diff options
Diffstat (limited to 'security')
76 files changed, 601 insertions, 206 deletions
diff --git a/security/2fa/Makefile b/security/2fa/Makefile index 7d3c32d7cb6d..9f4f42346567 100644 --- a/security/2fa/Makefile +++ b/security/2fa/Makefile @@ -4,7 +4,7 @@ DISTVERSION= 1.2.0 PORTREVISION= 28 CATEGORIES= security -MAINTAINER= ports@FreeBSD.org +MAINTAINER= mauroeldritch@gmail.com COMMENT= Two-factor authentication on the command line WWW= https://github.com/rsc/2fa diff --git a/security/Makefile b/security/Makefile index 39de649f8d2d..15488729f2b5 100644 --- a/security/Makefile +++ b/security/Makefile @@ -255,6 +255,7 @@ SUBDIR += keepass SUBDIR += keepass-plugin-keepassrpc SUBDIR += keepassxc + SUBDIR += keepassxc276 SUBDIR += keybase SUBDIR += keychain SUBDIR += keyprint @@ -938,6 +939,7 @@ SUBDIR += py-dfdatetime SUBDIR += py-dfwinreg SUBDIR += py-dirhash + SUBDIR += py-distro2sbom SUBDIR += py-django-auth-kerberos SUBDIR += py-docker-pycreds SUBDIR += py-ecdsa @@ -980,6 +982,7 @@ SUBDIR += py-keyring SUBDIR += py-keyrings.alt SUBDIR += py-krb5 + SUBDIR += py-lib4sbom SUBDIR += py-libnacl SUBDIR += py-liboqs-python SUBDIR += py-m2crypto diff --git a/security/amavisd-new/Makefile b/security/amavisd-new/Makefile index 698c96f64b45..7a01601fa668 100644 --- a/security/amavisd-new/Makefile +++ b/security/amavisd-new/Makefile @@ -1,5 +1,5 @@ PORTNAME= amavisd-new -DISTVERSION= 2.13.1 +DISTVERSION= 2.14.0 PORTEPOCH= 1 CATEGORIES= security @@ -23,7 +23,7 @@ USE_PERL5= run USE_GITLAB= yes GL_ACCOUNT= amavis GL_PROJECT= amavis -GL_TAGNAME= cdd11b069e20a4cb99960614ca9c3eb385d4e200 +GL_TAGNAME= fc0e86edb3fd4fb779e4e906fb1cc61fdf7e6e7f SHEBANG_FILES= bin/amavisd bin/amavisd-agent bin/amavisd-nanny \ bin/amavisd-release bin/amavisd-snmp-subagent \ diff --git a/security/amavisd-new/distinfo b/security/amavisd-new/distinfo index 109ac9ef9616..3cde9f37a62e 100644 --- a/security/amavisd-new/distinfo +++ b/security/amavisd-new/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1747417723 -SHA256 (amavis-amavis-cdd11b069e20a4cb99960614ca9c3eb385d4e200_GL0.tar.gz) = beebeaa0bbdd6d59301d5e140f0d71f716588e6e3fcfe73a26594ff1f2c7704c -SIZE (amavis-amavis-cdd11b069e20a4cb99960614ca9c3eb385d4e200_GL0.tar.gz) = 1132629 +TIMESTAMP = 1752691896 +SHA256 (amavis-amavis-fc0e86edb3fd4fb779e4e906fb1cc61fdf7e6e7f_GL0.tar.gz) = bd722b9096b52d383efcf6b3f91a75399c08973a396e6e27da6efa9733555ef3 +SIZE (amavis-amavis-fc0e86edb3fd4fb779e4e906fb1cc61fdf7e6e7f_GL0.tar.gz) = 1136776 diff --git a/security/aws-vault/Makefile b/security/aws-vault/Makefile index fadd02c5fae6..60215a8b20f2 100644 --- a/security/aws-vault/Makefile +++ b/security/aws-vault/Makefile @@ -4,7 +4,7 @@ DISTVERSION= 6.6.2 PORTREVISION= 19 CATEGORIES= security -MAINTAINER= ports@FreeBSD.org +MAINTAINER= mauroeldritch@gmail.com COMMENT= Vault for securely storing and accessing AWS credentials WWW= https://github.com/99designs/aws-vault diff --git a/security/caldera/Makefile b/security/caldera/Makefile index ac4548a93b75..8fd14526775c 100644 --- a/security/caldera/Makefile +++ b/security/caldera/Makefile @@ -1,6 +1,6 @@ PORTNAME= caldera DISTVERSION= 5.3.0 -PORTREVISION= 2 +PORTREVISION= 3 CATEGORIES= security python MAINTAINER= acm@FreeBSD.org @@ -33,7 +33,7 @@ RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}aiohttp>0:www/py-aiohttp@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}donut-shellcode>0:devel/py-donut-shellcode@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}marshmallow-enum>0:devel/py-marshmallow-enum@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}ldap3>0:net/py-ldap3@${PY_FLAVOR} \ - ${PYTHON_PKGNAMEPREFIX}lxml>0:devel/py-lxml@${PY_FLAVOR} \ + ${PYTHON_PKGNAMEPREFIX}lxml5>0:devel/py-lxml5@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}reportlab>0:print/py-reportlab@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}svglib>0:converters/py-svglib@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}markdown>0:textproc/py-markdown@${PY_FLAVOR} \ diff --git a/security/cosign/Makefile b/security/cosign/Makefile index 6ea8e79ac6f6..ae77371b9728 100644 --- a/security/cosign/Makefile +++ b/security/cosign/Makefile @@ -1,7 +1,6 @@ PORTNAME= cosign DISTVERSIONPREFIX= v -DISTVERSION= 2.5.2 -PORTREVISION= 1 +DISTVERSION= 2.5.3 CATEGORIES= security MAINTAINER= bofh@FreeBSD.org @@ -24,7 +23,7 @@ GO_BUILDFLAGS= -ldflags="-buildid= \ PLIST_FILES= bin/${PORTNAME} -GIT_HASH= af5a988bb15a03919ccaac7a2ddcad7a9d006f38 +GIT_HASH= 488ef8ceed5ab5d77379e9077a124a0d0df41d06 .include <bsd.port.pre.mk> diff --git a/security/cosign/distinfo b/security/cosign/distinfo index 621a1398dec8..162267863be7 100644 --- a/security/cosign/distinfo +++ b/security/cosign/distinfo @@ -1,5 +1,5 @@ -TIMESTAMP = 1751444102 -SHA256 (go/security_cosign/cosign-v2.5.2/v2.5.2.mod) = 5bc5ad2f641929f53eeb4fcec33fba55b78a51cf707f53f74feae8a0e7ad0bae -SIZE (go/security_cosign/cosign-v2.5.2/v2.5.2.mod) = 15326 -SHA256 (go/security_cosign/cosign-v2.5.2/v2.5.2.zip) = 91f0aebf97ae40581273a4e44fad958ce7ff02dd232663f9fffd074596efa82e -SIZE (go/security_cosign/cosign-v2.5.2/v2.5.2.zip) = 1274354 +TIMESTAMP = 1752874321 +SHA256 (go/security_cosign/cosign-v2.5.3/v2.5.3.mod) = 3d3e90c2ad6b9f1dc45c9f83c5408d4296d80ae3728998504d9d3e077dd19afe +SIZE (go/security_cosign/cosign-v2.5.3/v2.5.3.mod) = 16693 +SHA256 (go/security_cosign/cosign-v2.5.3/v2.5.3.zip) = e0158a5721ba7c8e2b775af499c07d89957ae42177a1794c8382e1e91901b531 +SIZE (go/security_cosign/cosign-v2.5.3/v2.5.3.zip) = 1335557 diff --git a/security/crowdsec/Makefile b/security/crowdsec/Makefile index e2ad67f55638..9e78e2e9f9a4 100644 --- a/security/crowdsec/Makefile +++ b/security/crowdsec/Makefile @@ -1,7 +1,6 @@ PORTNAME= crowdsec DISTVERSIONPREFIX= v -DISTVERSION= 1.6.9 -PORTREVISION= 1 +DISTVERSION= 1.6.10 CATEGORIES= security MAINTAINER= marco@crowdsec.net @@ -15,7 +14,7 @@ LIB_DEPENDS= libabsl_base.so:devel/abseil \ libre2.so:devel/re2 USES= go:modules pkgconfig -_COMMIT= 40b8cfe6 +_COMMIT= 79870769 _BUILD_DATE= $$(date -u "+%F_%T") USE_RC_SUBR= crowdsec diff --git a/security/crowdsec/distinfo b/security/crowdsec/distinfo index aae70fd870b6..27803f8b958a 100644 --- a/security/crowdsec/distinfo +++ b/security/crowdsec/distinfo @@ -1,5 +1,5 @@ -TIMESTAMP = 1750243893 -SHA256 (go/security_crowdsec/crowdsec-v1.6.9/v1.6.9.mod) = 75ab181433766799f3b54e5e9bb6634c8075e310ec3192a8ae31492ad54f1376 -SIZE (go/security_crowdsec/crowdsec-v1.6.9/v1.6.9.mod) = 10924 -SHA256 (go/security_crowdsec/crowdsec-v1.6.9/v1.6.9.zip) = 3f65b6dc339357172eb2b130ad8c4a1842557d317e05730227abf4f703da5d01 -SIZE (go/security_crowdsec/crowdsec-v1.6.9/v1.6.9.zip) = 1767818 +TIMESTAMP = 1752763731 +SHA256 (go/security_crowdsec/crowdsec-v1.6.10/v1.6.10.mod) = e02f57949b178e642aebe6d7d751494c9b9d8d3b3c6cdad66cf1db17ae1d584a +SIZE (go/security_crowdsec/crowdsec-v1.6.10/v1.6.10.mod) = 10836 +SHA256 (go/security_crowdsec/crowdsec-v1.6.10/v1.6.10.zip) = 67b2de6ea0adacfdd9f673464f9e5dd6b71aa6d71c11c06073130507badc4c27 +SIZE (go/security_crowdsec/crowdsec-v1.6.10/v1.6.10.zip) = 1779682 diff --git a/security/cyrus-sasl2-saslauthd/Makefile b/security/cyrus-sasl2-saslauthd/Makefile index 6c922264b12d..41c6027c54d7 100644 --- a/security/cyrus-sasl2-saslauthd/Makefile +++ b/security/cyrus-sasl2-saslauthd/Makefile @@ -1,4 +1,4 @@ -PORTREVISION= 2 +PORTREVISION= 3 PKGNAMESUFFIX= -saslauthd COMMENT= SASL authentication server for cyrus-sasl2 @@ -53,7 +53,12 @@ OPTIONS_DEFAULT+= GSSAPI_BASE OPTIONS_RADIO_GSSAPI+= GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_BASE_USES= gssapi:base GSSAPI_BASE_CONFIGURE_ON= --enable-gssapi="${GSSAPIBASEDIR}" \ - --with-gss_impl=heimdal + +.if exists(/usr/libexec/krb5kdc) +GSSAPI_BASE_CONFIGURE_ON+= --with-gss_impl=mit +.else +GSSAPI_BASE_CONFIGURE_ON+= --with-gss_impl=heimdal +.endif GSSAPI_HEIMDAL_USES= gssapi:heimdal,flags GSSAPI_HEIMDAL_CONFIGURE_ON= --enable-gssapi="${GSSAPIBASEDIR}" \ --with-gss_impl=heimdal diff --git a/security/fizz/Makefile b/security/fizz/Makefile index 34ec1011e8f7..52d84d866404 100644 --- a/security/fizz/Makefile +++ b/security/fizz/Makefile @@ -1,6 +1,6 @@ PORTNAME= fizz DISTVERSIONPREFIX= v -DISTVERSION= 2025.07.07.00 +DISTVERSION= 2025.07.21.00 CATEGORIES= security MAINTAINER= yuri@FreeBSD.org diff --git a/security/fizz/distinfo b/security/fizz/distinfo index 3adc96cbaa66..61fd5fd39bbb 100644 --- a/security/fizz/distinfo +++ b/security/fizz/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1752053888 -SHA256 (facebookincubator-fizz-v2025.07.07.00_GH0.tar.gz) = 86635b14d000c6e8e61a3edfbd9ad51764c9bf84b3702d73ac6dadff97786c99 -SIZE (facebookincubator-fizz-v2025.07.07.00_GH0.tar.gz) = 759365 +TIMESTAMP = 1753158778 +SHA256 (facebookincubator-fizz-v2025.07.21.00_GH0.tar.gz) = 8e2eef377e81913edb70bd2beb53ed0f3b56048411314c557f8d9028c7b983f1 +SIZE (facebookincubator-fizz-v2025.07.21.00_GH0.tar.gz) = 762878 diff --git a/security/fragroute/Makefile b/security/fragroute/Makefile index f3aaba1e5e3d..5d02041d419c 100644 --- a/security/fragroute/Makefile +++ b/security/fragroute/Makefile @@ -5,7 +5,7 @@ CATEGORIES= security net MASTER_SITES= http://monkey.org/~dugsong/fragroute/ \ PACKETSTORM/UNIX/security -MAINTAINER= ports@FreeBSD.org +MAINTAINER= mauroeldritch@gmail.com COMMENT= Tool for intercepting, modifying, and rewriting egress traffic WWW= https://www.monkey.org/~dugsong/fragroute/ diff --git a/security/gvmd/Makefile b/security/gvmd/Makefile index 0648b0880e09..0e719b8bddbb 100644 --- a/security/gvmd/Makefile +++ b/security/gvmd/Makefile @@ -1,6 +1,6 @@ PORTNAME= gvmd DISTVERSION= 26.0.0 -PORTREVISION= 1 +PORTREVISION= 2 DISTVERSIONPREFIX= v CATEGORIES= security @@ -15,7 +15,7 @@ LIB_DEPENDS= libgvm_base.so:security/gvm-libs \ libgnutls.so:security/gnutls \ libgpgme.so:security/gpgme \ libical.so:devel/libical -RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}lxml>0:devel/py-lxml@${PY_FLAVOR} \ +RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}lxml5>0:devel/py-lxml5@${PY_FLAVOR} \ ${LOCALBASE}/lib/postgresql/libpg-gvm.so:databases/pg-gvm \ doxygen>0:devel/doxygen \ p5-XML-Twig>=0:textproc/p5-XML-Twig \ diff --git a/security/keepassxc/Makefile b/security/keepassxc/Makefile index 4cb9c335c67b..1cd13b8eb820 100644 --- a/security/keepassxc/Makefile +++ b/security/keepassxc/Makefile @@ -1,5 +1,5 @@ PORTNAME= keepassxc -DISTVERSION= 2.7.6 +DISTVERSION= 2.7.10 CATEGORIES= security MASTER_SITES= https://github.com/keepassxreboot/keepassxc/releases/download/${DISTVERSION}/ DISTNAME= ${PORTNAME}-${DISTVERSION}-src @@ -15,13 +15,10 @@ LICENSE_NAME_NOKIA-LGPL-EXCEPTION= Nokia Qt LGPL Exception version 1.1 LICENSE_FILE_NOKIA-LGPL-EXCEPTION= ${WRKSRC}/LICENSE.NOKIA-LGPL-EXCEPTION LICENSE_PERMS_NOKIA-LGPL-EXCEPTION= dist-mirror dist-sell pkg-mirror pkg-sell auto-accept -DEPRECATED= Depends on expired security/botan2 -EXPIRATION_DATE=2025-06-21 - BUILD_DEPENDS= asciidoctor:textproc/rubygem-asciidoctor LIB_DEPENDS= libargon2.so:security/libargon2 \ libqrencode.so:graphics/libqrencode \ - libbotan-2.so:security/botan2 + libbotan-3.so:security/botan3 USES= cmake compiler:c++17-lang desktop-file-utils pkgconfig qt:5 \ readline shared-mime-info tar:xz xorg @@ -32,7 +29,7 @@ USE_XORG= x11 WRKSRC= ${WRKDIR}/${DISTNAME:S/-src//} CMAKE_OFF= WITH_XC_UPDATECHECK -CONFLICTS_INSTALL= keepassx-0.* keepassx2 keepassx +CONFLICTS_INSTALL= keepassx-0.* keepassx2 keepassx keepassxc276 OPTIONS_DEFINE= AUTOTYPE BROWSER FDOSECRETS KEESHARE NETWORKING SSHAGENT YUBIKEY TEST OPTIONS_DEFAULT= AUTOTYPE BROWSER FDOSECRETS KEESHARE NETWORKING SSHAGENT YUBIKEY diff --git a/security/keepassxc/distinfo b/security/keepassxc/distinfo index 25f70dd938b3..6a354c652cb2 100644 --- a/security/keepassxc/distinfo +++ b/security/keepassxc/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1692163985 -SHA256 (keepassxc-2.7.6-src.tar.xz) = a58074509fa8e90f152c6247f73e75e126303081f55eedb4ea0cbb6fa980d670 -SIZE (keepassxc-2.7.6-src.tar.xz) = 8474624 +TIMESTAMP = 1751644926 +SHA256 (keepassxc-2.7.10-src.tar.xz) = 5ce76d6440986c24842585f019d5f3cadc166fa71fc911a4fe97b8bbc4819dfa +SIZE (keepassxc-2.7.10-src.tar.xz) = 9787952 diff --git a/security/keepassxc/files/patch-CMakeLists.txt b/security/keepassxc/files/patch-CMakeLists.txt new file mode 100644 index 000000000000..38c92ebea387 --- /dev/null +++ b/security/keepassxc/files/patch-CMakeLists.txt @@ -0,0 +1,13 @@ +--- CMakeLists.txt.orig 2024-06-19 14:32:55.000000000 -0700 ++++ CMakeLists.txt 2024-06-20 07:26:46.907481000 -0700 +@@ -575,8 +575,8 @@ + include_directories(SYSTEM ${PCSC_INCLUDE_DIRS}) + + if(UNIX AND NOT APPLE) +- find_library(LIBUSB_LIBRARIES NAMES usb-1.0 REQUIRED) +- find_path(LIBUSB_INCLUDE_DIR NAMES libusb.h PATH_SUFFIXES "libusb-1.0" "libusb" REQUIRED) ++ find_library(LIBUSB_LIBRARIES NAMES usb REQUIRED) ++ find_path(LIBUSB_INCLUDE_DIR NAMES libusb.h PATH_SUFFIXES "libusb" "libusb" REQUIRED) + include_directories(SYSTEM ${LIBUSB_INCLUDE_DIR}) + endif() + endif() diff --git a/security/keepassxc276/Makefile b/security/keepassxc276/Makefile new file mode 100644 index 000000000000..e5965d9be9de --- /dev/null +++ b/security/keepassxc276/Makefile @@ -0,0 +1,72 @@ +PORTNAME= keepassxc +DISTVERSION= 2.7.6 +CATEGORIES= security +MASTER_SITES= https://github.com/keepassxreboot/keepassxc/releases/download/${DISTVERSION}/ +PKGNAMESUFFIX= 276 +DISTNAME= ${PORTNAME}-${DISTVERSION}-src + +MAINTAINER= lwhsu@FreeBSD.org +COMMENT= KeePass Cross-platform Community Edition +WWW= https://keepassxc.org + +CONFLICTS= keepassxc-[1-9]* + +LICENSE= APACHE20 BSD3CLAUSE CC0-1.0 GPLv2 GPLv3 LGPL21 LGPL3 MIT \ + NOKIA-LGPL-EXCEPTION +LICENSE_COMB= multi +LICENSE_NAME_NOKIA-LGPL-EXCEPTION= Nokia Qt LGPL Exception version 1.1 +LICENSE_FILE_NOKIA-LGPL-EXCEPTION= ${WRKSRC}/LICENSE.NOKIA-LGPL-EXCEPTION +LICENSE_PERMS_NOKIA-LGPL-EXCEPTION= dist-mirror dist-sell pkg-mirror pkg-sell auto-accept + +DEPRECATED= Depends on expired security/botan2 +EXPIRATION_DATE=2025-06-21 + +BUILD_DEPENDS= asciidoctor:textproc/rubygem-asciidoctor +LIB_DEPENDS= libargon2.so:security/libargon2 \ + libqrencode.so:graphics/libqrencode \ + libbotan-2.so:security/botan2 + +USES= cmake compiler:c++17-lang desktop-file-utils pkgconfig qt:5 \ + readline shared-mime-info tar:xz xorg +USE_QT= concurrent core dbus gui network svg widgets buildtools:build \ + linguisttools:build qmake:build testlib:build x11extras +USE_XORG= x11 + +WRKSRC= ${WRKDIR}/${DISTNAME:S/-src//} +CMAKE_OFF= WITH_XC_UPDATECHECK + +CONFLICTS_INSTALL= keepassx-0.* keepassx2 keepassx + +OPTIONS_DEFINE= AUTOTYPE BROWSER FDOSECRETS KEESHARE NETWORKING SSHAGENT YUBIKEY TEST +OPTIONS_DEFAULT= AUTOTYPE BROWSER FDOSECRETS KEESHARE NETWORKING SSHAGENT YUBIKEY +OPTIONS_SUB= yes + +AUTOTYPE_CMAKE_BOOL= WITH_XC_AUTOTYPE +AUTOTYPE_DESC= Auto-type passwords in input fields +AUTOTYPE_USE= XORG=xi,xtst + +BROWSER_CMAKE_BOOL= WITH_XC_BROWSER +BROWSER_DESC= Browser integration with KeePassXC-Browser + +FDOSECRETS_CMAKE_BOOL= WITH_XC_FDOSECRETS +FDOSECRETS_DESC= freedesktop.org secrets service support + +KEESHARE_CMAKE_BOOL= WITH_XC_KEESHARE +KEESHARE_DESC= Sharing integration with KeeShare +KEESHARE_USES= minizip + +# Legacy/Deprecated. +NETWORKING_CMAKE_BOOL= WITH_XC_NETWORKING +NETWORKING_DESC= Networking support (e.g. for downloading website icons) + +SSHAGENT_CMAKE_BOOL= WITH_XC_SSHAGENT +SSHAGENT_DESC= SSH agent support + +YUBIKEY_CMAKE_BOOL= WITH_XC_YUBIKEY +YUBIKEY_DESC= YubiKey support +YUBIKEY_LIB_DEPENDS= libpcsclite.so:devel/pcsc-lite + +TEST_CMAKE_BOOL= WITH_TESTS WITH_GUI_TESTS +TEST_TEST_TARGET= test + +.include <bsd.port.mk> diff --git a/security/keepassxc276/distinfo b/security/keepassxc276/distinfo new file mode 100644 index 000000000000..25f70dd938b3 --- /dev/null +++ b/security/keepassxc276/distinfo @@ -0,0 +1,3 @@ +TIMESTAMP = 1692163985 +SHA256 (keepassxc-2.7.6-src.tar.xz) = a58074509fa8e90f152c6247f73e75e126303081f55eedb4ea0cbb6fa980d670 +SIZE (keepassxc-2.7.6-src.tar.xz) = 8474624 diff --git a/security/keepassxc276/files/patch-src_thirdparty_ykcore_CMakeLists.txt b/security/keepassxc276/files/patch-src_thirdparty_ykcore_CMakeLists.txt new file mode 100644 index 000000000000..af4cb68d5d09 --- /dev/null +++ b/security/keepassxc276/files/patch-src_thirdparty_ykcore_CMakeLists.txt @@ -0,0 +1,11 @@ +--- src/thirdparty/ykcore/CMakeLists.txt.orig 2022-03-21 22:47:20 UTC ++++ src/thirdparty/ykcore/CMakeLists.txt +@@ -27,7 +27,7 @@ elseif(UNIX AND NOT APPLE)
+ elseif(UNIX AND NOT APPLE)
+ target_sources(ykcore PRIVATE ykcore_libusb-1.0.c)
+
+- find_library(LIBUSB_LIBRARY NAMES usb-1.0)
++ find_library(LIBUSB_LIBRARY NAMES usb-1.0 usb)
+ find_path(LIBUSB_INCLUDE_DIR NAMES libusb.h PATH_SUFFIXES "libusb-1.0" "libusb")
+ if(NOT LIBUSB_LIBRARY OR NOT LIBUSB_INCLUDE_DIR)
+ message(FATAL_ERROR "libusb-1.0 dev package required, but not found")
