*: Fix build after 3232af18957315da73e0e4105cac869d8cb3c6b1 (www/py-flask PORTNAME change) Approved by: portmgr (blanket)8efcc1c369
Port details
security/py-flask-httpauth 4.8.0
Basic and Digest HTTP authentication for Flask routes
Port info
- Maintainer
- rm@FreeBSD.org
- Packages
- latest: 4.8.0
- Upstream
- Higher version available: 4.8.1
- Last update
- to 4.8.0 · 8efcc1c369
- Quarterly
- 2026Q4: 4.8.0
- WWW
- https://github.com/miguelgrinberg/flask-httpauth/
- Links
- cgit · VuXML
Install
- Package
# pkg install py312-Flask-HTTPAuthinstalls 4.8.0 fromlatest; fromquarterly(2026Q4) 4.8.0- Port
# cd /usr/ports/security/py-flask-httpauth && make install clean- Size
- 16 KiB download · 63 KiB installed
- Depends on
- lang/python312 3.12.15, www/py-flask 3.1.3
- License
- MIT
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 4.8.0 | 4.8.0 | – |
| FreeBSD 15 | 4.8.0 | 4.8.0 | – |
| FreeBSD 14 | 4.8.0 | 4.8.0 | 4.8.0 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 4.8.0 | 4.8.0 | – |
| FreeBSD 14 | 4.8.0 | 4.8.0 | 4.8.0 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed (1)
The CVE record lists the packaged version 4.8.0 as affected, and no VuXML entry names the CVE. What does this mean?
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-34531 | 6.5 | 2026-04-01 | Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes. Prior to version 4.8.1, in a situation where the client makes a request to a token … |
VuXML only (0)
Listed in VuXML, the packaged version 4.8.0 is still in the affected range; pkg audit reports it. What does this mean?
None.
Fixed (0)
No VuXML entries for this package.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (28)
security/py-flask-httpauth: update to 4.8.0 This release fixing runtime regression. Convert to pep517 while here PR: 273033 Reported by: ruben@verweg.com787722b9df
all: remove explicit versions in USES=python for "3.x+"
The logic in USES=python will automatically convert this to 3.8+ by
itself.
Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.
finance/quickfix: mark BROKEN with PYTHON
libtool: compile: c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
^~~~~~~~~~
1 warning and 1 error generated.
Reviewed by: portmgr, vishwin, yuri
Differential Revision: <https://reviews.freebsd.org/D40568>3d9a815d9c*/*: rename CHEESESHOP to PYPI in MASTER_SITES PR: 267994 Differential revision: D37518 Approved by: bapt77d68471ad
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
security/py-flask-httpauth: update to 4.7.0 Changes: https://github.com/miguelgrinberg/Flask-HTTPAuth/blob/main/CHANGES.md PR: 262503 Reported by: ruben@verweg.com389aa8a1e8
One more small cleanup, forgotten yesterday. Reported by: lwhsucf118ccf87
Remove # $FreeBSD$ from Makefiles.305f148f48
Drop python 2.7 support from a few ports With hat: portmgraa7a6c429e
security/py-flask-httpauth: update to 3.3.0490e58696a
security/py-flask-httpauth: update to 3.2.4dfcab4ebf7
Use PY_FLAVOR for dependencies. FLAVOR is the current port's flavor, it should not be used outside of this scope. Sponsored by: Absolight4376dbbb58
Simplify some USES=python With hat: portmgr377901b804
Convert Python ports to FLAVORS.
Ports using USE_PYTHON=distutils are now flavored. They will
automatically get flavors (py27, py34, py35, py36) depending on what
versions they support.
There is also a USE_PYTHON=flavors for ports that do not use distutils
but need FLAVORS to be set. A USE_PYTHON=noflavors can be set if
using distutils but flavors are not wanted.
A new USE_PYTHON=optsuffix that will add PYTHON_PKGNAMESUFFIX has been
added to cope with Python ports that did not have the Python
PKGNAMEPREFIX but are flavored.
USES=python now also exports a PY_FLAVOR variable that contains the
current python flavor. It can be used in dependency lines when the
port itself is not python flavored. For example, deskutils/calibre.
By default, all the flavors are generated. To only generate flavors
for the versions in PYTHON2_DEFAULT and PYTHON3_DEFAULT, define
BUILD_DEFAULT_PYTHON_FLAVORS in your make.conf.
In all the ports with Python dependencies, the *_DEPENDS entries MUST
end with the flavor so that the framework knows which to build/use.
This is done by appending '@${PY_FLAVOR}' after the origin (or
@${FLAVOR} if in a Python module with Python flavors, as the content
will be the same). For example:
RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}six>0:devel/py-six@${PY_FLAVOR}
PR: 223071
Reviewed by: portmgr, python
Sponsored by: Absolight
Differential Revision: https://reviews.freebsd.org/D12464551be3c723security/py-flask-httpauth: update to 3.2.3782b70018c
security/py-flask-httpauth: update to 3.2.2e21f75a4c6
http://github.com redirects to https://github.com, spare everyone a redirect. Sponsored by: Absolightbbf7ef5615
security/py-flask-httpauth: update to 3.2.12c263a0301
security/py-flask-httpauth: update to 3.2.0b70e3d635e
security/py-flask-httpauth: update to 3.1.1a88af2f360
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.
With hat: portmgr
Sponsored by: Absolight597afc47basecurity/py-flask-httpauth: update to 3.1.090bd929bfe
security/py-flask-httpauth: update to 3.0.28579cd3560
security/py-flask-httpauth: update to 2.7.1aea0a2a722
security/py-flask-httpauth: update to 2.7.0ce9699179a
security/py-flask-httpauth: update to 2.5.0e242fb4ba7
Basic and Digest HTTP authentication for Flask routes. WWW: http://github.com/miguelgrinberg/flask-httpauth/f848c882de