CVE and update status of the FreeBSD ports tree3,543 unaddressed CVEs in 709 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 898db4939a
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
CPE
not set in the port, and none could be determined — that does not mean none exists
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,355)

Niels Heinen (niels) · 1.1_1
Documented the following vulnerabilities: - png: libpng decompression denial of service - e107: code execution and XSS vulnerabilities - pidgin: multiple remote denial of service vulnerabilities - fetchmail: denial of service vulnerability

PR:		ports/145885
PR:		ports/145857
Approved by:	remko (secteam)
Security:	CVE-2010-0996
Security:	CVE-2010-0997
Security:	CVE-2010-1167
Security:	CVE-2010-0277
Security:	CVE-2010-0420
Security:	CVE-2010-0423
Security:	CVE-2010-0205
3d4109bb47
Niels Heinen (niels) · 1.1_1
Documented the following vulnerabilities: - curl: libcurl buffer overflow vulnerability - irssi: multiple vulnerabilities - ejabberd: queue overload denial of service vulnerability

Approved by:	remko (secteam)
Security:	http://curl.haxx.se/docs/adv_20100209.html
Security:	http://support.process-one.net/browse/EJAB-1173
Security:	http://xforce.iss.net/xforce/xfdb/57790
Security:	http://xforce.iss.net/xforce/xfdb/57791
a6899bdd1c
Niels Heinen (niels) · 1.1_1
- Added three krb5 vulnerabilities - Fixed indent on mahara entry - Fixed title of KDM entry

Approved by:	remko (secteam)
Security:	http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-001.txt
Security:	http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-002.txt
Security:	http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-003.txt
f5a502da05
Niels Heinen (niels) · 1.1_1
Document mahara sql injection vulnerability

Approved by:	remko (secteam)
Security:	http://www.debian.org/security/2010/dsa-2030
829d453ca4
Wesley Shields (wxs) · 1.1_1
Correct CVE entry. The advisory from Todd[0] says CVE 2010-0426, which is the entry assigned to the original sudoedit vulnerability[1]. The new one (CVE-2010-1163) was just assigned. I believe the one assigned by CVE folks is the proper one to use.

[0]: http://sudo.ws/sudo/alerts/sudoedit_escalate2.html
[1]: 018a84d0-2548-11df-b4a3-00e0815b8da8
bdc10870cc
Wesley Shields (wxs) · 1.1_1
- Document sudo privilege escalation bug. This is similar to   018a84d0-2548-11df-b4a3-00e0815b8da8.
a0381d77dc
Alberto Villa (avilla) · 1.1_1
- Do not match x11/kdebase4 in latest KDM vulnerability.

Approved by:	tabthorpe (mentor)
5b805f79e0
Alberto Villa (avilla) · 1.1_1
- Document KDM local privilege escalation vulnerability.

Approved by:	tabthorpe (mentor), delphij (secteam)
0e435ac5f8
Greg Larkin (glarkin) · 1.1_1
- Document dojo - cross-site scripting and other vulnerabilities - Document ZendFramework - security issues in bundled Dojo library

Approved by:	secteam (remko)
Security:	http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/
Security:	http://framework.zend.com/security/advisory/ZF2010-07
77b0ea314a
Beat Gaetzi (beat) · 1.1_1
- Document firefox -- Re-use of freed object due to scope confusion

Submitted by:	Florian Smeets <flo AT smeets.im>
Approved by:	miwi
f977ca1bcc
Beat Gaetzi (beat) · 1.1_1
- Document mozilla -- multiple vulnerabilities

Approved by:	delphij
59b38507d3
Xin LI (delphij) · 1.1_1
Document postgresql bitsubstr overflow vulnerability
deaff4938a
Christian Weisgerber (naddy) · 1.1_1
Document a buffer overflow in gtar's rmt client functionality.
25a2b64738
Beat Gaetzi (beat) · 1.1_1
- Document firefox -- WOFF heap corruption due to integer overflow

Approved by:	miwi
2d396eb517
Niels Heinen (niels) · 1.1_1
Updated the xzgv entry: 0.9 version (now in portstree) is not vulnerable

Approved by:	itetcu (mentor), miwi (secteam)
Security:	http://www.vuxml.org/freebsd/a813a219-d2d4-11da-a672-000e0c2e438a.html
Security:	http://www.gentoo.org/security/en/glsa/glsa-200604-10.xml
3622f594f7
Martin Wilke (miwi) · 1.1_1
- Fix build
00cd9cf629
Beat Gaetzi (beat) · 1.1_1
- Document mozilla -- multiple vulnerabilities - Fix a typo

Approved by:	miwi
16fd879141
Xin LI (delphij) · 1.1_1
Document eGroupware vulnerabilities.

Submitted by:	wenheping
93d156ee68
Martin Wilke (miwi) · 1.1_1
- Document drupal -- multiple vulnerabilities

Feature safe:	yep
9a245c731e
Wesley Shields (wxs) · 1.1_1
- Document sudo privilege escalation vulnerability when using   pseudo-command sudoedit

Feature safe:	yes
5a3c012a8e
Juergen Lock (nox) · 1.1_1
Attempt to properly take care of the ooo3 -RC and -devel ports too (doh!)

