CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

security/caldera5.3.0_32

Automated Adversary Emulation Platform

Maintainer
acm@FreeBSD.org
Packages
caldera 5.3.0_32
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
https://github.com/mitre/caldera
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range this version has left.

Commits (66)

Dag-Erling Smørgrav (des) · 5.3.0_32
various: Bump Go ports for Go 1.26.10 / 1.27.3
d81b7ba3c3
Dag-Erling Smørgrav (des) · 5.3.0_31
various: Bump Go ports
031fc6bfbf
Michael Osipov (michaelo) · 5.3.0_30
*/*: Bump consumers of www/beautifulsoup4 after port rename

PR:		297837
Approved by:	wen (maintainer via email)
45ea4cf85c
Adam Weinberger (adamw) · 5.3.0_29
many: Bump go ports for 1.26.8 and 1.27.1
dd0905142a
Jose Alonso Cardenas Marquez (acm) · 5.3.0_28
security/caldera: Remove DEPRECATED/EXPIRATED_DATE

- Update node dependency to 24
- Generate new cache files (aarch64 and amd64)
- Bump PORTREVISION
2501ab6d10
Dag-Erling Smørgrav (des) · 5.3.0_27
various: Bump go ports for go-1.25.14 / 1.26.7
4867821cd6
Dag-Erling Smørgrav (des) · 5.3.0_26
various: Bump go ports for go-1.25.13 / 1.26.6
6d39dcf04e
Kurt Jaeger (pi) · 5.3.0_25
security/caldera: change RUN_DEP from net/haproxy24 to net/haproxy to unbreak index

- Checked code, it's referenced only by a config and will probably work
  with every version of haproxy
4139a57ae2
Rene Ladan (rene) · 5.3.0_24
all: expire direct consumers of www/node20 on 2026-09-30

This happens to be the date when www/qt5-webengine expires, which
is also a node20 consumer (on i386, same for qt6-webengine).
5d1171cfb1
Dag-Erling Smørgrav (des) · 5.3.0_23
various: Bump go ports for go-1.25.12 / 1.26.5
4ea3547132
Dag-Erling Smørgrav (des) · 5.3.0_22
various: Bump go ports for go-1.25.11 / go-1.26.4
dd8dc2a59d
Rene Ladan (rene) · 5.3.0_21
security/caldera: expire on 2026-09-02 for www/npm-node20
bfebf81da5
Adam Weinberger (adamw) · 5.3.0_21
various: Bump ports for Go 1.25.10
4e243a83f8
Max Brazhnikov (makc) · 5.3.0_20
*/*: bump PORTREVISION after switching to NumPy 2.x
2bf3834a19
Max Brazhnikov (makc) · 5.3.0_19
*/*: Switch to NumPy 2.x

PR:		294328
Exp-run:	antoine
b0b4d9e1ea
Dag-Erling Smørgrav (des) · 5.3.0_19
various: Bump go ports for go-1.25.9 / 1.26.2
7507e72a84
Charlie Li (vishwin) · 5.3.0_18
math/py-numpy: switch all consumers to math/py-numpy1

...and bump PORTREVISIONs of consumers with hard RUN_DEPENDS

PR: 281470
d4bd5ba72e
Adam Weinberger (adamw) · 5.3.0_17
various: Bump ports for Go 1.25.8
a8d318da7c
Adam Weinberger (adamw) · 5.3.0_16
various: Bump ports for Go default 1.24->1.25
97685c1886
Adam Weinberger (adamw) · 5.3.0_15
various: Bump Go ports for 1.24.13
529df949a5
Jose Alonso Cardenas Marquez (acm) · 5.3.0_14
security/caldera: Remove BROKEN. it doesn't depend on marshmallow-emu anymore

- Remove marshmallow-emu dependency
- Bump PORTREVISION
eb8074a3ca
Rene Ladan (rene) · 5.3.0_13
security/caldera: expire on 2026-05-01 for devel/py-marshmallow-enum
cb972318fc
Adam Weinberger (adamw) · 5.3.0_13
various: Bump Go ports for 1.24.12
013f2d30b0
Vsevolod Stakhov (vsevolod) · 5.3.0_12
security/libsodium: Update to 1.0.21

The API remains compatible but bumping all dependent ports as SHLIB
has changed.

Changelog: https://github.com/jedisct1/libsodium/releases/tag/1.0.21-RELEASE
Security: https://00f.net/2025/12/30/libsodium-vulnerability/
PR: 279347
8b878d88b4
Adam Weinberger (adamw) · 5.3.0_11
various: Bump Go ports for 1.24.11
b24429e3ed
Adam Weinberger (adamw) · 5.3.0_10
various: Bump Go ports for 1.24.10
0dfced16fb
Adam Weinberger (adamw) · 5.3.0_9
various: Bump go ports for go-1.24.9
90f976619b
Adam Weinberger (adamw) · 5.3.0_8
many: Bump dependent ports after go124 update
2e7587aaf8
Hiroki Tagato (tagattie) · 5.3.0_7
*/*: switch dependency from devel/py-lxml5 to devel/py-lxml

Currently, there are two versions of python XML processing library
which conflict each other in the ports tree, namely:
- devel/py-lxml5 (now at version 5.4.0)
- devel/py-lxml  (now at version 6.0.1)

To avoid the situation that some ports depend on py-lxml5 and some
others do on py-lxml (by switching dependencies individually), this
commit switches the dependencies from py-lxml5 to py-lxml at once.

