CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

www/fabio 1.6.11_9

Zero-conf load balancing HTTP(S) router managed by Consul

1
unaddressed
0
VuXML only
0
fixed
0
open problem reports

Port info

Maintainer
stl@ossuary.net
Packages
latest: 1.6.11_9
Upstream
Higher version available: 1.8.0
Last update
to 1.6.11_9 · d81b7ba3c3
Quarterly
2026Q4: 1.6.11_9 · last MFH 60647eff54
WWW
https://github.com/fabiolb/fabio
Links
cgit · VuXML

Install

Package
# pkg install fabio
installs 1.6.11_9 from latest; from quarterly (2026Q4) 1.6.11_9
Port
# cd /usr/ports/www/fabio && make install clean
Size
8.2 MiB download · 27 MiB installed
Depends on
nothing
License
MIT

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.6.11_91.6.11_8–
FreeBSD 151.6.11_91.6.11_8–
FreeBSD 141.6.11_91.6.11_81.6.11_9

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.6.11_91.6.11_8–
FreeBSD 141.6.11_91.6.11_81.6.11_9

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (1)

The CVE record lists the packaged version 1.6.11_9 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-629875.82026-09-21Fabio is an HTTP(S) and TCP router for deploying applications managed by consul. From 1.6.6 until 1.7.2, the CVE-2025-48865 fix in proxy/http_headers.go uses protectHead…

VuXML only (0)

Listed in VuXML, the packaged version 1.6.11_9 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (66)

Dag-Erling Smørgrav (des) · 1.6.11_9 MFH 2026Q4 ✓
various: Bump Go ports for Go 1.26.10 / 1.27.3
d81b7ba3c3
Adam Weinberger (adamw) · 1.6.11_7
many: Bump go ports for 1.26.8 and 1.27.1
dd0905142a
Dag-Erling Smørgrav (des) · 1.6.11_6 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.14 / 1.26.7
4867821cd6
Dag-Erling Smørgrav (des) · 1.6.11_5 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.13 / 1.26.6
6d39dcf04e
Dag-Erling Smørgrav (des) · 1.6.11_4 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.12 / 1.26.5
4ea3547132
Dag-Erling Smørgrav (des) · 1.6.11_3
various: Bump go ports for go-1.25.11 / go-1.26.4
dd8dc2a59d
Adam Weinberger (adamw) · 1.6.11_2
various: Bump ports for Go 1.25.10
4e243a83f8
Dag-Erling Smørgrav (des) · 1.6.11_1
various: Bump go ports for go-1.25.9 / 1.26.2
7507e72a84
Vladimir Druzenko (vvd) · 1.6.11
www/fabio: Update 1.6.4 => 1.6.11, fix runtime

A recent update to Consul causes Fabio to fail to register itself in the
service directory.  Consul has apparently become stricter in its
interpretation of IPv4 addresses and fails to recognize an IPv4 address
surrounded by square brackets.  Versions prior to 1.22 permitted this.
Fabio (prior to 1.6.11) sends its IPv4 address wrapped in square
brackets and will fail to register on a newer Consul.

Changelog:
https://github.com/fabiolb/fabio/blob/master/CHANGELOG.md#v1611-2025-12-09

While here replace PORTVERSION with DISTVERSION.

PR:		294048
Approved by:	blanket (fix runtime)
Sponsored by:	UNIS Labs
MFH:		2026Q1
ea4da10cbb
Adam Weinberger (adamw) · 1.6.4_8
various: Bump ports for Go 1.25.8
a8d318da7c
Adam Weinberger (adamw) · 1.6.4_7
various: Bump ports for Go default 1.24->1.25
97685c1886
Adam Weinberger (adamw) · 1.6.4_6
various: Bump Go ports for 1.24.13
529df949a5
Adam Weinberger (adamw) · 1.6.4_5
various: Bump Go ports for 1.24.12
013f2d30b0
Dag-Erling Smørgrav (des) · 1.6.4_4
many: Unpin Go ports

* Ports that were pinned to a deprecated version of Go (1.23 or older)
  have been unpinned.

* Ports that were pinned to a still-supported version of Go (1.24 or
  newer) have been converted to requesting that as their minimum Go
  version.

* Ports that had been forcibly deprecated for pinning an expired Go
  version have been undeprecated.
75d873b56a
Adam Weinberger (adamw) · 1.6.4_4
many: Unsupported Go dep; deprecate and schedule for removal

There are about 75 ports that depend on old, unsupported Go
versions. I've scheduled those Go versions for deletions on
2025/01/01, and so these ports are scheduled for removal on
that same day.

HOWEVER....

Likely NONE or VERY VERY FEW of these ports will actually need
to be deleted! This stems from a misunderstanding:

When go.mod says "go 1.23", it means that it requires AT LEAST
go-1.23. Locking a port to a specific go version should almost
never happen; it is reserved for when a package absolutely
cannot build with any newer version, and it almost means that
the port will only last 1 year (Go releases new minors twice a
year).

Where a port has
USES=go:1.23
maintainers should attempt build with just
USES=go

If that works, please either commit it or submit it in a PR.