diff --git a/security/keepassxc276/pkg-descr b/security/keepassxc276/pkg-descr new file mode 100644 index 000000000000..f71cf7e984f7 --- /dev/null +++ b/security/keepassxc276/pkg-descr @@ -0,0 +1,22 @@ +KeePassXC is a community fork of KeePassX, a native cross-platform port of +KeePass Password Safe, with the goal to extend and improve it with new features +and bugfixes to provide a feature-rich, fully cross-platform and modern +open-source password manager. + +Main Features + + * Secure storage with AES, Twofish or ChaCha20 encryption + * File format compatibility with KeePass2, KeePassX, MacPass, KeeWeb and many + others (KDBX 3.1 and 4.0) + * SSH Agent integration + * Passwords synchronization using KeeShare + * Auto-Type for automagically filling in login forms + * Key file and YubiKey challenge-response support for additional security + * TOTP generation (including Steam Guard) + * CSV import from other password managers (e.g., LastPass) + * Command line interface + * Custom icons for database entries and download of website favicons + * Database merge functionality + * Automatic reload when the database was changed externally + * Browser integration with KeePassXC-Browser for Google Chrome, Chromium, + Vivaldi, and Mozilla Firefox. diff --git a/security/keepassxc276/pkg-plist b/security/keepassxc276/pkg-plist new file mode 100644 index 000000000000..28f44ae6c9c8 --- /dev/null +++ b/security/keepassxc276/pkg-plist @@ -0,0 +1,67 @@ +bin/keepassxc +bin/keepassxc-cli +%%BROWSER%%bin/keepassxc-proxy +%%AUTOTYPE%%lib/keepassxc/libkeepassxc-autotype-xcb.so +share/man/man1/keepassxc-cli.1.gz +share/man/man1/keepassxc.1.gz +share/applications/org.keepassxc.KeePassXC.desktop +share/icons/hicolor/256x256/apps/keepassxc.png +share/icons/hicolor/scalable/apps/keepassxc-locked.svg +share/icons/hicolor/scalable/apps/keepassxc-monochrome-dark-locked.svg +share/icons/hicolor/scalable/apps/keepassxc-monochrome-dark.svg +share/icons/hicolor/scalable/apps/keepassxc-monochrome-light-locked.svg +share/icons/hicolor/scalable/apps/keepassxc-monochrome-light.svg +share/icons/hicolor/scalable/apps/keepassxc-unlocked.svg +share/icons/hicolor/scalable/apps/keepassxc.svg +share/icons/hicolor/scalable/mimetypes/application-x-keepassxc.svg +%%DATADIR%%/docs/KeePassXC_GettingStarted.html +%%DATADIR%%/docs/KeePassXC_KeyboardShortcuts.html +%%DATADIR%%/docs/KeePassXC_UserGuide.html +%%DATADIR%%/icons/application/256x256/apps/keepassxc.png +%%DATADIR%%/translations/keepassxc_ar.qm +%%DATADIR%%/translations/keepassxc_bg.qm +%%DATADIR%%/translations/keepassxc_ca.qm +%%DATADIR%%/translations/keepassxc_cs.qm +%%DATADIR%%/translations/keepassxc_da.qm +%%DATADIR%%/translations/keepassxc_de.qm +%%DATADIR%%/translations/keepassxc_el.qm +%%DATADIR%%/translations/keepassxc_en.qm +%%DATADIR%%/translations/keepassxc_en_GB.qm +%%DATADIR%%/translations/keepassxc_en_US.qm +%%DATADIR%%/translations/keepassxc_es.qm +%%DATADIR%%/translations/keepassxc_et.qm +%%DATADIR%%/translations/keepassxc_fi.qm +%%DATADIR%%/translations/keepassxc_fil.qm +%%DATADIR%%/translations/keepassxc_fr.qm +%%DATADIR%%/translations/keepassxc_fr_CA.qm +%%DATADIR%%/translations/keepassxc_he.qm +%%DATADIR%%/translations/keepassxc_hr.qm +%%DATADIR%%/translations/keepassxc_hu.qm +%%DATADIR%%/translations/keepassxc_id.qm +%%DATADIR%%/translations/keepassxc_it.qm +%%DATADIR%%/translations/keepassxc_ja.qm +%%DATADIR%%/translations/keepassxc_km.qm +%%DATADIR%%/translations/keepassxc_ko.qm +%%DATADIR%%/translations/keepassxc_lt.qm +%%DATADIR%%/translations/keepassxc_my.qm +%%DATADIR%%/translations/keepassxc_nb.qm +%%DATADIR%%/translations/keepassxc_nl.qm +%%DATADIR%%/translations/keepassxc_pl.qm +%%DATADIR%%/translations/keepassxc_pt_BR.qm +%%DATADIR%%/translations/keepassxc_pt_PT.qm +%%DATADIR%%/translations/keepassxc_ro.qm +%%DATADIR%%/translations/keepassxc_ru.qm +%%DATADIR%%/translations/keepassxc_si.qm +%%DATADIR%%/translations/keepassxc_sk.qm +%%DATADIR%%/translations/keepassxc_sl.qm +%%DATADIR%%/translations/keepassxc_sq.qm +%%DATADIR%%/translations/keepassxc_sr.qm +%%DATADIR%%/translations/keepassxc_sv.qm +%%DATADIR%%/translations/keepassxc_th.qm +%%DATADIR%%/translations/keepassxc_tr.qm +%%DATADIR%%/translations/keepassxc_uk.qm +%%DATADIR%%/translations/keepassxc_zh_CN.qm +%%DATADIR%%/translations/keepassxc_zh_TW.qm +%%DATADIR%%/wordlists/eff_large.wordlist +share/metainfo/org.keepassxc.KeePassXC.appdata.xml +share/mime/packages/keepassxc.xml diff --git a/security/lego/Makefile b/security/lego/Makefile index f10952e5b645..e2b6deead144 100644 --- a/security/lego/Makefile +++ b/security/lego/Makefile @@ -1,6 +1,6 @@ PORTNAME= lego DISTVERSIONPREFIX= v -DISTVERSION= 4.23.1 +DISTVERSION= 4.24.0 CATEGORIES= security MAINTAINER= matt@matthoran.com diff --git a/security/lego/distinfo b/security/lego/distinfo index a001c40416e0..ee445fe960dc 100644 --- a/security/lego/distinfo +++ b/security/lego/distinfo @@ -1,5 +1,5 @@ -TIMESTAMP = 1744909990 -SHA256 (go/security_lego/lego-v4.23.1/v4.23.1.mod) = fbe813f20f296ae07f773c7173d0e32b698990fb403d0c83dca3dc9ca34eacd7 -SIZE (go/security_lego/lego-v4.23.1/v4.23.1.mod) = 10512 -SHA256 (go/security_lego/lego-v4.23.1/v4.23.1.zip) = 7e6b351fe919e632aa1d5acc8a544d1549e8641391eaed58774998d2cbb4f845 -SIZE (go/security_lego/lego-v4.23.1/v4.23.1.zip) = 1461472 +TIMESTAMP = 1752932681 +SHA256 (go/security_lego/lego-v4.24.0/v4.24.0.mod) = 4ee2e188492702303c89e3703b26d3cbb10cbdde9ff002e4e8f842f15b81763f +SIZE (go/security_lego/lego-v4.24.0/v4.24.0.mod) = 11037 +SHA256 (go/security_lego/lego-v4.24.0/v4.24.0.zip) = f6a58c88e80aa6d4ffb8eba3b4fd313bba2b3ed3a3b1bbfd23b33fad1bbe7642 +SIZE (go/security_lego/lego-v4.24.0/v4.24.0.zip) = 1502515 diff --git a/security/nss/Makefile b/security/nss/Makefile index b99ebcb77547..f8c7e5630703 100644 --- a/security/nss/Makefile +++ b/security/nss/Makefile @@ -1,5 +1,5 @@ PORTNAME= nss -PORTVERSION= 3.113.1 +PORTVERSION= 3.114 CATEGORIES= security MASTER_SITES= MOZILLA/security/${PORTNAME}/releases/${DISTNAME:tu:C/[-.]/_/g}_RTM/src diff --git a/security/nss/distinfo b/security/nss/distinfo index fe38e674c30a..df00638ab54d 100644 --- a/security/nss/distinfo +++ b/security/nss/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1751391207 -SHA256 (nss-3.113.1.tar.gz) = b8c586cc0ac60b76477f62483f664f119c26000a8189dd9ef417df7dbd33a2cc -SIZE (nss-3.113.1.tar.gz) = 76626220 +TIMESTAMP = 1752847969 +SHA256 (nss-3.114.tar.gz) = cac3c0d67028804fb316e9695f81749fa4dc118e731d674b4c4c347bd849c2f1 +SIZE (nss-3.114.tar.gz) = 76653541 diff --git a/security/nss/files/patch-bug1973105 b/security/nss/files/patch-bug1973105 deleted file mode 100644 index ef2eea831b0d..000000000000 --- a/security/nss/files/patch-bug1973105 +++ /dev/null @@ -1,23 +0,0 @@ -commit 98cb80c5fba9550451f6df711a2ae460608acd5e -Author: Christoph Moench-Tegeder <cmt@burggraben.net> - - Bug 1973105 - remove out-of-function semicolon, r=rrelyea - - given the right flags, consumers of nss may fail with - : /usr/local/include/nss/pkcs11n.h:633:92: error: extra ';' outside of a function [-Werror,-Wextra-semi] - - Differential Revision: https://phabricator.services.mozilla.com/D254438 - -diff --git lib/util/pkcs11n.h lib/util/pkcs11n.h -index cba3f63ae..9365d697a 100644 ---- lib/util/pkcs11n.h -+++ lib/util/pkcs11n.h -@@ -630,7 +630,7 @@ _NSS_DEPRECATE_DEFINE_TYPE(CK_TRUST, CKT_NSS_VALID, - #define CKT_NSS_VALID \ - _NSS_DEPRECATE_DEFINE_VALUE(CKT_NSS_VALID, CKT_NSS_NOT_TRUSTED) - _NSS_DEPRECATE_DEFINE_TYPE(CK_TRUST, CKT_NSS_MUST_VERIFY, -- "CKT_NSS_MUST_VERIFY really functions as CKT_NSS_TRUST_UNKNOWN"); -+ "CKT_NSS_MUST_VERIFY really functions as CKT_NSS_TRUST_UNKNOWN") - #define CKT_NSS_MUST_VERIFY \ - _NSS_DEPRECATE_DEFINE_VALUE(CKT_NSS_MUST_VERIFY, CKT_NSS_TRUST_UNKNOWN) - diff --git a/security/openfortivpn/Makefile b/security/openfortivpn/Makefile index e9f4da01f83b..0e94e48435c8 100644 --- a/security/openfortivpn/Makefile +++ b/security/openfortivpn/Makefile @@ -19,7 +19,7 @@ GH_ACCOUNT= adrienverge GNU_CONFIGURE= yes CONFIGURE_ENV= ac_cv_path_SED=${LOCALBASE}/bin/gsed \ - OPENSSL_CFLAGS=${OPENSSLINC} \ + OPENSSL_CFLAGS=-I${OPENSSLINC} \ OPENSSL_LIBS="-L${OPENSSLLIB} -lssl -lcrypto" \ ac_cv_header_net_route_h=yes diff --git a/security/openvpn-auth-oauth2/Makefile b/security/openvpn-auth-oauth2/Makefile index 7856f7faa59a..a9d82abdcb09 100644 --- a/security/openvpn-auth-oauth2/Makefile +++ b/security/openvpn-auth-oauth2/Makefile @@ -1,7 +1,6 @@ PORTNAME= openvpn-auth-oauth2 DISTVERSIONPREFIX= v -DISTVERSION= 1.24.0 -PORTREVISION= 1 +DISTVERSION= 1.24.1 CATEGORIES= security net net-vpn MAINTAINER= otis@FreeBSD.org diff --git a/security/openvpn-auth-oauth2/distinfo