CVE and update status of the FreeBSD ports tree3,532 unaddressed CVEs in 701 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 4fa1ce71cd
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
CPE
not set in the port, and none could be determined — that does not mean none exists
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,350)

Simon L. B. Nielsen (simon) · 1.1_1
Unbreak VuXML.org build: Use correct syntax for CVE name in latest moinmoin entry.
2a3351624f
Florent Thoumie (flz) · 1.1_1
Document xorg -- multiple vulnerabilities.
51feb227dd
Thomas Abthorpe (tabthorpe) · 1.1_1
- Document moinmoin -- superuser privilege escalation

Notified by:	Janos Mohacsi
91ae8cd862
Oliver Lehmann (oliver) · 1.1_1
add an error about courier-authlib < 0.60.6
db76ce3a68
Hiroki Sato (hrs) · 1.1_1
Fix 2747fc39-915b-11dc-9239-001c2514716c.  zh-xpdf, ja-xpdf, and ko-xpdf have nothing to do with "multiple remote Stream.CC vulnerabilities" because they are packages which just install additional data files.
daf487572d
Henrik Brix Andersen (brix) · 1.1_1
Add entry for www/ikiwiki.

Approved by:	erwin (mentor, implicit)
a07b58883a
Henrik Brix Andersen (brix) · 1.1_1
Avoid confusion about backported www/ikiwiki security fix by not mentioning version 2.48 in the entry.

Approved by:	erwin (mentor, implicit)
8a578933ef
Henrik Brix Andersen (brix) · 1.1_1
Add www/ikiwiki entry.

Approved by:	erwin (mentor, implicit)
a8dc197c39
Thomas Abthorpe (tabthorpe) · 1.1_1
- Fix range on previous commit

Noticed by:	miwi
160e81f5fc
Thomas Abthorpe (tabthorpe) · 1.1_1
- Document linux-flashplugin -- unspecified remote code execution   vulnerability
b7dc8557c1
Wesley Shields (wxs) · 1.1_1
Document XSS vulnerabilities in nagios and nagios-devel.

PR:		ports/123893 ports/123894
Submitted by:	Jarrod Sayers <jarrod@netleader.com.au> (maintainer)
Reviewed by:	miwi
Approved by:	garga (mentor, implicit)
58396abc28
Wesley Shields (wxs) · 1.1_1
Document spamdyke open relay vulnerability.

PR:		ports/124013
Reviewed by:	miwi
Approved by:	garga (mentor), miwi
5a5da3c17b
Philippe Audeoud (jadawin) · 1.1_1
- Add net-p2p/peercast entry.

Reviewed by:	miwi
Approved by:	mentor (implicit)
86d3a03abc
Christian Weisgerber (naddy) · 1.1_1
Document libvorbis security issues.
52c3b2b850
Xin LI (delphij) · 1.1_1
Document django XSS vulnerability.
ff4ed9a36a
Christian Weisgerber (naddy) · 1.1_1
Document vorbis-tools Speex header processing vulnerability.
3e1e09dbcb
Juergen Lock (nox) · 1.1_1
Document qemu -- "drive_init()" Disk Format Security Bypass
24a6e437cd
Martin Wilke (miwi) · 1.1_1
- Sort previous commit
640ee660ee
Henrik Brix Andersen (brix) · 1.1_1
Add graphics/swfdec entry.

Approved by:	erwin (mentor)
9f97971a8a
Andrew Pantyukhin (sat) · 1.1_1
- Thunderbird 2.0.0.14 is safe
929cd0b838
Martin Wilke (miwi) · 1.1_1
- Document mt-daapd -- Integer overflow

PR:		123285 (based on)
Submitted by:	Mark D. Foster <mark@foster.cc>
1434ec9333
Martin Wilke (miwi) · 1.1_1
- Document sdl_image - Buffer Overflow Vulnerabilities
16fb04f443
Martin Wilke (miwi) · 1.1_1
- Mark PHP5 as safe
103dfefe4e
Martin Wilke (miwi) · 1.1_1
- Mark graphics/png as safe.
e4145f6730
Martin Wilke (miwi) · 1.1_1
- Fix last gnupg entry.

