CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

www/dokuwiki 20260714c

Simple and easy to use wiki, no database required

Port info

Maintainer
delphij@FreeBSD.org
Packages
latest: dokuwiki-php82 20260714c, dokuwiki-php83 20260714c, dokuwiki-php84 20260714c, dokuwiki-php85 20260714c, dokuwiki-php86 20260714c
Upstream
up to date
Last update
to 20260714c · 3804db80e1
Quarterly
2026Q4: dokuwiki-php82 20260714c, dokuwiki-php83 20260714c, dokuwiki-php84 20260714c, dokuwiki-php85 20260714c, dokuwiki-php86 20260714c
WWW
https://www.dokuwiki.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install dokuwiki-php82
# pkg install dokuwiki-php83
# pkg install dokuwiki-php84
# pkg install dokuwiki-php85
# pkg install dokuwiki-php86
installs dokuwiki-php82 20260714c, dokuwiki-php83 20260714c, dokuwiki-php84 20260714c, dokuwiki-php85 20260714c, dokuwiki-php86 20260714c from latest; from quarterly (2026Q4) dokuwiki-php82 20260714c, dokuwiki-php83 20260714c, dokuwiki-php84 20260714c, dokuwiki-php85 20260714c, dokuwiki-php86 20260714c
Port
# cd /usr/ports/www/dokuwiki && make install clean
# make -C /usr/ports/www/dokuwiki config  # change options first
Size
3.3 MiB download · 16 MiB installed
Depends on
archivers/php82-zlib 8.2.35_2, converters/php82-iconv 8.2.35_2, converters/php82-mbstring 8.2.35_2, graphics/php82-gd 8.2.35_2, lang/php82 8.2.35_2, security/php82-filter 8.2.35_2, textproc/php82-ctype 8.2.35_2, textproc/php82-simplexml 8.2.35_2, textproc/php82-xml 8.2.35_2, www/php82-session 8.2.35_2
License
BSD3CLAUSE and GPLv2 and GPLv2+ and GPLv3 and MIT
Options
0 of 1 on in the package
Show the 1 options that are off
TEST
pkg-message
Shown after installing
The wiki program have been installed to /usr/local/www/dokuwiki.

Please configure your web server to allow running PHP scripts there.

Please create dedicated data directory outside the installation directory
and make it owned by the process running these PHP scripts.  It is important
to make sure that your PHP intepreter does not allow running PHP scripts
there.

For first install, you may have to manually copy the contents from
/usr/local/www/dokuwiki/data into the newly created data directory and change
the owner of /usr/local/www/dokuwiki/conf to the web server.

Please go to http://www.your.host/dokuwiki/install.php to finish the
installation.  For FULL configuration instructions, see
http://wiki.splitbrain.org/wiki:config

After installation please change the permissions of
/usr/local/www/dokuwiki/conf back to root:wheel.
Note
Size, dependencies, options and messages are those of dokuwiki-php82.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 1620260714c20260714c–
FreeBSD 1520260714c20260714c–
FreeBSD 1420260714c20260714c20260714c

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 1520260714c20260714c–
FreeBSD 1420260714c20260714c20260714c

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 20260714c.

Not counted (1)

CVEs that match this port only loosely: inherited from the whole project, or with versions that cannot be compared. What does this mean?

1 with versions that cannot be compared
The CVE record gives dates or the port uses snapshot versions (or the other way round), so the version of this port cannot be placed in the affected range.
CVECVSSPublishedDescription
CVE-2026-1133567.72026-10-20DokuWiki before 2026-07-14c contains a PHP object injection vulnerability in Draft::getDraftText() that passes draft file contents to unserialize() without restricting a…

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (113)

Baptiste Daroussin (bapt)
Remove colors they are terminal dependant
c049727804
Xin LI (delphij)
Update to 20131208.
3916ef88ac
Xin LI (delphij)
Support staging.
ab3ad3546b
Bryan Drewery (bdrewery)
- Add missing newlines. This was missed in the previous cleanup in r313597

With hat:	portmgr
Submitted by:	ak, beat
Reported by:	delphij
16a9647b69
Baptiste Daroussin (bapt)
Add NO_STAGE all over the place in preparation for the staging support (cat: www)
85fbf21ec5
Xin LI (delphij)
Update to 2013-05-10 release.
02d5a358fb
Xin LI (delphij)
- Add license information.  - Trim makefile header.

PR:		ports/175273
Submitted by:	Yasuhiro KIMURA <yasu utahime org>
4d4c6b893d
Xin LI (delphij)
Update to 2012-10-13 release.

