2 of 3 on in the package: DOCSMANPAGESShow the 1 options that are off
TEST
Packages by version and architecture
latest
FreeBSD version
amd64
aarch64
i386
FreeBSD 16
0.26.5_1
0.26.5_1
–
FreeBSD 15
0.26.5_1
0.26.5_1
–
FreeBSD 14
0.26.5_1
0.26.5_1
0.26.5_1
quarterly (2026Q4)
FreeBSD version
amd64
aarch64
i386
FreeBSD 15
0.26.5_1
0.26.5_1
–
FreeBSD 14
0.26.5_1
0.26.5_1
0.26.5_1
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by pkg audit for the packaged version 0.26.5_1.
Fixed (1)
Show 1 fixed
VuXML entries whose affected range the packaged version has left.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (82)
Roman Bogorodskiy (novel) · 0.26.5_1
security/p11-kit: use base system consolidated anchor lists
Currently p11-kit already uses base-system certificates from /usr/share/certs
(since 8672992ef7f072f87304e953231de77179143f1d 2023-02-01 11:05:18 +0000).
Base system's certctl tool allows administrator to add locally trusted anchors
in /usr/local/share/certs, but p11-kit's current behaviour will ignore them.
Use system's consolidated certificates in /etc/ssl/certs and
/etc/ssl/untrusted instead of /usr/share/certs/trusted and
/usr/share/certs/untrusted.
These directories (/etc/ssl/ ones) are managed by system's certctl tool,
and reflects the same content plus admin's managed trusted/untrusted certs.
This change should not break any current behaviour on FreeBSD > 12.2.
This is also coherent with debian's behaviour (on debian, p11_trust_paths
is set to /etc/ssl/certs/ca-certificates.crt, updated by system's
update-ca-certificate which allows custom anchors listed in
/etc/ca-certificates.conf).
PR: 297759
Approved by: novel (maintainer)
Differential Revision: https://reviews.freebsd.org/D59200
all: drop support for FreeBSD 13, mips and risc64sf
Reviewed by: many (*)
Differential Revision: https://reviews.freebsd.org/D55624
Differential Revision: https://reviews.freebsd.org/D55642 (merged in from bofh)
many (*)
acm arrowd brooks cmt dch decke dinoex eduardo fluffy fuz gahr garga
jbeich joerg jrm kai kenrap martymac matthew mfechner michaelo mizhka
nobutaka pkubaj se tagattie thj
Anton Saietskii
GenericRikka
Gert Doering
Jan Bramkamp
Oleh Hushchenkov
Oleksandr Kryvulia
Ralf van der Enden
Yamagi
desktop kde python tcltk office
security/p11-kit: chase distfile re-roll
Looks like the original distfile didn't include some auto-generated data
such as autotools things (m4 files etc) and NLS data, which didn't
affect the port as it uses meson and doesn't install NLS files.
The new distfile's sha256 checksum matches the one specified by
upstream.
Upstream issue: https://github.com/p11-glue/p11-kit/issues/725
Reported by: sunpoet
security/p11-kit: remove dependency on glib20
The build system is only depending on glib-2.0 to fetch its prefix via
pkgconfig
the build system allows to pass directly the said prefix, so let's use
that instead of adding a dependency on glib 2.0
security/p11-kit: Use base system CA certificates
Drop dependency on ca_root_nss and use base system root certificates
instead. This allows users to add their own certificates.
trust_paths now points to a directory and that directory contains
"anchors" and "blocklist" symlinks pointing to the base system
certificate directories. This is based on the documentation from
https://p11-glue.github.io/p11-glue/p11-kit/manual/trust-module.html.
The list of certificates known to p11-kit can be verified by running
"trust list".
PR: 268841
Approved by: novel (maintainer)
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.
There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.
The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.
Approved by: portmgr (tcberner)
security/p11-kit: unbreak build with Meson 0.61.0
doc/manual/meson.build:69:8: ERROR: gnome.gtkdoc keyword argument 'dependencies' was of type array[CustomTarget | PkgConfigDependency] but should have been array[Dependency | SharedLibrary | StaticLibrary]
PR: 260943
Reported by: antoine (via exp-run)
Regressed by: https://github.com/mesonbuild/meson/commit/566c2c9a9c98
security/p11-kit: drop BASH option
- Drop BASH option and install bash completion files unconditionally,
but only add shells/bash-completion to BUILD_DEPENDS, not RUN_DEPENDS,
- Improve formatting with portfmt(1),
- Bump PORTREVISION for dependency changes.
PR: 253843
Submitted by: swills
Reported by: Andras Farkas
security/p11-kit: update to 0.23.21
- Update to 0.23.21
- Convert to using Meson instead of GNU Autotools
- Make bash-completion, DOCS and MANPAGES optional
PR: 248819
Submitted by: daniel.engberg.lists@pyret.net
Chanse update of devel/libffi
Chase the devel/libffi update
Bump portrevision of all dependent ports to chace shard library version bump
in libffi.
Update LIB_DEPENDS lines where needed to not require a specific version of
libffi.so.
PR: 247028 (for tracking)
security/p11-kit: update to 0.23.8
Include two patches from upstream for:
* Fixing build without debug
* Adding missing stdint.h include to fix build on FreeBSD 10.x