CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

x11-wm/fvwm3 1.1.5_6

F? Virtual Window Manager

2
unaddressed
0
VuXML only
0
fixed
1
open problem reports

Port info

Maintainer
nyan@FreeBSD.org
Packages
latest: 1.1.5_6
Upstream
up to date
Last update
to 1.1.5_6 · d81b7ba3c3
Quarterly
2026Q4: 1.1.5_6 · last MFH 60647eff54
WWW
https://www.fvwm.org/
Links
cgit · VuXML

Install

Package
# pkg install fvwm3
installs 1.1.5_6 from latest; from quarterly (2026Q4) 1.1.5_6
Port
# cd /usr/ports/x11-wm/fvwm3 && make install clean
# make -C /usr/ports/x11-wm/fvwm3 config  # change options first
Size
3.7 MiB download · 8.8 MiB installed
Depends on
converters/fribidi 1.0.17, converters/libiconv 1.18_1, devel/gettext-runtime 1.0_1, devel/libevent 2.1.13, graphics/png 1.6.59_1, lang/perl5.42 5.42.3, lang/python312 3.12.15, print/freetype2 2.14.3, x11-fonts/fontconfig 2.18.3,1, x11-fonts/libXft 2.3.9, x11-toolkits/libXt 1.3.1,1, x11/libICE 1.1.2,1, x11/libSM 1.2.6,1, x11/libX11 1.8.14,1, x11/libXcursor 1.2.3, x11/libXext 1.3.7,1, x11/libXfixes 6.0.2, x11/libXrandr 1.5.5, x11/libXrender 0.9.13, x11/libxkbcommon 1.13.2
License
GPLv2
Options
7 of 10 on in the package: FRIBIDI GO ICONV MANPAGES NLS PNG XCURSOR
Show the 3 options that are off
ICONS SVG XPM

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1.5_61.1.5_5–
FreeBSD 151.1.5_61.1.5_5–
FreeBSD 141.1.5_61.1.5_51.1.5_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1.5_61.1.5_5–
FreeBSD 141.1.5_61.1.5_51.1.5_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (2)

The CVE record lists the packaged version 1.1.5_6 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2006-59694.62006-11-17CRLF injection vulnerability in the evalFolderLine function in fvwm 2.5.18 and earlier allows local users to execute arbitrary commands via carriage returns in a directo…
CVE-2003-13084.62003-12-31CRLF injection vulnerability in fvwm-menu-directory for fvwm 2.5.x before 2.5.10 and 2.4.x before 2.4.18 allows local users to execute arbitrary commands via carriage re…

VuXML only (0)

Listed in VuXML, the packaged version 1.1.5_6 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
282779maintainer-feedback? x11-wm/fvwm3 remove x11-wm/nscdeOpen2025-10-15

Commits (68)

Dag-Erling Smørgrav (des) · 1.1.5_6 MFH 2026Q4 ✓
various: Bump Go ports for Go 1.26.10 / 1.27.3
d81b7ba3c3
Adam Weinberger (adamw) · 1.1.5_4
many: Bump go ports for 1.26.8 and 1.27.1
dd0905142a
Dag-Erling Smørgrav (des) · 1.1.5_3 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.14 / 1.26.7
4867821cd6
Dag-Erling Smørgrav (des) · 1.1.5_2 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.13 / 1.26.6
6d39dcf04e
Dag-Erling Smørgrav (des) · 1.1.5_1 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.12 / 1.26.5
4ea3547132
Yoshihiro Takahashi (nyan) · 1.1.5
x11-wm/fvwm3: Update to 1.1.5

Changes:	https://github.com/fvwmorg/fvwm3/releases/tag/1.1.5
9b2a13ab08
Dag-Erling Smørgrav (des) · 1.1.4_4
various: Bump go ports for go-1.25.11 / go-1.26.4
dd8dc2a59d
Adam Weinberger (adamw) · 1.1.4_3
various: Bump ports for Go 1.25.10
4e243a83f8
Dag-Erling Smørgrav (des) · 1.1.4_2
various: Bump go ports for go-1.25.9 / 1.26.2
7507e72a84
Adam Weinberger (adamw) · 1.1.4_1
various: Bump ports for Go 1.25.8
a8d318da7c
Yoshihiro Takahashi (nyan) · 1.1.4
x11-wm/fvwm3: Update to 1.1.4

- Migrate to meson.
- Restore GO option.
- Take maintainership.

