CVE and update status of the FreeBSD ports tree3,623 unaddressed CVEs in 713 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 99e0fd1e6e
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,341)

Guangyuan Yang (ygy) · 1.1_5
security/vuxml: Document vulnerability in net-mgmt/prometheus2

PR:		255976
Security:	CVE-2021-29622
Approved by:	lwhsu (mentor)
6890a3c0b2
Adriaan de Groot (adridg) · 1.1_5
security/vuxml: Document graphics/wayland <= 1.19.0
0bd31cd6df
Philip Paeps (philip) · 1.1_5
security/vuxml: add FreeBSD SA-21:12.libradius
bbd2f19ba5
Philip Paeps (philip) · 1.1_5
security/vuxml: add FreeBSD SA-21:11.smap
23f6f30d5c
Rene Ladan (rene) · 1.1_5
vuln.xml: Document chromium < 91.0.4472.77

Obtained from:	https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop_25.html
05bea260ba
Danilo G. Baio (dbaio) · 1.1_5
security/vuxml: Document net/libzmq4 issues

PR:		255102
Reported by:	Thomas Petig <thomas@petig.eu>
Security:	CVE-2019-13132
Security:	CVE-2020-15166
b48ef2625f
Sergey A. Osokin (osa) · 1.1_5
security/vuxml: document vulnerability in www/nginx and www/nginx-devel

Security:	CVE-2021-23017
1109a4b0c6
Palle Girgensohn (girgen) · 1.1_5
databases/pg_partman: arbitrary code execution

Security:	CVE-2021-33204
4132a67c63
Tobias C. Berner (tcberner) · 1.1_5
security/vuxml: document vulnerability in texptroc/expat2

Security:	CVE-2013-0340
PR: 		256121
4ff544422f
Tobias C. Berner (tcberner) · 1.1_5
security/vuxml: document vulnerability in texptroc/libxml2

PR:		256093
Security:	CVE-2021-3541
d4a41873b3
Mateusz Piotrowski (0mp) · 1.1_5
security/vuxml: Add example cvename tag to template

Reviewed by:	riggs
Approved by:	riggs (ports secteam)
Differential Revision:  https://reviews.freebsd.org/D30231
1e3fa6237a
Palle Girgensohn (girgen) · 1.1_5
databases/postgresql??-server: multiple security issues
4106061834
Neel Chauhan (nc) · 1.1_5
security/vuxml: Add entry for net-im/prosody

PR:	255845, 255849
b1a6389106
Thierry Thomas (thierry) · 1.1_5
security/vuxml: declare vulnerabilities for ImageMagick6

PR:		255818
e34fc76d33
Thierry Thomas (thierry) · 1.1_5
security/vuxml: declare vulnerabilities for ImageMagick7

PR:		255802
0e7c332de8
Thierry Thomas (thierry) · 1.1_5
security/vuxml: add vunerabilities fixed in 8.2.0

PR:		255361
b1fa93c1a7
Rene Ladan (rene) · 1.1_5
Document vulnerabilities in Chromium < 90.0.4430.212

Obtained from:	https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop.html
8a46088e42
Neel Chauhan (nc) · 1.1_5
security/vuxml: Add entry for net-im/py-matrix-synapse
d110fd22b0
Hajimu UMEMOTO (ume) · 1.1_5
security/vuxml: cyrus-imapd -- Remote authenticated users could bypass intended access restrictions on c\ertain server annotations.
ca2859597c
Christian Weisgerber (naddy) · 1.1_5
security/vuxml: Document FLAC out-of-bounds read
11845a30ff
Matthias Andree (mandree) · 1.1_5
security/vuxml: add CVE #s for OpenEXR 2.5.4 fixes
487828600d
Po-Chuan Hsieh (sunpoet) · 1.1_5
security/vuxml: Document rails vulnerability
066d3dbe5c
Dmitri Goutnik (dmgk) · 1.1_5
security/vuxml: Document lang/go vulnerability
bf7bd67c9b
Mateusz Piotrowski (0mp) · 1.1_5
security/vuxml: Document Ansible vulnerability
56db8443c9
Wen Heping (wen) · 1.1_5
security/vuxml : Document django's multiple vulnerabilities
f468496e18
Wen Heping (wen) · 1.1_5
Document Python's multiple vulnerabilities
1388ee6c4c
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Update latest MySQL vuln entry

* Adds CVE numbers
 * Mark MariaDB partially affected
ebf298637d
Sergey A. Osokin (osa) · 1.1_5
security/vuxml: document recent vulnerabilities with redis ports. PR:	255580
f7743680c1
Koichiro Iwao (meta) · 1.1_5
security/vuxml: Document command injection vulnerability in RDoc

PR:		255552
Reported by:	Yasuhiro Kimura <yasu@utahime.org>
Security:	CVE-2021-31799
4689236288
Kurt Jaeger (pi) · 1.1_5
security/vuxml: add mail/sympa CVE

PR:		252464
5271faba4b
Timur I. Bakeyev (timur) · 1.1_5
Add an entry about Samba vulnerability CVE-2021-20254:

Negative idmap cache entries can cause incorrect group entries in the Samba file server process token.

