CVE and update status of the FreeBSD ports tree3,616 unaddressed CVEs in 712 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 99e0fd1e6e
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,341)

Bernard Spil (brnrd) · 1.1_5
security/vuxml: Document cURL vulnerabilities
e9d4091305
Li-Wen Hsu (lwhsu) · 1.1_5
security/vuxml: Fix vuxml build

<cvename> tag needs a valid CVE name

Fixes:	8f4091638ddd9e3c0484c5791359e58aa97b493a
7395437ea1
Li-Wen Hsu (lwhsu) · 1.1_5
security/vuxml: Document  Jenkins Security Advisory 2022-06-22

Sponsored by:	The FreeBSD Foundation
28676937f7
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Document OpenSSL vulnerability

* Pet `make validate`
 * Fix spacing for 482456fb-e9af-11ec-93b6-318d1419ea39
 * Add discovery date for 482456fb-e9af-11ec-93b6-318d1419ea39
   using tor wiki page update date.
da7e737639
Rene Ladan (rene) · 1.1_5
security/vuxml: add www/chromium < 103.0.5060.53
e408d5e4ec
Neel Chauhan (nc) · 1.1_5
graphics/p5-Image-ExifTool: Add an vuxml entry for update 12.42

PR:	264618
d1a91ac3af
Li-Wen Hsu (lwhsu) · 1.1_5
security/vuxml: Add CVE-2022-24766 for www/mitmproxy

PR:		264782
e6fdd8b6c3
Yuri Victorovich (yuri) · 1.1_5
security/vuxml: Add vulnerability record for security/tor TROVE-2022-001[0]
8f4091638d
Guido Falsi (madpilot) · 1.1_5
security/vuxml: Document XFCE libexo vulnerability.
2d7a11dac8
Wen Heping (wen) · 1.1_5
security/vuxml: Document numpy vulnerabilities
1f5b562498
Li-Wen Hsu (lwhsu) · 1.1_5
security/vuxml: Fix version range for 49adfbe5-e7d1-11ec-8fbd-d4c9ef517024

PR:		264589
Reported by:	Jordan Ostreff <jordan@ostreff.info>
0bb1abdb20
Rene Ladan (rene) · 1.1_5
security/vuxml: add www/chromium < 102.0.5005.115

Obtained from:	https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop.html
b400a2257b
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Document Apache httpd vulnerabilities
959028638c
Dmitri Goutnik (dmgk) · 1.1_5
security/vuxml: Document Go vulnerabilities
f35fdab00d
Matthias Andree (mandree) · 1.1_5
security/vuxml: add e2fsprogs CVE-2022-1304 < 1.46.5_1

Security:	CVE-2022-1304
Security:	a58f3fde-e4e0-11ec-8340-2d623369b8b5
d6873d2aeb
Matthias Fechner (mfechner) · 1.1_5
security/vuxml: Document gitlab vulnerabilities
5b96f905af
Craig Leres (leres) · 1.1_5
security/vuxml: Mark zeek < 4.0.7 as vulnerable as per:

https://github.com/zeek/zeek/releases/tag/v4.0.7

 - Fix potential hang in the DNS analyzer when receiving a
   specially-crafted packet. Due to the possibility of this happening
   with packets received from the network, this is a potential DoS
   vulnerability.

Reported by:	Tim Wojtulewicz
c9acdf933e
Rene Ladan (rene) · 1.1_5
security/vuxml: add www/chromium < 102.0.5005.61

Obtained from:	https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html
a61a1fcf34
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Add CVE numbers to latest MySQL vulnerabilities
742bb4faef
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Document MariaDB vulnerabilities
517c69a3c2
Yasuhiro Kimura (yasu) · 1.1_5
security/vuxml: Update and fix b2407db1-d79f-11ec-a15f-589cfc0f81b0

* security/clamav-lts is also vulnerable with them
* Fix range of security/clamav
e696b6f9ff
Florian Smeets (flo) · 1.1_5
security/vuxml: Document ClamAV vulnerabilities
af9915b795
Dmitri Goutnik (dmgk) · 1.1_5
security/vuxml: Document Go vulnerability

While here, fix package names for the previous Go entry (we also have
go117 now).
dfea246bbc
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Document curl vulnerabilities
98db67876b
Palle Girgensohn (girgen) · 1.1_5
security/vuxml: postgresql??-server vuln CVE-2022-1552
4a835475da
Rene Ladan (rene) · 1.1_5
security/vuxml: add www/chromium < 101.0.4951.64

