CVE and update status of the FreeBSD ports tree3,317 unaddressed CVEs in 678 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 7b95a2eac4
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
Depends on
lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,339)

Remko Lodder (remko) · 1.1_1
Document jdk - jar directory traversal vulnerability.

Approved by:	simon
7ce5f5f5eb
Simon L. B. Nielsen (simon) · 1.1_1
Document several mozilla/firefox issues.
c6463c5ae8
Simon L. B. Nielsen (simon) · 1.1_1
Mark wget >= 1.10.a1 safe from the "wget -- multiple vulnerabilities" entry.

Info provided by:	sf
b8e8bd4784
Simon L. B. Nielsen (simon) · 1.1_1
Document openoffice -- DOC document heap overflow vulnerability.
c666625667
Simon L. B. Nielsen (simon) · 1.1_1
Fix and document insecure temporary file handling in portupgrade.

Security:	CAN-2005-0610
Security:	http://vuxml.FreeBSD.org/22f00553-a09d-11d9-a788-0001020eed82.html
Approved by:	erwin (mentor), maintainer timeout
OK'ed by:	portmgr
Reviewed by:	nectar
2a6230f941
Simon L. B. Nielsen (simon) · 1.1_1
Document three GAIM vulnerabilities.
c5a9b3a376
Simon L. B. Nielsen (simon) · 1.1_1
Document an old PHP issue.
4ac987a82c
Simon L. B. Nielsen (simon) · 1.1_1
Document squid -- DoS on failed PUT/POST requests vulnerability.

Submitted by:	Devon H. O'Dell <dodell@offmyserver.com> (original version)
63de08eab1
Pav Lucistnik (pav) · 1.1_1
- Fix closing tag on the entry I just touched.

Pointed out by:	still Chimera
Blaming:	too much bear earlier tonight
b1c64c078b
Pav Lucistnik (pav) · 1.1_1
- Add <modified> to the entry I just touched

Prodded by:	Chimera
ecf039676f
Pav Lucistnik (pav) · 1.1_1
- CAN-2005-0133 is fixed in clamav-devel-20050408

PR:		ports/79688
Submitted by:	Renato Botelho <freebsd@galle.com.br>
e22567b87a
Simon L. B. Nielsen (simon) · 1.1_1
Bump modified date for entry modified last commit.
3325b65493
Hajimu UMEMOTO (ume) · 1.1_1
add CVE name to latest vuln of Cyrus IMAPd.
f17f51ad0e
Thierry Thomas (thierry) · 1.1_1
Add an entry for a XSS vulnerabilty fixed in horde-3.0.4.
24b5ab2bb9
Simon L. B. Nielsen (simon) · 1.1_1
Document wu-ftpd -- remote globbing DoS vulnerability.
7e369a9d2b
Simon L. B. Nielsen (simon) · 1.1_1
Add CVE name to hashash entry.
08a1fddf90
Christian Weisgerber (naddy) · 1.1_1
Document hashcash format string vulnerability.
7ce77e7525
Simon L. B. Nielsen (simon) · 1.1_1
Document clamav -- zip handling DoS vulnerability.

Approved by:	portmgr (blanket, VuXML)
3ea2a15c21
Jacques Vidrine (nectar) · 1.1_1
Document Wine information disclosure.

Based on an entry that was
Submitted by:	Devon H. O'Dell <dodell@offmyserver.com>
Approved by:	portmgr (blanket, VuXML)
8fdf391a72
Jacques Vidrine (nectar) · 1.1_1
Document the most serious of the recently disclosed Mozilla/Firefox/Thunderbird vulnerabilities.

Based on entries that were
Submitted by:	Devon H. O'Dell <dodell@offmyserver.com>
Approved by:	portmgr (blanket, VuXML)
ad6be0e3c8
Jacques Vidrine (nectar) · 1.1_1
Document Sylpheed buffer overflow.

Reminded by:	netchild
Approved by:	portmgr (blanket, VuXML)
540824d2e8
Simon L. B. Nielsen (simon) · 1.1_1
Document xv -- filename handling format string vulnerability.

Approved by:	portmgr (implicit, VuXML)
5b82e7ed54
Simon L. B. Nielsen (simon) · 1.1_1
Document kdelibs -- local DCOP denial of service vulnerability.

Approved by:	portmgr (implicit, VuXML)
e551c99e0a
Simon L. B. Nielsen (simon) · 1.1_1
Mark grip port as fixed for recent vulnerability.

