security/cvechecker: Remove expired port

2026-09-28 security/cvechecker: The project has been declared EOL by its author.

9 files changed, 1 insertions, 185 deletions

diff --git a/MOVED b/MOVED
index 192c69517715..f2ecaeb79cff 100644
--- a/MOVED
+++ b/MOVED
@@ -5627,3 +5627,4 @@ net/openldap26-server|databases/openldap26-server|2026-09-24|Move all OpenLDAP p
 graphics/hiptext||2026-09-25|Remove abandonware
 devel/py-schematics-patched|devel/py-cattrs|2026-09-27|Has expired: Upstream inactive since +8 years.  Please use devel/py-cattrs instead
 x11-toolkits/color-widgets-qt5|x11-toolkits/qt-color-widgets|2026-09-27|move to qt-color-widgets to match upstream naming
+security/cvechecker||2026-09-29|Has expired: The project has been declared EOL by its author
diff --git a/security/Makefile b/security/Makefile
index 89d55faf07f4..34614c8df275 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -124,7 +124,6 @@
     SUBDIR += cryptopp
     SUBDIR += cryptopp-modern
     SUBDIR += ct-submit
-    SUBDIR += cvechecker
     SUBDIR += cvm
     SUBDIR += cyberchef
     SUBDIR += cyrus-sasl2
diff --git a/security/cvechecker/Makefile b/security/cvechecker/Makefile
deleted file mode 100644
index 152be69ff221..000000000000
--- a/security/cvechecker/Makefile
+++ /dev/null
@@ -1,52 +0,0 @@
-PORTNAME=	cvechecker
-DISTVERSIONPREFIX=	v
-DISTVERSION=	3.9
-PORTREVISION=	4
-CATEGORIES=	security
-
-MAINTAINER=	se@FreeBSD.org
-COMMENT=	Check CVE database for vulnerabilities affecting installed packages
-WWW=		https://github.com/sjvermeu/cvechecker/wiki
-
-LICENSE=	GPLv3
-
-DEPRECATED=	The project has been declared EOL by its author.
-EXPIRATION_DATE=	2026-09-28
-
-LIB_DEPENDS=	libargp.so:devel/argp-standalone \
-		libconfig.so:devel/libconfig
-RUN_DEPENDS=	bash:shells/bash
-
-MAKE_ENV+=	LDADD=-largp
-SUB_FILES=	pkg-message
-SUB_LIST=	PORTNAME=${PORTNAME}
-
-USES=		autoreconf pkgconfig shebangfix
-
-SHEBANG_FILES=	scripts/cverules scripts/cvegenversdat
-
-GNU_CONFIGURE=	yes
-GNU_CONFIGURE_MANPREFIX=	${PREFIX}/share
-CONFIGURE_ARGS=	--localstatedir=/var/db
-
-bash_OLD_CMD+=	/bin/sh
-
-OPTIONS_DEFINE=			DOCS
-OPTIONS_MULTI=			DB
-OPTIONS_MULTI_DB=		MYSQL SQLITE
-OPTIONS_DEFAULT=		SQLITE
-DB_DESC=			CVE Database
-
-MYSQL_USES=			mysql ssl
-MYSQL_CONFIGURE_ENABLE=		mysql
-
-SQLITE_USES=			sqlite
-SQLITE_CONFIGURE_ENABLE=	sqlite3
-
-USE_GITHUB=	yes
-GH_ACCOUNT=	sjvermeu
-
-post-stage:
-		${MV} ${STAGEDIR}${PREFIX}/etc/cvechecker.conf ${STAGEDIR}${PREFIX}/etc/cvechecker.conf.sample
-
-.include <bsd.port.mk>
diff --git a/security/cvechecker/distinfo b/security/cvechecker/distinfo
deleted file mode 100644
index fd817a4798b3..000000000000
--- a/security/cvechecker/distinfo
+++ /dev/null
@@ -1,3 +0,0 @@
-TIMESTAMP = 1536581491
-SHA256 (sjvermeu-cvechecker-v3.9_GH0.tar.gz) = a8c05be9e81533bd1b9441fe1a38e54d2939123af7c5d933bac28cb51d41dc27
-SIZE (sjvermeu-cvechecker-v3.9_GH0.tar.gz) = 3329468
diff --git a/security/cvechecker/files/patch-scripts_cverules b/security/cvechecker/files/patch-scripts_cverules
deleted file mode 100644
