CVE and update status of the FreeBSD ports tree3,611 unaddressed CVEs in 730 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · d30441ad3d
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
CPE
not set in the port, and none could be determined, and that does not mean none exists
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,359)

Rene Ladan (rene) · 1.1_1
Describe new vulnerabilities in www/chromium < 34.0.1847.137

Obtained from:	http://googlechromereleases.blogspot.nl/
MFH:		2014Q2
7f20b6f407
Koop Mast (kwm) · 1.1_1
Record libXfont X Font Service Protocol and Font metadata file handling issues

MFH:	2014Q2
3b14ada334
Akinori MUSHA (knu) · 1.1_1
Document CVE-2013-2877 which affects textproc/libxml2.
eab7bf5544
Akinori MUSHA (knu) · 1.1_1
Summary: Oops, the current version is affected, hence <le/> instead of <lt/>.
60b7abaa65
Akinori MUSHA (knu) · 1.1_1
Summary: Fix a typo copied from the original report.
4f1a7e64a1
Akinori MUSHA (knu) · 1.1_1
Document CVE-2014-0191 which affects textproc/libxml2.
ecc5c37282
Dirk Meyer (dinoex) · 1.1_1
Document OpenSSL vulnerability Security: CVE-2014-0198
cff4d7470f
Raphael Kubo da Costa (rakuco) · 1.1_1
Document qt4-xml vulnerability (CVE-2013-4549).
c037926bb6
Ryan Steinmetz (zi) · 1.1_1
- Document strongSwan vulnerability (CVE-2014-2338) - Add additional reminder to document port variants
9cd9c7dccc
Olli Hauer (ohauer) · 1.1_1
- fix some entries so they are really detected   by old and new pkg audit tools

Approved by:	portmgr (bdrewery)
abf9b91e0e
Frederic Culot (culot) · 1.1_1
- Document vulnerabilities in www/mohawk

PR:		ports/189082
Submitted by:	mohawk <mohawk@bsdsx.fr>
d0e36dd4c6
Rene Ladan (rene) · 1.1_1
Document new vulnerabilities in www/chromium < 34.0.1847.132

Obtained from:	http://googlechromereleases.blogspot.nl/
1ec8f77e41
Beat Gaetzi (beat) · 1.1_1
Document mozilla vulnerabilities
bf9a9c511b
Li-Wen Hsu (lwhsu) · 1.1_1
Add back pakcage ranges for people have ancient packages

Notified by:	mat
218bcd8aca
Li-Wen Hsu (lwhsu) · 1.1_1
Fix Django package names

Submitted by:	mat
d70a23491d
Li-Wen Hsu (lwhsu) · 1.1_1
Document Django 2014-04-21 vulnerabilty
b6557362ac
Bryan Drewery (bdrewery) · 1.1_1
- This is not really a quote, I summarized it myself.
b979ba81fe
Bryan Drewery (bdrewery) · 1.1_1
- Document OpenSSL CVE-2010-5298
b81b2bc341
Olli Hauer (ohauer) · 1.1_1
- fix entries so issues for bugzilla40/42 are detected   first version found only bugzilla44 issues (tested with pkg audit)
2ce0f0829a
Olli Hauer (ohauer) · 1.1_1
- document bugzilla issues

CVE-2014-1517 is fixed in bugzilla-4.4.3
  therefore use two vuxml entries.
814853fbe7
Steve Wills (swills) · 1.1_1
- Add multiple missing entries

PR:		ports/188512
Submitted by:	Pawel Biernacki <pawel.biernacki@gmail.com>
aa0a7fed8e
Rene Ladan (rene) · 1.1_1
Fix typo.

Submitted by:	matthew@
d07b77f333
Rene Ladan (rene) · 1.1_1
Mention a vulnerability in japanese/chasen* which exists since 2011-11-08

Obtained from:	http://jvn.jp/en/jp/JVN16901583/index.html
3c2a4e164a
Ryan Steinmetz (zi) · 1.1_1
- Correct version ranges for 7ccd4def-c1be-11e3-9d09-000c2980a9f3/5631ae98-be9e-11e3-b5e3-c80aa9043978

