \ + test_generateJSONDocumentHeader \ + test_generateXMLDocumentHeader \ + test_generateRelationship test_generateComponent \ + test_generateJSONComponent test_generateXMLComponent \ + test_parse test_parse_cyclonedx_json test_get_format \ + test_get_type test_generate test_get_sbom \ + test_generate_spdx test_get_spdx test_get_relationships \ + test_get_cyclonedx test_generate_cyclonedx test_close \ + test_file_out test_console_out test_show \ + test_format_json_data test_format_yaml_data \ + test_format_tag_data test_send_output \ + test_generate_output test_parse_file test_get_type \ + test_get_files test_get_packages test_get_relationships \ + test_show test_getBOM test_getRelationships \ + test_generateTag test_generateComment test_generateTime \ + test_generateTagDocumentHeader \ + test_generateJSONDocumentHeader \ + test_generateDocumentHeader test_package_ident \ + test_file_ident test_license_ident \ + test_generateTagPackageDetails \ + test_generateJSONPackageDetails \ + test_generateTagFileDetails \ + test_generateJSONFileDetails \ + test_generatePackageDetails test_generateFileDetails \ + test_generateRelationship test_showRelationship \ + test_parse test_parse_spdx_tag test_parse_spdx_json \ + test_parse_spdx_rdf test_parse_spdx_yaml \ + test_parse_spdx_xml + +NO_ARCH= YES + +PORTEXAMPLES= * + +OPTIONS_DEFINE= EXAMPLES + +post-patch: + ${MV} ${WRKSRC}/test ${WRKSRC}/${PORTNAME} + ${MV} ${WRKSRC}/tools ${WRKSRC}/${PORTNAME} + +post-patch-EXAMPLES-off: + @${RM} -r ${WRKSRC}/examples + +post-stage-EXAMPLES-on: + ${RM} -r ${STAGEDIR}${PYTHONPREFIX_SITELIBDIR}/examples + @${MKDIR} ${STAGEDIR}${EXAMPLESDIR} + ${INSTALL_DATA} ${WRKSRC}/examples/* ${STAGEDIR}${EXAMPLESDIR} + @${REINPLACE_CMD} -e '/\/examples\//d' \ + ${WRKDIR}/.PLIST.pymodtmp + +.include <bsd.port.mk> diff --git a/security/py-lib4sbom/distinfo b/security/py-lib4sbom/distinfo new file mode 100644 index 000000000000..5fe6d1866858 --- /dev/null +++ b/security/py-lib4sbom/distinfo @@ -0,0 +1,3 @@ +TIMESTAMP = 1752670734 +SHA256 (anthonyharrison-lib4sbom-v0.8.7_GH0.tar.gz) = 20b4dec06a8d1bd917cf9ebcf9858d53981073e161a0a0d77f9c1704ecde784e +SIZE (anthonyharrison-lib4sbom-v0.8.7_GH0.tar.gz) = 1848916 diff --git a/security/py-lib4sbom/pkg-descr b/security/py-lib4sbom/pkg-descr new file mode 100644 index 000000000000..1fcb07927c3b --- /dev/null +++ b/security/py-lib4sbom/pkg-descr @@ -0,0 +1,17 @@ +Lib4SBOM is a library to parse and generate Software Bill of Materials (SBOMs). +It supports SBOMs created in both SPDX and CycloneDX formats. + +It has been developed on the assumption that having a generic abstraction of +SBOM regardless of the underlying format will be useful to developers. + +The following facilities are provided: + * Generate SPDX SBOM in TagValue, JSON and YAML formats + * Generate CycloneDX SBOM in JSON format + * Parse SPDX SBOM in TagValue, JSON, YAML, XML and RDF formats + * Parse CycloneDX SBOM in JSON and XMLformat + * Create and manipulate a SBOM file object + * Create and manipulate a SBOM package object + * Create and manipulate a SBOM dependency