index d5fb28415300..000000000000
--- a/security/cvechecker/files/patch-scripts_cverules
+++ /dev/null
@@ -1,37 +0,0 @@
---- scripts/cverules.orig	2017-10-11 10:44:44 UTC
-+++ scripts/cverules
-@@ -19,26 +19,11 @@ then
- fi
- 
- 
--if [ -f /etc/gentoo-release ];
--then
--	cd /var/db/pkg;
--	for CAT in *;
--	do
--		cd ${CAT};
--		for PKG in *;
--		do
--			echo "!!!! Checking ${PKG}";
--			typeset PKGNAME=$(echo ${PKG} | sed -e 's:\(.*\)-[0-9][0-9]*.*:\1:g');
--			typeset PKGVERSION=$(echo ${PKG} | sed -e 's:.*-\([0-9][0-9]*.*\):\1:g' | sed -e 's:-r[0-9]*$::g' | sed -e 's:\.:\\.:g');
--			export IGNORESTRINGS="tmp/portage";
--			qlist ${PKG} | egrep '(bin/|\.so)' | cvegenversdat ${PKGNAME} ${PKGVERSION} ${CONFFILE} breakon;
--		done
--		cd ..
--	done
--else
--	echo "Could not deduce if this system is a supported distribution or platform.";
--	echo "Currently supported platforms are: Gentoo."
--	echo "If you wish to help expand the supported distributions or platforms, please";
--	echo "do not hesitate to contact the author at sven.vermeulen@siphos.be.";
--	exit 1;
--fi
-+for PKG in $(pkg info -q)
-+do
-+	echo "!!!! Checking ${PKG}"
-+	set -- $(echo ${PKG} | sed -e 's:,[0-9][0-9]*$::; s:_[0-9][0-9]*$::; s:\(.*\)-r\{0,1\}\([0-9][0-9]*.*\):\1 \2:; s:\.:\\.:g')
-+	PKGNAME=$1
-+	PKGVERSION=$2
-+	pkg list ${PKG} | egrep '(/bin/|/sbin/|/libexec/|\.so\.|\.so$)' | cvegenversdat ${PKGNAME} ${PKGVERSION} ${CONFFILE} breakon
-+done
diff --git a/security/cvechecker/files/patch-scripts_pullcves b/security/cvechecker/files/patch-scripts_pullcves
deleted file mode 100644
index c621d84d0b61..000000000000
--- a/security/cvechecker/files/patch-scripts_pullcves
+++ /dev/null
@@ -1,48 +0,0 @@
---- scripts/pullcves.orig	2018-09-09 10:32:47 UTC
-+++ scripts/pullcves
-@@ -44,17 +44,11 @@ then
-   exit 1;
- fi
- 
--wget -V > /dev/null 2>&1;
--if [ $? -ne 0 ];
--then
--  echo "This script requires wget to be available on the system and reachable in a directory mentioned in the PATH variable."
--  exit 1;
--fi
- 
- DATADIR=$(awk -F'=' '/^datadir/ {print $2}' ${CONFFILE} | awk -F'"' '{print $2}');
- CVECACHE=$(awk -F'=' '/^cvecache/ {print $2}' ${CONFFILE} | awk -F'"' '{print $2}');
- DLLOCATION=$(awk -F'=' '/^version_url/ {print $2}' ${CONFFILE} | awk -F'"' '{print $2}');
--WGETCMD="wget --no-check-certificate";
-+FETCHCMD="fetch -q"
- DLCVE=0;
- DLDAT=0;
- COMMAND=$1;
-@@ -68,7 +62,7 @@ do
-   if [ ! -f ${CVECACHE}/nvdcve-2.0-20${YEAR}.xml ];
-   then
-     printf "Downloading nvdcve-2.0-20${YEAR}.xml... ";
--    ${WGETCMD} -q -O ${CVECACHE}/nvdcve-2.0-20${YEAR}.xml.gz http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-20${YEAR}.xml.gz;
-+    ${FETCHCMD} -o ${CVECACHE}/nvdcve-2.0-20${YEAR}.xml.gz http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-20${YEAR}.xml.gz;
-     gunzip -c ${CVECACHE}/nvdcve-2.0-20${YEAR}.xml.gz > ${CVECACHE}/nvdcve-2.0-20${YEAR}.xml && rm ${CVECACHE}/nvdcve-2.0-20${YEAR}.xml.gz;
-     printf "ok\nConverting nvdcve-2.0-20${YEAR}.xml to CSV... ";
