CVE and update status of the FreeBSD ports tree3,531 unaddressed CVEs in 701 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 4fa1ce71cd
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,350)

Shaun Amott (shaun) · 1.1_1
Update phpSysInfo entry: the current version (2.5.3) is affected.
6974f265d6
Martin Wilke (miwi) · 1.1_1
Update mozilla entry - Marked seamonkey as safe

Submitted by:	John E. Hein <jhein@timing.com>
Reviewed by:	simon
60ebdbd581
Martin Wilke (miwi) · 1.1_1
Update the xpdf entry - Marked poppler as save
b39b792f74
Martin Wilke (miwi) · 1.1_1
Update xpdf entry - Marked cups-base as safe - Add poppler as affected port

Reviewed by:	simon
168c561a7d
Martin Wilke (miwi) · 1.1_1
- Fix tcpdump entry
8d605e2e9f
Martin Wilke (miwi) · 1.1_1
Document xpdf -- stack based buffer overflow

Reviewed by:	simon/remko
46aa01e61c
Martin Wilke (miwi) · 1.1_1
- Fix a typo

Submitted by:	shaun
7eda652de0
Martin Wilke (miwi) · 1.1_1
- Document tcpdump -- remote integer underflow vulnerability

Reviewed by:	remko
cc98183b55
Martin Wilke (miwi) · 1.1_1
- Document mutt -- buffer overflow vulnerability

Reviewed by:	remko
f49264b6a1
Martin Wilke (miwi) · 1.1_1
- Document p5-Net-DNS -- multiple Vulnerabilities

Reviewed by:	remko
030df73f0c
Martin Wilke (miwi) · 1.1_1
- Document phpsysinfo -- url Cross-Site Scripting
e4cf269412
Martin Wilke (miwi) · 1.1_1
- Document drupal -- Cross site request forgeries - Document drupal -- Multiple cross-site scripting vulnerabilities

Submitted by:	nick@foobar.org
Reviewed by:	simon
600c251319
Martin Wilke (miwi) · 1.1_1
- Document vim -- Command Format String Vulnerability

Approved by:	simon
ed239f1cb3
Martin Wilke (miwi) · 1.1_1
- Document libvorbis - Multiple memory corruption flaws

Submitted by:	lx@
Reviewed by:	simon
c7ba758c45
Xin LI (delphij) · 1.1_1
Document XSS vulnerabilities in several tomcat versions; update affected tomcat versions for CVE-2005-2090.
cc5b3ad300
Xin LI (delphij) · 1.1_1
The previous vuxml entry applies to jakarta-tomcat 4.0.x as well, so mark it as affected as well.  Since there is no newer release I have used 4.1.0 as the "fixed" version.
0aff17bab7
Xin LI (delphij) · 1.1_1
Document multiple vulnerabilities found in www/tomcat41
60df6f7e74
Xin LI (delphij) · 1.1_1
Document dokuwiki spellchecker XSS vulnerabilities
7cdfd867bf
Simon L. B. Nielsen (simon) · 1.1_1
Fix last commit: the name tag was empty.

Reported by:	FreshPorts via Dan Langille
Pointyhat to:	delphij
cf5d8266ed
Xin LI (delphij) · 1.1_1
Document lighttpd multiple vulnerabilities
c22df82ca0
Simon L. B. Nielsen (simon) · 1.1_1
Add another reference to mozilla -- multiple vulnerabilities.
94a37adcdf
Simon L. B. Nielsen (simon) · 1.1_1
- Document opera -- multiple vulnerabilities. - Correct and sort a few links in the latest mozilla entry.
23088fbcfe
Simon L. B. Nielsen (simon) · 1.1_1
Document mozilla -- multiple vulnerabilities.
04c38e3a79
Xin LI (delphij) · 1.1_1
Document linuxflashplugin critical vulnerabilities.