Same goes go
USES=go:1.23,modules
to attempt
USES=go,modules
f45b1d07f5
Adam Weinberger (adamw) · 1.6.4_4
go123 ports: Bump for 1.23.12
b6703954e3
Adam Weinberger (adamw) · 1.6.4_3
go: Bump ports for go124 update
a4e30d4f4f
Adam Weinberger (adamw) · 1.6.4_2
Bump all go ports for yesterday's releases
d0642a6176
Ashish SHUKLA (ashish) · 1.6.4_1
all: Bump after lang/go123 update

PR:		284681
f9fbe03c69
Robert Clausecker (fuz) · 1.6.4
www/fabio: update to 1.6.4

- remove now obsolete riscv64 patches

Changelogs: https://github.com/fabiolb/fabio/releases

PR:		284791
c40e4df91c
Ashish SHUKLA (ashish) · 1.6.0_22
all: Bump after lang/go121 update
aa8c0111bf
Ashish SHUKLA (ashish) · 1.6.0_21
all: Bump after lang/go121 update
c4b51c2028
Ashish SHUKLA (ashish) · 1.6.0_20
all: Bump after lang/go121 update

MFH:		2024Q2
746fa696a1
Ashish SHUKLA (ashish) · 1.6.0_19
all: Bump after lang/go121 update

MFH:		2024Q2
fce0cc3272
Ashish SHUKLA (ashish) · 1.6.0_18
all: Bump after lang/go121 update

MFH:		2024Q2
32b284679a
Muhammad Moinur Rahman (bofh) · 1.6.0_17
lang/go: Change DEFAULT to 1.21

PR:		277776
Approved by:	portmgr (exp-run)
a5a000df3b
Ashish SHUKLA (ashish) · 1.6.0_16
all: Bump PORTREVISION after lang/go* update

PR:		276530
7e5aa2085f
Ashish SHUKLA (ashish) · 1.6.0_15
all: Bump PORTREVISION after lang/go* update

PR:		274405
0505b712df
Dmitri Goutnik (dmgk) · 1.6.0_14
all: Bump PORTREVISION after lang/go* update
8e4bc57934
Dmitri Goutnik (dmgk) · 1.6.0_13
all: Bump PORTREVISION after lang/go{119,120} update
09b993031a
Dmitri Goutnik (dmgk) · 1.6.0_12
all: Bump PORTREVISION after lang/go{119,120} update
ff40d94c1d
Robert Clausecker (fuz) · 1.6.0_11
www/fabio: fix build on riscv64

Bump golang.org/x/sys dependency to a version new enough to
support riscv64-freebsd.

Sponsored by:	Berliner Linux User Group e.V.
Approved by:	portmgr (build fix blanket)
0b5621a47f
Dmitri Goutnik (dmgk) · 1.6.0_10
all: Bump PORTREVISION after Go ports update
09079730e9
Dmitri Goutnik (dmgk) · 1.6.0_9
all: Bump PORTREVISION after lang/go{119,120} update
56b5ec772f
Dmitri Goutnik (dmgk) · 1.6.0_8
all: Bump PORTREVISION after GO_DEFAULT update.
2297efc51b
Dmitri Goutnik (dmgk) · 1.6.0_7
all: Bump PORTVERSION after lang/go{118,119} update
3b383d833a
Dmitri Goutnik (dmgk) · 1.6.0_6
all: Bump PORTREVISION after lang/go{118,119} update
d9ad1002d5
Dmitri Goutnik (dmgk) · 1.6.0_5
all: Bump PORTREVISION after lang/go{118,119} update
bde51869ee
Dmitri Goutnik (dmgk) · 1.6.0_4
all: Bump PORTREVISION after lang/go{118,119} update
f05c98fffb
Stefan Eßer (se) · 1.6.0_3
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.6.0_3
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Dmitri Goutnik (dmgk) · 1.6.0_3
all: Bump PORTREVISION after Go update

Bump Go ports PORTREVISION after GO_DEFAULT and lang/go118 update.
4476f89764
Dmitri Goutnik (dmgk) · 1.6.0_2
all: Bump PORTREVISION after lang/go{117,118} update
153cb65ac8
Dmitri Goutnik (dmgk) · 1.6.0_1
*/*: Bump port revisons after lang/go{117,118} update
309cdeccd8
Fernando Apesteguía (fernape) · 1.6.0
www/fabio: Update to 1.6.0

Use the new go format.

ChangeLog: https://github.com/fabiolb/fabio/releases/tag/v1.6.0

PR:	263579
Reported by:	glz@hidden-powers.com
Approved by:	stl@ossuary.net (maintainer, timeout 2 weeks)
0bb5037ba1
Guangyuan Yang (ygy) · 1.5.14_1
*/*: Bump PORTREVISION after lang/go 1.18 update
d690b5102f
Mathieu Arnold (mat) · 1.5.14
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 1.5.14
Remove # $FreeBSD$ from Makefiles.
305f148f48
Rainer Hurling (rhurlin) · 1.5.14
www/fabio: Update to 1.5.14

The update from 1.5.9 to 1.5.14 brings many bug fixes, enhancements and some new features[1].

[1] https://github.com/fabiolb/fabio/releases/

PR:		249219
Submitted by:	Gian-Simon Purkert <gspurki@gmail.com>
Approved by:	tcberner (mentor), Scott Larson (maintainer timeout)
Differential Revision:	https://reviews.freebsd.org/D27105
6a8f252d5f
page 1 of 2older →oldest »