CVE and update status of the FreeBSD ports tree3,532 unaddressed CVEs in 701 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 4fa1ce71cd
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
CPE
not set in the port, and none could be determined — that does not mean none exists
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,350)

Martin Wilke (miwi) · 1.1_1
- Document phpmyadmin -- Code execution vulnerability

Approved by:	portmgr (secteam blanked)
73b5662391
Martin Wilke (miwi) · 1.1_1
- Fix previous commit

Approved by:	portmgr (secteam blanked)
79f27418cc
Greg Larkin (glarkin) · 1.1_1
- Mark www/twiki FORBIDDEN due to security exploit

Approved by:	beech (mentor, implicit)
Approved by:	portmgr (pav)
Security:	http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-3195
903bc40e2f
Martin Wilke (miwi) · 1.1_1
- corrects the bid number from me previous commit

Approved by:	portmgr (secteam blanked)
af55c84b56
Martin Wilke (miwi) · 1.1_1
- Document neon -- NULL pointer dereference in Digest domain support

Approved by:	portmgr (secteam blanked)
6e39f69a6f
Xin LI (delphij) · 1.1_1
Document clamav CHM parser DoS issue.

Approved by:	portmgr (vuxml blanket)
80b5f0be4e
Martin Wilke (miwi) · 1.1_1
- Document horde -- multiple vulnerabilities

Approved by:	portmgr (secteam blanked)
6fe8f381c0
Martin Wilke (miwi) · 1.1_1
- Document python -- multiple vulnerabilities

Reviewed by:	remko/tabthorpe
Approved by:	portmgr (secteam blanked)
f3cdc317d3
Martin Wilke (miwi) · 1.1_1
- Mark www/wordpress and german/wordpress as safe

Approved by:	portmgr (secteam approved: remko, blanket vuxml)
5f948e478e
Stanislav Sedov (stas) · 1.1_1
- Document wordpress, rails and mysql vulnerabilties.

Reviewed by:	remko
Approved by:	portmgr (secteam approved: remko, blanket vuxml)
2ddefc97cd
Brad Davis (brd) · 1.1_1
Extend the Nagios entry to cover Nagios 3.x < 3.0.2. This covers the edge case of `portupgrade -o net-mgmt/nagios-devel nagios'.

Approved by:	portmgr (simon@ using secteam blanket)
7a1bb458a8
Remko Lodder (remko) · 1.1_1
Add FreeBSD-SA-08:09.icmp6
57b2a4922e
Remko Lodder (remko) · 1.1_1
Add FreeBSD-SA-08:08.nmount
18f3496772
Remko Lodder (remko) · 1.1_1
Add FreeBSD-SA-08:07.amd64.

Hat:	secteam
1098a74bda
Alex Dupre (ale) · 1.1_1
Update for php5 safe_mode fix.
a0d9ed6a84
Simon L. B. Nielsen (simon) · 1.1_1
Fix XML in openvpn-devel entry: &ndash; was used but as vuln.xml does not import HTML named entities this is not allowed - use &#x2013; instead which produces the same end result.
df60069c82
Martin Wilke (miwi) · 1.1_1
- Document opera -- multiple vulnerabilities
4e4e174b8d
Marcus Alves Grando (mnag) · 1.1_1
gnutls -- "gnutls_handshake()" Denial of Service
4ddf4a9977
Xin LI (delphij) · 1.1_1
Use joomla15 as name for the vulnerability
a2d52247bf
Xin LI (delphij) · 1.1_1
Document joomla flaw in the reset token validation
58a535e7f9
Thierry Thomas (thierry) · 1.1_1
Register a Buffer Overflow Vulnerability in CDF 3.2.
eebb128e5d
Martin Wilke (miwi) · 1.1_1
- Clean up whitespace a bit - Wrap long lines where appropriate - Fix previous commit
d2c17f67f5
Martin Wilke (miwi) · 1.1_1
- Fix drupal5 version
5798dcee89
Martin Wilke (miwi) · 1.1_1
- Document drupal - multiple vulnerabilities
25ffb89ba7
Stanislav Sedov (stas) · 1.1_1
- Document recent ruby vulnerabilities.
a3a2994647
Martin Wilke (miwi) · 1.1_1
- fix make validate