PR:		123178 [1]
Submitted by:	Nick Barkas (via privat mail)
		bf <bf2006a@yahoo.com> [1]
fcc12cf0f1
Andrew Pantyukhin (sat) · 1.1_1
- Clean up whitespace a bit - Wrap long lines where appropriate - Add a vim-friendly modeline
999eafaca5
Andrew Pantyukhin (sat) · 1.1_1
- A new Firefox vulnerability currently affects 10 of our ports, on   average. A new VuXML entry usually forgets about 8 of them.

Wiki:		http://wiki.freebsd.org/VuXML
fd3d40ffec
Martin Wilke (miwi) · 1.1_1
- Update last python entry python23 and python24 also affected

PR:		123153
Submitted by:	Nick Barkas <snb@threerings.net>
17e7e0c3c0
Martin Wilke (miwi) · 1.1_1
- Mark gnupg and gnupg1 as secure
5ea72e5b65
Martin Wilke (miwi) · 1.1_1
- Document gnupg -- memory corruption vulnerability
05a511170b
Xin LI (delphij) · 1.1_1
Document extman password bypass vulnerability.
ee5de21040
Martin Wilke (miwi) · 1.1_1
- Document mailman -- script insertion vulnerability.

Submitted by:	tabthorpe (one a month ago)
Discussed/Reviewed by:	tabthorpe
7287fa20cd
Martin Wilke (miwi) · 1.1_1
- now really fix the CVE entry
065b0ab837
Martin Wilke (miwi) · 1.1_1
- Fix CVE entry from the previous commit
d519991ade
Martin Wilke (miwi) · 1.1_1
- Document mksh -- TTY Attachment Privilege Escalation.
30cf7f63e1
Martin Wilke (miwi) · 1.1_1
- Document serendipity -- multiple cross site scripting vulnerabilities.
0b1d186edf
Martin Wilke (miwi) · 1.1_1
- Document firefox -- javascript harbage collector vulnerability.
8aac63eb03
Martin Wilke (miwi) · 1.1_1
- Add missing - in the previous entry
e15cfd35f1
Martin Wilke (miwi) · 1.1_1
- Remove whitespaces - Fix spelling
a99b0385cd
Martin Wilke (miwi) · 1.1_1
- Document png - unknown chunk processing uninitialized memory access
c7a13d2dbf
Martin Wilke (miwi) · 1.1_1
- Document openfire - unspecified denial of service

PR:		122872 (based on)
c1f21a2302
Martin Wilke (miwi) · 1.1_1
- Document php -- Integer Overflow Vulnerability

PR:		based on 122872
16d70b28c7
Martin Wilke (miwi) · 1.1_1
- Document python -- Integer Signedness Error in zlib Module
0af08ff3dd
Martin Wilke (miwi) · 1.1_1
Document postgresql -- multiple vulnerabilities

PR:		120133 (basic on)
Submitted by:	Nick Barkas <snb@threerings.net>
3b4446e69a
Martin Wilke (miwi) · 1.1_1
- Document phpMyAdmin - Shared Host Information Disclosure.
bba9a8c558
Martin Wilke (miwi) · 1.1_1
- Document phpMyAdmin - Username/Password Session File Information Disclosure.
c31f8fec8a
Thomas Abthorpe (tabthorpe) · 1.1_1
- Document libxine -- array index vulnerability

Reviewed by:	remko, miwi
e4b40c2d94
Renato Botelho (garga) · 1.1_1
Add an entry about clamav < 0.93 vulnerabilities

Reviewed by:	mnag
735ee62dc6
Marcus Alves Grando (mnag) · 1.1_1
lighttpd -- OpenSSL Error Queue Denial of Service Vulnerability
e896cb4b89
Henrik Brix Andersen (brix) · 1.1_1
Add www/ikiwiki entry.

Approved by:	pav (co-mentor)
93305f716d