b/security/openvpn-auth-oauth2/distinfo index 65bdf59a48f1..bf0f18a8f81b 100644 --- a/security/openvpn-auth-oauth2/distinfo +++ b/security/openvpn-auth-oauth2/distinfo @@ -1,5 +1,5 @@ -TIMESTAMP = 1750538779 -SHA256 (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.0/v1.24.0.mod) = cf3d2994878a3a111e074a20790a0601c70c68202c2a54702aa09fb62dd5d9dd -SIZE (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.0/v1.24.0.mod) = 1329 -SHA256 (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.0/v1.24.0.zip) = bb420b79a1ca9fc94ecc859c0663eb00b6672ee9aacfad0367c319954f1b047e -SIZE (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.0/v1.24.0.zip) = 1869608 +TIMESTAMP = 1752923767 +SHA256 (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.1/v1.24.1.mod) = 7d3079b58c7a71ba2ef004c3f19ab7a5a0c48a131e6ae65f353ad2670bb5b090 +SIZE (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.1/v1.24.1.mod) = 1370 +SHA256 (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.1/v1.24.1.zip) = 642cd0ec8b057bfad179541b1920f848c16458cebb1821f334b27e89617695ff +SIZE (go/security_openvpn-auth-oauth2/openvpn-auth-oauth2-v1.24.1/v1.24.1.zip) = 1873530 diff --git a/security/osv-scanner/Makefile b/security/osv-scanner/Makefile index 0ce2d86f5e6c..5848bced8ba3 100644 --- a/security/osv-scanner/Makefile +++ b/security/osv-scanner/Makefile @@ -1,23 +1,23 @@ PORTNAME= osv-scanner DISTVERSIONPREFIX= v -DISTVERSION= 1.9.2 -PORTREVISION= 3 +DISTVERSION= 2.1.0 +PORTREVISION= 1 CATEGORIES= security -MAINTAINER= lcook@FreeBSD.org +MAINTAINER= dutra@FreeBSD.org COMMENT= Vulnerability scanner written in Go which uses the OSV database WWW= https://github.com/google/osv-scanner LICENSE= APACHE20 LICENSE_FILE= ${WRKSRC}/LICENSE -USES= go:1.23,modules +USES= go:1.24,modules,run _BUILD_VERSION= ${DISTVERSION} -_BUILD_COMMIT= 1e295ee +_BUILD_COMMIT= 9267fda _BUILD_DATE= $$(date +%Y-%m-%d) -GO_MODULE= github.com/google/${PORTNAME} +GO_MODULE= github.com/google/${PORTNAME}/v2 GO_TARGET= ./cmd/${PORTNAME} GO_BUILDFLAGS= -ldflags "\ -s -w \ diff --git a/security/osv-scanner/distinfo b/security/osv-scanner/distinfo index a27f12229bee..0bb9d35b4b24 100644 --- a/security/osv-scanner/distinfo +++ b/security/osv-scanner/distinfo @@ -1,5 +1,5 @@ -TIMESTAMP = 1738079186 -SHA256 (go/security_osv-scanner/osv-scanner-v1.9.2/v1.9.2.mod) = 705bf3761bf62eb440e7b3900383d7d3ceee6e20eb412e69831fa5cdbf74b096 -SIZE (go/security_osv-scanner/osv-scanner-v1.9.2/v1.9.2.mod) = 5010 -SHA256 (go/security_osv-scanner/osv-scanner-v1.9.2/v1.9.2.zip) = 395023fb51425d49745e49d970bd05e39d12473916018d50d4ddd2175514c8b6 -SIZE (go/security_osv-scanner/osv-scanner-v1.9.2/v1.9.2.zip) = 7506952 +TIMESTAMP = 1752902973 +SHA256 (go/security_osv-scanner/osv-scanner-v2.1.0/v2.1.0.mod) = 47c1c8a3532bdbc1d13ec28192a526fcd369cc0d1ef66183da43912d0e5187a0 +SIZE (go/security_osv-scanner/osv-scanner-v2.1.0/v2.1.0.mod) = 9478 +SHA256 (go/security_osv-scanner/osv-scanner-v2.1.0/v2.1.0.zip) = 26944055bd68077d904d55d8d9b59cde9d4c4273beb2687a2a283ba1ed67e759 +SIZE (go/security_osv-scanner/osv-scanner-v2.1.0/v2.1.0.zip) = 5197089 diff --git a/security/osv-scanner/files/patch-internal_sourceanalysis_go.go b/security/osv-scanner/files/patch-internal_sourceanalysis_go.go index c1bbfd93f555..04a027230126 100644 --- a/security/osv-scanner/files/patch-internal_sourceanalysis_go.go +++ b/security/osv-scanner/files/patch-internal_sourceanalysis_go.go @@ -1,11 +1,11 @@ ---- internal/sourceanalysis/go.go.orig 1979-11-29 23:00:00 UTC +--- internal/sourceanalysis/go.go.orig 1979-11-30 03:00:00 UTC +++ internal/sourceanalysis/go.go -@@ -18,7 +18,7 @@ func goAnalysis(r reporter.Reporter, pkgs []models.Pac +@@ -19,7 +19,7 @@ func goAnalysis(pkgs []models.PackageVulns, source mod ) - func goAnalysis(r reporter.Reporter, pkgs []models.PackageVulns, source models.SourceInfo) { + func goAnalysis(pkgs []models.PackageVulns, source models.SourceInfo) { - cmd := exec.Command("go", "version") + cmd := exec.Command("go%%GO_SUFFIX%%", "version") _, err := cmd.Output() if err != nil { - r.Infof("Skipping call analysis on Go code since Go is not installed.\n") + slog.Info("Skipping call analysis on Go code since Go is not installed.") diff --git a/security/py-bitbox02/Makefile b/security/py-bitbox02/Makefile index eaaf1176ddc9..4f3cdf714655 100644 --- a/security/py-bitbox02/Makefile +++ b/security/py-bitbox02/Makefile @@ -1,6 +1,5 @@ PORTNAME= bitbox02 -PORTVERSION= 6.3.0 -PORTREVISION= 1 +PORTVERSION= 7.0.0 CATEGORIES= security python MASTER_SITES= PYPI PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX} diff --git a/security/py-bitbox02/distinfo b/security/py-bitbox02/distinfo index d01b3b8fa461..b938507110b9 100644 --- a/security/py-bitbox02/distinfo +++ b/security/py-bitbox02/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1714984118 -SHA256 (bitbox02-6.3.0.tar.gz) = d03fb2228be5630f1d7c351e5bebdcb9a95bbe62ecf88c92913a661f093699e3 -SIZE (bitbox02-6.3.0.tar.gz) = 51670 +TIMESTAMP = 1752818570 +SHA256 (bitbox02-7.0.0.tar.gz) = 27d5105eb15a553719fa9d3e68921c864b00c861b3a644044d9ac68426f18447 +SIZE (bitbox02-7.0.0.tar.gz) = 66525 diff --git a/security/py-cybox/Makefile b/security/py-cybox/Makefile index 5380ef49a79a..d6829f5065fc 100644 --- a/security/py-cybox/Makefile +++ b/security/py-cybox/Makefile @@ -1,7 +1,7 @@ PORTNAME= cybox PORTVERSION= 2.1.0.21 DISTVERSIONPREFIX= v -PORTREVISION= 2 +PORTREVISION= 3 CATEGORIES= security python PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX} @@ -13,7 +13,7 @@ LICENSE= BSD3CLAUSE LICENSE_FILE= ${WRKSRC}/LICENSE.txt RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}python-dateutil>=0:devel/py-python-dateutil@${PY_FLAVOR} \ - ${PYTHON_PKGNAMEPREFIX}lxml>=2.2.3:devel/py-lxml@${PY_FLAVOR} \ + ${PYTHON_PKGNAMEPREFIX}lxml5>=2.2.3:devel/py-lxml5@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}mixbox>=1.0.2:security/py-mixbox@${PY_FLAVOR} TEST_DEPENDS= ${PYTHON_PKGNAMEPREFIX}nose>=0:devel/py-nose@${PY_FLAVOR} diff --git a/security/py-distro2sbom/Makefile b/security/py-distro2sbom/Makefile new file mode 100644 index 000000000000..01cfe2f6630a --- /dev/null +++ b/security/py-distro2sbom/Makefile @@ -0,0 +1,26 @@ +PORTNAME= distro2sbom +DISTVERSIONPREFIX= v +DISTVERSION= 0.6.0 +CATEGORIES= security python +PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX} + +MAINTAINER= tuukka.pasanen@ilmi.fi +COMMENT= Generates SBOM files from system packaging information +WWW= https://github.com/anthonyharrison/distro2sbom + +LICENSE= APACHE20 +LICENSE_FILE= ${WRKSRC}/LICENSE + +BUILD_DEPENDS= ${PY_SETUPTOOLS} \ + ${PYTHON_PKGNAMEPREFIX}wheel>=0:devel/py-wheel@${PY_FLAVOR} +RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}lib4sbom>=0.8.4:security/py-lib4sbom@${PY_FLAVOR} + +USES= python +USE_GITHUB= yes +GH_ACCOUNT= anthonyharrison +GH_PROJECT= distro2SBOM +USE_PYTHON= autoplist concurrent pep517 + +NO_ARCH= yes + +.include <bsd.port.mk> diff --git a/security/py-distro2sbom/distinfo b/security/py-distro2sbom/distinfo new file mode 100644 index 000000000000..77fc17d09d58 --- /dev/null +++ b/security/py-distro2sbom/distinfo @@ -0,0 +1,3 @@ +TIMESTAMP = 1746491634 +SHA256 (anthonyharrison-distro2SBOM-v0.6.0_GH0.tar.gz) = e810bf8bf29bd85f52e8df9221ababc4605affc5b7ea1177c15c580486c13057 +SIZE (anthonyharrison-distro2SBOM-v0.6.0_GH0.tar.gz) = 24911 diff --git a/security/py-distro2sbom/pkg-descr b/security/py-distro2sbom/pkg-descr new file mode 100644 index 000000000000..4f3c5b3f7bc9 --- /dev/null +++ b/security/py-distro2sbom/pkg-descr @@ -0,0 +1,10 @@ +The DISTRO2SBOM generates a SBOM (Software Bill of Materials) for either an +installed application or a complete system installation in a number of +formats including SPDX and CycloneDX. + +An SBOM for an installed package will identify all of its dependent components. + +It is intended to be used as part of a continuous integration system to enable +accurate records of SBOMs to be maintained and also to support subsequent +audit needs to determine if a particular component (and version) +has been used. diff --git a/security/py-lib4sbom/Makefile b/security/py-lib4sbom/Makefile new file mode 100644 index 000000000000..b4a0f5a61a6d --- /dev/null +++ b/security/py-lib4sbom/Makefile @@ -0,0 +1,86 @@ +PORTNAME= lib4sbom +DISTVERSIONPREFIX= v +DISTVERSION= 0.8.7 +CATEGORIES= security python +PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX} + +MAINTAINER= tuukka.pasanen@ilmi.fi +COMMENT= Software bill of material (SBOM) generator and consumer library +WWW= https://github.com/anthonyharrison/lib4sbom + +LICENSE= APACHE20 +LICENSE_FILE= ${WRKSRC}/LICENSE + +BUILD_DEPENDS= ${PY_SETUPTOOLS} \ + ${PYTHON_PKGNAMEPREFIX}wheel>=0:devel/py-wheel@${PY_FLAVOR} +RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}defusedxml>0:devel/py-defusedxml@${PY_FLAVOR} \ + ${PYTHON_PKGNAMEPREFIX}pyyaml>0:devel/py-pyyaml@${PY_FLAVOR} \ + ${PYTHON_PKGNAMEPREFIX}requests>=2.32:www/py-requests@${PY_FLAVOR} \ + ${PYTHON_PKGNAMEPREFIX}semantic-version>=2.8<3:devel/py-semantic-version@${PY_FLAVOR} \ + ${PYTHON_PKGNAMEPREFIX}xmlschema>0:textproc/py-xmlschema@${PY_FLAVOR} + +USES= python +USE_GITHUB= yes +GH_ACCOUNT= anthonyharrison +USE_PYTHON= autoplist concurrent pep517 pytest +PYTEST_BROKEN_TESTS= test_set_checksum test_set_type test_set_supplier \ + test_set_originator test_set_downloadlocation \ + test_set_homepage test_set_checksum \ + test_set_checksum_multiple test_set_externalreference \ + test_set_checksum test_set_type test_set_supplier \ + test_set_originator test_set_downloadlocation \ + test_set_homepage test_set_checksum \ + test_set_checksum_multiple test_set_externalreference +# There is blank tests are are not implemented yet +PYTEST_IGNORED_TESTS= test_store test_getBOM test_generateTime \ + test_generateDocumentHeader \ + test_generateJSONDocumentHeader \ + test_generateXMLDocumentHeader \ + test_generateRelationship test_generateComponent \ + test_generateJSONComponent test_generateXMLComponent \ + test_parse test_parse_cyclonedx_json test_get_format \ + test_get_type test_generate test_get_sbom \ + test_generate_spdx test_get_spdx test_get_relationships \ + test_get_cyclonedx test_generate_cyclonedx test_close \ + test_file_out test_console_out test_show \ + test_format_json_data test_format_yaml_data \ + test_format_tag_data test_send_output \ + test_generate_output test_parse_file test_get_type \ + test_get_files test_get_packages test_get_relationships \ + test_show test_getBOM test_getRelationships \ + test_generateTag test_generateComment test_generateTime \ + test_generateTagDocumentHeader \ + test_generateJSONDocumentHeader \ + test_generateDocumentHeader test_package_ident \ + test_file_ident test_license_ident \ + test_generateTagPackageDetails \ + test_generateJSONPackageDetails \ + test_generateTagFileDetails \ + test_generateJSONFileDetails \ + test_generatePackageDetails test_generateFileDetails \ + test_generateRelationship test_showRelationship \ + test_parse test_parse_spdx_tag test_parse_spdx_json \ + test_parse_spdx_rdf test_parse_spdx_yaml \ + test_parse_spdx_xml + +NO_ARCH= YES + +PORTEXAMPLES= * + +OPTIONS_DEFINE= EXAMPLES + +post-patch: + ${MV} ${WRKSRC}/test ${WRKSRC}/${PORTNAME} + ${MV} ${WRKSRC}/tools ${WRKSRC}/${PORTNAME} + +post-patch-EXAMPLES-off: + @${RM} -r ${WRKSRC}/examples + +post-stage-EXAMPLES-on: + ${RM} -r ${STAGEDIR}${PYTHONPREFIX_SITELIBDIR}/examples + @${MKDIR} ${STAGEDIR}${EXAMPLESDIR} + ${INSTALL_DATA} ${WRKSRC}/examples/* ${STAGEDIR}${EXAMPLESDIR} + @${REINPLACE_CMD} -e '/\/examples\//d' \ + ${WRKDIR}/.PLIST.pymodtmp + +.include <bsd.port.mk> diff --git a/security/py-lib4sbom/distinfo b/security/py-lib4sbom/distinfo new file mode 100644 index 000000000000..5fe6d1866858 --- /dev/null +++ b/security/py-lib4sbom/distinfo @@ -0,0 +1,3 @@ +TIMESTAMP = 1752670734 +SHA256 (anthonyharrison-lib4sbom-v0.8.7_GH0.tar.gz) = 20b4dec06a8d1bd917cf9ebcf9858d53981073e161a0a0d77f9c1704ecde784e +SIZE (anthonyharrison-lib4sbom-v0.8.7_GH0.tar.gz) = 1848916 diff --git a/security/py-lib4sbom/pkg-descr b/security/py-lib4sbom/pkg-descr new file mode 100644 index 000000000000..1fcb07927c3b --- /dev/null +++ b/security/py-lib4sbom/pkg-descr @@ -0,0 +1,17 @@ +Lib4SBOM is a library to parse and generate Software Bill of Materials (SBOMs). +It supports SBOMs created in both SPDX and CycloneDX formats. + +It has been developed on the assumption that having a generic abstraction of +SBOM regardless of the underlying format will be useful to developers. + +The following facilities are provided: + * Generate SPDX SBOM in TagValue, JSON and YAML formats + * Generate CycloneDX SBOM in JSON format + * Parse SPDX SBOM in TagValue, JSON, YAML, XML and RDF formats + * Parse CycloneDX SBOM in JSON and XMLformat + * Create and manipulate a SBOM file object + * Create and manipulate a SBOM package object + * Create and manipulate a SBOM dependency relationship object + * Create and manipulate a Vulnerability object + * Create and manipulate a Software Service object + * Generated SBOM can be output to a file or to the console diff --git a/security/py-maec/Makefile b/security/py-maec/Makefile index f03bb0997f05..eb40a7d2fa9b 100644 --- a/security/py-maec/Makefile +++ b/security/py-maec/Makefile @@ -1,6 +1,6 @@ PORTNAME= maec PORTVERSION= 4.1.0.17 -PORTREVISION= 1 +PORTREVISION= 2 DISTVERSIONPREFIX= v CATEGORIES= security python PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX} @@ -12,7 +12,7 @@ WWW= https://github.com/MAECProject/python-maec LICENSE= BSD3CLAUSE LICENSE_FILE= ${WRKSRC}/LICENSE.txt -RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}lxml>=2.2.3:devel/py-lxml@${PY_FLAVOR} \ +RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}lxml5>=2.2.3:devel/py-lxml5@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}cybox>=2.1.0.13:security/py-cybox@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}mixbox>=0.0.13:security/py-mixbox@${PY_FLAVOR} TEST_DEPENDS= ${PYTHON_PKGNAMEPREFIX}nose>=0:devel/py-nose@${PY_FLAVOR} diff --git a/security/py-mixbox/Makefile b/security/py-mixbox/Makefile index fb026db3022c..af0835f1254e 100644 --- a/security/py-mixbox/Makefile +++ b/security/py-mixbox/Makefile @@ -1,6 +1,6 @@ PORTNAME= mixbox PORTVERSION= 1.0.5 -PORTREVISION= 2 +PORTREVISION= 3 CATEGORIES= security python MASTER_SITES= PYPI PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX} @@ -12,7 +12,7 @@ WWW= https://github.com/CybOXProject/mixbox LICENSE= BSD3CLAUSE RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}python-dateutil>=0:devel/py-python-dateutil@${PY_FLAVOR} \ - ${PYTHON_PKGNAMEPREFIX}lxml>=0:devel/py-lxml@${PY_FLAVOR} \ + ${PYTHON_PKGNAMEPREFIX}lxml5>=0:devel/py-lxml5@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}ordered-set>=0:devel/py-ordered-set@${PY_FLAVOR} NO_ARCH= yes diff --git a/security/py-ospd-openvas/Makefile b/security/py-ospd-openvas/Makefile index f712dc948669..c7029aa90cce 100644 --- a/security/py-ospd-openvas/Makefile +++ b/security/py-ospd-openvas/Makefile @@ -1,6 +1,7 @@ PORTNAME= ospd-openvas DISTVERSION= 22.9.0 DISTVERSIONPREFIX= v +PORTREVISION= 1 CATEGORIES= security python #MASTER_SITES= PYPI PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX} @@ -18,7 +19,7 @@ RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}redis>=0:databases/py-redis@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}packaging>=0:devel/py-packaging@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}defusedxml>=0:devel/py-defusedxml@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}deprecated>0:devel/py-deprecated@${PY_FLAVOR} \ - ${PYTHON_PKGNAMEPREFIX}lxml>0:devel/py-lxml@${PY_FLAVOR} \ + ${PYTHON_PKGNAMEPREFIX}lxml5>0:devel/py-lxml5@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}paramiko>0:security/py-paramiko@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}python-gnupg>0:security/py-python-gnupg@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}paho-mqtt>0:net/py-paho-mqtt@${PY_FLAVOR} \ diff --git a/security/py-pykeepass/Makefile b/security/py-pykeepass/Makefile index 6856c073a1a3..84c0e4e45cbe 100644 --- a/security/py-pykeepass/Makefile +++ b/security/py-pykeepass/Makefile @@ -1,6 +1,7 @@ PORTNAME= pykeepass DISTVERSION= 4.1.1 DISTVERSIONSUFFIX= .post1 +PORTREVISION= 1 CATEGORIES= security python MASTER_SITES= PYPI PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX} @@ -17,7 +18,7 @@ BUILD_DEPENDS= ${PY_SETUPTOOLS} \ ${PYTHON_PKGNAMEPREFIX}wheel>0:devel/py-wheel@${PY_FLAVOR} RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}argon2-cffi>=0:security/py-argon2-cffi@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}construct>=0:devel/py-construct@${PY_FLAVOR} \ - ${PYTHON_PKGNAMEPREFIX}lxml>=0:devel/py-lxml@${PY_FLAVOR} \ + ${PYTHON_PKGNAMEPREFIX}lxml5>=0:devel/py-lxml5@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}pycryptodomex>=0:security/py-pycryptodomex@${PY_FLAVOR} USES= python diff --git a/security/py-python-cas/Makefile b/security/py-python-cas/Makefile index afdb7b8656e8..2f174cd20904 