Reported by:	Tim Zingelman <tez@netbsd.org>
81666729dc
Ryan Steinmetz (zi) · 1.1_1
- Move CVE-2014-0076 to its own entry+add FreeBSD system information as the affected list does not 100% line up with the vulnerability described in CVE-2014-0160/5631ae98-be9e-11e3-b5e3-c80aa9043978
265340fc86
Ryan Steinmetz (zi) · 1.1_1
- Note FreeBSD system vulnerability information for 5631ae98-be9e-11e3-b5e3-c80aa9043978
835c450a45
Bryan Drewery (bdrewery) · 1.1_1
- Mark linux-f10-openssl vulnerabilities

Reported by:	frogs on freenode
dc43860dcd
Ryan Steinmetz (zi) · 1.1_1
- Document recent vulnerability in net/openafs (CVE-2014-0159)
34a687e3a4
Rene Ladan (rene) · 1.1_1
Document new vulnerabilities in www/chromium < 34.0.1847.116

Obtained from:	http://googlechromereleases.blogspot.nl/
MFH:		2014Q2
0f45ae88e7
Akinori MUSHA (knu) · 1.1_1
Add mingw32-openssl.
530606e64f
Bryan Drewery (bdrewery) · 1.1_1
Add more information for OpenSSL bug
d7cc8f7f00
Bryan Drewery (bdrewery) · 1.1_1
- Sort references - Add link to heartbleed.com that has a lot of useful information
504c95912c
Bryan Drewery (bdrewery) · 1.1_1
- Document Openssl vulnerabilities

Security:	CVE-2014-0160
Security:	CVE-2014-0076
Security:	https://www.openssl.org/news/secadv_20140407.txt
MFH:		2014Q2
97c2718874
Carlo Strub (cs) · 1.1_1
New OTRS vulnerability

Security:	CVE-2014-2554
d790444307
Akinori MUSHA (knu) · 1.1_1
Add CVE-2014-2525 which affects libyaml.
c4b09c24f1
Alex Dupre (ale) · 1.1_1
Fix all mod_php entries. Please don't use the range <range><ge>0</ge></range>.
2d2a20b90e
Lars Engels (lme) · 1.1_1
Add an entry for CVE-2014-2386
45e8cac944
Brendan Fabeny (bf) · 1.1_1
Add an entry for CVE-2014-2270, and correct the indentation in the entry for CVE-2014-1943
8fbf37ec53
Alex Dupre (ale) · 1.1_1
Fix mod_php5 entry.
b175cf634e
Matthias Andree (mandree) · 1.1_1
Sort reference entries in 36f9ac43-b2ac-11e3-8752-080027ef73ec mail/trojita information leak.

This should really be in the DTD or at least "make validate" if it's
official requirement...

Submitted by:	remko
7b74753e36
Nicola Vitale (nivit) · 1.1_1
- Document multiple vulnerabilities for Joomla! 2 and Joomla! 3
bf7e1b295c
Matthias Andree (mandree) · 1.1_1
Add an entry for trojita mail leak across unencrypted connections (CVE-2014-2567). Port update in PR#187370, pending commit. MFH: yes
f066a86cf3
Sergey A. Osokin (osa) · 1.1_1
Split nginx and nginx-devel entries, update date.
a90a8a3efa
Sergey A. Osokin (osa) · 1.1_1
Add CVE-2014-0133 entries for www/nginx and www/nginx-devel.
788cc9b5f8
Olli Hauer (ohauer) · 1.1_1
- document apache22 /apache24   CVE-2014-0098, CVE-2013-6438

Please Note:
 apache-2.2.27 is not released until now,
 but this is exoected during the next days.
b51ced9eaf
Beat Gaetzi (beat) · 1.1_1
Attempt to fix latest mozilla entry for firefox-esr

Reported by:	plukky on #bsdports
89355dd681
Beat Gaetzi (beat) · 1.1_1
Document mozilla vulnerabilities
db646b79a8
Rene Ladan (rene) · 1.1_1
Document new vulnerabilities in www/chromium < 33.0.1750.152

Obtained from:	http://googlechromereleases.blogspot.nl/
MFH:		2014Q1
757962b396
Simon L. B. Nielsen (simon) · 1.1_1
Update (c) year to be 2014.

PS. all rumors that this commit is to shup up the grim reaper are wildly
exagurated.
a60ad706de
Ryan Steinmetz (zi) · 1.1_1
- Fix ordering
4ad5cbdbd4