CVE and update status of the FreeBSD ports tree3,621 unaddressed CVEs in 714 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 99e0fd1e6e
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,341)

Neel Chauhan (nc) · 1.1_5
security/vuxml: Add provoxy vulnerability
50ddf2642a
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Document OpenSSL 3.0 vulnerability
6b9cf2b05c
Alexander Leidinger (netchild) · 1.1_5
security/vuxml: add security/bastillion (log4j)
065c287300
Rene Ladan (rene) · 1.1_5
security/vuxml: add www/chromium < 96.0.4664.110

Obtained from:	https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html
723ef719e3
Ashish SHUKLA (ashish) · 1.1_5
security/vuxml: Document vulnerabilities in Matrix clients

Security:	0dcf68fa-5c31-11ec-875e-901b0e9408dc
c378636ba0
Ashish SHUKLA (ashish) · 1.1_5
security/vuxml: Fix tab/spaces in openhab2, and solr entries

This was breaking make validate for the entry I am trying to add

While here also purge the likely accidentally added file vuln.xml.unexpanded
in 00bad07fd782
590bbd1574
Matthias Fechner (mfechner) · 1.1_5
security/vuxml: fixed solr entry, only version 8.11.1 will fix it

The fixed version is not released yet.
00bad07fd7
Alexander Leidinger (netchild) · 1.1_5
security/vuxml: fix Solr XML and add openhab (log4shell)
b0989e442d
Matthias Fechner (mfechner) · 1.1_5
security/vuxml: added vulnerability entry for solr
01f7fdd3f2
Romain Tartière (romain) · 1.1_5
security/vuxml: Document OpenSearch might be vulnerable to Log4Shell

With hat:	opensearch
4486ff8b90
Xin LI (delphij) · 1.1_5
security/vuxml: Document multiple vulnerabilities of grafana8

PR:		ports/259638
615d6690d6
Carlo Strub (cs) · 1.1_5
security/vuxml: p7zip CVE-2018-10115

PR:		228239
Reported by:	Dani <i.dani@outlook.com>
Security:	CVE-2018-10115
221e594aa4
Dave Cottlehuber (dch) · 1.1_5
security/vuxml: document sysutils/graylog log4j vuln

Reported by:	https://github.com/Graylog2/graylog2-server/commit/d3e441f1126f0dc292e986879039a87c59375b2a
Security:	CVE-2021-44228
4080607b5e
Guangyuan Yang (ygy) · 1.1_5
security/vuxml: Document lang/go vulnerabilities
cf5e0ff863
Rene Ladan (rene) · 1.1_5
security/vuxml: document www/chromium < 96.0.4664.93

Obtained from:	https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html
61be3bb83a
Matthias Fechner (mfechner) · 1.1_5
security/vuxml: document gitlab vulnerabilities
946f6a79bc
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Record NSS vulnerability
30e0367d30
Matthias Andree (mandree) · 1.1_5
security/vuxml: mail/mailman < 2.1.38 CSRF vuln.

Security:	CVE-2021-44227
Security:	0d6efbe3-52d9-11ec-9472-e3667ed6088e
f1e61db579
Mateusz Piotrowski (0mp) · 1.1_5
security/vuxml: Mark java/bouncycastle as vulnerable where applicable

Some of the reported java/bouncycastle15 security issues affect the
legacy port of java/bouncycastle as well. Update vuxml.xml accordingly.

Sponsored by:	Modirum MDPay
Sponsored by:	Klara, Inc.
a1d3393586
Yasuhiro Kimura (yasu) · 1.1_5
security/vuxml: Document cookie prefix spoofing in rubygem-cgi
e7ee2d3aeb
Yasuhiro Kimura (yasu) · 1.1_5
security/vuxml: Document buffer overrun in rubygem-cgi
81d7209f74
Yasuhiro Kimura (yasu) · 1.1_5
security/vuxml: Update affecting packages of 6916ea94-4628-11ec-bbe2-0800270512f4

This vulnerability also affects ruby ports.
1ea17b42ae
Ashish SHUKLA (ashish) · 1.1_5
security/vuxml: Document vulnerability in Matrix Synapse

PR:		259994
Reported by:	Sascha Biberhofer <ports at skyforge dot at>
Security:	27aa2253-4c72-11ec-b6b9-e86a64caca56
Security:	CVE-2021-41281
c6782b5ef5
Guangyuan Yang (ygy) · 1.1_5
security/vuxml: Document archivers/advancecomp vulnerabilities

PR:		259534
866e2e83cf
Rene Ladan (rene) · 1.1_5
security/vuxml: document www/chromium < 96.0.4664.45

Obtained from:	https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html
aead957467
Yasuhiro Kimura (yasu) · 1.1_5
security/vuxml: Document denial of service vunlerability in rubygem-date
2bcc2e1054
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Mark roundcube vuln in quarterly
51fac43dcb
Matthias Andree (mandree) · 1.1_5
security/vuxml: also list mailman exim4/postfix pkgs

The initial commit 162e701a5982 omitted listing the
-exim4 and -postfix packages. Make up for that.

