CVE and update status of the FreeBSD ports tree3,616 unaddressed CVEs in 712 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 99e0fd1e6e
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,341)

Guangyuan Yang (ygy) · 1.1_5
security/vuxml: Document lang/go vulnerabilities
22f3abc580
Rene Ladan (rene) · 1.1_5
security/vuxml: add www/chromium < 98.0.4758.102

Obtained from:	https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html
8ddfa9e4aa
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Add additional vuln for MariaDB
e5dc95ff2b
Koichiro Iwao (meta) · 1.1_5
security/vuxml: Fix affected version declaration

and add missing PORTEPOCH.
PR:		261856
2365b40425
Kai Knoblich (kai) · 1.1_5
security/vuxml: Document devel/py-twisted vulnerabilities

PR:		261791
78783e7e45
Yasuhiro Kimura (yasu) · 1.1_5
security/vuxml: Document arbitrary command execution vulnerability in Zsh
758ec37320
Li-Wen Hsu (lwhsu) · 1.1_5
security/vuxml: Document Jenkins Security Advisory 2022-02-09

Sponsored by:	The FreeBSD Foundation
4cb4054476
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Document MariaDB vulnerabilities
8bfcbab727
Jung-uk Kim (jkim) · 1.1_5
security/vuxml: Add missing PORTEPOCH for x11/libX11

PR:		261804
392e232f51
Koichiro Iwao (meta) · 1.1_5
security/vuxml: Document xrdp vulnerability

Security:	fc2a9541-8893-11ec-9d01-80ee73419af3
Security:	CVE-2022-23613
Sponsored by:	HAW International
201d74d9e8
Matthias Fechner (mfechner) · 1.1_5
security/vuxml: Document gitlab vulnerabilities
51bd707f5a
Tobias Kortkamp (tobik) · 1.1_5
security/vuxml: Fix recent lang/rust entry

PR:		261449
99de21f2a1
Rene Ladan (rene) · 1.1_5
security/vuxml: add www/chromium < 98.0.4758.80

Obtained from:	https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html
023655accc
Dave Cottlehuber (dch) · 1.1_5
security/vuxml: add h2o-devel vuln details

Security:       CVE-2021-43848
e69764d9dc
Philip Paeps (philip) · 1.1_5
security/vuxml: add FreeBSD SA-22:01.vt
8e94087050
Timur I. Bakeyev (timur) · 1.1_5
security/vuxml: Add a note about recent Samba vulnerabilities.

CVE-2021-43566
CVE-2021-44141
CVE-2021-44142
CVE-2022-0336

Security:	CVE-2021-43566
		CVE-2021-44141
		CVE-2021-44142
		CVE-2022-0336
a09995057a
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Document Rust vulnerability
d135261765
Danilo G. Baio (dbaio) · 1.1_5
security/vuxml: Remove wrong cvename entry

From:
<vuln vid="7262f826-795e-11ec-8be6-d4c9ef517024">
  <topic>MySQL -- Multiple vulnerabilities</topic>
  <entry>2022-01-19</entry>
01d0c80d94
Danilo G. Baio (dbaio) · 1.1_5
security/vuxml: Document varnish cache vulnerability

PR:		261562
Security:	CVE-2022-23959
40a8623e25
Matthias Andree (mandree) · 1.1_5
security/vuxml: document OpenEXR < 3.1.4 vuln

Heap-buffer-overflow in Imf_3_1::LineCompositeTask::execute

Security:	b6ef8a53-8062-11ec-9af3-fb232efe4d2e
Security:	CVE-2021-45942
b41e604352
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Document OpenSSL MIPS vulnerability
45061f9051
Fernando Apesteguía (fernape) · 1.1_5
security/vuxml: Add CVE-2022-0323 (www/phpmustache)

Following change in 4f0a5e1540c3..6901bf72b3b2

Reported by: Marc Veldman <marc@bumblingdork.com> (maintainer)
68056e7f13
Adriaan de Groot (adridg) · 1.1_5
security/vuxml: notify polkit local-privilege-escalation

It was unclear if the actual explot would work on FreeBSD,
since there's no GNU libc which the payload would work on.
The following changes are / have been applied:
- fix in polkit from upstream (from Greg V)
- at kernel level, fixes to disallow argc==0 (from kevans, I think)

PR:	261482
7e3378fc94
Dries Michiels (driesm) · 1.1_5
security/vuxml: Document security/strongswan CVE-2021-45079

PR:	261462
1664a80ef8
Li-Wen Hsu (lwhsu) · 1.1_5
security/vuxml: Add CVE-2021-41990 and CVE-2021-41991 for security/strongswan

PR:		259267
f7875319cd
Cy Schubert (cy) · 1.1_5
security/vuxml: Document aide CVE-2021-45417

Document aide heap buffer overflow.