relationship object + * Create and manipulate a Vulnerability object + * Create and manipulate a Software Service object + * Generated SBOM can be output to a file or to the console diff --git a/security/seahorse/Makefile b/security/seahorse/Makefile index 76b93450b3f5..d7ff8f7417ed 100644 --- a/security/seahorse/Makefile +++ b/security/seahorse/Makefile @@ -1,6 +1,5 @@ PORTNAME= seahorse -PORTVERSION= 41.0 -PORTREVISION= 4 +PORTVERSION= 47.0.1 CATEGORIES= security gnome MASTER_SITES= GNOME DIST_SUBDIR= gnome @@ -10,7 +9,8 @@ PATCHFILES+= aa68522cc696fa491ccfdff735b77bcf113168d0.patch:-p1 # Fix build with MAINTAINER= gnome@FreeBSD.org COMMENT= GNOME application for managing encryption keys (PGP, SSH) -WWW= https://wiki.gnome.org/Apps/Seahorse +WWW= https://wiki.gnome.org/Apps/Seahorse \ + https://gitlab.gnome.org/GNOME/seahorse LICENSE= GPLv2 LICENSE_FILE= ${WRKSRC}/COPYING @@ -22,11 +22,12 @@ LIB_DEPENDS= libgcr-base-3.so:security/gcr3 \ libhandy-1.so:x11-toolkits/libhandy \ libpwquality.so:security/libpwquality \ libsecret-1.so:security/libsecret \ - libsoup-2.4.so:devel/libsoup + libsoup-3.0.so:devel/libsoup3 RUN_DEPENDS= gnupg>=2.1.4:security/gnupg USES= cpe gettext gnome localbase:ldflags meson pkgconfig \ python:build tar:xz vala:build xorg +CPE_VENDOR= gnome USE_CSTD= c99 USE_GNOME= gtk30 GLIB_SCHEMAS= org.gnome.seahorse.gschema.xml \ @@ -34,7 +35,6 @@ GLIB_SCHEMAS= org.gnome.seahorse.gschema.xml \ org.gnome.seahorse.window.gschema.xml USE_LDCONFIG= yes USE_XORG= sm -CPE_VENDOR= gnome MESON_ARGS= -Dcheck-compatible-gpg=false \ -Dhkp-support=true \ diff --git a/security/seahorse/distinfo b/security/seahorse/distinfo index 614fbb838ea0..a57013811960 100644 --- a/security/seahorse/distinfo +++ b/security/seahorse/distinfo @@ -1,5 +1,5 @@ -TIMESTAMP = 1750438455 -SHA256 (gnome/seahorse-41.0.tar.xz) = e6eec09e810448295f547f18c1d5772b65c3edc1d9e5a2595f10b5dde68929f5 -SIZE (gnome/seahorse-41.0.tar.xz) = 1371984 +TIMESTAMP = 1752525378 +SHA256 (gnome/seahorse-47.0.1.tar.xz) = 9c1917e4a61f7febb787849ce36ce717fce706c346880b991d056d54dadbcacc +SIZE (gnome/seahorse-47.0.1.tar.xz) = 1401872 SHA256 (gnome/aa68522cc696fa491ccfdff735b77bcf113168d0.patch) = 026b9ab0bce4b670cc3dd0910cdd5551e5965a32f07e19374c944fd7624bea78 SIZE (gnome/aa68522cc696fa491ccfdff735b77bcf113168d0.patch) = 715 diff --git a/security/seahorse/pkg-plist b/security/seahorse/pkg-plist index 77ce53b2b950..5c0c84e16a23 100644 --- a/security/seahorse/pkg-plist +++ b/security/seahorse/pkg-plist @@ -92,6 +92,50 @@ share/help/ca/seahorse/ssh-import.page share/help/ca/seahorse/subkeys-add.page share/help/ca/seahorse/subkeys-examine.page share/help/ca/seahorse/subkeys-revoke.page +share/help/da/seahorse/about-diff-private-public.page +share/help/da/seahorse/about-pgp.page +share/help/da/seahorse/about-ssh.page +share/help/da/seahorse/concepts.page +share/help/da/seahorse/glossary.page +share/help/da/seahorse/index.page +share/help/da/seahorse/introduction.page +share/help/da/seahorse/key-servers-add.page +share/help/da/seahorse/keyring-change-default.page +share/help/da/seahorse/keyring-create.page +share/help/da/seahorse/keyring-lock.page +share/help/da/seahorse/keyring-unlock.page +share/help/da/seahorse/keyring-update-password.page +share/help/da/seahorse/keyring.page +share/help/da/seahorse/legal.xml +share/help/da/seahorse/media/dialog-password-symbolic.svg +share/help/da/seahorse/media/org.gnome.seahorse.Application.svg +share/help/da/seahorse/misc-key-backup.page +share/help/da/seahorse/misc-key-fingerprint.page +share/help/da/seahorse/passwords-stored-create.page +share/help/da/seahorse/passwords-view.page +share/help/da/seahorse/pgp-create.page +share/help/da/seahorse/pgp-delete.page +share/help/da/seahorse/pgp-expiration-change.page +share/help/da/seahorse/pgp-expired.page +share/help/da/seahorse/pgp-export.page +share/help/da/seahorse/pgp-import.page +share/help/da/seahorse/pgp-photoid.page +share/help/da/seahorse/pgp-publish.page +share/help/da/seahorse/pgp-retrieve-remote.page +share/help/da/seahorse/pgp-sign.page +share/help/da/seahorse/pgp-subkeys.page +share/help/da/seahorse/pgp-sync.page +share/help/da/seahorse/pgp-userid-add.page +share/help/da/seahorse/pgp-userid-primary.page +share/help/da/seahorse/pgp-userid-remove.page +share/help/da/seahorse/pgp-userid.page +share/help/da/seahorse/ssh-connect-remote.page +share/help/da/seahorse/ssh-create.page +share/help/da/seahorse/ssh-export.page +share/help/da/seahorse/ssh-import.page +share/help/da/seahorse/subkeys-add.page +share/help/da/seahorse/subkeys-examine.page +share/help/da/seahorse/subkeys-revoke.page share/help/cs/seahorse/about-diff-private-public.page share/help/cs/seahorse/about-pgp.page share/help/cs/seahorse/about-ssh.page @@ -709,7 +753,8 @@ share/help/uk/seahorse/subkeys-add.page share/help/uk/seahorse/subkeys-examine.page share/help/uk/seahorse/subkeys-revoke.page share/icons/hicolor/scalable/apps/org.gnome.seahorse.Application.svg -share/icons/hicolor/symbolic/apps/org.gnome.seahorse.Application-symbolic.svg +share/icons/hicolor/symbolic/apps/org.gnome.seahorse.Application.svg +share/locale/ab/LC_MESSAGES/seahorse.mo share/locale/ar/LC_MESSAGES/seahorse.mo share/locale/as/LC_MESSAGES/seahorse.mo share/locale/ast/LC_MESSAGES/seahorse.mo @@ -749,9 +794,11 @@ share/locale/hi/LC_MESSAGES/seahorse.mo share/locale/hr/LC_MESSAGES/seahorse.mo share/locale/hu/LC_MESSAGES/seahorse.mo share/locale/id/LC_MESSAGES/seahorse.mo +share/locale/ie/LC_MESSAGES/seahorse.mo share/locale/is/LC_MESSAGES/seahorse.mo share/locale/it/LC_MESSAGES/seahorse.mo share/locale/ja/LC_MESSAGES/seahorse.mo +share/locale/ka/LC_MESSAGES/seahorse.mo share/locale/kk/LC_MESSAGES/seahorse.mo share/locale/kn/LC_MESSAGES/seahorse.mo share/locale/ko/LC_MESSAGES/seahorse.mo diff --git a/security/sudo-rs/Makefile b/security/sudo-rs/Makefile index 5d6bb16de08b..773a9fe74501 100644 --- a/security/sudo-rs/Makefile +++ b/security/sudo-rs/Makefile @@ -1,7 +1,6 @@ PORTNAME= sudo-rs -PORTVERSION= 0.2.6 +PORTVERSION= 0.2.7 DISTVERSIONPREFIX= v -PORTREVISION= 2 CATEGORIES= security MAINTAINER= marc@trifectatech.org @@ -13,8 +12,6 @@ LICENSE_COMB= dual LICENSE_FILE_APACHE20= ${WRKSRC}/LICENSE-APACHE LICENSE_FILE_MIT= ${WRKSRC}/LICENSE-MIT -BUILD_DEPENDS= pandoc:${PORTSDIR}/textproc/hs-pandoc - FLAVORS= default coexist FLAVOR?