CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

devel/cjose0.8.0.20260912

C library implementing JavaScript Object Signing and Encryption (JOSE)

Maintainer
jamie@chair6.net
Packages
cjose 0.8.0.20260912
Upstream
Higher version available: 0.8.1
CPE
none, CVEs only via VuXML
WWW
https://github.com/cisco/cjose
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (2)

VuXML entries whose affected range this version has left.

Commits (20)

Daniel Engberg (diizzy) · 0.8.0.20260912
devel/cjose: Update to 0.8.0.20260912

Enable "make test"

Backport following commits (due to size utilize GH_TAGNAME)
291d835b0dc9873b2fddc1da225fbfcd26f56b22
64d0513a2b23d1a631fb5c4ecb6c1a31ef79ef1d
3a8baf45355318457bad7547b29ff0cff0079f5e
d1d648c4c7a2991d8cf4578c1bac90e4598f8904
cecbc40223deaaa00c3fbdbd1cf64515f8bf6ffd
9beb82d39adbc5d8ef6cd9bc238df9d439666bc1
a12e7c50a5d5b4a0db6cf2b6f515f6041fe99a11

Patch initially submitted by Ivo Marino <ivo.marino+freebsd@gmail.com>

References:
https://github.com/cisco/cjose/commit/291d835b0dc9873b2fddc1da225fbfcd26f56b22
https://github.com/cisco/cjose/commit/64d0513a2b23d1a631fb5c4ecb6c1a31ef79ef1d
https://github.com/cisco/cjose/commit/3a8baf45355318457bad7547b29ff0cff0079f5e
https://github.com/cisco/cjose/commit/d1d648c4c7a2991d8cf4578c1bac90e4598f8904
https://github.com/cisco/cjose/commit/cecbc40223deaaa00c3fbdbd1cf64515f8bf6ffd
https://github.com/cisco/cjose/commit/9beb82d39adbc5d8ef6cd9bc238df9d439666bc1
https://github.com/cisco/cjose/commit/a12e7c50a5d5b4a0db6cf2b6f515f6041fe99a11

PR:		298458
Approved by:	maintainer timeout, 2+ weeks
167ca5993f
Rene Ladan (rene) · 0.6.1_2
all: drop support for FreeBSD 13, mips and risc64sf

Reviewed by:            many (*)
Differential Revision:  https://reviews.freebsd.org/D55624
Differential Revision:  https://reviews.freebsd.org/D55642 (merged in from bofh)

many (*)
  acm arrowd brooks cmt dch decke dinoex eduardo fluffy fuz gahr garga
  jbeich joerg jrm kai kenrap martymac matthew mfechner michaelo mizhka
  nobutaka pkubaj se tagattie thj

  Anton Saietskii
  GenericRikka
  Gert Doering
  Jan Bramkamp
  Oleh Hushchenkov
  Oleksandr Kryvulia
  Ralf van der Enden
  Yamagi

  desktop kde python tcltk office
2a7c056120
Rene Ladan (rene) · 0.6.1_2
all: drop support for FreeBSD 13.2 which reached EOL today

Thanks again to jbeich for noticing various things I overlooked.

Reviewed by:	acm, ashish, eduardo, ehaupt, eugen, jbeich, martymac, mat, nobukata, sunpoet, tagattie, yuri, arrowd, kde
Differential Revision:	https://reviews.freebsd.org/D45141
19d68720f1
Muhammad Moinur Rahman (bofh) · 0.6.1_2
devel/cjose: Fix build with llvm16

- Fix build with OpenSSL 3 and later

Approved by:	portmgr (blanket)
Sponsored by:	The FreeBSD Foundation
ff42bb605e
Muhammad Moinur Rahman (bofh) · 0.6.1_2
devel/cjose: Fix build with llvm15

Approved by:	portmgr (blanket)
128bdf5517
Muhammad Moinur Rahman (bofh) · 0.6.1_2
devel/cjose: Mark BROKEN_SSL

- Requires OpenSSL 3.0.0 deprecated RSA_ routines

Approved by:	portmgr (blanket)
30cf25db28
Stefan Eßer (se) · 0.6.1_2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 0.6.1_2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Mathieu Arnold (mat) · 0.6.1_2
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 0.6.1_2
Remove # $FreeBSD$ from Makefiles.
305f148f48
Alexey Dokuchaev (danfe) · 0.6.1_2
Fix spelling mistakes, typos, poor wording, hyphenation, jargonisms, contractions, "<portname> is ..." cases, missing Oxford commas, and other miscellaneous style bugs in the COMMENT line.
ee895ff14c
Gerald Pfeifer (gerald) · 0.6.1_2
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Gerald Pfeifer (gerald) · 0.6.1_1
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
a9f015d155
Mark Linimon (linimon) · 0.6.1
Fix build on gcc-based archs.

Tested on amd64.

PR:		231495
Submitted by:	Piotr Kubaj
Approved by:	portmgr (tier-2 blanket)
4b24e42b29
Wen Heping (wen) · 0.6.1
- Update to 0.6.1

PR:		230253
Submitted by:	ndowens@yahoo.com
Approved by:	maintainer(timeout, > 40 days)
a9d5701cac
Ryan Steinmetz (zi) · 0.4.1_1
- Remove explicit dependency on libcrypto in pkgconfig (resolve build failures on ports that depend on this one) - Bump PORTREVISION
cb75b954a1
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.4.1
Remove BROKEN_FreeBSD_9

Approved by:	portmgr (blanket)
e0b379fa6f
Dmitry Marakasov (amdmi3) · 0.4.1
- Mark broken on FreeBSD 9.x: does not build

jwe.c:752: error: 'EVP_CTRL_GCM_GET_TAG' undeclared (first use in this function)
jwe.c:752: error: (Each undeclared identifier is reported only once
jwe.c:752: error: for each function it appears in.)

- Remove unneeded GH_PROJECT
- Add LICENSE_FILE

Approved by:	portmgr blanket
128ca9d9ae
John Marino (marino) · 0.4.1
devel/cjose: Allow building with LibreSSL

This requires USES+=pkgconfig and to configure to the proper *ssl base
as well as a patch to free cjose from being openssl-specific.

Approved by:	SSL blanket
e2a4864cab
Vanilla I. Shu (vanilla) · 0.4.1
Add cjose 0.4.1, c library implementing Javascript Object Signing & Encryption (JOSE).

PR:		212314
Submitted by:	jamie@chair6.net
40b808b02b