Security:       9d7a2b54-4468-11ec-8532-0d24c37c72c8
Security:       CVE-2021-43331
Security:       CVE-2021-43332
881fe6849a
Matthias Andree (mandree) · 1.1_5
security/vuxml: document mail/mailman < 2.1.37 issues

- A potential XSS attack via the user options page has been reported by
  Harsh Jaiswal.  This is fixed.  CVE-2021-43331 (LP: #1949401)

LP: A crafted URL to the user options page can execute arbitrary
    javascript.

- A potential for for a list moderator to carry out an off-line brute force
  attack to obtain the list admin password has been reported by Andre
  Protas, Richard Cloke and Andy Nuttall of Apple.  This is fixed.
  CVE-2021-43332 (LP: #1949403)

LP: The CSRF token for the admindb page contains an encrypted version of
    the list admin password which could potentially be cracked by a
    moderator via an off-line brute force attack.

Security:	9d7a2b54-4468-11ec-8532-0d24c37c72c8
Security:	CVE-2021-43331
Security:	CVE-2021-43332
162e701a59
Palle Girgensohn (girgen) · 1.1_5
security-vuxml: Add URL for PostgreSQL release notes
adbbf5c304
Palle Girgensohn (girgen) · 1.1_5
security/vuxml: Document latest PostgreSQL vulnerability

* CVE-2021-23214
* CVE-2021-23222
e48db637c0
Romain Tartière (romain) · 1.1_5
security/vuxml: Document latest Puppet issues

* CVE-2021-27023
* CVE-2021-27025
fca6e90dd2
Timur I. Bakeyev (timur) · 1.1_5
security/vuxml: Document latest Samba security issues.

* CVE-2020-25717
* CVE-2020-25718
* CVE-2020-25719
* CVE-2020-25721
* CVE-2020-25722
* CVE-2016-2124
* CVE-2021-3738
* CVE-2021-23192
756a109262
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Update latest MySQL entry

* Mark MariaDB vulnerable
 * Add list of CVE's
e9c90a2c89
Kai Knoblich (kai) · 1.1_5
security/vuxml: Document net/pyrad security issues

PR:		259332
5966fe8597
Guangyuan Yang (ygy) · 1.1_5
security/vuxml: Document lang/go vulnerabilities
e7ce52cff0
Li-Wen Hsu (lwhsu) · 1.1_5
security/vuxml: Document Jenkins Security Advisory 2021-11-04

Sponsored by:	The FreeBSD Foundation
c5bb74d2a3
Li-Wen Hsu (lwhsu) · 1.1_5
security/vuxml: Document security issues in gitlab <= 1.15.5

PR:		259548
fd3f53667c
Matthias Fechner (mfechner) · 1.1_5
security/vuxml: Document gitlab vulnerabilities
714b88f8c4
Rene Ladan (rene) · 1.1_5
security/vuxml: add www/chromium < 95.0.4638.69

Obtained from:	https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html
e3b412ec75
Sergey A. Osokin (osa) · 1.1_5
security/vuxml: fix openssl-devel-3.0.0-alpha12 package version
f19da96474
Yasuhiro Kimura (yasu) · 1.1_5
security/vuxml: Document possible RCE vulnerability in fail2ban.

Differential Revision:	https://reviews.freebsd.org/D32575
653d4d258c
Yasuhiro Kimura (yasu) · 1.1_5
security/vuxml: Document snapshot authentication bypass vulnerability in Grafana

PR:		258962
Differential Revision:	https://reviews.freebsd.org/D32667
e2ee21b6d9
Steve Wills (swills) · 1.1_5
security/vuxml: document minio issue
268b61bcb6
Matthias Andree (mandree) · 1.1_5
security/vuxml: two mail/mailman < 2.1.35 vulns

Security:	CVE-2021-42096
Security:	CVE-2021-42097
Security:	8d65aa3b-31ce-11ec-8c32-a14e8e520dc7
07cb3b91b4
Rene Ladan (rene) · 1.1_5
security/vuxml: add www/chromium < 95.0.4638.54

Obtained from:	https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html
578ec26811
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Document 2021Q4 MySQL vulnerabilities
5743630290
Bradley T. Hughes (bhughes) · 1.1_5
security/vuxml: document Node.js October 2021 Security Releases

https://nodejs.org/en/blog/vulnerability/oct-2021-security-releases/

Sponsored by:	Miles AS
5cc1cb529d
Bryan Drewery (bdrewery) · 1.1_5
security/vuxml: Update OpenSSH CVE-2021-41617 fix for quarterly commit
dd274bdd8a
Bryan Drewery (bdrewery) · 1.1_5
security/vuxml: Document OpenSSH CVE-2021-41617
3d46198332
« newest← newerpage 38 of 167older →oldest »