Changes:
- https://github.com/fvwmorg/fvwm3/releases/tag/1.1.1
- https://github.com/fvwmorg/fvwm3/releases/tag/1.1.2
- https://github.com/fvwmorg/fvwm3/releases/tag/1.1.3
- https://github.com/fvwmorg/fvwm3/releases/tag/1.1.4

PR:		292149
Approved by:	vvd
c26dd29e05
Adam Weinberger (adamw) · 1.1.0_9
x11-wm/fvwm3: Remove GO option (depends on removed go1.23)

go1.23 has expired. Thankfully, fvwm3's go dependency was optional.
I've removed the GO option, adjusted the plist accordingly, and bumped
PORTREVISION.
439ccd87aa
Rene Ladan (rene) · 1.1.0_8
all: return ports of zirias@ to the pool after safekeeping their commit bit

Approved by:	portmgr (implicit)
1b25bcd52d
Adam Weinberger (adamw) · 1.1.0_8
go123 ports: Bump for 1.23.12
b6703954e3
Adam Weinberger (adamw) · 1.1.0_7
go: Bump ports for go124 update
a4e30d4f4f
Charlie Li (vishwin) · 1.1.0_6
gnome.mk: rename gdkpixbuf2 to gdkpixbuf to prepare for port move

The GTK 1-based gdk-pixbuf has not existed for some time.

No functional or package changes.
e87d8134a3
Adam Weinberger (adamw) · 1.1.0_6
Bump all go ports for yesterday's releases
d0642a6176
Ashish SHUKLA (ashish) · 1.1.0_5
all: Bump after lang/go121 update
aa8c0111bf
Ashish SHUKLA (ashish) · 1.1.0_4
all: Bump after lang/go121 update
c4b51c2028
Ashish SHUKLA (ashish) · 1.1.0_3
all: Bump after lang/go121 update

MFH:		2024Q2
746fa696a1
Ashish SHUKLA (ashish) · 1.1.0_2
all: Bump after lang/go121 update

MFH:		2024Q2
fce0cc3272
Ashish SHUKLA (ashish) · 1.1.0_1
all: Bump after lang/go121 update

MFH:		2024Q2
32b284679a
Felix Palmen (zirias) · 1.1.0
x11-wm/fvwm3: Update to 1.1.0

Changes: https://github.com/fvwmorg/fvwm3/releases/tag/1.1.0
7aa6d83301
Muhammad Moinur Rahman (bofh) · 1.0.9_2
lang/go: Change DEFAULT to 1.21

PR:		277776
Approved by:	portmgr (exp-run)
a5a000df3b
Yasuhiro Kimura (yasu) · 1.0.9_1
x11-wm/fvwm3: Move man pages to share/man

Approved by:	portmgr (blanket)
250d67d6ff
Felix Palmen (zirias) · 1.0.9
x11-wm/fvwm3: Update to 1.0.9

Changes: https://github.com/fvwmorg/fvwm3/releases/tag/1.0.9
c9d71f2d07
Felix Palmen (zirias) · 1.0.8_3
x11-wm/fvwm3: Add maximum go version

Respect DEFAULT_VERSIONS unless the selected go version is greater than
supported by the upstream configure script.

Reported by:	kostikbel@gmail.com
eb05293045
Ashish SHUKLA (ashish) · 1.0.8_3
all: Bump PORTREVISION after lang/go* update

PR:		276530
7e5aa2085f
Ashish SHUKLA (ashish) · 1.0.8_2
all: Bump PORTREVISION after lang/go* update

PR:		274405
0505b712df
Dmitri Goutnik (dmgk) · 1.0.8_1
all: Bump PORTREVISION after lang/go* update
8e4bc57934
Felix Palmen (zirias) · 1.0.8
x11-wm/fvwm3: Update to 1.0.8

New upstream release.
Changes: https://github.com/fvwmorg/fvwm3/releases/tag/1.0.8
c1482d334f
Felix Palmen (zirias) · 1.0.7_3
x11-wm/fvwm3: Use upstream .desktop file

After upstream accepted a simple .desktop file with a few changes, use
this one until the next upstream version is released.

