CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

devel/etcd353.5.28_9

Highly-available key value store and service discovery

Maintainer
kiwi@FreeBSD.org
Packages
coreos-etcd35 3.5.28_9
Upstream
Higher version available: 3.7.3
CPE
etcd:etcd from the port
WWW
https://github.com/coreos/etcd
Links
cgit · VuXML

Unaddressed (2) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2026-598186.52026-07-08etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is configured with --listen-client-http-urls to split H…
CVE-2026-442830.02026-05-14etcd is a distributed key-value store for the data of a distributed system. Prior to 3.4.44, 3.5.30, and 3.6.11, a vulnerability in etcd allows read access via PrevKv, o…

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (19)

Dag-Erling Smørgrav (des) · 3.5.28_9
various: Bump Go ports for Go 1.26.10 / 1.27.3
d81b7ba3c3
Dag-Erling Smørgrav (des) · 3.5.28_8
various: Bump Go ports
031fc6bfbf
Adam Weinberger (adamw) · 3.5.28_7
many: Bump go ports for 1.26.8 and 1.27.1
dd0905142a
Dag-Erling Smørgrav (des) · 3.5.28_6
various: Bump go ports for go-1.25.14 / 1.26.7
4867821cd6
Dag-Erling Smørgrav (des) · 3.5.28_5
various: Bump go ports for go-1.25.13 / 1.26.6
6d39dcf04e
Dag-Erling Smørgrav (des) · 3.5.28_4
various: Bump go ports for go-1.25.12 / 1.26.5
4ea3547132
Dag-Erling Smørgrav (des) · 3.5.28_3
various: Bump go ports for go-1.25.11 / go-1.26.4
dd8dc2a59d
Adam Weinberger (adamw) · 3.5.28_2
various: Bump ports for Go 1.25.10
4e243a83f8
Dag-Erling Smørgrav (des) · 3.5.28_1
various: Bump go ports for go-1.25.9 / 1.26.2
7507e72a84
Xavier Beaudouin (kiwi) · 3.5.28
devel/etcd35: update to 3.5.38

Reported by:	portscout
Sponsored by:	Entersekt (previously Modirum MDpay)
Sponsored by:	Klara, Inc.
44e94f4185
Adam Weinberger (adamw) · 3.5.26_4
various: Bump ports for Go 1.25.8
a8d318da7c
Adam Weinberger (adamw) · 3.5.26_3
various: Bump ports for Go default 1.24->1.25
97685c1886
Adam Weinberger (adamw) · 3.5.26_2
various: Bump Go ports for 1.24.13
529df949a5
Adam Weinberger (adamw) · 3.5.26_1
various: Bump Go ports for 1.24.12
013f2d30b0
Xavier Beaudouin (kiwi) · 3.5.26
devel/etcd35: Update to 3.5.26

Reported by:	portscout
Sponsored by:	Entersekt (previously Modirum MDpay)
Sponsored by:	Klara, Inc.
9f6996b2f6
Xavier Beaudouin (kiwi) · 3.5.25
devel/etcd35: Update to 3.5.25

Changelog: https://github.com/etcd-io/etcd/blob/main/CHANGELOG/CHANGELOG-3.5.md

Reported by:	portscout
Sponsored by:	Entersekt (previously Modirum MDpay)
Sponsored by:	Klara, Inc.
13707860e1
Adam Weinberger (adamw) · 3.5.21_1
many: Unsupported Go dep; deprecate and schedule for removal

There are about 75 ports that depend on old, unsupported Go
versions. I've scheduled those Go versions for deletions on
2025/01/01, and so these ports are scheduled for removal on
that same day.

HOWEVER....

Likely NONE or VERY VERY FEW of these ports will actually need
to be deleted! This stems from a misunderstanding:

When go.mod says "go 1.23", it means that it requires AT LEAST
go-1.23. Locking a port to a specific go version should almost
never happen; it is reserved for when a package absolutely
cannot build with any newer version, and it almost means that
the port will only last 1 year (Go releases new minors twice a
year).

Where a port has
USES=go:1.23
maintainers should attempt build with just
USES=go

If that works, please either commit it or submit it in a PR.

Same goes go
USES=go:1.23,modules
to attempt
USES=go,modules
f45b1d07f5
Adam Weinberger (adamw) · 3.5.21_1
go123 ports: Bump for 1.23.12
b6703954e3
Mateusz Piotrowski (0mp) · 3.5.21
devel/ectd35: Add version 3.5 of etcd

The current implementation of the targets could possibly be improved
by moving some of the bits into go.mk.

Sponsored by:	Entersekt (previously Modirum MDpay)
Co-authored-by:	Xavier Beaudouin <kiwi@FreeBSD.org>
Differential Revision:	https://reviews.freebsd.org/D50164
9b11ea8c5d