CVE and update status of the FreeBSD ports tree3,296 unaddressed CVEs in 671 portsAll times are CET
Port details

net/fort 1.7.0

FORT Validator is an open source RPKI validator

Port info

Maintainer
philip@FreeBSD.org
Packages
latest: 1.7.0
Upstream
up to date
Last update
to 1.7.0 · fc30167e01
Quarterly
2026Q4: 1.7.0
WWW
https://fortproject.net/en/validator
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install fort
installs 1.7.0 from latest; from quarterly (2026Q4) 1.7.0
Port
# cd /usr/ports/net/fort && make install clean
Size
177 KiB download · 442 KiB installed
Depends on
devel/jansson 2.15.1_1, ftp/curl 8.23.0, net/rsync 3.5.1, textproc/libxml2 2.15.4, www/libmicrohttpd 1.0.10
License
MIT
pkg-message
Shown after installing
A default configuration file has been installed in
/usr/local/etc/fort/fort-config.json.sample.

To use FORT, you will need the Trust Anchor Locator (TAL) files.
You can download these by running "fort --init-tals" as follows:

# fort --init-tals --tal /usr/local/etc/fort/tal

When you have downloaded the TAL files, you can start the RTR
server and validator:

# sysrc fort_enable=YES # or edit /etc/rc.conf manually
# service fort start

The default configuration will bind the RTR server to localhost
on port 8323.

Consult the FORT manual for more information:
https://nicmx.github.io/FORT-validator/run.html

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.7.01.7.0–
FreeBSD 151.7.01.7.0–
FreeBSD 141.7.01.7.01.7.0

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.7.01.7.0–
FreeBSD 141.7.01.7.01.7.0

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.7.0.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (22)

Philip Paeps (philip) · 1.7.0 MFH 2026Q3 ✓
net/fort: fix fetching 1.7.0.experimental

Reported by:	pkg-fallout
Fixes:	        4839e2b8d102 ("net/fort: Update to 1.7.0.experimental")
MFH:	        2026Q3
Pointy hat to:	philip
fc30167e01
Philip Paeps (philip) · 1.7.0 MFH 2026Q3 ✓
net/fort: Update to 1.7.0.experimental

- Update to 1.7.0.experimental
- Changelog:
  https://github.com/NICMx/FORT-validator/releases/tag/1.7.0.experimental

Please note that max-rtr-version defaults to zero. This is because
Fort's validation currently yields no router keys (defeating the purpose
of RTRv1), and the RTRv2 specification is still receiving updates.

The latter is all the ".experimental" suffix refers to. If you raise
max-rtr-version to 2, you'll be trying a feature that hasn't been RFC'd
yet.

MFH:		2026Q3
4839e2b8d1
Philip Paeps (philip) · 1.6.8
net/fort: Update to 1.6.8

- Update to 1.6.8
- Changelog: https://github.com/NICMx/FORT-validator/releases/tag/1.6.8

MFH:		2026Q2
5716242c7a
Philip Paeps (philip) · 1.6.7
net/fort: Update to 1.6.7

- Update to 1.6.7
- Changelog: https://github.com/NICMx/FORT-validator/releases/tag/1.6.7

While here, take maintainership.

MFH:	2025Q3
03f0d4b023
Baptiste Daroussin (bapt) · 1.6.6_1
libxml2: chase libxml soversion bump
3068854dd0
Daniel Engberg (diizzy) · 1.6.6
net/fort: Improve port

* Use upsteam release archive as recommended by Porter's Handbook
* Remove USES= autoreconf
* Remove USES= compiler:c11 , upstream defines c99
* Remove upstream's hardcoded optimization
* Remove GNU_CONFIGURE_MANPREFIX

PR:		285920
Approved by:	portmgr (maintainer timeout, 2+ weeks)
fa360fded4
Philip Paeps (philip) · 1.6.6
net/fort: Update to 1.6.6

- Update to 1.6.6
- Changelog: https://github.com/NICMx/FORT-validator/releases/tag/1.6.6

Approved by:	Toni Kalombo <toni@devboks.com> (maintainer, implicit)
MFH:		2025Q2
3ad45e78d7
Daniel Engberg (diizzy) · 1.6.4
*/*: Use Gnome helper for defining libxml2 dependency

