net/389-ds-base: Fix CPE information
Current advisories are filed under the redhat vendor, the fedoraproject
entry has been dead for years.
Sponsored by: Netzkommune GmbH
editors/2bsd-vi: Take maintainership
PR: 300135
Approved by: Chris Hutchinson <portmaster at BSDforge.com> (former maintainer)
Approved by: osa, fluffy (mentors, implicit)
www/freenginx-acme-module: Align CPE_PRODUCT with the NVD naming scheme
Same change as in www/nginx-acme, both ports build the same upstream
module.
Sponsored by: Netzkommune GmbH
www/nginx-acme: Align CPE_PRODUCT with the NVD naming scheme
The NVD has no dictionary entry for this module yet, so the name is a
prediction. Every F5 product in the dictionary spells its name with
underscores, from nginx_open_source to nginx_modsecurity_waf, so
nginx_acme is the form the entry will most likely take.
Sponsored by: Netzkommune GmbH
www/nginx-devel: Switch CPE_PRODUCT to nginx_open_source
The NVD files current nginx vulnerabilities under f5:nginx_open_source
rather than f5:nginx.
Sponsored by: Netzkommune GmbH
www/nginx: Switch CPE_PRODUCT to nginx_open_source
The NVD changed the product name it files nginx vulnerabilities under.
All 26 advisories published since February 2024 use f5:nginx_open_source,
while f5:nginx has received a single one in that time, CVE-2025-23419.
The two sets of CVE identifiers do not overlap at all, so the old name
no longer matches current advisories.
Sponsored by: Netzkommune GmbH
www/nginx-module-passenger: Add CPE information
Passenger is listed in the NVD as phusion:passenger with 456 dictionary
entries. The port name does not match the upstream product name, so
both CPE_VENDOR and CPE_PRODUCT need to be set explicitly.
Sponsored by: Netzkommune GmbH
net-mgmt/semaphore: Add CPE information
The NVD lists this software as ansible-semaphore:ansible_semaphore with
136 dictionary entries, so the port can be matched against advisories
once they appear. The cpe.mk defaults would have produced
semaphore:semaphore, which does not exist.
Sponsored by: Netzkommune GmbH
Only build secure/libexec/ssh-sk-helper if MK_USB == no
The ssh-sk-helper utility only functions if/when MK_USB == yes.
Installing it on systems where MK_USB == no doesn't make sense.
Differential Revision: https://reviews.freebsd.org/D58246
(cherry picked from commit 4db3872aabc33088cf180599c5eaa23b6f58e6d1)
Only build secure/libexec/ssh-sk-helper if MK_USB == no
The ssh-sk-helper utility only functions if/when MK_USB == yes.
Installing it on systems where MK_USB == no doesn't make sense.
Differential Revision: https://reviews.freebsd.org/D58246
(cherry picked from commit 4db3872aabc33088cf180599c5eaa23b6f58e6d1)