100644 --- a/security/py-python-cas/Makefile +++ b/security/py-python-cas/Makefile @@ -1,6 +1,6 @@ PORTNAME= python-cas PORTVERSION= 1.6.0 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= security python MASTER_SITES= PYPI PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX} @@ -14,7 +14,7 @@ LICENSE_FILE= ${WRKSRC}/LICENSE.txt RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}six>=1.10.0:devel/py-six@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}requests>=2.11.1:www/py-requests@${PY_FLAVOR} \ - ${PYTHON_PKGNAMEPREFIX}lxml>=3.4:devel/py-lxml@${PY_FLAVOR} + ${PYTHON_PKGNAMEPREFIX}lxml5>=3.4:devel/py-lxml5@${PY_FLAVOR} USES= python USE_PYTHON= autoplist distutils diff --git a/security/py-python3-saml/Makefile b/security/py-python3-saml/Makefile index a2d8be7364ed..2079f1a1cdb0 100644 --- a/security/py-python3-saml/Makefile +++ b/security/py-python3-saml/Makefile @@ -1,5 +1,6 @@ PORTNAME= python3-saml PORTVERSION= 1.16.0 +PORTREVISION= 1 CATEGORIES= security python MASTER_SITES= PYPI PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX} @@ -16,7 +17,7 @@ BUILD_DEPENDS= ${PYTHON_PKGNAMEPREFIX}poetry-core>=1.1.0:devel/py-poetry-core@${ ${PYTHON_PKGNAMEPREFIX}setuptools>=40.1.0:devel/py-setuptools@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}wheel>=0:devel/py-wheel@${PY_FLAVOR} RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}isodate>=0.6.1:devel/py-isodate@${PY_FLAVOR} \ - ${PYTHON_PKGNAMEPREFIX}lxml>=4.6.5:devel/py-lxml@${PY_FLAVOR} \ + ${PYTHON_PKGNAMEPREFIX}lxml5>=4.6.5:devel/py-lxml5@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}xmlsec>=1.3.9:security/py-xmlsec@${PY_FLAVOR} TEST_DEPENDS= ${PYTHON_PKGNAMEPREFIX}coverage>=4.5.2:devel/py-coverage@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}flake8>=3.6.0:devel/py-flake8@${PY_FLAVOR} \ diff --git a/security/py-stix/Makefile b/security/py-stix/Makefile index bebebd778cb9..d32ce7cc2494 100644 --- a/security/py-stix/Makefile +++ b/security/py-stix/Makefile @@ -1,7 +1,7 @@ PORTNAME= stix PORTVERSION= 1.2.0.11 DISTVERSIONPREFIX= v -PORTREVISION= 2 +PORTREVISION= 3 CATEGORIES= security python PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX} @@ -13,7 +13,7 @@ LICENSE= BSD3CLAUSE LICENSE_FILE= ${WRKSRC}/LICENSE.txt RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}python-dateutil>=0:devel/py-python-dateutil@${PY_FLAVOR} \ - ${PYTHON_PKGNAMEPREFIX}lxml>=2.3:devel/py-lxml@${PY_FLAVOR} \ + ${PYTHON_PKGNAMEPREFIX}lxml5>=2.3:devel/py-lxml5@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}cybox>=2.1.0.13:security/py-cybox@${PY_FLAVOR} \ ${PYTHON_PKGNAMEPREFIX}mixbox>=1.0.2:security/py-mixbox@${PY_FLAVOR} TEST_DEPENDS= ${PYTHON_PKGNAMEPREFIX}nose>=0:devel/py-nose@${PY_FLAVOR} \ diff --git a/security/rats/Makefile b/security/rats/Makefile index 9afe4a217cfb..dd321556b766 100644 --- a/security/rats/Makefile +++ b/security/rats/Makefile @@ -4,7 +4,7 @@ PORTREVISION= 1 CATEGORIES= security devel MASTER_SITES= https://storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/rough-auditing-tool-for-security/ -MAINTAINER= ports@FreeBSD.org +MAINTAINER= mauroeldritch@gmail.com COMMENT= Source code auditing tool WWW= https://security.web.cern.ch/security/recommendations/en/codetools/rats.shtml diff --git a/security/rubygem-acme-client-gitlab/Makefile b/security/rubygem-acme-client-gitlab/Makefile index 321ed2a0b252..d7bb794558d2 100644 --- a/security/rubygem-acme-client-gitlab/Makefile +++ b/security/rubygem-acme-client-gitlab/Makefile @@ -1,6 +1,5 @@ PORTNAME= acme-client -PORTVERSION= 2.0.21 -PORTREVISION= 1 +PORTVERSION= 2.0.22 CATEGORIES= security rubygems MASTER_SITES= RG PKGNAMESUFFIX= -gitlab diff --git a/security/rubygem-acme-client-gitlab/distinfo b/security/rubygem-acme-client-gitlab/distinfo index 5bb6fc7d5332..71f01bae6c87 100644 --- a/security/rubygem-acme-client-gitlab/distinfo +++ b/security/rubygem-acme-client-gitlab/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1744780787 -SHA256 (rubygem/acme-client-2.0.21.gem) = e0a044f993cd26f0ba7f8b13a3b2b007ef864cfaa333075a2d8865b087297641 -SIZE (rubygem/acme-client-2.0.21.gem) = 21504 +TIMESTAMP = 1752678379 +SHA256 (rubygem/acme-client-2.0.22.gem) = 817534b743e2c93b3e498dad6b0f1a96a8e6df273bb04e37525d586a519176f7 +SIZE (rubygem/acme-client-2.0.22.gem) = 21504 diff --git a/security/rubygem-gitlab-cloud-connector/Makefile b/security/rubygem-gitlab-cloud-connector/Makefile index 17348ef607c0..2f1e70997dda 100644 --- a/security/rubygem-gitlab-cloud-connector/Makefile +++ b/security/rubygem-gitlab-cloud-connector/Makefile @@ -1,5 +1,5 @@ PORTNAME= gitlab-cloud-connector -PORTVERSION= 1.19.0 +PORTVERSION= 1.21.0 CATEGORIES= security rubygems MASTER_SITES= RG diff --git a/security/rubygem-gitlab-cloud-connector/distinfo b/security/rubygem-gitlab-cloud-connector/distinfo index b702ac666f5a..3d7702e96bc0 100644 --- a/security/rubygem-gitlab-cloud-connector/distinfo +++ b/security/rubygem-gitlab-cloud-connector/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1750912646 -SHA256 (rubygem/gitlab-cloud-connector-1.19.0.gem) = cfa644b4d827062f5c625d391ca3e6904e7667f0f6efe96adab81e051d8d07ad -SIZE (rubygem/gitlab-cloud-connector-1.19.0.gem) = 18432 +TIMESTAMP = 1752678296 +SHA256 (rubygem/gitlab-cloud-connector-1.21.0.gem) = 16eb2a42f223c6c70efc20a8fd9e2bbe4fa91603894daa8a72f354f425a07709 +SIZE (rubygem/gitlab-cloud-connector-1.21.0.gem) = 19456 diff --git a/security/secure_delete/Makefile b/security/secure_delete/Makefile index d5e56ed2a309..6a186d10214c 100644 --- a/security/secure_delete/Makefile +++ b/security/secure_delete/Makefile @@ -5,7 +5,7 @@ CATEGORIES= security MASTER_SITES= PACKETSTORM/groups/thc \ http://freeworld.thc.org/releases/ -MAINTAINER= ports@FreeBSD.org +MAINTAINER= mauroeldritch@gmail.com COMMENT= Secure data deletion toolkit WWW= https://www.thc.org/ diff --git a/security/smurflog/Makefile b/security/smurflog/Makefile index e1d0d11d3d33..556975a2ecd8 100644 --- a/security/smurflog/Makefile +++ b/security/smurflog/Makefile @@ -4,7 +4,7 @@ PORTREVISION= 1 CATEGORIES= security MASTER_SITES= PACKETSTORM/UNIX/loggers -MAINTAINER= ports@FreeBSD.org +MAINTAINER= mauroeldritch@gmail.com COMMENT= Program to assist logging of smurf attacks USE_CSTD= gnu89 diff --git a/security/snort3/Makefile b/security/snort3/Makefile index 6c19698e3065..a8aa50e7c196 100644 --- a/security/snort3/Makefile +++ b/security/snort3/Makefile @@ -1,6 +1,5 @@ PORTNAME= snort -DISTVERSION= 3.9.1.0 -PORTREVISION= 1 +DISTVERSION= 3.9.2.0 PORTEPOCH= 1 CATEGORIES= security PKGNAMESUFFIX= 3 diff --git a/security/snort3/distinfo b/security/snort3/distinfo index 948c3a03b335..b0b61e634faf 100644 --- a/security/snort3/distinfo +++ b/security/snort3/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1751623929 -SHA256 (snort3-snort3-3.9.1.0_GH0.tar.gz) = fc19f20cd34192eb78f28d7f128c79c5d0096733277f2b630a8cf892b10f33ce -SIZE (snort3-snort3-3.9.1.0_GH0.tar.gz) = 3501016 +TIMESTAMP = 1753181972 +SHA256 (snort3-snort3-3.9.2.0_GH0.tar.gz) = edf0aa5e72d673702bca161e235b7b8f8c3e5a49b81e8ddf2ea7e10736ab0cdd +SIZE (snort3-snort3-3.9.2.0_GH0.tar.gz) = 3507676 diff --git a/security/snort3/pkg-plist b/security/snort3/pkg-plist index ac9338536bea..6e0c9db565da 100644 --- a/security/snort3/pkg-plist +++ b/security/snort3/pkg-plist @@ -202,6 +202,8 @@ include/snort/pub_sub/eof_event.h include/snort/pub_sub/eve_process_event.h include/snort/pub_sub/expect_events.h include/snort/pub_sub/external_event_ids.h +include/snort/pub_sub/file_events.h +include/snort/pub_sub/file_events_ids.h include/snort/pub_sub/finalize_packet_event.h include/snort/pub_sub/ftp_events.h include/snort/pub_sub/http_body_event.h diff --git a/security/sqlninja/Makefile b/security/sqlninja/Makefile index 6d6da16f0384..59205a4501fc 100644 --- a/security/sqlninja/Makefile +++ b/security/sqlninja/Makefile @@ -3,8 +3,8 @@ DISTVERSION= 0.2.6 CATEGORIES= security MASTER_SITES= SF/${PORTNAME}/${PORTNAME} -MAINTAINER= ports@FreeBSD.org -COMMENT= Sql Server exploit toolkit +MAINTAINER= mauroeldritch@gmail.com +COMMENT= SQL Server exploit toolkit WWW= https://sqlninja.sourceforge.net/ LICENSE= GPLv3+ diff --git a/security/ssss/Makefile b/security/ssss/Makefile index ed70d272644d..0338d50102b3 100644 --- a/security/ssss/Makefile +++ b/security/ssss/Makefile @@ -3,7 +3,7 @@ DISTVERSIONPREFIX= releases/v DISTVERSION= 0.5.7 CATEGORIES= security -MAINTAINER= ports@FreeBSD.org +MAINTAINER= mauroeldritch@gmail.com COMMENT= Shamir's Secret Sharing Scheme