CVE and update status of the FreeBSD ports tree3,296 unaddressed CVEs in 671 portsAll times are CET
Port details

security/vuls 0.42.0_1

Agentless vulnerability scanner

Port info

Maintainer
girgen@FreeBSD.org
Packages
latest: 0.42.0_1
Upstream
up to date
Last update
to 0.42.0_1 · d81b7ba3c3
Quarterly
2026Q4: 0.41.0_2 · last MFH 60647eff54
WWW
https://vuls.io
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuls
installs 0.42.0_1 from latest; from quarterly (2026Q4) 0.41.0_2
Port
# cd /usr/ports/security/vuls && make install clean
Size
20 MiB download · 89 MiB installed
Depends on
nothing
License
GPLv3+
Creates
user vuls, group vuls
pkg-message
Shown after installing
Congratulations, you have installed vuls!

To use vuls, install vuls on all your machines and activate the daily
periodic script using

sysrc -f /etc/periodic.conf daily_vuls_enable="YES"

and perhaps also add some config parameters; check the information header of
/usr/local/etc/periodic/daily/vuls.

Configure vuls by editing /usr/local/etc/vuls/config.toml.

Vuls uses the port security/go-cve-dictionary to look up information about
packages' CVEs. Install that port separately somewhere in your infrastructure,
start the service and point vuls to it for CVE queries by editing vuls'
configuration in /usr/local/etc/vuls/config.toml and setting the cveDict url properly.

If you want to use vuls to collect reports from several nodes, set up the vuls
service somewhere in your infrastructure. Set it up by enabling it and start it
using service:

sysrc vuls_enable="YES"
service vuls start

Also consider installing security/vulsrepo to present the resports in a
friendly human-readable web gui.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 160.42.0_10.41.0_1–
FreeBSD 150.42.0_10.42.0–
FreeBSD 140.42.0_1✗✗

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 150.41.0_20.41.0_1–
FreeBSD 140.41.0_20.41.0_1✗

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 0.42.0_1.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (106)

Adam Weinberger (adamw) · 0.30.0_1
go: Bump ports for go124 update
a4e30d4f4f
Palle Girgensohn (girgen) · 0.30.0
security/vuls: Update to 0.30.0

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.30.0
12daa7791f
Adam Weinberger (adamw) · 0.29.0_2
Bump all go ports for yesterday's releases
d0642a6176
Ashish SHUKLA (ashish) · 0.29.0_1
all: Bump after lang/go123 update

PR:		284681
f9fbe03c69
Palle Girgensohn (girgen) · 0.29.0
security/vuls: Upgrade to 0.29.0

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.29.0
7f62e48137
Ashish SHUKLA (ashish) · 0.28.1_1
all: Bump after lang/go123 update

MFH:		2025Q1
ca07a602a8
Palle Girgensohn (girgen) · 0.28.1
security/vuls: update to 0.28.1

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.28.1
d0f4f7d736
Palle Girgensohn (girgen) · 0.28.0
security/vuls: Update to 0.28.0

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.28.0
c8daf570db
Palle Girgensohn (girgen) · 0.27.0_1
security/vuls: Fix pkg-message to point to the correct config file

PR:	281957
6c93d1064f
Palle Girgensohn (girgen) · 0.27.0
security/vuls: Update to 1.27.0

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.27.0
cd341df1ba
Ashish SHUKLA (ashish) · 0.25.4_3
all: Bump after lang/go121 update
aa8c0111bf
Ashish SHUKLA (ashish) · 0.25.4_2
all: Bump after lang/go121 update
c4b51c2028
Ashish SHUKLA (ashish) · 0.25.4_1
all: Bump after lang/go121 update

MFH:		2024Q2
746fa696a1
Palle Girgensohn (girgen) · 0.25.4
security/vuls: Update to 0.21.4

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.25.4
c0fa1bb719
Ashish SHUKLA (ashish) · 0.25.3_1
all: Bump after lang/go121 update

MFH:		2024Q2
fce0cc3272
Palle Girgensohn (girgen) · 0.25.3
security/vuls: Upgrade to 0.25.3

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.25.3
030a96f5cd
Ashish SHUKLA (ashish) · 0.25.2_1
all: Bump after lang/go121 update

MFH:		2024Q2
32b284679a
Palle Girgensohn (girgen) · 0.25.2
security/vuls: Upgrade to 0.25.2

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.25.2
8611a821d7
Palle Girgensohn (girgen) · 0.25.1
security/vuls: Upgrade to 0.25.1

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.25.1
0c7d8955c6
Palle Girgensohn (girgen) · 0.24.9_1
security/vuls: Fix errors in pkg-message
fd34e5d25f
Palle Girgensohn (girgen) · 0.24.9
security/vuls: Update to 0.24.9

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.24.9
de9f4f740d
Palle Girgensohn (girgen) · 0.24.8
security/vuls: Upgrade to 0.24.3

Update and take maintainership due to maintainer timeout. [1]

Add an optional service rc.d script to run a server that collects
results sent from multiple vuls client nodes.

A periodic script is also provided to create fresh daily reports.