Feature safe:	yes
89d66179ae
Beat Gaetzi (beat) · 1.1_1
- Document thunderbird3 vulnerabilities

Approved by:	miwi
Feature safe:	yes
313b31226f
Juergen Lock (nox) · 1.1_1
Document openoffice -- multiple vulnerabilities

Reviewed by:	delphij
Feature safe:	yes
9dd97217c1
Beat Gaetzi (beat) · 1.1_1
- Document mozilla -- multiple vulnerabilities

Approved by:	miwi (secteam)
Feature safe:	yes
6f1c956210
Xin LI (delphij) · 1.1_1
Document lighttpd remote DoS vulnerability.

Reported by:	Dan Rowe <dan dracosplace com>
Feature safe:	yes
243b0c17bd
Xin LI (delphij) · 1.1_1
Update www/squid and www/squid30 to address Squid HTCP Packet Processing NULL Pointer Dereference vulnerability (SQUID-2010:2)
c0cd5f4cb7
Juergen Lock (nox) · 1.1_1
Document linux-flashplugin -- multiple vulnerabilities.

Reviewed by:	miwi
d32b361180
Koop Mast (kwm) · 1.1_1
Add CVE-2010-0414 and CVE-2010-0422 for gnome-screensaver.

Reviewed by:	miwi@
7863e0ed46
Matthias Andree (mandree) · 1.1_1
Fix range for fetchmail CVE-2010-0562.

Approved by: miwi@ (mentor)
a407838a4a
Matthias Andree (mandree) · 1.1_1
Add CVE-2010-0562 entry for mail/fetchmail.

Approved by: miwi (mentor).
1f8469eb74
Xin LI (delphij) · 1.1_1
Document wireshark lwres buffer overflow vulnerability.

Reported by:	Andreas <akoga hawaii edu>
67b519607f
Sergey Skvortsov (skv) · 1.1_1
Document "otrs" - SQL injection.
0b28a8c81d
Philip M. Gollucci (pgollucci) · 1.1_1
- add the rest of the apache 1.3.x packages to the list   that are vulnerable - add a missing ) to the <topic>

Reviewed by:    secteam (miwi)
6aab048e19
Philip M. Gollucci (pgollucci) · 1.1_1
- document chunk-size integer overflow in apache 1.3.x
78c91cdd42
Philip M. Gollucci (pgollucci) · 1.1_1
- remove extraneou '>' as reported by make tidy
9c50c97fbf
Martin Wilke (miwi) · 1.1_1
- Mark squid30 now as safe
a791427746
Martin Wilke (miwi) · 1.1_1
- Update 296ecb59-0f6b-11df-8bab-0019996bc1f7 entry and makr squid3* as safe
fed8e34a32
Xin LI (delphij) · 1.1_1
Security patch for Squid advisory 2010:1, denial of service.

Submitted by:	maintainer (Thomas-Martin Seck <tmseck web de>)
3f1f30c23c
Sergey Skvortsov (skv) · 1.1_1
Document "bugzilla" - information leak.
4ee742862e
Martin Wilke (miwi) · 1.1_1
- Correct fixed version from previous entry
597d70d77d
Martin Wilke (miwi) · 1.1_1
- Document irc-ratbox -- multiple vulnerabilities

PR:		based on 143242
Submitted by:	moggie <moggie@elasticmind.net>
495411b4c8
Beat Gaetzi (beat) · 1.1_1
- Document thunderbird3 vulnerabilities

Reviewed by:	miwi
2d3f6bd72d
Xin LI (delphij) · 1.1_1
Document dokuwiki multiple vulnerabilities.
2d21d78568
Greg Larkin (glarkin) · 1.1_1
- Added entry for multiple vulnerabilities in www/zend-framework - Cleaned up some entries reported by "make tidy"

Reviewed by:	secteam (delphij via email)
Approved by:	secteam (delphij via email)
Security:	http://framework.zend.com/security/advisory/ZF2010-06
Security:	http://framework.zend.com/security/advisory/ZF2010-05
Security:	http://framework.zend.com/security/advisory/ZF2010-04
Security:	http://framework.zend.com/security/advisory/ZF2010-03
Security:	http://framework.zend.com/security/advisory/ZF2010-02
Security:	http://framework.zend.com/security/advisory/ZF2010-01
Security:	http://framework.zend.com/security/advisory/ZF2009-02
Security:	http://framework.zend.com/security/advisory/ZF2009-01
086e1bda20
Xin LI (delphij) · 1.1_1
Document powerdns-recursor multiple vulnerabilities.
366f194498
Xin LI (delphij) · 1.1_1
Document pear-Net_Ping and pear-Net_Traceroute arbitrary command execution vulnerability.
dfc493a5f9
Erwin Lansing (erwin) · 1.1_1
Bump copyright year to 2010
70b09580a8
Martin Wilke (miwi) · 1.1_1
- Document drupal -- multiple cross-site scripting
b913c0d2d8
Stanislav Sedov (stas) · 1.1_1
- Document sysutils/fuser privileges check vulnerability.
17bb5918e7
Xin LI (delphij) · 1.1_1
Document monkey remote DoS vulnerability.
cfedebfd03
« newest← newerpage 125 of 168older →oldest »