CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

security/pam_yubico 2.27_1

PAM module for authenticating with a Yubico YubiKey

Port info

Maintainer
matt@mjslabs.com
Packages
latest: 2.27_1
Upstream
up to date
Last update
to 2.27_1 · 3546b34d31
Quarterly
2026Q4: 2.27_1
WWW
https://developers.yubico.com/yubico-pam/
Links
cgit · VuXML

Install

Package
# pkg install pam_yubico
installs 2.27_1 from latest; from quarterly (2026Q4) 2.27_1
Port
# cd /usr/ports/security/pam_yubico && make install clean
# make -C /usr/ports/security/pam_yubico config  # change options first
Size
36 KiB download · 96 KiB installed
Depends on
security/libyubikey 1.13_1, security/ykclient 2.15_1, security/ykpers 1.19.0_2
License
BSD2CLAUSE
Options
2 of 4 on in the package: CR DOCS
Show the 2 options that are off
LDAP STATIC
pkg-message
Shown after installing
For setup instructions on authenticating with your YubiKey, see:
/usr/local/share/doc/pam_yubico/README
or
https://github.com/Yubico/yubico-pam/blob/master/README

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.27_12.27_1–
FreeBSD 152.27_12.27_1–
FreeBSD 142.27_12.27_12.27_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.27_12.27_1–
FreeBSD 142.27_12.27_12.27_1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.27_1.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (25)

Muhammad Moinur Rahman (bofh) · 2.27_1
security/pam_yubico: Moved man to share/man

Approved by:    portmgr (blanket)
3546b34d31
Muhammad Moinur Rahman (bofh) · 2.27
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap

Convert the USE_LDAP=yes to USES=ldap and adds the following features:

- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
  RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features

Reviewed by:	delphij
Approved by:	portmgr
Differential Revision: https://reviews.freebsd.org/D38233
6e1233be22
Renato Botelho (garga) · 2.27
security/pam_yubico: Update to 2.27

While here, sort Makefile and make portclippy happy

PR:		266100
Approved by:	maintainer timeout (> 1 month)
Sponsored by:	Rubicon Communications, LLC ("Netgate")
dfb074b085
Stefan Eßer (se) · 2.26
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.26
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Mathieu Arnold (mat) · 2.26
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 2.26
Remove # $FreeBSD$ from Makefiles.
305f148f48
Mathieu Arnold (mat) · 2.26
Convert to UCL & cleanup pkg-message (categories s)
bc89cd3d2c
Sunpoet Po-Chuan Hsieh (sunpoet) · 2.26
Update MASTER_SITES and WWW

Approved by:	portmgr (blanket)
aead2708a8
Philip Paeps (philip) · 2.26
security/pam_yubico: update to 2.26

Changes: https://developers.yubico.com/yubico-pam/Release_Notes.html

PR:		233237
Approved by:	Matt Stofko <matt@mjslabs.com> (maintainer)
08c61a9c2c
Dmitry Marakasov (amdmi3) · 2.16_2
- Add LICENSE_FILE - Switch to USES=localbase - Switch to new test framework - Switch to options helpers

Approved by:	portmgr blanket
3b5761e41c
Dmitry Marakasov (amdmi3) · 2.16_2
- Fix trailing whitespace in pkg-messages

Approved by:	portmgr blanket
e87a8bd319
Mathieu Arnold (mat) · 2.16_2
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight
597afc47ba
Baptiste Daroussin (bapt) · 2.16_2
cleanup plist
bb1e2d4d90
Tijl Coosemans (tijl) · 2.16_2
net/openldap24-*: - Convert to USES=libtool and bump dependent ports - Avoid USE_AUTOTOOLS - Don't use PTHREAD_LIBS - Use MAKE_CMD

databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip

databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample

databases/libgdamm:
- Drop :keepla
- USES=tar:bzip2
- Use INSTALL_TARGET=install-strip

databases/libgdamm5:
- Add INSTALL_TARGET=install-strip
- Drop --enable-static (inherited from old repocopy)

devel/anjuta x11-toolkits/py-gnome-extras:
- Drop :keepla

dns/powerdns dns/powerdns-devel:
- Convert to USES=libtool
- Add INSTALL_TARGET=install-strip
- Disable static modules
- Stop creating library symlinks with .0 suffix, not needed for dynamically
  opened modules

mail/dovecot2:
- Add USES=libtool

mail/dovecot2-pigeonhole:
- Drop CONFIGURE_TARGET (incorrect for Dragonfly)
- Add USES=libtool and INSTALL_TARGET=install-strip

math/gnumeric:
- USES=libtool tar:xz

Approved by:	portmgr (implicit, bump unstaged ports)
37f54e0f66
Tijl Coosemans (tijl) · 2.16_1
- Add USES=libtool to security/ykclient and bump dependent ports - Use MAKE_CMD
47c1707021
Danilo Egea Gondolfo (danilo) · 2.16
- Update from 2.14 to 2.16 [1] - Add libtool to USES

PR:		ports/191617
Submitted by:	matt@mjslabs.com [1]
d3afaee9cb
Danilo Egea Gondolfo (danilo) · 2.14_2
- Update from 1.14.1 to 1.15.0

PR:		ports/185675
Submitted by:	Matt Stofko <matt@mjslabs.com> (maintainer)
0202b2e246
Danilo Egea Gondolfo (danilo) · 2.14_1
- Bump PORTREVISION - Convert LICENSE from BSD to BSD2CLAUSE - Remove LDAP from DEFAULT_OPTIONS

PR:		ports/185259
Submitted by:	Matt Stofko <matt@mjslabs.com> (maintainer)
1caf1201f7
Pawel Pekala (pawel) · 2.14
- Update to version 2.14 - Fix LDAP support - Add STATIC option, builds static version of library - Update MASTER_SITES and WWW

While I'm here:
- Switch to new LIB_DEPENDS format
- Use options helpers
- Allow staging
- Don't show pkg-message twice

PR:             ports/184183
Submitted by:   maintainer
71c9676bb6
Baptiste Daroussin (bapt) · 2.13_1
Add NO_STAGE all over the place in preparation for the staging support (cat: security)
a65ed2e51b
Baptiste Daroussin (bapt) · 2.13_1
Finish converting the whole ports tree to USES=pkgconfig
992586fa08
Pawel Pekala (pawel) · 2.13_1
- Update security/ykpers to version 1.12.0 [1] - Update security/libyubikey to version 1.10 [2] - Bump security/pam_yubico affected by security/ykpers ABI change

PR:		ports/177098 [1]
PR:		ports/177099 [2]
Submitted by:	Matt Stofko <matt@mjslabs.com> (maintainer)
8e15a008ec
Pawel Pekala (pawel) · 2.13
Update to version 2.13

PR:		ports/176633
Submitted by:	Matt Stofko <matt@mjslabs.com> (maintainer)
6328208ee5
Jason Helfman (jgh) · 2.12
- add new port: security/pam_yubico

The Yubico authentication device Yubikey generates one-time passwords that can
be used for authentication. This module allows you to use the Yubikey device to
authenticate to the PAM system.

WWW: https://code.google.com/p/yubico-pam/

PR:		175650
Submitted by:	matt@mjslabs.com
62f582e043