Feature safe:	yes
08b660560b
Xin LI (delphij)
- Fix substitusion of pkg-message

PR:		ports/171274
Submitted by:	Yasuhiro KIMURA <yasu utahime.org>
0f8242dea6
Xin LI (delphij)
Update to 2012-01-25b, fixes a XSS vulnerability.

Security:	2fe4b57f-d110-11e1-ac76-10bf48230856
b7214772a9
Xin LI (delphij)
Update to 2012-01-25a to fix a CSRF vulnerability.

Noticed by:	eadler
1af3fb64e7
Xin LI (delphij)
Update to 2012-01-25 `Angua' release.
466b4fd16f
Xin LI (delphij)
Fix typo in pkg-message.

Submitted by:	Tech Nossomy <technossomy mail.com>
eea595db63
Xin LI (delphij)
Update to 2011-05-25a.

Security:	0b535cd0-9b90-11e0-800a-00215c6a37bb
166d6e668f
Xin LI (delphij)
Update to 20110525.
ae57a9b104
Xin LI (delphij)
Remove the deleted.files before proceeding to install.

Noticed by:	tinderbox via erwin
Feature safe:	yes
acc970a9f8
Xin LI (delphij)
Add dokuwiki multiple ACL escalation vulnerabilities.

Feature safe:	yes
30e3f87e71
Xin LI (delphij)
Add php-openssl as dependency, which is needed for installing/updating plugins via web UI.

PR:		ports/154023
Submitted by:	Jason Taylor <jason infinitebubble.com>
Feature safe:	yes
7531b02bf5
Xin LI (delphij)
- Update to 2010-11-07 release.  - Add a patch to improve diff generation in Unicode case [1]    which is used in the FreeBSD China wiki installation for    a while.

Submitted by:	MQ [1]
e00d804d93
Xin LI (delphij)
Update to 20091225c.  This version fixed a CSRF vulnerability in ACL manager.

Security:	http://bugs.splitbrain.org/index.php?do=details&task_id=1853
4a54e24d3f
Xin LI (delphij)
Fix a minor information leak issue which will expose directories outside the wiki root (not their contents though).

This commit actually upgraded the port to 2009-12-25b by adding the patch
file.

For details please consult:
	http://bugs.splitbrain.org/index.php?do=details&task_id=1847

Sponsored by:	iXsystems, Inc.
28850e37bc
Xin LI (delphij)
Update to 2009-12-25 "Lemming":

* This release needs PHP5.1.2!
 * many Editor improvements
    o automatic list indention
    o better headline system
    o link wizard template authors need to provide CSS
  * compatibility fixes for IE8 and Chrome
  * PHP 5.3 compatibility fixes
  * row span support in tables
  * downloadable code blocks
  * fulltext search improvements
  * added filename search in media manager
  * new dformat function plugin and template authors should replace
    strftime calls with this function
  * one click revert button for managers template authors need to
    add this button
  * nicer admin screen template authors need to provide CSS
  * XMLRPC improvements
  * many smaller feature enhancements
  * more plugin events
  * some performance optimizations
  * minor security enhancements
  * many, many, many bug fixes

While I'm there, grab maintainership.
5f71aa102f
Mark Linimon (linimon)
Reset maintainer at his request.

PR:		ports/141647
b641caf81b
Mark Linimon (linimon)
Reinstate maintainer at his request.
4727575d1b
Mark Linimon (linimon)
Temporarily reassign ports maintained by chris@officialunix.com back to the pool for the duration of his upcoming move.

Requested by:	maintainer
89a90f22d5
Wesley Shields (wxs)
- Pass maintainer to submitter.

PR:		ports/138957
Submitted by:	Chris Petrik <chris@officialunix.com>
Feature safe:	yes
c31ab79606
Mark Linimon (linimon)
Reset chinsan@FreeBSD.org due to numerous maintainer-timeouts and no response to email.

Hat:		portmgr
9fb1ef4c3a
Xin LI (delphij)
Apply a vendor security fix (2009-02-14b) for a local file disclosure vulnerability.

Security:	4f838b74-50a1-11de-b01f-001c2514716c
With hat:	ports-security
07831aeffc
Chin-San Huang (chinsan)
- Update to 2009-02-14

PR:		ports/132078
Submitted by:	Beat Gätzi (beat@)
39cfec245d
Chin-San Huang (chinsan)
- fix the path of PHP. - Bump portrevision.

Noticed by:	Christian Marg <marg at rz.tu-clausthal.de>
b7af429d49
Chin-San Huang (chinsan)
- Update to 2008-05-05.

PR:		ports/123527
Submitted by:	Beat Gatzi <beat at chruetertee.ch>
Approved by:	maintainer
d8dcb24d28
Chin-San Huang (chinsan)
- Unbreak www/dokuwiki by fixing the missed before-patched files.

