CVE and update status of the FreeBSD ports tree3,532 unaddressed CVEs in 701 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 4fa1ce71cd
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
CPE
not set in the port, and none could be determined — that does not mean none exists
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,350)

Martin Wilke (miwi) · 1.1_1
- Fix <name> sections from both previous committs
e84d40a80f
Martin Wilke (miwi) · 1.1_1
- Fix previous commit   - Mark geeklog as safe   - add cve

Reviewed by:	remko
b546274e69
Thomas Abthorpe (tabthorpe) · 1.1_1
- Document XSS vulnerability in geeklog 1.4.0

Reviewed by:	remko
8e4d764831
Stanislav Sedov (stas) · 1.1_1
- This vulnerability exists in PHP versions prior to 4.4.8, not   after. Fix the entry.

Reported by:	Vadim Goncharov <vadimnuclight@tpu.ru>
c18d246c2b
Simon L. B. Nielsen (simon) · 1.1_1
Document multiple drupal issues.

Submitted by:	Nick Hilliard <nick@foobar.org>
8b55480fba
Martin Wilke (miwi) · 1.1_1
- Document maradns -- CNAME record resource rotation denial of service

PR:		ports/119471 (based on)
Submitted by:	Mark D. Foster <mark@foster.cc>
Reviewed by:	simon
330ef0277f
Martin Wilke (miwi) · 1.1_1
- Mark security/lsh as safe
d388432aa6
Xin LI (delphij) · 1.1_1
Update php multiple vulnerability entry: revalent bugs were fixed in PHP 4.4.8.
02867f56fd
Marcus Alves Grando (mnag) · 1.1_1
- Fix linux-realplayer new version
dc4e92c2d9
Marcus Alves Grando (mnag) · 1.1_1
- Fix range for linux-flahsplugin
5f7ffae9ab
Marcus Alves Grando (mnag) · 1.1_1
- linux-realplayer -- multiple vulnerabilities
9b875f47fd
Marcus Alves Grando (mnag) · 1.1_1
- linux-flashplugin -- multiple vulnerabilities
df76860b05
Martin Wilke (miwi) · 1.1_1
- Fix the last tcl/tk entry for portaudit.

Submitted by:	mm@
Reviewed by:	simon
4e858bcd7e
Xin LI (delphij) · 1.1_1
Document dovecot specific LDAP + auth cache configuration may mix up user logins vulnerability
d56109a32d
Simon L. B. Nielsen (simon) · 1.1_1
Add more references to latest opera entry.
9e19965535
Simon L. B. Nielsen (simon) · 1.1_1
Make "gallery2 -- multiple vulnerabilities" follow the normal format for VuXML entries.
b2e25aed38
Beech Rintoul (beech) · 1.1_1
- Document gallery2 -- multiple vulnerabilities

Submitted by:	Alex Varju <freebsd-ports@varju.ca> (maintainer)
Approved by:	linimon (mentor)
615fd6a29f
Simon L. B. Nielsen (simon) · 1.1_1
Update list if CVE names for latest wireshark entry.
bb854bcd10
Martin Wilke (miwi) · 1.1_1
- Document e2fsprogs -- heap buffer overflow

PR:		118848 (based on)
Submitted by:	Matthias Andree <matthias.andree@gmx.de>
Reviewed by:	remko
4c86472fef
Simon L. B. Nielsen (simon) · 1.1_1
Document wireshark -- multiple vulnerabilities.
19a8a2ec33
Simon L. B. Nielsen (simon) · 1.1_1
Document opera -- multiple vulnerabilities.
f370aebb06
Simon L. B. Nielsen (simon) · 1.1_1
Document peercast -- buffer overflow vulnerability.
1fe23a4e9f
Simon L. B. Nielsen (simon) · 1.1_1
Unbreak vuln.xml: & -> &amp;

Pointy hat to:	brooks
b2a8ca2d6b
Brooks Davis (brooks) · 1.1_1
Upgrade to Ganglia 3.0.6.

Release 3.0.5 contained minor bug fixes.  3.0.6 corrects XSS
vulnerabilities in the webfrontend.