Pointy hat to:	skv
308c310ee9
Martin Wilke (miwi) · 1.1_1
- Fix previous commit.
76feecab0d
Sergey Skvortsov (skv) · 1.1_1
Document bugzilla directory traversal vulnerability.
e5d68d78ab
Martin Wilke (miwi) · 1.1_1
- Document openvpn-devel -- arbitrary code execution

PR:		126352 (based on)
Submitted by:	Matthias Andree <matthias.andree@gmx.de>
3393ef0fec
Martin Wilke (miwi) · 1.1_1
- Fix kdewebdev conflict with upcommig kdewebdev4

Reviewed by:	simon
f5be21a894
Sergey Skvortsov (skv) · 1.1_1
Fix vuxml-entries for 'devel/bugzilla*'.
cf1d963f86
Martin Wilke (miwi) · 1.1_1
- Fix portversion
90ab954772
Martin Wilke (miwi) · 1.1_1
- Document phpmyadmin -- cross site request forgery vulnerabilites
97e568cf10
Martin Wilke (miwi) · 1.1_1
- Document drupal - multiple vulnerabilities
9ebe00ef3f
Remko Lodder (remko) · 1.1_1
Add the latest security advisory to vuxml.

Hat:	secteam
5a92f290b8
Christian Weisgerber (naddy) · 1.1_1
Document poppler -- uninitialized pointer.
fe8aa0c0f3
Thomas Abthorpe (tabthorpe) · 1.1_1
- Document py-pylons -- Path traversal bug
6bbeedc174
Thomas Abthorpe (tabthorpe) · 1.1_1
- Document FreeType 2 -- Multiple Vulnerabilities

PR:		ports/124917
Submitted by:	Nick Barkas <snb threerings.net>
011fa5e5d4
Simon Barner (barner) · 1.1_1
Document revised patch for CVE-2008-2711.
781cb19f44
Martin Wilke (miwi) · 1.1_1
- Document phpmyadmin - Cross Site Scripting Vulnerability

PR:		124900
ede2a8483b
Xin LI (delphij) · 1.1_1
Update squid SNMP DoS vulnerability to cover squid 3.0STABLE6 as well.

Submitted by:	Thomas-Martin Seck <tmseck web de>
361a9e0ff2
Thomas Abthorpe (tabthorpe) · 1.1_1
- Document apache -- multiple vulnerabilities

Reviewed by:	delphij
184b3631bd
Stanislav Sedov (stas) · 1.1_1
- Add missing <code></code> block around safe_mode.

Pointy hat to:	me
c1187dd103
Stanislav Sedov (stas) · 1.1_1
- Add a note to php-posix entry, that   safe_mode is considred to be insecure   by FreeBSD Security Team. - Add <code> blocks around function   names.

Suggested by:	simon
aafe20bfda
Stanislav Sedov (stas) · 1.1_1
- Document php5-posix directory traversal vulnerability.
8dba476dda
Jeremy Messenger (mezz) · 1.1_1
Fix the Firefox 3 part, it has no multiple vulnerabilities.

Reviewed by:	remko
195f98320d
Thomas Abthorpe (tabthorpe) · 1.1_1
- Document vim -- Vim Shell Command Injection Vulnerabilities

Reviewed by:	remko, miwi
10c0f9c43d
Stanislav Sedov (stas) · 1.1_1
- Document recent ruby vulnerabilities.
9b9c2f302b
Martin Wilke (miwi) · 1.1_1
- Clean up whitespace a bit - Wrap long lines where appropriate

Reviewed by:	remko
76f29b272e
Simon Barner (barner) · 1.1_1
Document potiential crash in fetchmail < 6.3.8_6 (in -v -v verbose mode).
704c17a34c