Replace LIB_DEPENDS with USES= gnome, USE_GNOME= libxml2

Approved by:	portmgr (blanket)
3b3700f8f0
Philip Paeps (philip) · 1.6.4
net/fort: Update to 1.6.4

- Update to 1.6.4
- Changelog: https://github.com/NICMx/FORT-validator/releases/tag/1.6.4

Approved by:	Toni Kalombo <toni@devboks.com> (maintainer, implicit)
MFH:		2024Q4
Security:	CVE-2024-48943
04db0aa821
Philip Paeps (philip) · 1.6.2
net/fort: Update to 1.6.2

- Update to 1.6.2
- Changelog: https://github.com/NICMx/FORT-validator/releases/tag/1.6.2

While here, fix building with libxml2 2.13.1 [1].  This patch will be in
the next upstream release.

Approved by:	Toni Kalombo <toni@devboks.com> (maintainer, implicit)
Reported by:	diizzy [1]
PR:             279898 [1]
f77077d797
Muhammad Moinur Rahman (bofh) · 1.6.1_1
net/fort: Moved man to share/man

Approved by:    portmgr (blanket)
cfef48fb2b
Philip Paeps (philip) · 1.6.1
net/fort: Update to 1.6.1

- Update to 1.6.1
- Changelog: https://github.com/NICMx/FORT-validator/releases/tag/1.6.1

Approved by:	Toni Kalombo <toni@devboks.com> (maintainer, implicit)
17ce7c7e93
Philip Paeps (philip) · 1.6.0
net/fort: Update to 1.6.0

- Update to 1.6.0
- Changelog: https://github.com/NICMx/FORT-validator/releases/tag/1.6.0

Approved by:	Toni Kalombo <toni@devboks.com> (maintainer, implicit)
811d8e15b1
Philip Paeps (philip) · 1.5.4
net/fort: Update to 1.5.4

- Update to 1.5.4
- Changelog: https://github.com/NICMx/FORT-validator/releases/tag/1.5.4

Approved by:	Toni Kalombo <toni@devboks.com> (maintainer)
Reported by:	Mark Tinka <mark@tinka.africa>
5cf9ebd6ac
Stefan Eßer (se) · 1.5.3_3
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.5.3_3
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Matthias Andree (mandree) · 1.5.3_3
*: bump PORTREVISION of all devel/xxhash users...

...except archivers/py-borgbackup, which requires a more complete fix.
875d7c7d19
Charlie Li (vishwin) · 1.5.3_2
textproc/libxml2: bump all LIB_DEPENDS consumers

This is a separate commit to facilitate easier cherry-picking for
quarterly.

PR: 262853, 262940, 262877, 263126
Approved by: fluffy (mentor)
d63665f7cd
Matthias Fechner (mfechner) · 1.5.3_1
textproc/libxml2: bump all dependencies

This should make sure that all dependent ports will pick
up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246
247c7db751
Juraj Lutter (otis) · 1.5.3
net/fort: Update to 1.5.3

- Update to 1.5.3
- Changelog: https://github.com/NICMx/FORT-validator/releases/tag/1.5.3

Reported by:	Job Snijders <job@sobornost.net>
Differential Revision: https://reviews.freebsd.org/D32910
7477834acf
Philip Paeps (philip) · 1.5.2_1
net/fort: don't depend on gcc10, fix version check

The current version of FORT builds fine with any c11 compiler.  There is
no need for USE_GCC.

Patch the build system to correctly define the version of FORT as seen
in the output of "fort --version" and the "User-Agent:" HTTP header. [1]

Approved by:	Toni Yannick Kalombo <toni@devboks.com> (maintainer)
Reported by:	Mark Tinka <mark@tinka.africa> [1]
9604608f8a
Philip Paeps (philip) · 1.5.2
net/fort: new port: FORT Validator

FORT Validator is an open source RPKI validator.  This solution
allows operators to validate BGP routing information against the
RPKI repository for use in router configuration and resolution.

Submitted by:	Toni Kalombo <toni@devboks.com> (maintainer)
Tested by:	Mark Tinka <mark@tinka.africa>
a679f9da38