WWW= http://point-at-infinity.org/ssss/ diff --git a/security/step-certificates/Makefile b/security/step-certificates/Makefile index df61d5e12df2..7b865e0753a4 100644 --- a/security/step-certificates/Makefile +++ b/security/step-certificates/Makefile @@ -1,7 +1,6 @@ PORTNAME= step-certificates DISTVERSIONPREFIX= v -DISTVERSION= 0.28.1 -PORTREVISION= 4 +DISTVERSION= 0.28.4 CATEGORIES= security MAINTAINER= mw@wipp.bayern diff --git a/security/step-certificates/distinfo b/security/step-certificates/distinfo index 7306fa012d25..a3aecfe30f79 100644 --- a/security/step-certificates/distinfo +++ b/security/step-certificates/distinfo @@ -1,5 +1,5 @@ -TIMESTAMP = 1736184396 -SHA256 (go/security_step-certificates/step-certificates-v0.28.1/v0.28.1.mod) = 41cf738a27e1f0894ddd48801408f60c78fd8b69dee14e8db55c9eb445959d46 -SIZE (go/security_step-certificates/step-certificates-v0.28.1/v0.28.1.mod) = 8354 -SHA256 (go/security_step-certificates/step-certificates-v0.28.1/v0.28.1.zip) = b1e3a63ae518e9475979006b3665816757e06f62bef180060749fb4eb276dd42 -SIZE (go/security_step-certificates/step-certificates-v0.28.1/v0.28.1.zip) = 1168039 +TIMESTAMP = 1752641981 +SHA256 (go/security_step-certificates/step-certificates-v0.28.4/v0.28.4.mod) = 50e32d08e1b3ade624273e1fe6da9cf6d454010b0a4f67c1255610ac35491bf6 +SIZE (go/security_step-certificates/step-certificates-v0.28.4/v0.28.4.mod) = 8467 +SHA256 (go/security_step-certificates/step-certificates-v0.28.4/v0.28.4.zip) = b32df184ea44ece9713ffb25f17ff81525ce3ced5f1d66c118b889ba53cbdc6d +SIZE (go/security_step-certificates/step-certificates-v0.28.4/v0.28.4.zip) = 1176880 diff --git a/security/step-cli/Makefile b/security/step-cli/Makefile index d96b499efa56..d58b502aa605 100644 --- a/security/step-cli/Makefile +++ b/security/step-cli/Makefile @@ -1,7 +1,6 @@ PORTNAME= step-cli DISTVERSIONPREFIX= v -DISTVERSION= 0.28.2 -PORTREVISION= 3 +DISTVERSION= 0.28.7 CATEGORIES= security MAINTAINER= mw@wipp.bayern diff --git a/security/step-cli/distinfo b/security/step-cli/distinfo index f31164291cef..440e89ff6f72 100644 --- a/security/step-cli/distinfo +++ b/security/step-cli/distinfo @@ -1,5 +1,5 @@ -TIMESTAMP = 1736183663 -SHA256 (go/security_step-cli/step-cli-v0.28.2/v0.28.2.mod) = 0884cd63ae7621bacf0aad63bd6997736007e81eafdc8f33f7b4f10ae96807c0 -SIZE (go/security_step-cli/step-cli-v0.28.2/v0.28.2.mod) = 7172 -SHA256 (go/security_step-cli/step-cli-v0.28.2/v0.28.2.zip) = 5c4047233c8ef0aeb37cc78bf177cd249fdc0ea72fba1c79b59ed8a4fca21eca -SIZE (go/security_step-cli/step-cli-v0.28.2/v0.28.2.zip) = 1820402 +TIMESTAMP = 1752642398 +SHA256 (go/security_step-cli/step-cli-v0.28.7/v0.28.7.mod) = 629b69c99baac120cb7844c0db0dacd47b2c7601b57fe443a47f85d33e158106 +SIZE (go/security_step-cli/step-cli-v0.28.7/v0.28.7.mod) = 6943 +SHA256 (go/security_step-cli/step-cli-v0.28.7/v0.28.7.zip) = 4e2541f7ec8e1b2c23ab9326930a942091fca45dd0c148bc02c02b21e78d427d +SIZE (go/security_step-cli/step-cli-v0.28.7/v0.28.7.zip) = 1824999 diff --git a/security/sudo-rs/Makefile b/security/sudo-rs/Makefile index 5d6bb16de08b..773a9fe74501 100644 --- a/security/sudo-rs/Makefile +++ b/security/sudo-rs/Makefile @@ -1,7 +1,6 @@ PORTNAME= sudo-rs -PORTVERSION= 0.2.6 +PORTVERSION= 0.2.7 DISTVERSIONPREFIX= v -PORTREVISION= 2 CATEGORIES= security MAINTAINER= marc@trifectatech.org @@ -13,8 +12,6 @@ LICENSE_COMB= dual LICENSE_FILE_APACHE20= ${WRKSRC}/LICENSE-APACHE LICENSE_FILE_MIT= ${WRKSRC}/LICENSE-MIT -BUILD_DEPENDS= pandoc:${PORTSDIR}/textproc/hs-pandoc - FLAVORS= default coexist FLAVOR?= ${FLAVORS:[1]} coexist_PKGNAMESUFFIX= -coexist @@ -24,11 +21,10 @@ USES= cargo USE_GITHUB= yes GH_ACCOUNT= trifectatechfoundation -GH_TAGNAME= main CARGO_CRATES= diff-0.1.13 \ glob-0.3.2 \ - libc-0.2.172 \ + libc-0.2.174 \ log-0.4.27 \ pretty_assertions-1.4.1 \ yansi-1.0.1 @@ -52,17 +48,11 @@ PORTDOCS= CHANGELOG.md CONTRIBUTING.md COPYRIGHT LICENSE-* README.md \ OPTIONS_DEFINE= DOCS -post-build: -.for man in sudo.8 visudo.8 sudoers.5 - @${MKDIR} ${WRKDIR}/docs/man - pandoc -s -t man ${WRKSRC}/docs/man/${man}.md -o ${WRKDIR}/docs/man/${man} -.endfor - post-install: ${MV} ${STAGEDIR}${PREFIX}/bin/visudo ${STAGEDIR}${PREFIX}/sbin/visudo${RS_SUFFIX} - ${INSTALL_MAN} ${WRKDIR}/docs/man/sudo.8 ${STAGEDIR}${PREFIX}/share/man/man8/sudo${RS_SUFFIX}.8 - ${INSTALL_MAN} ${WRKDIR}/docs/man/visudo.8 ${STAGEDIR}${PREFIX}/share/man/man8/visudo${RS_SUFFIX}.8 - ${INSTALL_MAN} ${WRKDIR}/docs/man/sudoers.5 ${STAGEDIR}${PREFIX}/share/man/man5/sudoers${RS_SUFFIX}.5 + ${INSTALL_MAN} ${WRKSRC}/docs/man/sudo.8.man ${STAGEDIR}${PREFIX}/share/man/man8/sudo${RS_SUFFIX}.8 + ${INSTALL_MAN} ${WRKSRC}/docs/man/visudo.8.man ${STAGEDIR}${PREFIX}/share/man/man8/visudo${RS_SUFFIX}.8 + ${INSTALL_MAN} ${WRKSRC}/docs/man/sudoers.5.man ${STAGEDIR}${PREFIX}/share/man/man5/sudoers${RS_SUFFIX}.5 ${MKDIR} ${STAGEDIR}${PREFIX}/etc/sudoers.d ${MKDIR} ${STAGEDIR}${PREFIX}/etc/pam.d ${MKDIR} ${STAGEDIR}/var/run/sudo diff --git a/security/sudo-rs/distinfo b/security/sudo-rs/distinfo index 7162c3e88c85..8861ccd86ae0 100644 --- a/security/sudo-rs/distinfo +++ b/security/sudo-rs/distinfo @@ -1,15 +1,15 @@ -TIMESTAMP = 1746636640 +TIMESTAMP = 1752137205 SHA256 (rust/crates/diff-0.1.13.crate) = 56254986775e3233ffa9c4d7d3faaf6d36a2c09d30b20687e9f88bc8bafc16c8 SIZE (rust/crates/diff-0.1.13.crate) = 46216 SHA256 (rust/crates/glob-0.3.2.crate) = a8d1add55171497b4705a648c6b583acafb01d58050a51727785f0b2c8e0a2b2 SIZE (rust/crates/glob-0.3.2.crate) = 22359 -SHA256 (rust/crates/libc-0.2.172.crate) = d750af042f7ef4f724306de029d18836c26c1765a54a6a3f094cbd23a7267ffa -SIZE (rust/crates/libc-0.2.172.crate) = 791646 +SHA256 (rust/crates/libc-0.2.174.crate) = 1171693293099992e19cddea4e8b849964e9846f4acee11b3948bcc337be8776 +SIZE (rust/crates/libc-0.2.174.crate) = 779933 SHA256 (rust/crates/log-0.4.27.crate) = 13dc2df351e3202783a1fe0d44375f7295ffb4049267b0f3018346dc122a1d94 SIZE (rust/crates/log-0.4.27.crate) = 48120 SHA256 (rust/crates/pretty_assertions-1.4.1.crate) = 3ae130e2f271fbc2ac3a40fb1d07180839cdbbe443c7a27e1e3c13c5cac0116d SIZE (rust/crates/pretty_assertions-1.4.1.crate) = 78952 SHA256 (rust/crates/yansi-1.0.1.crate) = cfe53a6657fd280eaa890a3bc59152892ffa3e30101319d168b781ed6529b049 SIZE (rust/crates/yansi-1.0.1.crate) = 75497 -SHA256 (trifectatechfoundation-sudo-rs-v0.2.6-main_GH0.tar.gz) = e50131984916f272c5bdf376b5093e42bca29cce066431f4902ae60edb5a0df5 -SIZE (trifectatechfoundation-sudo-rs-v0.2.6-main_GH0.tar.gz) = 712201 +SHA256 (trifectatechfoundation-sudo-rs-v0.2.7_GH0.tar.gz) = d4e7b49634bf9c8a897a26afe85118ef941ff0914765b8720798821d2fe8c402 +SIZE (trifectatechfoundation-sudo-rs-v0.2.7_GH0.tar.gz) = 736981 diff --git a/security/tscli/Makefile b/security/tscli/Makefile index ee95dd798f73..45cb45cbfb11 100644 --- a/security/tscli/Makefile +++ b/security/tscli/Makefile @@ -1,7 +1,6 @@ PORTNAME= tscli DISTVERSIONPREFIX= v -DISTVERSION= 0.0.12 -PORTREVISION= 1 +DISTVERSION= 0.0.13 CATEGORIES= security MAINTAINER= dtxdf@FreeBSD.org @@ -14,6 +13,8 @@ LICENSE_FILE= ${WRKSRC}/LICENSE USES= go:modules GO_MODULE= github.com/jaxxstorm/tscli GO_TARGET= ./cmd/tscli:tscli +GO_BUILDFLAGS= -ldflags "\ + -X 'github.com/jaxxstorm/tscli/pkg/version.Version=${DISTVERSIONPREFIX}${DISTVERSION}'" PLIST_FILES= bin/tscli diff --git a/security/tscli/distinfo b/security/tscli/distinfo index c862bdf3bdab..6fe138063978 100644 --- a/security/tscli/distinfo +++ b/security/tscli/distinfo @@ -1,5 +1,5 @@ -TIMESTAMP = 1751921200 -SHA256 (go/security_tscli/tscli-v0.0.12/v0.0.12.mod) = 4a82a5521c3fa8eb69ab3e22c18b32be4850ade70791cb0a74fd480c44752d68 -SIZE (go/security_tscli/tscli-v0.0.12/v0.0.12.mod) = 3162 -SHA256 (go/security_tscli/tscli-v0.0.12/v0.0.12.zip) = dc19e7ffdc880bce5b0d527acdaebf8070a01a8af0830a52e4764712407479a4 -SIZE (go/security_tscli/tscli-v0.0.12/v0.0.12.zip) = 112412 +TIMESTAMP = 1752625691 +SHA256 (go/security_tscli/tscli-v0.0.13/v0.0.13.mod) = 4a82a5521c3fa8eb69ab3e22c18b32be4850ade70791cb0a74fd480c44752d68 +SIZE (go/security_tscli/tscli-v0.0.13/v0.0.13.mod) = 3162 +SHA256 (go/security_tscli/tscli-v0.0.13/v0.0.13.zip) = 6468bb6f8ed78c6c08b0125334644b309ce69a61310c9b6240d10bebc67969b5 +SIZE (go/security_tscli/tscli-v0.0.13/v0.0.13.zip) = 115698 diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml index 812764583b54..ee67769de466 100644 --- a/security/vuxml/vuln/2025.xml +++ b/security/vuxml/vuln/2025.xml @@ -1,3 +1,99 @@ + <vuln vid="80411ba2-6729-11f0-a5cb-8c164580114f"> + <topic>7-Zip -- Multi-byte write heap buffer overflow in NCompress::NRar5::CDecoder</topic> + <affects> + <package> + <name>7-zip</name> + <range><lt>25.00</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>security-advisories@github.com reports:</p> + <blockquote cite="https://securitylab.github.com/advisories/GHSL-2025-058_7-Zip/"> + <p>7-Zip is a file archiver with a high compression ratio. Zeroes + written outside heap buffer in RAR5 handler may lead to memory + corruption and denial of service in versions of 7-Zip prior to + 25.0.0. Version 25.0.0 contains a fix for the issue.