Additional note: There are still two ports (textproc/py-rdflib and
www/py-draftjs-exporter) depending on py-lxml5 since they limit upper
version to less than 6.

PR:		289491
Approved by:	Michiel van Baak Jansen <michiel@vanbaak.eu>, arrowd,
		crees, madpilot, delphij, marcus, nivit, kai,
		skreuzer, fluffy, bofh, thierry, stephen, sunpoet,
		0mp, Eric Camachat <eric@camachat.org>
a6233e5a2f
Adam Weinberger (adamw) · 5.3.0_6
many: Bump go ports for go-1.24.7
31a5a229a7
Rene Ladan (rene) · 5.3.0_5
all: bump PORTREVISION after updating graphics/libyuv

Using the Tools/scripts/bump_revision.pl script
b304d8ab18
Adam Weinberger (adamw) · 5.3.0_4
go ports: Bump for 1.24.6
53610681ea
Hiroki Tagato (tagattie) · 5.3.0_3
*/*: update dependency on devel/py-lxml to devel/py-lxml5

www/py-beautifulsoup has switched dependency on devel/py-lxml to
devel/py-lxml5.

Ports which directly or indirectly depends on both
www/py-beautifulsoup and devel/py-lxml must also switch their
dependencies on devel/py-lxml to devel/py-lxml5 to avoid conflicts.

PR:		288047
Approved by:	portmgr (chase dependency change)
230fb2661c
Adam Weinberger (adamw) · 5.3.0_2
many: Bump PORTREVISION for go-1.24.5 update
275975297b
Jose Alonso Cardenas Marquez (acm) · 5.3.0_1
security/caldera*: Set ONLY_FOR_ARCHS to aarch64 amd64

- Bump PORTREVISION
41cdf8c772
Jose Alonso Cardenas Marquez (acm) · 5.3.0
security/caldera*: Update to 5.3.0

- Remove EXPIRATE_DATE. Now it uses npm-node20
- Other minor modifications

ChangeLog at:  https://github.com/mitre/caldera/releases/tag/5.3.0
6e866386bc
Rene Ladan (rene) · 5.2.0_3
all: expire (indirect) consumers of www/node18 on 2025-09-01
fc88627e29
Adam Weinberger (adamw) · 5.2.0_3
various: Bump PORTREVISION after go124-1.24.4 update
94be418de3
Adam Weinberger (adamw) · 5.2.0_2
go: Bump go124-dependent ports

Earlier I bumped the default Go to 1.24. Ports that specify a lower
version will still build with those lower version (for now), so they
don't need a bumping. Instead I'm bumping anything that (now) has go124
as a dependency.
0bdd2ad334
Adam Weinberger (adamw) · 5.2.0_1
go: Bump ports for go124 update
a4e30d4f4f
Jose Alonso Cardenas Marquez (acm) · 5.2.0
security/caldera: Update to 5.2.0

ChangeLog at:   https://github.com/mitre/caldera/releases
16a2311806
Adam Weinberger (adamw) · 5.0.0_12
Bump all go ports for yesterday's releases
d0642a6176
Ashish SHUKLA (ashish) · 5.0.0_11
all: Bump after lang/go121 update
aa8c0111bf
Po-Chuan Hsieh (sunpoet) · 5.0.0_10
devel/py-pyyaml: Move devel/py-yaml to devel/py-pyyaml

- Bump PORTREVISION of dependent ports for dependency change
1a80ec7c22
Ashish SHUKLA (ashish) · 5.0.0_9
all: Bump after lang/go121 update
c4b51c2028
Ashish SHUKLA (ashish) · 5.0.0_8
all: Bump after lang/go121 update

MFH:		2024Q2
746fa696a1
Vsevolod Stakhov (vsevolod) · 5.0.0_7
security/libsodium: update to 1.0.19, bump dependent ports

PR:	278259
Reported by:	Andrey Korobkov <alster-vinterdalen.se>
b66e4949cb
Ashish SHUKLA (ashish) · 5.0.0_6
all: Bump after lang/go121 update

MFH:		2024Q2
fce0cc3272
Ashish SHUKLA (ashish) · 5.0.0_5
all: Bump after lang/go121 update

MFH:		2024Q2
32b284679a
Jose Alonso Cardenas Marquez (acm) · 5.0.0_4
security/caldera: missing distinfo entry

Reported by:	pkg-fallout
a2d4b8441b