Noticed by:	sat
Approved by:	rafan (mentor)
1f36d6d46f
Chin-San Huang (chinsan)
- Fix an XSS vulnerability.   http://bugs.splitbrain.org/index.php?do=details&task_id=1195

Approved by:	rafan (mentor)
e8884641aa
Chin-San Huang (chinsan)
- Update to 2007-06-26

- The changes in this release are as follows:
  This release adds rendering plugins, OpenSearch, a spam revert
  manager, and support for managers (semi-admins). Several smaller and
  bigger bugs were fixed, and many other improvements made.

Approved by:	rafan (mentor)
ef2a966d8f
Florent Thoumie (flz)
- Welcome X.org 7.2 \o/. - Set X11BASE to ${LOCALBASE} for recent ${OSVERSION}. - Bump PORTREVISION for ports intalling files in ${X11BASE}.
d4f0d0048a
Chin-San Huang (chinsan)
- Update to 2006-11-06

PR:		ports/105693
Submitted by:	Gustavo Fukao <gustavofukao _at_ gmail dot com>
Approved by:	delphij (mentor)
79bd6e0fe4
Cheng-Lung Sung (clsung)
upgrade of www/dokuwiki to release 2006-03-09e, as it fixes a bunch of urgent security bugs

PR:		ports/103982
Submitted by:	Tomas Verbaitis <tomasv_AT_megalogika dot lt>
Reviewed by:	chinsan
Approved by:	maintainer (chinsan)
c8565321dd
Chin-San Huang (chinsan)
Change the following ports to my FreeBSD.org email. Approved by:	delphij (mentor)

archivers/pecl-bz2/Makefile
archivers/pecl-lzf/Makefile
archivers/pecl-rar/Makefile
audio/fapg/Makefile
audio/pecl-id3/Makefile
chinese/CJKUnifonts/Makefile
chinese/auto-tw-l10n/Makefile
chinese/dfsongsd/Makefile
chinese/fortunetw/Makefile
chinese/gcin/Makefile
chinese/joe/Makefile
chinese/joe2/Makefile
chinese/pcmanx/Makefile
chinese/phpbb-tw/Makefile
chinese/tatter-tools/Makefile
chinese/ve/Makefile
chinese/zhcon/Makefile
devel/pear-Console_Getopt/Makefile
devel/pear-Console_Table/Makefile
devel/pear-PEAR_Info/Makefile
devel/pecl-expect/Makefile
games/p5-Baseball-Sabermetrics/Makefile
graphics/epdfview/Makefile
graphics/p5-Chart-Clicker/Makefile
graphics/p5-GD-Thumbnail/Makefile
graphics/p5-Visio/Makefile
mail/pecl-esmtp/Makefile
math/pecl-stats/Makefile
misc/pear-Services_Weather/Makefile
net/ldapdiff/Makefile
net/p5-RRD-Simple/Makefile
net/pear-Net_CDDB/Makefile
net/pear-Net_SMS/Makefile
net/pecl-cvsclient/Makefile
security/gwee/Makefile
security/p5-GSSAPI/Makefile
security/pam-pgsql/Makefile
security/pecl-ssh2/Makefile
security/pecl-tcpwrap/Makefile
sysutils/p5-BSD-Sysctl/Makefile
sysutils/p5-File-Next/Makefile
textproc/csvdiff/Makefile
textproc/p5-CSS/Makefile
textproc/p5-Pod-XML/Makefile
textproc/p5-SGML-DTDParse/Makefile
textproc/p5-Text-Emoticon-GoogleTalk/Makefile
textproc/p5-XML-Handler-Dtd2DocBook/Makefile
textproc/p5-XML-Handler-Dtd2Html/Makefile
textproc/p5-XML-SAXDriver-CSV/Makefile
textproc/p5-XML-SAXDriver-Excel/Makefile
textproc/p5-ack/Makefile
textproc/pear-XML_DTD/Makefile
textproc/pecl-stem/Makefile
textproc/scim-input-pad/Makefile
textproc/sdcv/Makefile
www/b2evolution/Makefile
www/dokuwiki/Makefile
www/dokuwiki-devel/Makefile
www/lilurl/Makefile
www/p5-HTML-TableParser/Makefile
www/p5-HTML-WikiConverter/Makefile
www/p5-HTML-WikiConverter-DokuWiki/Makefile
www/p5-HTML-WikiConverter-Kwiki/Makefile
www/p5-HTML-WikiConverter-Markdown/Makefile
www/p5-HTML-WikiConverter-MediaWiki/Makefile
www/p5-HTML-WikiConverter-MoinMoin/Makefile
www/p5-HTML-WikiConverter-Oddmuse/Makefile
www/p5-HTML-WikiConverter-PbWiki/Makefile
www/p5-HTML-WikiConverter-PhpWiki/Makefile
www/p5-HTML-WikiConverter-PmWiki/Makefile
www/p5-HTML-WikiConverter-SnipSnap/Makefile
www/p5-HTML-WikiConverter-Socialtext/Makefile
www/p5-HTML-WikiConverter-TikiWiki/Makefile
www/p5-HTML-WikiConverter-UseMod/Makefile
www/p5-HTML-WikiConverter-WakkaWiki/Makefile
www/p5-HTML-WikiConverter-WikkaWiki/Makefile
www/p5-WWW-Baseball-NPB/Makefile
www/p5-WWW-Comic/Makefile
www/p5-WWW-VenusEnvy/Makefile
www/pear-Services_Delicious/Makefile
www/pear-UDDI/Makefile
www/xpi-cssviewer/Makefile
www/xpi-gmail-manager/Makefile
www/xpi-google-notebook/Makefile
www/xpi-mrtech-local-install/Makefile
www/xpi-no-referrer/Makefile
www/xpi-server_switcher/Makefile
www/xpi-unplug/Makefile
www/xpi-videodownloader/Makefile
www/xpi-web_developer/Makefile
x11/xdialog/Makefile
x11-fm/pcmanfm/Makefile
d969fbba79
Cheng-Lung Sung (clsung)
- Fix security issue(Image resize DOS-Attack in fetch.php) - bump PORTREVISION