= ${FLAVORS:[1]} coexist_PKGNAMESUFFIX= -coexist @@ -24,11 +21,10 @@ USES= cargo USE_GITHUB= yes GH_ACCOUNT= trifectatechfoundation -GH_TAGNAME= main CARGO_CRATES= diff-0.1.13 \ glob-0.3.2 \ - libc-0.2.172 \ + libc-0.2.174 \ log-0.4.27 \ pretty_assertions-1.4.1 \ yansi-1.0.1 @@ -52,17 +48,11 @@ PORTDOCS= CHANGELOG.md CONTRIBUTING.md COPYRIGHT LICENSE-* README.md \ OPTIONS_DEFINE= DOCS -post-build: -.for man in sudo.8 visudo.8 sudoers.5 - @${MKDIR} ${WRKDIR}/docs/man - pandoc -s -t man ${WRKSRC}/docs/man/${man}.md -o ${WRKDIR}/docs/man/${man} -.endfor - post-install: ${MV} ${STAGEDIR}${PREFIX}/bin/visudo ${STAGEDIR}${PREFIX}/sbin/visudo${RS_SUFFIX} - ${INSTALL_MAN} ${WRKDIR}/docs/man/sudo.8 ${STAGEDIR}${PREFIX}/share/man/man8/sudo${RS_SUFFIX}.8 - ${INSTALL_MAN} ${WRKDIR}/docs/man/visudo.8 ${STAGEDIR}${PREFIX}/share/man/man8/visudo${RS_SUFFIX}.8 - ${INSTALL_MAN} ${WRKDIR}/docs/man/sudoers.5 ${STAGEDIR}${PREFIX}/share/man/man5/sudoers${RS_SUFFIX}.5 + ${INSTALL_MAN} ${WRKSRC}/docs/man/sudo.8.man ${STAGEDIR}${PREFIX}/share/man/man8/sudo${RS_SUFFIX}.8 + ${INSTALL_MAN} ${WRKSRC}/docs/man/visudo.8.man ${STAGEDIR}${PREFIX}/share/man/man8/visudo${RS_SUFFIX}.8 + ${INSTALL_MAN} ${WRKSRC}/docs/man/sudoers.5.man ${STAGEDIR}${PREFIX}/share/man/man5/sudoers${RS_SUFFIX}.5 ${MKDIR} ${STAGEDIR}${PREFIX}/etc/sudoers.d ${MKDIR} ${STAGEDIR}${PREFIX}/etc/pam.d ${MKDIR} ${STAGEDIR}/var/run/sudo diff --git a/security/sudo-rs/distinfo b/security/sudo-rs/distinfo index 7162c3e88c85..8861ccd86ae0 100644 --- a/security/sudo-rs/distinfo +++ b/security/sudo-rs/distinfo @@ -1,15 +1,15 @@ -TIMESTAMP = 1746636640 +TIMESTAMP = 1752137205 SHA256 (rust/crates/diff-0.1.13.crate) = 56254986775e3233ffa9c4d7d3faaf6d36a2c09d30b20687e9f88bc8bafc16c8 SIZE (rust/crates/diff-0.1.13.crate) = 46216 SHA256 (rust/crates/glob-0.3.2.crate) = a8d1add55171497b4705a648c6b583acafb01d58050a51727785f0b2c8e0a2b2 SIZE (rust/crates/glob-0.3.2.crate) = 22359 -SHA256 (rust/crates/libc-0.2.172.crate) = d750af042f7ef4f724306de029d18836c26c1765a54a6a3f094cbd23a7267ffa -SIZE (rust/crates/libc-0.2.172.crate) = 791646 +SHA256 (rust/crates/libc-0.2.174.crate) = 1171693293099992e19cddea4e8b849964e9846f4acee11b3948bcc337be8776 +SIZE (rust/crates/libc-0.2.174.crate) = 779933 SHA256 (rust/crates/log-0.4.27.crate) = 13dc2df351e3202783a1fe0d44375f7295ffb4049267b0f3018346dc122a1d94 SIZE (rust/crates/log-0.4.27.crate) = 48120 SHA256 (rust/crates/pretty_assertions-1.4.1.crate) = 3ae130e2f271fbc2ac3a40fb1d07180839cdbbe443c7a27e1e3c13c5cac0116d SIZE (rust/crates/pretty_assertions-1.4.1.crate) = 78952 SHA256 (rust/crates/yansi-1.0.1.crate) = cfe53a6657fd280eaa890a3bc59152892ffa3e30101319d168b781ed6529b049 SIZE (rust/crates/yansi-1.0.1.crate) = 75497 -SHA256 (trifectatechfoundation-sudo-rs-v0.2.6-main_GH0.tar.gz) = e50131984916f272c5bdf376b5093e42bca29cce066431f4902ae60edb5a0df5 -SIZE (trifectatechfoundation-sudo-rs-v0.2.6-main_GH0.tar.gz) = 712201 +SHA256 (trifectatechfoundation-sudo-rs-v0.2.7_GH0.tar.gz) = d4e7b49634bf9c8a897a26afe85118ef941ff0914765b8720798821d2fe8c402 +SIZE (trifectatechfoundation-sudo-rs-v0.2.7_GH0.tar.gz) = 736981 diff --git a/security/tscli/Makefile b/security/tscli/Makefile index ee95dd798f73..45cb45cbfb11 100644 --- a/security/tscli/Makefile +++ b/security/tscli/Makefile @@ -1,7 +1,6 @@ PORTNAME= tscli DISTVERSIONPREFIX= v -DISTVERSION= 0.0.12 -PORTREVISION= 1 +DISTVERSION= 0.0.13 CATEGORIES= security MAINTAINER= dtxdf@FreeBSD.org @@ -14,6 +13,8 @@ LICENSE_FILE= ${WRKSRC}/LICENSE USES= go:modules GO_MODULE= github.com/jaxxstorm/tscli GO_TARGET= ./cmd/tscli:tscli +GO_BUILDFLAGS= -ldflags "\ + -X 'github.com/jaxxstorm/tscli/pkg/version.Version=${DISTVERSIONPREFIX}${DISTVERSION}'" PLIST_FILES= bin/tscli diff --git a/security/tscli/distinfo b/security/tscli/distinfo index c862bdf3bdab..6fe138063978 100644 --- a/security/tscli/distinfo +++ b/security/tscli/distinfo @@ -1,5 +1,5 @@ -TIMESTAMP = 1751921200 -SHA256 (go/security_tscli/tscli-v0.0.12/v0.0.12.mod) = 4a82a5521c3fa8eb69ab3e22c18b32be4850ade70791cb0a74fd480c44752d68 -SIZE (go/security_tscli/tscli-v0.0.12/v0.0.12.mod) = 3162 -SHA256 (go/security_tscli/tscli-v0.0.12/v0.0.12.zip) = dc19e7ffdc880bce5b0d527acdaebf8070a01a8af0830a52e4764712407479a4 -SIZE (go/security_tscli/tscli-v0.0.12/v0.0.12.zip) = 112412 +TIMESTAMP = 1752625691 +SHA256 (go/security_tscli/tscli-v0.0.13/v0.0.13.mod) = 4a82a5521c3fa8eb69ab3e22c18b32be4850ade70791cb0a74fd480c44752d68 +SIZE (go/security_tscli/tscli-v0.0.13/v0.0.13.mod) = 3162 +SHA256 (go/security_tscli/tscli-v0.0.13/v0.0.13.zip) = 6468bb6f8ed78c6c08b0125334644b309ce69a61310c9b6240d10bebc67969b5 +SIZE (go/security_tscli/tscli-v0.0.13/v0.0.13.zip) = 115698 diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml index cbc427ef34b8..f96bcf3c4234 100644 --- a/security/vuxml/vuln/2025.xml +++ b/security/vuxml/vuln/2025.xml @@ -1,3 +1,72 @@ + <vuln vid="aeac223e-60e1-11f0-8baa-8447094a420f"> + <topic>liboqs -- Secret-dependent branching in HQC</topic> + <affects> + <package> + <name>liboqs</name> + <range><lt>0.14.0</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The OpenQuantumSafe project reports:</p> + <blockquote cite="https://github.com/open-quantum-safe/liboqs/security/advisories/GHSA-qq3m-rq9v-jfgm"> + <p>Secret-dependent branching in HQC reference implementation when compiled with Clang 17-20 for optimizations above -O0</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2025-52473</cvename> + <url>https://github.com/open-quantum-safe/liboqs/security/advisories/GHSA-qq3m-rq9v-jfgm</url> + </references> + <dates> + <discovery>2025-07-10</discovery> + <entry>2025-07-14</entry> + </dates> + </vuln> + + <vuln vid="c3e1df74-5e73-11f0-95e5-74563cf9e4e9"> + <topic>GnuTLS -- multiple vulnerabilities</topic> + <affects> + <package> + <name>gnutls</name> + <range><lt>3.8.10</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Daiki Ueno reports:</p> + <blockquote cite="https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html"> + <ul> + <li>libgnutls: Fix heap read buffer overrun in parsing X.509 SCTS