PR:	259948 [1] Maintainer timeout
d166de2cfd
Ashish SHUKLA (ashish) · 0.13.7_16
all: Bump PORTREVISION after lang/go* update

PR:		276530
7e5aa2085f
Ashish SHUKLA (ashish) · 0.13.7_15
all: Bump PORTREVISION after lang/go* update

PR:		274405
0505b712df
Dmitri Goutnik (dmgk) · 0.13.7_14
all: Bump PORTREVISION after lang/go* update
8e4bc57934
Dmitri Goutnik (dmgk) · 0.13.7_13
all: Bump PORTREVISION after lang/go{119,120} update
09b993031a
Dmitri Goutnik (dmgk) · 0.13.7_12
all: Bump PORTREVISION after lang/go{119,120} update
ff40d94c1d
Dmitri Goutnik (dmgk) · 0.13.7_11
all: Bump PORTREVISION after Go ports update
09079730e9
Dmitri Goutnik (dmgk) · 0.13.7_10
all: Bump PORTREVISION after lang/go{119,120} update
56b5ec772f
Dmitri Goutnik (dmgk) · 0.13.7_9
all: Bump PORTREVISION after GO_DEFAULT update.
2297efc51b
Dmitri Goutnik (dmgk) · 0.13.7_8
all: Bump PORTVERSION after lang/go{118,119} update
3b383d833a
Dmitri Goutnik (dmgk) · 0.13.7_7
all: Bump PORTREVISION after lang/go{118,119} update
d9ad1002d5
Dmitri Goutnik (dmgk) · 0.13.7_6
all: Bump PORTREVISION after lang/go{118,119} update
bde51869ee
Dmitri Goutnik (dmgk) · 0.13.7_5
all: Bump PORTREVISION after lang/go{118,119} update
f05c98fffb
Stefan Eßer (se) · 0.13.7_4
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 0.13.7_4
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Dmitri Goutnik (dmgk) · 0.13.7_4
all: Bump PORTREVISION after Go update

Bump Go ports PORTREVISION after GO_DEFAULT and lang/go118 update.
4476f89764
Dmitri Goutnik (dmgk) · 0.13.7_3
all: Bump PORTREVISION after lang/go{117,118} update
153cb65ac8
Dmitri Goutnik (dmgk) · 0.13.7_2
*/*: Bump port revisons after lang/go{117,118} update
309cdeccd8
Guangyuan Yang (ygy) · 0.13.7_1
*/*: Bump PORTREVISION after lang/go 1.18 update
d690b5102f
Mathieu Arnold (mat) · 0.13.7
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 0.13.7
Remove # $FreeBSD$ from Makefiles.
305f148f48
Dmitri Goutnik (dmgk) · 0.13.7
security/vuls: Update to 0.13.7

While here, also

- Remove GH_SUBDIR, not needed with go:modules
- Remove redundant post-patch target

Changes:	https://github.com/future-architect/vuls/releases/tag/v0.13.7
PR:		251685
Approved by:	Alexandru Ciobanu <iscandr@gmail.com> (maintainer)
9dc2bcdbc6
Antoine Brodin (antoine) · 0.9.0.92
Mark BROKEN

Reported by:	pkg-fallout
c35c2fae90
Rainer Hurling (rhurlin) · 0.9.0.92
security/vuls: Update to 0.9.0

This patch updates from v0.6.1 to only v0.9.0 [1] for
a smooth upgrade experience. The next one will update
from 0.9.0 to 0.13.7 [2].

[1] https://github.com/future-architect/vuls/releases/tag/v0.9.0
[2] https://github.com/future-architect/vuls/releases

PR:		251654
Submitted by:	Alexandru Ciobanu <iscandr@gmail.com> (maintainer)
Approved by:	tcberner (mentor)
de7c95c2ca
Dmitri Goutnik (dmgk) · 0.6.1_1
security/vuls: Unbreak on aarch64

PR:		242445
Approved by:	iscandr@gmail.com (maintainer timeout, >2 months)
ed93138a25
Dmitri Goutnik (dmgk) · 0.6.1
Go ports: cleanup, finish transition to USES=go started with r505321 (cat. misc-shells)

- Remove custom build/install targets left in place after r505321
- Switch to the new GO_TARGET tuple syntax introduced in r512001
- Switch to go:modules when upstream already uses them

Reviewed by:	tobik
Approved by:	araujo (mentor), portmgr (adamw)
Differential Revision:	https://reviews.freebsd.org/D21743
67c4b925b7
Mathieu Arnold (mat) · 0.6.1
Convert to UCL & cleanup pkg-message (categories s)
bc89cd3d2c
Mathieu Arnold (mat) · 0.6.1
Fix the a ports that were broken but did not know it.

Differential Revision:	https://reviews.freebsd.org/D20140
b139bbf73f
Tobias Kortkamp (tobik) · 0.6.1
security/vuls: USES=go does not take any arguments

Submitted by:	Dmitri Goutnik <dg@syrec.org>
Differential Revision:	https://reviews.freebsd.org/D19803
88c53bfe31