diff --git a/security/cfssl/Makefile b/security/cfssl/Makefile
index 6916c17c67c5..cd54c8ae92ce 100644
--- a/security/cfssl/Makefile
+++ b/security/cfssl/Makefile
@@ -1,61 +1,60 @@
 PORTNAME=	cfssl
 DISTVERSIONPREFIX=	v
-DISTVERSION=	1.6.4
-PORTREVISION=	4
+DISTVERSION=	1.6.5
 CATEGORIES=	security
 
 MAINTAINER=	yuri@FreeBSD.org
 COMMENT=	Cloudflare's PKI and TLS toolkit
 WWW=		https://cfssl.org/
 
 LICENSE=	BSD2CLAUSE
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 LIB_DEPENDS=	libltdl.so:devel/libltdl
 
 USES=		go:modules gmake
 USE_GITHUB=	nodefault
 GH_TUPLE=	golang:sys:v0.6.0:sys
 
 GO_MODULE=	github.com/cloudflare/cfssl
 
 EXES=		cfssl cfssl-bundle cfssl-certinfo cfssl-newkey cfssl-scan cfssljson mkbundle multirootca
 
 PLIST_FILES=	${EXES:S/^/bin\//}
 
 CFSSL_EXTRA_TARGETS=	bin/goose
 PLIST_FILES+=	${CFSSL_EXTRA_TARGETS}
 USE_RC_SUBR=	${PORTNAME}
 USERS=	cfssl
 GROUPS=	cfssl
 # installs a file to the same path
 CONFLICTS=	goose
 
 pre-patch:
 	${RM} -r ${WRKSRC}/vendor/golang.org/x/sys
 	${LN} -s ${WRKDIR}/sys-* ${WRKSRC}/vendor/golang.org/x/sys
 
 pre-configure:
 	${REINPLACE_CMD} -e 's|%%DISTVERSION%%|${DISTVERSION}|g' ${WRKSRC}/cli/version/version.go
 
 # the project uses Makefile for build and installation
 do-build:
 	@cd ${WRKSRC} && ${SETENV} ${MAKE_ENV} ${GO_ENV} ${MAKE_CMD} ${MAKE_FLAGS} ${MAKEFILE} ${_MAKE_JOBS} all ${CFSSL_EXTRA_TARGETS}
 
 do-install:
 	# Makefile is used but the install target uses go install.
 	cd ${WRKSRC} && ${SETENV} ${MAKE_ENV} ${GO_ENV} GOBIN=${STAGEDIR}${PREFIX}/bin ${MAKE_CMD} ${MAKE_FLAGS} ${MAKEFILE} ${_MAKE_JOBS} install
 .for F in cfssl cfssl-certinfo multirootca
 	${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/${F}
 .endfor
 
 	${INSTALL} -d ${STAGEDIR}${DATADIR}
 .for D in certdb/sqlite certdb/pg certdb/mysql
 	cd ${WRKSRC} && ${COPYTREE_SHARE} ${D} ${STAGEDIR}${DATADIR}
 .endfor
 
 .for F in ${CFSSL_EXTRA_TARGETS}
 	${INSTALL_PROGRAM} ${WRKSRC}/${F} ${STAGEDIR}/${PREFIX}/${F}
 .endfor
 
 .include <bsd.port.mk>
diff --git a/security/cfssl/distinfo b/security/cfssl/distinfo
index 8ff5c5e6e5ce..eec11755639f 100644
--- a/security/cfssl/distinfo
+++ b/security/cfssl/distinfo
@@ -1,7 +1,7 @@
-TIMESTAMP = 1681238775
-SHA256 (go/security_cfssl/cfssl-v1.6.4/v1.6.4.mod) = 9edeee259b76d6d0e4ea60594ec1645e39c044bffff95bd167a822f7ae2186cd
-SIZE (go/security_cfssl/cfssl-v1.6.4/v1.6.4.mod) = 1772
-SHA256 (go/security_cfssl/cfssl-v1.6.4/v1.6.4.zip) = c44b442cc9f1d217f704c9c646b8dae9c19ab9cd5f01656cc562fd0ea15d4ae3
-SIZE (go/security_cfssl/cfssl-v1.6.4/v1.6.4.zip) = 2089038
-SHA256 (go/security_cfssl/cfssl-v1.6.4/golang-sys-v0.6.0_GH0.tar.gz) = b4f6d17c7a128f76169964b437cb66b3f2dbf9a33361928ec19dfecf7b03fc54
-SIZE (go/security_cfssl/cfssl-v1.6.4/golang-sys-v0.6.0_GH0.tar.gz) = 1434234
+TIMESTAMP = 1710105869
+SHA256 (go/security_cfssl/cfssl-v1.6.5/v1.6.5.mod) = 075496c5c08935837a31a46f18cb99c9add3aad2554550a621a1a98217acee06
+SIZE (go/security_cfssl/cfssl-v1.6.5/v1.6.5.mod) = 1520
+SHA256 (go/security_cfssl/cfssl-v1.6.5/v1.6.5.zip) = d4eb0f013425a8c7d8bb2ea14d8d3a4a02efcb790f5f5e018d29ade3135f68f8
+SIZE (go/security_cfssl/cfssl-v1.6.5/v1.6.5.zip) = 2097562
+SHA256 (go/security_cfssl/cfssl-v1.6.5/golang-sys-v0.6.0_GH0.tar.gz) = b4f6d17c7a128f76169964b437cb66b3f2dbf9a33361928ec19dfecf7b03fc54
+SIZE (go/security_cfssl/cfssl-v1.6.5/golang-sys-v0.6.0_GH0.tar.gz) = 1434234