CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

security/py-notus-scanner23.0.0

scanner for creating results from local security checks

Maintainer
acm@FreeBSD.org
Packages
py312-notus-scanner 23.0.0
Upstream
Higher version available: 23.0.1
CPE
none, CVEs only via VuXML
WWW
https://github.com/greenbone/notus-scanner
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (23)

Jose Alonso Cardenas Marquez (acm) · 23.0.0
security/gvm: Update to 26.36.1

- databases/pg-gvm: Update to 22.6.18
- security/gsa: Update to 28.2.0 (Only amd64)
- security/gsad: Update to 27.1.0
- security/openvas: Update to 23.50.21
- security/gvmd: Update to 26.36.1
- security/gvm-libs: Update to 23.9.2
- security/py-greenbone-feed-sync: Update to 25.4.2
- security/py-gvm-tools: Update to 26.1.0
- security/py-notus-scanner: Update to 23.0.0
- security/py-ospd-openvas: Update to 22.10.5
- security/py-python-gvm: Update to 27.7.0
54634e8233
Jose Alonso Cardenas Marquez (acm) · 22.7.2_2
security/py-notus-scanner: Fix package

- Bump PORTREVISION
8147984279
Po-Chuan Hsieh (sunpoet) · 22.7.2_1
security/py-notus-scanner: Fix RUN_DEPENDS

- Use PY_TOMLI
- Bump PORTREVISION for dependency change

from pyproject.toml:
tomli = { version = "<3.0.0", python = "<3.11" }

Reference:	https://github.com/greenbone/notus-scanner/blob/v22.7.2/pyproject.toml#L46
Approved by:	portmgr (blanket)
With hat:	python
863fe020f3
Jose Alonso Cardenas Marquez (acm) · 22.7.2
security/gvm: Update to 26.0.0

security/gsa: Update to 25.0.0 (Only amd64 and aarch64)
security/gsad: Update to 24.3.0
security/openvas: Update to 23.30.1
security/gvmd: Update to 26.0.0
security/gvm-libs: 22.22.0
security/py-notus-scanner: Update to 22.7.2
security/py-ospd-openvas: Update to 22.9.0
security/py-python-gvm: Update to 26.2.1
1e328fe27c
Charlie Li (vishwin) · 22.6.5
python.mk: rename PYTHON_EXT_SUFFIX to PYTHON_TAG, document, etc

EXT_SUFFIX, according to PEP 3149, refers to the full tag and
extension for compiled extension module objects, eg .cpython-311.so,
.cpython-313t.so, etc. We do not use the correct semantic meaning,
and this usage becomes ambiguous and confusing when tags do not
match between bytecode and compiled extension module objects.

Rename our PYTHON_EXT_SUFFIX to PYTHON_TAG to align with PEP 3147's
specification of a magic tag, which consists of implementation name
and shorthand version only. This is meant for bytecode and other
files containing this tag in their filename that do not depend on
a specific Python ABI for the same version. Chase all existing
consumers.

Introduce PYTHON_SOABI to align with PEP 3149's specification of a
tag, which consists of implementation name, shorthand version and
any ABI flags present (this and PYTHON_TAG are identical without
ABI flags). This is meant for compiled extension module objects and
other files that depend on a specific Python ABI for the same
version.

Add documentation for these variables that our PYTHON_EXT_SUFFIX
never had.

PR: 274671
Event: Kitchener-Waterloo Hackathon 202506
4f0eba1efd
Jose Alonso Cardenas Marquez (acm) · 22.6.5
security/gvm: Update to 24.1.2

databases/pg-gvm: Update to 22.6.6
security/gsa: Update to 24.1.0 (Only amd64 and aarch64)
security/gsad: Update to 24.1.0
security/openvas: Update to 23.14.0
security/gvmd: Update to 24.1.2
security/gvm-libs: 22.15.0
security/py-notus-scanner: Update to 22.6.5
security/py-greenbone-feed-sync: Update to 24.9.0
security/py-ospd-openvas: Bump PORTREVISION
security/py-gvm-tools: Update to 24.12.1
security/py-python-gvm: Update to 24.12.0
0cca7195e1
Jose Alonso Cardenas Marquez (acm) · 22.6.4
security/gvm: Update to 23.10.0

- security/gsa: update to 23.3.0
- security/gsad: update to 22.12.0
- security/gvm-libs: update to 22.12.1
- security/gvmd: update to 23.10.0
- security/openvas: update to 23.9.0 [1]
- security/py-gvm-tools: update to 24.8.0
- security/py-notus-scanner: update to 22.6.4
- security/py-python-gvm: update to 24.8.0
- security/py-greenbone-feed-sync: update to 24.3.0

PR:		281414
Reported by:	wen [1]
0b1f933be6
Jose Alonso Cardenas Marquez (acm) · 22.6.3
security/gvm: update to 23.5.2

- databases/pg-gvm: update to 22.6.5
- security/gsa: update to 23.0.0
- security/gsad: update to 22.9.1
- security/gvm-libs: update to 22.9.1
- security/gvmd: update to 23.5.2
- security/openvas: update to 23.0.1
- security/py-gvm-tools: update to 24.3.0
- security/py-notus-scanner: update to 22.6.3
- security/py-ospd-openvas: update to 22.7.1
- security/py-python-gvm: update to 24.3.0
- security/py-greenbone-feed-sync: update to 24.3.0
fde0b60655
Jose Alonso Cardenas Marquez (acm) · 22.6.2_1
security/gvm: fix build