timestamps + Spotted by oss-fuzz and reported by OpenAI Security Research Team, + and fix developed by Andrew Hamilton. [GNUTLS-SA-2025-07-07-1, + CVSS: medium] [CVE-2025-32989]</li> + <li>libgnutls: Fix double-free upon error when exporting otherName in SAN + Reported by OpenAI Security Research Team. [GNUTLS-SA-2025-07-07-2, + CVSS: low] [CVE-2025-32988]</li> + <li>certtool: Fix 1-byte write buffer overrun when parsing template + Reported by David Aitel. [GNUTLS-SA-2025-07-07-3, + CVSS: low] [CVE-2025-32990]</li> + <li>libgnutls: Fix NULL pointer dereference when 2nd Client Hello omits PSK + Reported by Stefan Bühler. [GNUTLS-SA-2025-07-07-4, CVSS: medium] + [CVE-2025-6395]</li> + </ul> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2025-32989</cvename> + <cvename>CVE-2025-32988</cvename> + <cvename>CVE-2025-32990</cvename> + <cvename>CVE-2025-6395</cvename> + <url>https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html</url> + </references> + <dates> + <discovery>2025-07-09</discovery> + <entry>2025-07-14</entry> + </dates> + </vuln> + <vuln vid="b0a3466f-5efc-11f0-ae84-99047d0a6bcc"> <topic>libxslt -- unmaintained, with multiple unfixed vulnerabilities</topic> <affects> @@ -63,15 +132,15 @@ <affects> <package> <name>libxml2</name> - <range><lt>3.0</lt></range> <!-- needs update once fixed version appears --> + <range><lt>2.14.5</lt></range> </package> <package> <name>linux-c7-libxml2</name> - <range><lt>3.0</lt></range> <!-- needs update once fixed version appears --> + <range><lt>2.14.5</lt></range> <!-- needs update once fixed version appears --> </package> <package> <name>linux-rl9-libxml2</name> - <range><lt>3.0</lt></range> <!-- needs update once fixed version appears --> + <range><lt>2.14.5</lt></range> <!-- needs update once fixed version appears --> </package> </affects> <description> @@ -118,6 +187,7 @@ <dates> <discovery>2025-05-27</discovery> <entry>2025-07-12</entry> + <modified>2025-07-15</modified> </dates> </vuln> @@ -197,18 +267,15 @@ <affects> <package> <name>tomcat110</name> - <range><gt>11.0.0</gt></range> - <range><lt>11.0.9</lt></range> + <range><ge>11.0.0</ge><lt>11.0.9</lt></range> </package> <package> <name>tomcat101</name> - <range><gt>10.1.0</gt></range> - <range><lt>10.1.43</lt></range> + <range><ge>10.1.0</ge><lt>10.1.43</lt></range> </package> <package> <name>tomcat9</name> - <range><gt>9.0.0</gt></range> - <range><lt>9.0.107</lt></range> + <range><ge>9.0.0</ge><lt>9.0.107</lt></range> </package> </affects> <description> @@ -241,6 +308,7 @@ <dates> <discovery>2025-07-10</discovery> <entry>2025-07-10</entry> + <modified>2025-07-15</modified> </dates> </vuln> diff --git a/security/wazuh-manager/Makefile b/security/wazuh-manager/Makefile index b6af1f502bd0..1734493f67ff 100644 --- a/security/wazuh-manager/Makefile +++ b/security/wazuh-manager/Makefile @@ -1,7 +1,7 @@ PORTNAME= wazuh DISTVERSIONPREFIX= v DISTVERSION= 4.12.0 -PORTREVISION= 2 +PORTREVISION= 3 CATEGORIES= security MASTER_SITES= https://packages.wazuh.com/deps/40/libraries/sources/:wazuh_sources \ LOCAL/acm/${PORTNAME}/:wazuh_cache |