Obtained from:	https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html
7cb19425de
Matthew Seaman (matthew) · 1.1_5
security/vuxml: add sysutils/rsyslog8 heap buffer overflow

https://github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8
003a784ada
Dmitri Goutnik (dmgk) · 1.1_5
security/vuxml: Document devel/gogs vulnerability
e6e92a9605
Dmitri Goutnik (dmgk) · 1.1_5
security/vuxml: Document www/gitea vulnerability
03b9e5a919
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Mark openssl-quictls vulnerable
a226c3b572
Bernard Spil (brnrd) · 1.1_5
security/openssl: Security update to 1.1.1o

Security:	fceb2b08-cb76-11ec-a06f-d4c9ef517024
MFH:		2022Q2
02f254f0a7
Yasuhiro Kimura (yasu) · 1.1_5
security/vuxml: Document cross-site-scripting (XSS) vulnerability in RainLoop
d9b2c35e30
Dmitri Goutnik (dmgk) · 1.1_5
security/vuxml: Document lang/go vulnerabilities
ffb17d47aa
Yasuhiro Kimura (yasu) · 1.1_5
security/vuxml: Add databases/redis-devel to cc42db1c-c65f-11ec-ad96-0800270512f4

The port is also vulnerable with it.
7e521935bf
Po-Chuan Hsieh (sunpoet) · 1.1_5
security/vuxml: Document rails vulnerability
9771a255d3
Jimmy Olgeni (olgeni) · 1.1_5
security/vuxml: document vulnerability in databases/hiredis

PR:		263648
Reported by:	Sascha Biberhofer
288f8b2b68
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Document cURL 7.82 vulns
c68bf2e59b
Rene Ladan (rene) · 1.1_5
security/vuxml: add www/chromium < 101.0.4951.41

Obtained from:	https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html
de6ddae04a
Yasuhiro Kimura (yasu) · 1.1_5
security/vuxml: Document multiple vulnerabilities in redis
543f93acd2
Yasuhiro Kimura (yasu) · 1.1_5
security/vuxml: Document buffer overrun vulnerability in japanese/eb
324203418e
Yasuhiro Kimura (yasu) · 1.1_5
security/vuxml: Fix range of ruby27 in 06ed6a49-bad4-11ec-9cfe-0800270512f4

Reported by:	John Hein
63c69a913b
Craig Leres (leres) · 1.1_5
security/vuxml: Mark zeek < 4.0.6 as vulnerable as per:

https://github.com/zeek/zeek/releases/tag/v4.0.6

 - Fix potential unbounded state growth in the FTP analyzer when
   receiving a specially-crafted stream of commands. This may lead
   to a buffer overflow and cause Zeek to crash. Due to the possibility
   of this happening with packets received from the network, this
   is a potential DoS vulnerabilty.

Reported by:    Tim Wojtulewicz
84a7773d27
Fernando Apesteguía (fernape) · 1.1_5
security/vuxml: Add gzip's CVE-2022-1271

Arbitrary file write vulnerability.

Security:	CVE-2022-1271
8a0ed132ec
Bernard Spil (brnrd) · 1.1_5
www/nextcloud-calendar: Document command injection vuln
9af715c718
Yasuhiro Kimura (yasu) · 1.1_5
security/vuxml: Add lang/ruby32 to the entries of recent Ruby vulnerabilities

Both 06ed6a49-bad4-11ec-9cfe-0800270512f4 and
f22144d7-bad1-11ec-9cfe-0800270512f4 affect lang/ruby32. So add it to
them.
b908e9aa9b
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Add 2022-04 MySQL vulnerabilities
fdcd341bf7
Rene Ladan (rene) · 1.1_5
security/vuxml: pet 'make validate'

This commit contains space/tab changes only.
308ccda791
Rene Ladan (rene) · 1.1_5
security/vuxml: add www/chromium < 100.0.4896.127

Obtained from:	https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_14.html
4296dab735
Fernando Apesteguía (fernape) · 1.1_5
security/vuxml: Add CVE-2022-1328 mail/mutt < 2.2.3

ChangeLog: https://gitlab.com/muttmua/mutt/-/issues/404

PR:	263247
Reported by:	dereks@lifeofadishwasher.com
377603c4bf
Guido Falsi (madpilot) · 1.1_5
security/vuxml: Report new asterisk vulnerabilities.
5cc0c48bf4
« newest← newerpage 35 of 167older →oldest »