CVE and update status of the FreeBSD ports tree3,312 unaddressed CVEs in 679 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 7b95a2eac4
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
Depends on
lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,339)

Simon L. B. Nielsen (simon) · 1.1_1
Document signal delivery vulnerability in sudoscript.
00be285ce9
Josef El-Rayes (josef) · 1.1_1
Document vulnerability in net/jabberd.
bdaed38bb1
Josef El-Rayes (josef) · 1.1_1
Document vulnerability in net/opendchub.

Based on submission by:	Niels Heinen <niels.heinen@ubizen.com>
5a21690f3e
Simon L. B. Nielsen (simon) · 1.1_1
Add Bugtraq ID for SA-04:16.fetch entry.
f74aa8b9bb
Simon L. B. Nielsen (simon) · 1.1_1
Document two vulnerabilities in unarj.
b0a66eacef
Greg Lewis (glewis) · 1.1_1
. Mark linux-ibm-jdk as also vulnerable to the Java plugin vulnerability.
184b2b763b
Greg Lewis (glewis) · 1.1_1
. Fix the range and add an additional range for the jdk vulnerability. . Note that linux-sun-jdk and linux-blackdown-jdk are also vulnerable.
240f53e46e
Greg Lewis (glewis) · 1.1_1
. Fix whitespace.
27b113d488
Greg Lewis (glewis) · 1.1_1
. Add an entry for the problem in the Java plugin.
072875df73
Simon L. B. Nielsen (simon) · 1.1_1
Update ruby CGI DoS entry to note that the most recent version in ports is fixed.  Also remove ruby-static as vulnerable, since it does not contain cgi.rb.
6efb7225f2
Josef El-Rayes (josef) · 1.1_1
Document vulnerability in ftp/prozilla.

Submitted by:	Niels Heinen <niels.heinen@ubizen.com>
8475635cd8
Hajimu UMEMOTO (ume) · 1.1_1
correct fixed version

Pointed out by:	josef
0a677bc617
Hajimu UMEMOTO (ume) · 1.1_1
c0a269d5-3d16-11d9-8818-008088034841 and 114d70f3-3d16-11d9-8818-008088034841 are fixed in cyrus-imapd 2.1.17.
fadfdc8c24
Simon L. B. Nielsen (simon) · 1.1_1
Document that the twiki vulnerability is fixed in twiki-20040902.
d3a7402f9a
Hajimu UMEMOTO (ume) · 1.1_1
add Cyrus IMAP Server multiple remote vulnerabilities.

Obtained from:	http://security.e-matters.de/advisories/152004.html
d052db5651
Simon L. B. Nielsen (simon) · 1.1_1
Add CVE reference for the SA-04:16.fetch entry.
e9fa6b1fe8
Josef El-Rayes (josef) · 1.1_1
Document vulnerability in phpmyadmin.
b8ac453616
Josef El-Rayes (josef) · 1.1_1
Add localized versions of gd port to the VuXML entry.
3f51fb62cc
Simon L. B. Nielsen (simon) · 1.1_1
Document SA-04:16.fetch.
4da32e4a93
Josef El-Rayes (josef) · 1.1_1
Document the buffer overrun vulnerability in samba3 CAN-2004-882
b264c72f94
Josef El-Rayes (josef) · 1.1_1
Correct range for xpdf vulnerability, as cups-base got a fixing update.
edd6737247
Josef El-Rayes (josef) · 1.1_1
The last commit to japanese/samba also fixed the security issue in samba (CAN-2004-0815)

As discussed with:	NAKAJI Hiroyuki <nakaji@jp.freebsd.org> (maintainer)
bf9bc9c8ab
Simon L. B. Nielsen (simon) · 1.1_1
Add CVE name to twiki entry.

Noticed by:	josef
203db24bca
Josef El-Rayes (josef) · 1.1_1
Add teTeX-base to affected packages in xpdf's vuxml entry.
d0084a0835
Simon L. B. Nielsen (simon) · 1.1_1
Document arbitrary shell command execution in twiki.
06d3c6b0de
Simon L. B. Nielsen (simon) · 1.1_1
Document a format string vulnerability in proxytunnel.
f97a306743
Simon L. B. Nielsen (simon) · 1.1_1
Fix entry date for the ruby entry from the last commit.
6b43cac24a
Simon L. B. Nielsen (simon) · 1.1_1
- Document at DoS in the Ruby CGI module. - Document a privilege escalation in sudo.
8e0f324975
Jacques Vidrine (nectar) · 1.1_1
Add CVE name for gnats issue.
a55c74530a
Jacques Vidrine (nectar) · 1.1_1
Note (likely) remotely exploitable vulnerability in samba 3.

Submitted by:	Shane Kinney <mod6@freebsdhackers.net>
85398c8922
Josef El-Rayes (josef) · 1.1_1
Document vulnerability in GNATS.
6b773cb3bc
Simon L. B. Nielsen (simon) · 1.1_1
Document a XSS in squirrelmail.
6ac9a59d85
Josef El-Rayes (josef) · 1.1_1
Fix entry date.
5a0cf8914e
Josef El-Rayes (josef) · 1.1_1
Document BNC vulnerability.
eecd97c0e7
Jacques Vidrine (nectar) · 1.1_1
Note old hafiye bug.

Submitted by:	Shane Kinney <mod6@freebsdhackers.net>
13f4994a14
Christian Weisgerber (naddy) · 1.1_1
Fix a format string vulnerability in ez-ipupdate.

Approved by:	se@
Obtained from:	Ulf Harnhammar <Ulf.Harnhammar.9485@student.uu.se>
9df9abd00d
Simon L. B. Nielsen (simon) · 1.1_1
Document a buffer overflow in ImageMagick's EXIF parser.
d4071586cd
Simon L. B. Nielsen (simon) · 1.1_1
Correct recent Apache 2 entry to not match Apache 1.X.

Noticed by:	Dan Langille <dan@langille.org>
0125c9b9ea
Josef El-Rayes (josef) · 1.1_1
Document vulnerability in Apache 2 (CAN-2004-0942).
da4f5c3bcf
Joe Marcus Clarke (marcus) · 1.1_1
Update the libxml vulnerability to indicate the fixed version.
691763e80f
Simon L. B. Nielsen (simon) · 1.1_1
Document a format string vulnerability in socat.
a484019f36
Simon L. B. Nielsen (simon) · 1.1_1
Document remote buffers overflow in libxml and libxml2.
5a6b0d239f
Jacques Vidrine (nectar) · 1.1_1
The bugs discovered by Chris Evans have been fixed in linux-gdk-pixbuf.

Reported by:	thierry
3c659b7743
Josef El-Rayes (josef) · 1.1_1
Fix pkgnames for mod_include vulnerability. Thanks to Dan Langille for helping me to track these down.
8e29f1adcf
Simon L. B. Nielsen (simon) · 1.1_1
Document a virus detection evasion in p5-Archive-Zip.
e524be36a7
Josef El-Rayes (josef) · 1.1_1
Document mod_include vulnerability in apache and related ports.
814558216f
Simon L. B. Nielsen (simon) · 1.1_1
Document an insecure temporary file creation in postgresql-contrib.
6ed053c637
Simon L. B. Nielsen (simon) · 1.1_1
Bump modified date in the entry for the last commit.
315b824ea6
Simon L. B. Nielsen (simon) · 1.1_1
Update latest mpg123 entry to note that the port is fixed in the most recent port version.
76bc358048
Simon L. B. Nielsen (simon) · 1.1_1
There was a gd 1.X port with portepoch 2 for a while, so let the gd entry also match that.
f44a213093