CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/yubico-piv-tool 2.7.2

Yubico PIV tool

Port info

Maintainer
ume@FreeBSD.org
Packages
latest: 2.7.2
Upstream
Higher version available: 2.7.3
Last update
to 2.7.2 · 50e9ab77d0
Quarterly
2026Q4: 2.7.2
WWW
https://developers.yubico.com/yubico-piv-tool/
Links
cgit · VuXML

Install

Package
# pkg install yubico-piv-tool
installs 2.7.2 from latest; from quarterly (2026Q4) 2.7.2
Port
# cd /usr/ports/security/yubico-piv-tool && make install clean
Size
190 KiB download · 968 KiB installed
Depends on
devel/pcsc-lite 2.5.2_1,2
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.7.22.7.2–
FreeBSD 152.7.22.7.2–
FreeBSD 142.7.22.7.22.7.2

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.7.22.7.2–
FreeBSD 142.7.22.7.22.7.2

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.7.2.

Fixed (0)

No VuXML entries for this package.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
282749security/yubico-piv-tool, security/py-yubikey-manager - update to newer versionsIn Progress2026-02-21

Commits (30)

Hajimu UMEMOTO (ume) · 2.7.2
security/yubico-piv-tool: Update to 2.7.2.
50e9ab77d0
Hajimu UMEMOTO (ume) · 2.7.1
security/yubico-piv-tool: update to 2.7.1
18feec3219
Hajimu UMEMOTO (ume) · 2.6.1
security/yubico-piv-tool: update to 2.6.1

PR:		282749
Reported by:	Rebecca Cran
d573476502
Daniel Engberg (diizzy) · 2.4.2_1
*/*: Remove incorrect libtool dependency

All these ports builds without libtool

Tested using Poudriere

Approved by:	portmgr (blanket, build fix)
3ee20599dc
Hajimu UMEMOTO (ume) · 2.4.2_1
security/yubico-piv-tool: Move manpages to ${PREFIX}/share
1cfde70b06
Hajimu UMEMOTO (ume) · 2.4.2
security/yubico-piv-tool: Update to 2.4.2.
1d9a136b21
Muhammad Moinur Rahman (bofh) · 2.3.1
security/yubico-piv-tool: Unbreak with OpenSSL 3.0.0

- Update version 2.2.0->2.3.1

Changelog:
https://developers.yubico.com/yubico-piv-tool/Release_Notes.html
Approved by:	portmgr (blanket)
32303cec15
Stefan Eßer (se) · 2.2.0
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.2.0
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias Kortkamp (tobik) · 2.2.0
Clean up all commented PORTREVISION and PORTEPOCH lines

No revision bump tool that we have cleans them up or deals with
them, so we end up with duplicated lines.  Instead of implementing
that just clean up the 51 ports that do this.

PORTREVISION and PORTEPOCH can be set to 0 explicitly instead if
you need a reminder or placeholder.
1bf865fed5
Mathieu Arnold (mat) · 2.2.0
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 2.2.0
Remove # $FreeBSD$ from Makefiles.
305f148f48
Hajimu UMEMOTO (ume) · 2.2.0
Update to 2.2.0.
fbb81b76eb
Hajimu UMEMOTO (ume) · 2.1.1
Update to 2.1.1.

PR:		249293
Submitted by:	lwhsu
331d670b34
Craig Leres (leres) · 2.1.0
security/yubico-piv-tool: Unbreak build on FreeBSD 11 with DEFAULT_VERSIONS=ssl=openssl

r541879 adds a patch that disables an openssl cmake module from
being invoked. But on 11.3 at least if some other package dependency
pulls in openssl (or DEFAULT_VERSIONS has ssl=openssl), yubico-piv-tool
is built with openssl 1.0 includes from base and openssl 1.1 libraries
from the port; this fails due to openssl API changes between 1.0
and 1.1 (e.g. EVP_MD_CTX_create() became EVP_MD_CTX_new()).

This is not a compile time problem on 12.1 because the base version
of openssl is 1.1 (but there is no guarantee there are not other
issues caused by the mixing of includes and libraries).

Replace the CMakeLists.txt patch with one for patch-cmake_openssl.cmake
that the cmake checks for openssl/libcrypto optional. This ensures
that openssl includes and libraries are not mixed between the base
and ports versions.

PR:		248049
Approved by:	ume (maintainer timeout, 2 weeks)
5eaa844c5b
Hajimu UMEMOTO (ume) · 2.1.0
Add missing dependency.
013d62455e
Hajimu UMEMOTO (ume) · 2.1.0
Add required patch to update
02a5710b32
Hajimu UMEMOTO (ume) · 2.1.0
Update to 2.1.0
7f74813be7
Hajimu UMEMOTO (ume) · 2.0.0
Update to 2.0.0.
07688fe313
Mark Linimon (linimon) · 1.7.0
Prepare for powerpc-on-clang by deleting hard-coded tests for libstdc++.so as a stand-in for "are we running on gcc".

For people already testing powerpc on clang, it is possible that they
already have both compilers in base.  Thus, the assumption that "gcc is
in base" (e.g.  libstdc++.so exists) always means "force use of GCC" is
already broken.  It will be for everyone on -CURRENT once the switch is
made.

While here, standardize on compiler:c++11-lang instead of -lib (they are
equivalent these days), pet portlint, and do some other cleanup.

Approved by:	portmgr (tier-2 blanket)
7bfae932f7
Hajimu UMEMOTO (ume) · 1.7.0
fix build with GCC-based architectures

PR:		237155
Submitted by:	Piotr Kubaj <pkubaj [...] anongoth.pl>
c2d4cc6eb5
Hajimu UMEMOTO (ume) · 1.7.0
Update to 1.7.0.
489d34978c
Hajimu UMEMOTO (ume) · 1.6.2
Update to 1.6.2.
420e88d52f
Hajimu UMEMOTO (ume) · 1.4.4
Update to 1.4.4.
005704efc5
Hajimu UMEMOTO (ume) · 1.4.3
Update to 1.4.3.

Requested by:	Hannes Mehnert <hannes [...] mehnert.org>
b5bf420c47
Mathieu Arnold (mat) · 1.4.1
Remove all USE_OPENSSL occurrences.

Sponsored by:	Absolight
a28f0f7f7f
Hajimu UMEMOTO (ume) · 1.4.1
Update to 1.4.1.
0cc6042327
Mathieu Arnold (mat) · 1.4.0
Cleanup $() variables in ports Makefiles.

Mostly replace with ${}, but sometime, replace with $$() because it is
what was intended in the first place. (I think.)

Sponsored by:	Absolight
e50dc2a336
Hajimu UMEMOTO (ume) · 1.4.0
Insert tab.  No functional change.
95a8532354
Hajimu UMEMOTO (ume) · 1.4.0
Add new port -- Yubico PIV tool

The Yubico PIV tool is used for interacting with the Privilege and
Identification Card (PIV) application on a YubiKey.

With it you may generate keys on the device, importing keys and
certificates, and create certificate requests, and other operations. A
shared library and a command-line tool is included.
af3fd373da