PR:		ports/103798
Security:	http://bugs.splitbrain.org/?do=details&id=924
e2d0511a84
Martin Wilke (miwi)
Pkg-plist fix Add new WWW layout

PR:		ports/99255
Submitted by:	chinsan <chinsan.tw@gmail.com> (maintainer)
Approved by:	markus (co mentor)
95dc083525
Aaron Dalton (aaron)
- Make pkg-plist static - Bump PORTREVISION due to plist changes - Remove user-modified files conf/acl.auth.php, conf/users.auth.php, and data/changes.log from the plist.  This results in data/changes.log being reported as erroneously left behind.

PR:		ports/98863
Submitted by:	aaron
Reviewed by:	maintainer
Approved by:	maintainer, tobez (implicit)
329713ee4d
Aaron Dalton (aaron)
- Bump PORTREVISION - Update distinfo

Vendor's Announcement:
Hello again!

Just two days after the last security problem another flaw was discovered.
Luckily not as bad as the last one.

Andreas .kre Solberg discovered a security flaw which allows registered
users to view page content they usually have no access to. The problem is
in the way how a successful user profile change is handled.

This affects only installs which have Access Control Lists enabled (off by
default) and restricted the READ permission for certain pages even for
logged in users. Non-authenticated users can not exploit this bug.

The package available at http://www.splitbrain.org/go/dokuwiki was updated
again to reflect the change but fixing it manually is simple, too. Info on
how to do this is available at
http://bugs.splitbrain.org/?do=details&id=825

Andi

I request that the package be immediately rebuilt and distributed.

PR:		ports/98599
Submitted by:	aaron
Reviewed by:	maintainer
Approved by:	maintainer, tobez (implicit)
Security:	http://bugs.splitbrain.org/index.php?do=details&id=825
e0fc75693f
Simon L. B. Nielsen (simon)
Remove FORBIDDEN now that the port has been updated.
633f06580c
Aaron Dalton (aaron)
- Update distinfo - Bump PORTREVISION - Change default install location - This is a major security fix and I would ask that portmgr@ immediately rebuild and redistribute the port's package!

PR:		ports/98514
Submitted by:	aaron
Approved by:	secteam (simon)
07b51b684e
Simon L. B. Nielsen (simon)
Mark FORBIDDEN due to remote code execution:

Security:	http://www.hardened-php.net/advisory_042006.119.html
6bc4028074
Pav Lucistnik (pav)
- Fix plist after recent php changes
37092d0f5f
Alex Dupre (ale)
Fix or remove obsolate or broken ways to depend on php.
fbc062586d
Pav Lucistnik (pav)
- Update to 20060309

PR:		ports/95054
Submitted by:	Piet Delport <pjd@satori.za.net>
Approved by:	chinsan <chinsan.tw@gmail.com> (maintainer)
c87acb2df6
Pav Lucistnik (pav)
- Update to 20060305

PR:		ports/94257
Submitted by:	chinsan <chinsan.tw@gmail.com> (maintainer)
6c92e2877e
Edwin Groothuis (edwin) · 20051109_1
Chase libversion bumb to libMagick.so.9

PR:		ports/91270
e62864a49b