CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

sysutils/getssl 2.46

Local LetsEncrypt client for managing certificates on remote servers

Maintainer
rainbow@sanitylinux.org
Packages
latest: 2.46
Upstream
Higher version available: 2.52
Last update
to 2.46 · fb16dfecae
Quarterly
2026Q4: 2.46
WWW
https://github.com/srvrco/getssl
Links
cgit · VuXML

Unaddressed (1)

The CVE record lists the packaged version 2.46 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-103037.42026-06-16In ServerCo getssl version 2.49 and prior, the ACME challenge token returned to the client was not strictly validated against RFC 8555 before being used in challenge-fil…

VuXML only (0)

Listed in VuXML, the packaged version 2.46 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (11)

Stefan Eßer (se) · 2.46
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.46
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Li-Wen Hsu (lwhsu) · 2.46
sysutils/getssl: Update to 2.46

Approved by:	maintainer timeout [1]

PR:		261696, 260767 [1]
Reported by:	Krzysztof <ports@bsdserwis.com> [1]
49ad7fa8bc
Nuno Teixeira (eduardo) · 2.35
sysutils/getssl: Update to 2.35

* pet portclippy: reorder variables
 * pet portfmt: reformat Makefile

ChangeLog: https://github.com/srvrco/getssl/releases/tag/v2.35

PR:		256791
Approved by:	maintainer timeout (rainbow@sanitylinux.org > 2 weeks)
Approved by:	portmgr
9f83c26589
Mathieu Arnold (mat) · 2.22
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 2.22
Remove # $FreeBSD$ from Makefiles.
305f148f48
Emanuel Haupt (ehaupt) · 2.22
Update to 2.22

PR:		244116
Submitted by:	sanpei
Approved by:	maintainer timeout (rainbow@sanitylinux.org; 63 days)
18626b94ea
Koichiro Iwao (meta) · 2.14
sysutils/getssl: Update to 2.14

2.14
  * Rebased master onto APIv2 and added Content-Type: application/jose+json

PR:		242621
Submitted by:	sanpei
Approved by:	maintainer timeout
77772856dc
Tobias C. Berner (tcberner) · 2.13
sysutils/getssl Update 2.13

2.11
 * issue #423 Use HTTP 1.1 as workaround atm
2.12
 * issue #425 Case insensitive processing of agreement url because of HTTP/2
2.13
 * update DNS checks to allow use of CNAMEs

PR:		241844
Submitted by:	sanpei
Approved by:	rainbow@sanitylinux.org (maintainer, timeout)
6aeb755be3
Koichiro Iwao (meta) · 2.10_1
sysutils/getssl: add missing RUN_DEPENDS

ftp/curl and dns/bind-tools are required. Also while here, pet some portlint
warnings.

PR:		232918 235351
Submitted by:	Rainbow <rainbow@sanitylinux.org> (maintainer)
Reported by:	Andrew <pez_098@yahoo.com>, oz42@oz42.eu
MFH:		2019Q1
Differential Revision:	https://reviews.freebsd.org/D17954
16b9cef21a
Devin Teske (dteske) · 2.10
new port sysutils/getssl: Local LetsEncrypt client

For managing certificates on remote servers

Submitted by:	Rainbow <rainbow at sanitylinux.org> (maintainer)
Differential Revision:	https://reviews.freebsd.org/D14313
e4d5b99f01