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2025-53816</cvename> + <url>https://nvd.nist.gov/vuln/detail/CVE-2025-53816</url> + </references> + <dates> + <discovery>2025-07-17</discovery> + <entry>2025-07-22</entry> + </dates> + </vuln> + + <vuln vid="605a9d1e-6521-11f0-beb2-ac5afc632ba3"> + <topic>libwasmtime -- host panic with fd_renumber WASIp1 function</topic> + <affects> + <package> + <name>libwasmtime</name> + <range><ge>24.0.0</ge><lt>24.0.4</lt></range> + <range><ge>33.0.0</ge><lt>33.0.2</lt></range> + <range><ge>34.0.0</ge><lt>34.0.2</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>WasmTime development team reports:</p> + <blockquote cite="https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-fm79-3f68-h2fc"> + <p>A bug in Wasmtime's implementation of the WASIp1 set of import + functions can lead to a WebAssembly guest inducing a panic in the + host (embedder).</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2025-53901</cvename> + <url>https://nvd.nist.gov/vuln/detail/CVE-2025-53901</url> + </references> + <dates> + <discovery>2025-07-18</discovery> + <entry>2025-07-20</entry> + </dates> + </vuln> + + <vuln vid="e27ee4fc-cdc9-45a1-8242-09898cdbdc91"> + <topic>unbound -- Cache poisoning via the ECS-enabled Rebirthday Attack</topic> + <affects> + <package> + <name>unbound</name> + <range><gt>1.6.1</gt><lt>1.23.0</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>sep@nlnetlabs.nl reports:</p> + <blockquote cite="https://nlnetlabs.nl/downloads/unbound/CVE-2025-5994.txt"> + <p>A multi-vendor cache poisoning vulnerability named 'Rebirthday + Attack' has been discovered in caching resolvers that support + EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled + with ECS support, i.e., '--enable-subnet', AND configured + to send ECS information along with queries to upstream name servers, + i.e., at least one of the 'send-client-subnet', + 'client-subnet-zone' or 'client-subnet-always-forward' + options is used. Resolvers supporting ECS need to segregate outgoing + queries to accommodate for different outgoing ECS information. This + re-opens up resolvers to a birthday paradox attack (Rebirthday + Attack) that tries to match the DNS transaction ID in order to cache + non-ECS poisonous replies.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2025-5994</cvename> + <url>https://nvd.nist.gov/vuln/detail/CVE-2025-5994</url> + </references> + <dates> + <discovery>2025-07-16</discovery> + <entry>2025-07-18</entry> + </dates> + </vuln> + <vuln vid="aeac223e-60e1-11f0-8baa-8447094a420f"> <topic>liboqs -- Secret-dependent branching in HQC</topic> <affects> @@ -267,18 +363,15 @@ <affects> <package> <name>tomcat110</name> - <range><gt>11.0.0</gt></range> - <range><lt>11.0.9</lt></range> + <range><ge>11.0.0</ge><lt>11.0.9</lt></range> </package> <package> <name>tomcat101</name> - <range><gt>10.1.0</gt></range> - <range><lt>10.1.43</lt></range> + <range><ge>10.1.0</ge><lt>10.1.43</lt></range> </package> <package> <name>tomcat9</name> - <range><gt>9.0.0</gt></range> - <range><lt>9.0.107</lt></range> + <range><ge>9.0.0</ge><lt>9.0.107</lt></range> </package> </affects> <description> @@ -311,6 +404,7 @@ <dates> <discovery>2025-07-10</discovery> <entry>2025-07-10</entry> + <modified>2025-07-15</modified> </dates> </vuln> @@ -1547,7 +1641,7 @@ <affects> <package> <name>openh264</name> - <range><lt>2.5.1</lt></range> + <range><lt>2.5.1,2</lt></range> </package> </affects> <description> diff --git a/security/wipe/Makefile b/security/wipe/Makefile index 533b05a8ad96..89fe7d1f449c 100644 --- a/security/wipe/Makefile +++ b/security/wipe/Makefile @@ -4,7 +4,7 @@ PORTREVISION= 2 CATEGORIES= security MASTER_SITES= SF -MAINTAINER= ports@FreeBSD.org +MAINTAINER= mauroeldritch@gmail.com COMMENT= File and block device wiping utility WWW= https://wipe.sourceforge.net/ diff --git a/security/xray-core/Makefile b/security/xray-core/Makefile index 7b3b738acd20..52570c54d9cb 100644 --- a/security/xray-core/Makefile +++ b/security/xray-core/Makefile @@ -1,10 +1,9 @@ PORTNAME= xray-core DISTVERSIONPREFIX= v -DISTVERSION= 25.1.30 -PORTREVISION= 3 +DISTVERSION= 25.3.6 CATEGORIES= security -MASTER_SITES= https://github.com/v2fly/geoip/releases/download/202501190004/:geoip \ - https://github.com/v2fly/domain-list-community/releases/download/20250124154827/:geosite +MASTER_SITES= https://github.com/v2fly/geoip/releases/download/202503050126/:geoip \ + https://github.com/v2fly/domain-list-community/releases/download/20250307074130/:geosite DISTFILES= geoip.dat:geoip \ dlc.dat:geosite EXTRACT_ONLY= XTLS-Xray-core-v${DISTVERSION}_GH0.tar.gz @@ -16,16 +15,16 @@ WWW= https://github.com/XTLS/Xray-core LICENSE= MPL20 LICENSE_FILE= ${WRKSRC}/LICENSE -USES= go:1.23,modules +USES= go:1.24,modules USE_GITHUB= yes GH_ACCOUNT= XTLS GH_PROJECT= Xray-core USE_RC_SUBR= xray +GO_MOD_DIST= github GO_MODULE= github.com/${GH_ACCOUNT}/${PORTNAME} GO_PKGNAME= github.com/${GH_ACCOUNT}/${PORTNAME} GO_TARGET= ./main:xray -GO_MOD_DIST= github SUB_FILES= pkg-message SUB_LIST= GROUP="${GROUPS}" \ diff --git a/security/xray-core/distinfo b/security/xray-core/distinfo index 05e69f842e8f..0652578fce25 100644 --- a/security/xray-core/distinfo +++ b/security/xray-core/distinfo @@ -1,9 +1,9 @@ -TIMESTAMP = 1738391641 -SHA256 (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/geoip.dat) = 4f8d16184b6938e635519bc91cb978dcea6884878e39f592f7144135401d6bb6 -SIZE (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/geoip.dat) = 19163759 -SHA256 (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/dlc.dat) = ac12d81edc6058b3c66ae96a0a26ca8281616d96ea86d0d77b2ceff34a3e1a9d -SIZE (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/dlc.dat) = 2187000 -SHA256 (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/go.mod) = dbfd86f224ecc64911a82afbf4391711c13fd02ba96fa59346795cdfb4cf025a -SIZE (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/go.mod) = 2475 -SHA256 (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/XTLS-Xray-core-v25.1.30_GH0.tar.gz) = 983ee395f085ed1b7fbe0152cb56a5b605a6f70a5645d427c7186c476f14894e -SIZE (go/security_xray-core/XTLS-Xray-core-v25.1.30_GH0/XTLS-Xray-core-v25.1.30_GH0.tar.gz) = 629296 +TIMESTAMP = 1741492331 +SHA256 (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/geoip.dat) = 83337c712b04d8c16351cf5a5394eae5cb9cfa257fb4773485945dce65dcea76 +SIZE (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/geoip.dat) = 20567380 +SHA256 (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/dlc.dat) = 17d78a6b0a64e04f2362b2907788d9a192d41a340301e2e63daca415219cf752 +SIZE (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/dlc.dat) = 2220794 +SHA256 (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/go.mod) = d1c0dd5a9ec03dbd6083a75ca86c6cf5c04e6c48a31591224b845197181d5749 +SIZE (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/go.mod) = 2475 +SHA256 (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/XTLS-Xray-core-v25.3.6_GH0.tar.gz) = d62305348deff713767fe1b3c23538e3f8bfe0c96d092f1f95f48c17bc2f5943 +SIZE (go/security_xray-core/XTLS-Xray-core-v25.3.6_GH0/XTLS-Xray-core-v25.3.6_GH0.tar.gz) = 633356 diff --git a/security/zeek/Makefile b/security/zeek/Makefile index 6a84daace7de..e9a2bcc78a26 100644 --- a/security/zeek/Makefile +++ b/security/zeek/Makefile @@ -1,6 +1,5 @@ PORTNAME= zeek -DISTVERSION= 7.0.8 -PORTREVISION= 1 +DISTVERSION= 7.0.9 CATEGORIES= security MASTER_SITES= https://download.zeek.org/ diff --git a/security/zeek/distinfo b/security/zeek/distinfo index 556e223ec34a..716e78e681b4 100644 --- a/security/zeek/distinfo +++ b/security/zeek/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1747772619 -SHA256 (zeek-7.0.8.tar.gz) = 29f918851d671fb3d8fe6b97e3d9fcefaa18660c57cb1ed63adc5e25773175cd -SIZE (zeek-7.0.8.tar.gz) = 95963798 +TIMESTAMP = 1753129322 +SHA256 (zeek-7.0.9.tar.gz) = bebec9a71242da250ef8476bfce632c43892995c247d8dfafcef80ce42f6adbc +SIZE (zeek-7.0.9.tar.gz) = 95973519 |