Security:	 vid:fee7e059-acec-11dc-807f-001b246e4fdf
3f79b7d142
Remko Lodder (remko) · 1.1_1
Sort references section for last commit.
74318b0959
Andrew Pantyukhin (sat) · 1.1_1
- Mark latest linux-firefox/seamonkey-devel snapshots as safe - Add (linux-)flock and linux-*-devel to latest firefox advisory - Note that the tradition of covering more gecko ports with   firefox-related advisories should probably be kept up
bf47b1ab7d
Juergen Lock (nox) · 1.1_1
Document qemu -- Translation Block Local Denial of Service Vulnerability
4eb930d661
Remko Lodder (remko) · 1.1_1
Document drupal -- SQL injection vulnerability

Submitted by:	Nick Hilliard <nick at netability dot ie>
120e3e0e05
Remko Lodder (remko) · 1.1_1
Document samba -- buffer overflow vulnerability.
55420bc1fe
Remko Lodder (remko) · 1.1_1
Remove redundant "A" in the latest entry
a5079d699d
Martin Wilke (miwi) · 1.1_1
- Fix previous commit    - Sorting    - more referencs
cf6d47a08b
Beech Rintoul (beech) · 1.1_1
- Missed a section - smbftpd

Pointyhat to: Self
3bdbad04a9
Beech Rintoul (beech) · 1.1_1
- Document smbftpd - format string vulnerability.

Requested by:	linimon
Approved by:	linimon (mentor)
ef56eeec23
Remko Lodder (remko) · 1.1_1
Document jetty - multiple vulnerabilities

PR:		ports/118524
Submitted by:	Nick Barkas <snb at threerings dot net>
		with minor modifications by me
Approved by:	portmgr (secteam blanket)
31c963fff9
Norikatsu Shigemura (nork) · 1.1_1
Update to 2007.12.07 with fix security issue.

Security:	VuXML ID: 821afaa2-9e9a-11dc-a7e3-0016360406fa
		CVE-2007-6036
		http://aluigi.altervista.org/adv/live555x-adv.txt
Approved by:	portmgr (erwin)
35a9136398
Remko Lodder (remko) · 1.1_1
Document liveMedia -- DoS vulnerability

Submitted by:	Rafae«l Careé <funm at videolan dot org>
		with modifications by me
Approved by:	portmgr (secteam blanket)
3e1df12f13
Xin LI (delphij) · 1.1_1
Update to reflect the squid issue has been assigned CVE-2007-6239.

Approved by:	portmgr (ports-security blanket)
992be0dfcf
Martin Wilke (miwi) · 1.1_1
- Update gnu-finger entry 	* Fix cvename handling

Approved by:	portmgr (ports-security blanket)
07ce45bc66
Mark Linimon (linimon) · 1.1_1
http://nvd.nist.gov/nvd.cfm?cvename=CVE-1999-1165: gnu-finger is old, creaky, and not for use in production environments.

Submitted by:	tabthorpe
Approved by:	portmgr (self)
c1f6c82617
Xin LI (delphij) · 1.1_1
Update to reflect an updated www/squid30 version which is no longer vulnerable.

Approved by:	portmgr (ports-security blanket)
be144111fc
Xin LI (delphij) · 1.1_1
Update to reflect an updated www/squid version which is no longer vulnerable.

Approved by:	portmgr (ports-security blanket)
f2f038bbc6
Xin LI (delphij) · 1.1_1
Document squid denial of service vulnerability.  This can be triggered from trusted squid client only.

Approved by:	portmgr (ports-security blanket)
c1f761805b
Xin LI (delphij) · 1.1_1
Remove the rsync entry for now.  Better way of handling this is still under discussion, as the vendor patch does not automatically resolve problem for customized configuration that have chroot = no.

Requested by:	pav
Approved by:	portmgr (ports-security blanket)
536ef4952b
Xin LI (delphij) · 1.1_1
Document rsync security bypass vulnerability.

Approved by:	portmgr (ports-security blanket)
b3db6b6ffb
Simon L. B. Nielsen (simon) · 1.1_1
Make the rubygem-rails -- JSON XSS vulnerability entry valid UTF-8 (at least the special chars doesn't look like UTF-8 as per emacs or freshports).

Reported by:	freshports via dvl
Approved by:	portmgr (secteam blanket)
f199be9d03
Xin LI (delphij) · 1.1_1
Also cover rubygem-activesupport which is part of rails and is affected by CVE-2007-3227 as well.

Approved by:	portmgr (ports-security blanket)
79cc8b9cc2
Xin LI (delphij) · 1.1_1
Document recent Ruby On Rails vulnerabilities.

Approved by:	portmgr (ports-security blanket)
afa8c55f49
Henrik Brix Andersen (brix) · 1.1_1
Document ikiwiki improper symlink verification vulnerability.

Reviewed by:	remko
Approved by:	portmgr (erwin), erwin (mentor)
b703078233
Xin LI (delphij) · 1.1_1
Document firefox multiple unspecified memory corruption vulnerabilities.

Approved by:	portmgr (ports-security blanket)
636d490c9b
Martin Wilke (miwi) · 1.1_1
- Document phpmyadmin -- Cross Site Scripting

Reviewed by:	remko
Approved by:	portmgr (ports-security blanket
b170922337
« newest← newerpage 137 of 167older →oldest »