The main difference is that it uses Type=Application instead of
Type=XSession. According to freedesktop.org specs, Type=XSession does
not exist. Both work fine with sddm, but it's still better to use the
one that conforms to the spec.

PR:		272836
b9aa3ea167
Felix Palmen (zirias) · 1.0.7_2
x11-wm/fvwm3: Add .desktop entry for XSession

Add a .desktop file of type XSession, so fvwm3 is discoverable for
display managers following freedesktop.org standards.

PR:		272836
Co-authored-by:	Bartek Jasicki <thindil@laeran.pl.eu.org>
d5f3357009
Felix Palmen (zirias) · 1.0.7_1
x11-wm/fvwm3: Fix "garbage" trailing window titles

Upstream issue: https://github.com/fvwmorg/fvwm3/issues/873

Add a local patch reverting the problematic commit for now.
3e35051e91
Felix Palmen (zirias) · 1.0.7
x11-wm/fvwm3: Fix librsvg2 dependency

For the SVG option, use USES=gnome to add the dependency to librsvg2,
enabling users to use the non-rust version setting DEFAULT_VERSIONS.
db6339cd9e
Felix Palmen (zirias) · 1.0.7
x11-wm/fvwm3: Update to 1.0.7

Changes: https://github.com/fvwmorg/fvwm3/releases/tag/1.0.7

Approved by:	tcberner (mentor, implicit)
382f8bf47e
Felix Palmen (zirias) · 1.0.6a_2
x11-wm/fvwm3: Improve formatting

Follow portclippy recommendations.

Approved by:	tcberner (mentor, implicit)
24404ce73d
Rene Ladan (rene) · 1.0.6a_2
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Dmitri Goutnik (dmgk) · 1.0.6a_2
all: Bump PORTREVISION after lang/go{119,120} update
ff40d94c1d
Dmitri Goutnik (dmgk) · 1.0.6a_1
all: Bump PORTREVISION after Go ports update
09079730e9
Felix Palmen (zirias) · 1.0.6a
x11-wm/fvwm3: Update to 1.0.6a

Also switch to PORTVERSION because 1.0.6a is actually newer than 1.0.6
and patch configure.ac to avoid pinning the go version and to drop the
compiler warning test that's incompatible with clang 15.

Changelog:
	https://github.com/fvwmorg/fvwm3/releases/tag/1.0.6
	https://github.com/fvwmorg/fvwm3/releases/tag/1.0.6a

Approved by:		tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D38695
e6a7a2d988
Felix Palmen (zirias) · 1.0.5_5
x11-wm/fvwm3: Fix build on -CURRENT

Add extra compiler flag for configure when building on -CURRENT after
import of llvm 15. Some warnings were promoted to errors, but the
configure script expects them to be warnings.

Approved by:		tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D38669
ee00fe7327
Dmitri Goutnik (dmgk) · 1.0.5_5
all: Bump PORTREVISION after lang/go{119,120} update
56b5ec772f
Dmitri Goutnik (dmgk) · 1.0.5_4
all: Bump PORTREVISION after GO_DEFAULT update.
2297efc51b
Dmitri Goutnik (dmgk) · 1.0.5_3
x11-wm/fvwm3: Pin Go version to 1.19

checking for go... go
checking whether go version is >= 1.14.x (1.20)... no - version is: 1.20

Configure script doesn't know about go1.20 yes, keep building this
port with go1.19 for now.

PR:             269289
Reported by:    exp-run
3e12079bd1
Dmitri Goutnik (dmgk) · 1.0.5_3
all: Bump PORTVERSION after lang/go{118,119} update
3b383d833a
Dmitri Goutnik (dmgk) · 1.0.5_2
all: Bump PORTREVISION after lang/go{118,119} update
d9ad1002d5
Dmitri Goutnik (dmgk) · 1.0.5_1
all: Bump PORTREVISION after lang/go{118,119} update
bde51869ee
Felix Palmen (zirias) · 1.0.5
x11-wm/fvwm3: Update to 1.0.5

Also switch from PORTVERSION to preferred DISTVERSION.

Changelog: https://github.com/fvwmorg/fvwm3/releases/tag/1.0.5

Approved by:		tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D36796
89f4f3f810
page 1 of 2older →oldest »