CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

www/pomerium 0.33.4_2,1

Identity-aware access proxy

Port info

Maintainer
delphij@FreeBSD.org
Packages
latest: 0.33.4_2,1
Upstream
up to date
Last update
to 0.33.4_2,1 · 9192e9d2fd
Quarterly
2026Q4: 0.33.3_2,1 · last MFH 60647eff54
WWW
https://pomerium.io/
Links
cgit · VuXML

Install

Package
# pkg install pomerium
installs 0.33.4_2,1 from latest; from quarterly (2026Q4) 0.33.3_2,1
Port
# cd /usr/ports/www/pomerium && make install clean
Size
24 MiB download · 103 MiB installed
Depends on
www/pomerium-envoy-custom 1.37.0.20261001_1
License
APACHE20
pkg-message
Shown after installing
## Quick start

You need a configured indentity provider and a wild-card TLS certificate
before proceeding (if Pomerium will be terminating TLS connections).
Please note that the default installation runs Pomerium with unprivileged
"www" user, and therefore will not be able to bind on 443 unless
net.inet.ip.portrange.reservedhigh is lowered.

Please consult the official website https://www.pomerium.io/docs/ for
additional configuration information.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 160.33.4_2,1✗–
FreeBSD 150.33.4_2,10.33.4_1,1–
FreeBSD 140.33.4_2,1✗✗

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 150.33.3_2,1✗–
FreeBSD 140.33.3_2,1✗✗

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 0.33.4_2,1.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (80)

Dmitri Goutnik (dmgk) · 0.8.3_7,1
all: Bump PORTREVISION after lang/go{118,119} update
d9ad1002d5
Dmitri Goutnik (dmgk) · 0.8.3_6,1
all: Bump PORTREVISION after lang/go{118,119} update
bde51869ee
Dmitri Goutnik (dmgk) · 0.8.3_5,1
all: Bump PORTREVISION after lang/go{118,119} update
f05c98fffb
Stefan Eßer (se) · 0.8.3_4,1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 0.8.3_4,1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Dmitri Goutnik (dmgk) · 0.8.3_4,1
all: Bump PORTREVISION after Go update

Bump Go ports PORTREVISION after GO_DEFAULT and lang/go118 update.
4476f89764
Dmitri Goutnik (dmgk) · 0.8.3_3,1
all: Bump PORTREVISION after lang/go{117,118} update
153cb65ac8
Dmitri Goutnik (dmgk) · 0.8.3_2,1
*/*: Bump port revisons after lang/go{117,118} update
309cdeccd8
Guangyuan Yang (ygy) · 0.8.3_1,1
*/*: Bump PORTREVISION after lang/go 1.18 update
d690b5102f
Bernhard Froehlich (decke) · 0.8.3,1
www/pomerium: Add CPE information

Approved by:	portmgr (blanket)
05b638699c
Mathieu Arnold (mat) · 0.8.3,1
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 0.8.3,1
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 0.8.3,1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Xin LI (delphij) · 0.8.3,1
www/pomerium: revert to 0.8.3 for now due to envoy dependency.
f468b2902b
Xin LI (delphij) · 0.9.0
www/pomerium: update to 0.9.0
26681db086
Xin LI (delphij) · 0.8.3
www/pomerium: update to 0.8.3.
08231ad1a6
Xin LI (delphij) · 0.8.1
www/pomerium: update to 0.8.1.
9be00cd9df
Xin LI (delphij) · 0.8.0
www/pomerium: update to 0.8.0

This release added support of automatic certificate management, which
the administrator can configure pomerium to automatically manage the
certificate issued by Let's Encrypt, with support of automatic OCSP
stapling.
c12f42d5a5
Xin LI (delphij) · 0.7.6
www/pomerium: update to 0.7.6.
8aa38ae87f
Xin LI (delphij) · 0.7.5
www/pomerium: update to 0.7.5.
6bdb19f2a4
Xin LI (delphij) · 0.7.4
www/pomerium: upgrade to 0.7.4.
907b6799aa
Xin LI (delphij) · 0.7.3
www/pomerium: update to 0.7.3.
03fb828400
Xin LI (delphij) · 0.7.2
www/pomerium: update to 0.7.2.
bdc1960663
Xin LI (delphij) · 0.7.1
www/pomerium: update to 0.7.1.
7651da79b1
Xin LI (delphij) · 0.7.0
www/pomerium: update to 0.70.
dc4a45b20d
Xin LI (delphij) · 0.6.3
www/pomerium: update to 0.6.3.
b14e8105ea
Xin LI (delphij) · 0.6.2
www/pomerium: update to 0.6.2.
d3070af4f0
Xin LI (delphij) · 0.6.0
Update to 0.6.0.
ccdec5f497
Xin LI (delphij) · 0.5.2_1
Fix a typo in startup script.
a87a85f6cb
Xin LI (delphij) · 0.5.2
Add Pomerium, an identity-aware proxy that enables secure access to internal applications. Pomerium provides a standardized interface to add access control to applications regardless of whether the application itself has authorization or authentication baked-in. Pomerium gateways both internal and external requests, and can be used in situations where you'd typically reach for a VPN.
aa40698244