CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/tang 15_1

Tang is a small daemon for binding data to the presence of a network

Port info

Maintainer
hdholm@alumni.iastate.edu
Packages
latest: 15_1
Upstream
up to date
Last update
to 15_1 · c1efdbb496
Quarterly
2026Q4: 15_1
WWW
https://github.com/latchset/tang
Links
cgit · VuXML

Install

Package
# pkg install tang
installs 15_1 from latest; from quarterly (2026Q4) 15_1
Port
# cd /usr/ports/security/tang && make install clean
Size
33 KiB download · 78 KiB installed
Depends on
devel/jansson 2.15.1_1, net/jose 15, www/llhttp 9.4.3
License
GPLv3

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 1615_115_1–
FreeBSD 1515_115_1–
FreeBSD 1415_115_115_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 1515_115_1–
FreeBSD 1415_115_115_1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 15_1.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (11)

Po-Chuan Hsieh (sunpoet) · 15_1
www/llhttp: Update to 9.4.1

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/nodejs/llhttp/releases
c1efdbb496
Fernando Apesteguía (fernape) · 15
security/tang: Update to v15

ChangeLog: https://github.com/latchset/tang/releases/tag/v15

 * Build with llhttp instead of http-parser
 * Fix issue introduced in http-parser -> llhttp conversion
 * Include parameter to indicate endpoint
 * README updates
 * Avoid usage of unused variable
 * Increase test timeouts

PR:		277061
Reported by:	hdholm@alumni.iastate.edu (maintainer)
951d5bcada
Muhammad Moinur Rahman (bofh) · 14_1
*/*: Sanitize MANPREFIX for meson ports

Approved by:	portmgr
9f8f710b3e
Fernando Apesteguía (fernape) · 14
security/tang: Update to v14 (Fix CVE-2023-1672)

ChangeLog: https://github.com/latchset/tang/releases/tag/v14

Note this is not a problem in FreeBSD due to the restrictive permissions of the
db directory.

PR:		272191
Reported by:	hdholm@alumni.iastate.edu (maintainer)
Security:	CVE-2023-1672
9047016e2e
Robert Clausecker (fuz) · 13
security/tang: update to 13

Changelog: https://github.com/latchset/tang/releases/tag/v13

PR:		271302
229bbd1a23
Fernando Apesteguía (fernape) · 12
security/tang: Update to v12

ChangeLog: https://github.com/latchset/tang/releases/tag/v12

 * A few small changes for BSD support after standalone changes
 * tang: allow running standalone
 * When json_load_file fails report the error details information
 * Fix service to include configured group
 * Add documentation in service files

PR:		269573
Reported by:	hdholm@alumni.iastate.edu (maintainer)
d32119c0d4
Stefan Eßer (se) · 11
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 11
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Bernhard Froehlich (decke) · 11
security/tang: Add CPE information

Approved by:	portmgr (blanket)
e967497b36
Daniel Engberg (diizzy) · 11
security/tang: Update to v11

Changelog: https://github.com/latchset/tang/releases/tag/v11
Fixes CVE-2021-4076

PR:		260574
21ea51a6ef
Neel Chauhan (nc) · 10
New port: security/tang: Small daemon for binding data to the presence of a network

PR:	255694
996a6909ee