- Add missing dependency
- Use autoplist instead of pkg-plist file
- Fix pkg-plist file
Reported by:	pkg-fallout
f082c7dd00
Jose Alonso Cardenas Marquez (acm) · 22.6.2
security/gvm: update to 23.2.0

- databases/pg-gvm: update to 22.6.4
- security/gsa: update to 23.0.0
- security/gsad: update to 22.9.0
- security/gvm-libs: update to 22.8.0
- security/gvmd: update to 23.2.0
- security/openvas: update to 22.7.9
- security/py-gvm-tools: update to 24.1.0
- security/py-notus-scanner: update to 22.6.2
- security/py-ospd-openvas: update to 22.6.2
- security/py-python-gvm: update to 24.1.0
- security/py-greenbone-feed-sync: update to 23.10.0
88b668ecb9
Jose Alonso Cardenas Marquez (acm) · 22.6.0_2
security/py-notus-scanner: Fix dirs permissions

- Bump PORTREVISION
ce6692a3a5
Jose Alonso Cardenas Marquez (acm) · 22.6.0_1
security/gvm: Update gvm-libs to 22.7.3 and openvas to 22.7.6

- Bump PORTREVISION
- Update security/py-python-gvm to 23.10.0
- Fix issues with config path of security/py-notus-scanner and
  security/py-greenbone-feed-sync [1]
- Improve pkg-message.in from security/gvm [1]

Reported by:	Luciano Mannucci <luciano at_ vespaperitivo.it> [1]
bff9bc0e00
Jose Alonso Cardenas Marquez (acm) · 22.6.0
security/gvm: update to 22.9.0

- databases/pg-gvm: update to 22.6.1
- security/gsa: update to 22.7.1
- security/gsad: update to 22.6.0
- security/gvm-libs: update to 22.7.1
- security/gvmd: update to 22.9.0
- security/openvas: update to 22.7.5
- security/py-gvm-tools: update to 23.9.0
- security/py-notus-scanner: update to 22.6.0
- security/py-ospd-openvas: update to 22.6.0
- security/py-python-gvm: update to 23.5.1
11e2887006
Rene Ladan (rene) · 22.5.0
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Jose Alonso Cardenas Marquez (acm) · 22.5.0
security/gvm: Update to 22.7.0

- security/gvm-libs: Update to 22.6.0
- security/gvmd: Bump PORTREVISION
- security/openvas: Update to 22.7.0
- security/py-notus-scanner: Update to 22.5.0
- security/py-ospd-openvas: Update to 22.5.1
- security/gsa: Bump PORTREVISION
- security/gsad: Bump PORTREVISION
- security/py-gvm-tools: Update to 23.4.0
- security/py-python-gvm: Update to 23.5.0
4b312f7f6d
Jose Alonso Cardenas Marquez (acm) · 22.4.5_1
security/py-notus-scanner: Bump PORTREVISION because a package with incomplete files was built

PR:		270893
Reported by:	Trond.Endrestol  __at___ ximalas.info
df05e7c341
Jose Alonso Cardenas Marquez (acm) · 22.4.5
security/py-notus-scanner: Fix pkg-plist file

PR:		270893
Reported by:	Trond.Endrestol@ _at_ ximalas.info
18cb18865d
Jose Alonso Cardenas Marquez (acm) · 22.4.5
security/py-notus-scanner: Fix pkg-plist

PR:		270542
Reported by:	jcfyecrayz _at_ liamekaens.com
b0955319f7
Jose Alonso Cardenas Marquez (acm) · 22.4.5
security/py-notus-scanner: Update to 22.4.5

- Fix issues with tests files installation path[1]

ChangeLog at:	https://github.com/greenbone/notus-scanner/releases/tag/v22.4.5
PR:		270542
Reported by:	jcfyecrayz  _at_ liamekaens.com [1]
0b5bc76593
Stefan Eßer (se) · 22.4.1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 22.4.1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Jose Alonso Cardenas Marquez (acm) · 22.4.1
security/py-notus-scanner: update to 22.4.1

ChangeLog at:	https://github.com/greenbone/notus-scanner/releases/tag/v22.4.1
d8856213a8
Jose Alonso Cardenas Marquez (acm) · 22.4.0
security/py-notus-scanner: New port: scanner for creating results from local security checks

Notus Scanner detects vulnerable products in a system environment. The scanning
method is to evaluate internal system information. It does this very fast and
even detects currently inactive products because it does not need to interact
with each of the products.

To report about vulnerabilities, Notus Scanner receives collected system
information on the one hand and accesses the vulnerability information from the
feed service on the other. Both input elements are in table form: the system
information is specific to each environment and the vulnerability information
is specific to each system type.

Notus Scanner integrates into the Greenbone Vulnerability Management framework
which allows to let it scan entire networks within a single task. Any
vulnerability test in the format of .notus files inside the Greenbone Feed will
be considered and automatically matched with the scanned environments.

WWW: https://github.com/greenbone/notus-scanner
a3cdb67a6a