Requested by:	ahze
4b8ba5ca05
Simon L. B. Nielsen (simon) · 1.1_1
Document phpmyadmin -- increased privilege vulnerability.
9c13358c08
Alexey Dokuchaev (danfe) · 1.1_1
Note that recent Quake2-LNX is fixed.
15f66ab5b1
Alex Dupre (ale) · 1.1_1
Recent mysql snapshot import fixed several vulnerabilities.
2e4290eeb0
Simon L. B. Nielsen (simon) · 1.1_1
Document ethereal -- multiple protocol dissectors vulnerabilities.
566e20849d
Simon L. B. Nielsen (simon) · 1.1_1
Document "grip -- CDDB response multiple matches buffer overflow vulnerability".
29d805dd40
Simon L. B. Nielsen (simon) · 1.1_1
Update references for latest MySQL entry:

- Use bid tag for Bugtraq ID reference.
- Add CVE names.
f1996dbbb7
Alex Dupre (ale) · 1.1_1
Document multiple mysql remote vulnerabilities.
09faa83406
Thierry Thomas (thierry) · 1.1_1
Add an entry about rxvt-unicode bufer overflow.
c3c8132fc3
Simon L. B. Nielsen (simon) · 1.1_1
Document two phpMyAdmin issues.
2f4093a8ae
Simon L. B. Nielsen (simon) · 1.1_1
Document libexif -- buffer overflow vulnerability.
098596aedb
Jacques Vidrine (nectar) · 1.1_1
Fix invalid date.

Noticed by:	Kang Liu <liukang@bjut.edu.cn>
3b0cb09a6a
Jacques Vidrine (nectar) · 1.1_1
Add <modified> date for recent commit to phpbb vulnerability.

Forgotten by:	delphij

While here, add msgids for recent phpbb addition.
6cec90d8a0
Xin LI (delphij) · 1.1_1
Document a low risk HTML injection (configuration bypass) vulnerability [1] of phpBB.

(maintainer contacted and is preparing a fix)

[1] http://marc.theaimsgroup.com/?l=bugtraq&m=110987231502274
5092eea0da
Xin LI (delphij) · 1.1_1
Add bugtraq bug ID for phpbb vulnerability.

Submitted by:	Kang LIU <liukang bjut edu cn>
852b94cbf0
Jacques Vidrine (nectar) · 1.1_1
Document two phpnuke vulnerabilities, and a Linux RealPlayer vulnerability.

Based on entries that were
Submitted by:	Devon H. O'Dell <dodell@sitetronics.com>
3fbc94976e
Simon L. B. Nielsen (simon) · 1.1_1
- Document ImageMagick -- format string vulnerability. - Fix typo on older tiff entry.
27b0023153
MANTANI Nobutaka (nobutaka) · 1.1_1
Document the privilege escalation vulnerability in uim.
8a81c46428
Jacques Vidrine (nectar) · 1.1_1
Fix typo in linux-tiff version number for http://vuxml.freebsd.org/8f86d8b5-6025-11d9-a9e7-0001020eed82.html

Reported by:    Ian Moore <no-spam@swiftdsl.com.au>
1f1453269f
Jacques Vidrine (nectar) · 1.1_1
Document lighttpd information disclosure bug.

This entry is based on one that was
Submitted by:	Devon H. O'Dell <dodell@offmyserver.com>
8ec244ef06
Jacques Vidrine (nectar) · 1.1_1
Fix typo in linux-tiff version number for http://vuxml..freebsd.org/fc7e6a42-6012-11d9-a9e7-0001020eed82.html

Reported by:	Ian Moore <no-spam@swiftdsl.com.au>
b511a32842
Xin LI (delphij) · 1.1_1
Document latest phpBB critical security vulnerabilities.

Submitted by:	Kang LIU <liukang bjut edu cn>
ab9ba5a88f
Jacques Vidrine (nectar) · 1.1_1
Correct the linux-tiff version number for several entries.

Reported by:	netchild
24627424e6
Simon L. B. Nielsen (simon) · 1.1_1
Document curl -- authentication buffer overflow vulnerability.
3ab3a3220e
Simon L. B. Nielsen (simon) · 1.1_1
- Document cyrus-imapd -- multiple buffer overflow vulnerabilities. [1] - Use bid tag for a reference in sup entry.

Advice from:	ume [1]
3ba6fcbd61
Hiroki Sato (hrs) · 1.1_1
Document format string vulnerabilities in net/sup.
fbb0c798ac
Simon L. B. Nielsen (simon) · 1.1_1
- Just use mozilla in title for last entry for consistency. - Document mozilla -- insecure temporary directory vulnerability.
ce31baa966