PR:		261407
Reported by:	Yonas Yanfa <yonas.yanfa@gmail.com>
c404f72d90
Rene Ladan (rene) · 1.1_5
security/vuxml: document www/chromium < 97.0.4692.99

Obtained from:	https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html
094a9b9a02
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Document MySQL vulnerabilities
8b097fde2e
Thomas Zander (riggs) · 1.1_5
security/vuxml: Document Prosody XMPP server advisory 2022-01-13

PR:		261210
Reported by:	thomas@beingboiled.info
Security:	CVE-2022-0217
504d5f3edc
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Document WordPress vulnerabilities
5cb091455d
Matthias Fechner (mfechner) · 1.1_5
security/vuxml: document www/gitlab-ce vulnerabilities
7f9670164c
Yasuhiro Kimura (yasu) · 1.1_5
security/vuxml: Document invalid pointer read vulnerability in ClamAV.
bc8209a61f
Li-Wen Hsu (lwhsu) · 1.1_5
security/vuxml: Document Jenkins Security Advisory 2022-01-12

Sponsored by:	The FreeBSD Foundation
fcba4dc6e4
Thomas Zander (riggs) · 1.1_5
security/vuxml: Document vulnerabilities in net/uniparser before 0.9.6

PR:		261056
Security:	CVE-2021-46141
		CVE-2021-46142
0d1194eee1
Wen Heping (wen) · 1.1_5
security/vuxml: Document django multiple vulnerabilities.
79dcec7b6d
Fernando Apesteguía (fernape) · 1.1_5
security/vuxml: document routinator vulnerabilities
e3250a9a69
Rene Ladan (rene) · 1.1_5
security/vuxml: document www/chromium < 97.0.4692.71

While here add definitions for 2022, as this is the first vuxml commit
of the year.  This cannot be done in its own commit because `make
  validate` complains in that case (even with a 0-byte vuln-2022.xml).

Obtained from:	https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html
355c650718
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Document Roundcube vulnerability
b71e61991b
Tijl Coosemans (tijl) · 1.1_5
security/vuxml: Document Mbed TLS advisory 2021-12

Security:	https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2021-12
e362772ad1
Philip Paeps (philip) · 1.1_5
security/vuxml: OpenDMARC 1.4.1 vulnerability

PR:		260594
06c4c6be86
Philip Paeps (philip) · 1.1_5
security/vuxml: OpenDMARC 1.3.2 vulnerabilities

PR:		240505
af45137ac9
Steve Wills (swills) · 1.1_5
security/vuxml: document minio issue
8885feadbe
Thierry Thomas (thierry) · 1.1_5
security/vuxml: add an entrey for ReDoS in graphics/py-pillow

Security:	CVE-2021-23437
4019e413fc
Romain Tartière (romain) · 1.1_5
security/vuxml: Document more Log4Shell vulnerabilities

With hat:	opensearch
5e1978e349
Don Lewis (truckman) · 1.1_5
security/vuxml: Document opengrok RCE CVE-2021-2322
49ba7b28f0
Wen Heping (wen) · 1.1_5
security/vuxml: Document mediawiki multiple vulnerabilities
968c1407f5
Dave Cottlehuber (dch) · 1.1_5
security/vuxml: add graylog RCE via log4j CVE-2021-45046

Security:       CVE-2021-45046
Sponsored by:	SkunkWerks, GmbH
919580464f
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Document Apache httpd vulnerabilities
13dbc3edb3
Matthew Seaman (matthew) · 1.1_5
security/vuxml: add two grafana security advisories

Moderate severity directory traversal vulnerabilities for .csv
(CVE-2021-43815) and .md (CVE-2021-43813) files.

PR:		260358, 260401

Reported by:	Boris Kozun (maintainer), ohauer
adfdbdd183
Alexander Leidinger (netchild) · 1.1_5
security/vuxml: add serviio (log4j)
b864713c23
« newest← newerpage 37 of 167older →oldest »