-     xsltproc ${DATADIR}/nvdcve2simple.xsl ${CVECACHE}/nvdcve-2.0-20${YEAR}.xml > ${CVECACHE}/nvdcve-2.0-20${YEAR}.csv;
-@@ -85,7 +79,7 @@ else
-   CKSUM=$(cksum nvdcve-2.0-Modified.xml 2>/dev/null);
- fi
- printf "Downloading nvdcve-2.0-Modified.xml... ";
--${WGETCMD} -q -N http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-Modified.xml.gz;
-+${FETCHCMD} -i nvdcve-2.0-Modified.xml http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-Modified.xml.gz;
- gunzip -c nvdcve-2.0-Modified.xml.gz > nvdcve-2.0-Modified.xml && rm nvdcve-2.0-Modified.xml.gz;
- CKSUM2=$(cksum nvdcve-2.0-Modified.xml 2>/dev/null);
- if [ "${CKSUM2}" != "${CKSUM}" ] || [ -f nvdcve-2.0-Modified.xml.1 ];
-@@ -113,7 +107,7 @@ fi
- 
- CKSUM=$(cksum versions.dat 2>/dev/null);
- printf "Downloading versions.dat... ";
--${WGETCMD} -q -N ${DLLOCATION};
-+${FETCHCMD} -i versions.dat ${DLLOCATION};
- CKSUM2=$(cksum versions.dat 2>/dev/null);
- if [ "${CKSUM}" != "${CKSUM2}" ] || [ -f versions.dat.1 ];
- then
diff --git a/security/cvechecker/files/pkg-message.in b/security/cvechecker/files/pkg-message.in
deleted file mode 100644
index 120cae96ee68..000000000000
--- a/security/cvechecker/files/pkg-message.in
+++ /dev/null
@@ -1,14 +0,0 @@
-[
-{ type : remove
-  message: <<EOM
-------------------------------------------------------------------------------
-
-If you are no longer using the %%PORTNAME%% port, then manually delete
-the following directory and all its contents:
-
-	/var/db/%%PORTNAME%%
-
-------------------------------------------------------------------------------
-EOM
-}
-]
diff --git a/security/cvechecker/pkg-descr b/security/cvechecker/pkg-descr
deleted file mode 100644
index e5a722192e95..000000000000
--- a/security/cvechecker/pkg-descr
+++ /dev/null
@@ -1,9 +0,0 @@
-------------------------------------------------------------------------------
-The goal of cvechecker is to report about possible vulnerabilities on your
-system, by scanning a list of installed software and matching results with
-the CVE database.
-
-This is not a bullet-proof method and you may have many false positives (ie:
-vulnerability is fixed with a revision-release, but the tool isn't able to
-detect the revision itself), yet it is still better than nothing, especially
-if you are running a distribution with little security coverage.
diff --git a/security/cvechecker/pkg-plist b/security/cvechecker/pkg-plist
deleted file mode 100644
index 372d4b37e049..000000000000
--- a/security/cvechecker/pkg-plist
+++ /dev/null
@@ -1,21 +0,0 @@
-bin/cvechecker
-bin/cvegenversdat
-bin/cvereport
-bin/cverules
-bin/pullcves
-@sample %%ETCDIR%%.conf.sample
-%%DATADIR%%/csv2xml.awk
-%%DATADIR%%/cvereport.xsl
-%%DATADIR%%/mysql_cvechecker.sql
-%%DATADIR%%/nvdcve2simple.xsl
-%%DATADIR%%/report.css
-%%PORTDOCS%%%%DOCSDIR%%/acknowledgements.xml
-%%PORTDOCS%%%%DOCSDIR%%/userguide.xml
-share/man/man1/cvechecker.1.gz
-share/man/man1/cvegenversdat.1.gz
-share/man/man1/cvereport.1.gz
-share/man/man1/cverules.1.gz
-share/man/man1/pullcves.1.gz
-@dir /var/db/cvechecker/cache
-@dir /var/db/cvechecker/local
-@dir /var/db/cvechecker