PR:
Submitted by:
Reported by:
Reviewed by:
Approved by:
Obtained from:
MFC after:
MFH:
Relnotes:
Security:	CVE-2021-20254
Sponsored by:
Differential Revision:
265e9a670c
Don Lewis (truckman) · 1.1_5
security/vuxml: Update fixed version of openoffice-devel.

CVE-2021-30245 is fixed in version 1619649022 of
editors/openoffice-devel.
4eea2e58a1
Matthias Fechner (mfechner) · 1.1_5
Document gitlab-ce vulnerabilities.
199adc301b
Matthias Fechner (mfechner) · 1.1_5
Document vulnerabilities for www/rubygem-carrierwave.
41ffee85fe
Neel Chauhan (nc) · 1.1_5
mail/sympa: add vuxml entry

PR:		255455
Submitted by:	Geoffroy Desvernay <dgeo@centrale-marseille.fr> (maintainer)
10ad22f83c
Rene Ladan (rene) · 1.1_5
Document new vulns, www/chromium < 90.0.4430.93

Obtained from:	https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html
1eeb9f4c46
Palle Girgensohn (girgen) · 1.1_5
security/shibboleth.sp: add more information to security advisory
7e0f5d9dfd
Palle Girgensohn (girgen) · 1.1_5
security/shibboleth-sp: add entry for upcoming vulnerability

The details are not yet disclosed.
f0d60c4725
Craig Leres (leres) · 1.1_5
security/vuxml: Mark zeek < 4.0.1 as vulnerable as per:

https://github.com/zeek/zeek/releases/tag/v4.0.1

Fix null-pointer dereference when encountering an invalid enum name
in a config/input file that tries to read it into a set[enum]. For
those that have such an input feed whose contents may come from
external/remote sources, this is a potential DoS vulnerability.
53d0f5e5bc
Matthias Andree (mandree) · 1.1_5
security/vuxml: add devel/openvpn < 2.5.2 entry

Security:	CVE-2020-15078
Security:	efb965be-a2c0-11eb-8956-1951a8617e30
d1184f27e5
Rene Ladan (rene) · 1.1_5
Document new vulnerabilities in www/chromium < 90.0.4430.85

Obtained from:	https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html
d70c998cc6
Bryan Drewery (bdrewery) · 1.1_5
Another openssh version fix for CVE-2021-28041.

Reported by:	leres
c55e97c0f3
Li-Wen Hsu (lwhsu) · 1.1_5
Document Jenkins Security Advisory 2021-04-20

Sponsored by:	The FreeBSD Foundation
87da0092a4
Bryan Drewery (bdrewery) · 1.1_5
Fix openssh version in entry for CVE-2021-28041

Reported by:	leres
da89336b8d
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Add MySQL vulns
7dc3c800f6
Don Lewis (truckman) · 1.1_5
security/vuxml: Document OpenOffice vulnerability CVE-2021-30245
940cf9711a
Kevin Bowling (kbowling) · 1.1_5
devel/maven: update to 3.8.1

This is not just a bugfix as it contains three features that cause a change of
default behavior (external HTTP insecure URLs are now blocked by default): your
builds may fail when using this new Maven release, if you use now blocked
repositories. Please check and eventually fix before upgrading.

Changes http://maven.apache.org/docs/3.8.1/release-notes.html

PR:		255161
Approved by:	Jonathan Chen <jonc@chen.org.nz> (maintainer)
Security:	CVE-2021-26291
		CVE-2020-13956
887cfadcdf
Brad Davis (brd) · 1.1_5
Document sysutils/consul vulnerabilities
7031bbf81b
Mateusz Piotrowski (0mp) · 1.1_5
Document accountsservice vulnerability
d227a2fea9
Mateusz Piotrowski (0mp) · 1.1_5
Document textproc/mdbook vulnerability
bc32e1b3c9
« newest← newerpage 42 of 167older →oldest »