Reported by:	jamie at bishopston net
29a592ce04
Martin Wilke (miwi) · 1.1_1
- Fix the versions number of typespeed from 4.1.0 to 0.4.1

PR:		114441
Submitted by:	Tor Halvard Furulund <squat@squat.no>
fee6acc5a0
Andrew Pantyukhin (sat) · 1.1_1
- Fix the latest wireshark entries by correcting a typo and adding   more package names
fec0d4b44a
Martin Wilke (miwi) · 1.1_1
- Document wireshark - Multiple problems

Reviewed by:	simon@
9cd0314853
Gabor Kovesdan (gabor) · 1.1_1
- Document typespeed arbitrary code execution

Reviewed by:	remko
4c8afbbe37
Martin Wilke (miwi) · 1.1_1
- Fix a typo vcl -> vlc

Noticed by:	lx@
14148fb403
Martin Wilke (miwi) · 1.1_1
- Document vlc - format string vulnerability and integer overflow
08d66d63bc
Martin Wilke (miwi) · 1.1_1
- Document flac123 - stack overflow in comment parsing

Reviewed by:	simon@
6e69c5aa16
Remko Lodder (remko) · 1.1_1
Document gd -- multiple vulnerabilities

PR:		ports/114115
Submitted by:	Nick Barkas <snb at threerings dot net> (minor modifications by me).
fdfb889ae5
Xin LI (delphij) · 1.1_1
Document that CVE-2007-3257 was fixed with evolution-data-server 1.10.2_1.
cbb3bdea6f
Andrew Pantyukhin (sat) · 1.1_1
- Fix modified date in mod_perl entry
19d36d00b2
Erwin Lansing (erwin) · 1.1_1
Mark www/mod_perl2 fixed in version 2.0.3_2,3
9695a9e6ff
Xin LI (delphij) · 1.1_1
Document evolution-data-server remote arbitrary code execution vulnerability.

Fix at:	Evolution SVN changeset 7817 (#447414)
f64828b3cf
Erwin Lansing (erwin) · 1.1_1
The XMLRPC SQL Injection issue with wordpress was addressed in the latest release.
c8d93d036e
Gabor Kovesdan (gabor) · 1.1_1
Document xpcd buffer overflow vulnerability.

Revieved by:	remko
525a1c1cfb
Remko Lodder (remko) · 1.1_1
Document clamav -- multiple vulnerabilities.
02327974a6
Xin LI (delphij) · 1.1_1
Document SpamAssassin vulnerability CVE-2007-2873, a local DoS issue.
359efa1acf
Martin Wilke (miwi) · 1.1_1
- Document cups -- Incomplete SSL Negotiation Denial of Service.

Reviewed by:	simon@
a6b094a5ee
Martin Wilke (miwi) · 1.1_1
- Fix other duplicate entry.

Reviewed by:	simon
807e4948e9
Martin Wilke (miwi) · 1.1_1
- Document c-ares -- DNS Cache Poisoning Vulnerability

Reviewed by:	simon@
c3ae8a8590
Martin Wilke (miwi) · 1.1_1
- Fix duplicate entry de-wordpress -> zh-wordpress.
d00658d436
Gabor Kovesdan (gabor) · 1.1_1
Add zh-wordpress as affected by the last two wordpress entries.
2e460cd831
Gabor Kovesdan (gabor) · 1.1_1
wordpress -- XMLRPC SQL Injection wordpress -- unmoderated comments disclosure

Reviewed by:	simon
d929936825
Martin Wilke (miwi) · 1.1_1
- Document webmin -- cross site scripting

Reviewed by:	simon@
8fd707f9da
Simon L. B. Nielsen (simon) · 1.1_1
- The fixed mplayer version number is 0.99.10_10, mark it as such. [1] - Add older mplayer package names. - Break long lines.

Noticed by:	Henrik Brix Andersen <henrik@brixandersen.dk>
c40c31c7cb
Martin Wilke (miwi) · 1.1_1
- Fix mplayer portversion.
8ec6f91e6e
Martin Wilke (miwi) · 1.1_1
- Document mplayer -- cddb stack overflow.

Reviewed by:	simon@
849c29c9fe
« newest← newerpage 140 of 167older →oldest »