CVE and update status of the FreeBSD ports tree3,633 unaddressed CVEs in 713 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 99e0fd1e6e
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,341)

Matthias Fechner (mfechner) · 1.1_5
Document gitlab vulnerabilities.
d6ac57abb9
Rene Ladan (rene) · 1.1_5
Document new vulnerabilities in www/chromium < 90.0.4430.72
4ec0339f73
Rene Ladan (rene) · 1.1_5
Document new vulnerabilities in www/chromium < 89.0.4389.128

Obtained from:	https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop.html
34921a9d57
Emmanuel Vadot (manu) · 1.1_5
security/vuxml: Document xorg-server vuln
f7859bc734
Adam Weinberger (adamw) · 1.1_5
security/vuxml: Add entry for gitea < 1.14.0

PR:		254976
Submitted by:	Stefan Bethke
8497a2d690
Steve Wills (swills) · 1.1_5
security/vuxml: Document syncthing issue
6715140e8b
Thomas Zander (riggs) · 1.1_5
security/vuxml: Document information disclosure vulnerability in python. PR:		254780 Reported by:	yasu@utahime.org Security:	CVE-2021-3426
1d4cfc12c8
Thomas Zander (riggs) · 1.1_5
security/vuxml: Document 2 vulnerabilities in ftp/curl Security:	CVE-2021-22876 		CVE-2021-22890

PR:		254772
Reported by:	yasu@utahime.org
1e8993822a
Adam Weinberger (adamw) · 1.1_5
security/vuxml: Add entry for gitea < 1.13.7

PR:	254930
Submitted by:	Stefan Bethke
b3cd19559e
Neel Chauhan (nc) · 1.1_5
Document multiple vulnerabilities in security/clamav

PR:		254861
Submitted by:	Yasuhiro Kimura <yasu AT utahime DOT org>
48c9ebfaf8
Li-Wen Hsu (lwhsu) · 1.1_5
Document Jenkins Security Advisory 2021-04-07

Sponsored by:	The FreeBSD Foundation
80690bd29e
Bradley T. Hughes (bhughes) · 1.1_5
security/vuxml: document Node.js April 2021 Security Releases

https://nodejs.org/en/blog/vulnerability/april-2021-security-releases/
9d9b2b9674
Lewis Cook (lcook) · 1.1_5
security/vuxml: Document upnp stack overflow vulnerability

Approved by:		fernape (mentor)
Differential Revision:	https://reviews.freebsd.org/D29618
01b07b7e02
Philip Paeps (philip) · 1.1_5
security/vuxml: add FreeBSD SA-21:10.jail_mount
86fc557be0
Philip Paeps (philip) · 1.1_5
security/vuxml: add FreeBSD SA-21:09.accept_filter
ea0a0473cb
Philip Paeps (philip) · 1.1_5
security/vuxml: add FreeBSD SA-21:08.vm
f5644310b2
Philip Paeps (philip) · 1.1_5
security/vuxml: add FreeBSD SA to CVE-2021-3449/50

Note that FreeBSD 12.2 prior to FreeBSD 12.2-RELEASE-p5 was vulnerable
to CVE-2021-3449 and CVE-2021-3450.  Reference FreeBSD-SA-21:07.openssl.
5fc1c8e132
Mathieu Arnold (mat) · 1.1_5
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 1.1_5
Remove # $FreeBSD$ from Makefiles.
305f148f48
Koichiro Iwao (meta) · 1.1_5
security/vuxml: Document XML round-trip vulnerability of REXML in Ruby

Document XML round-trip vulnerability of REXML in Ruby.

PR:		254793
Reported by:	Yasuhiro Kimura <yasu@utahime.org>
Security:	CVE-2021-28965
cbbdab46f9
Rene Ladan (rene) · 1.1_5
Add vuln-flat.xml to the ignore list and remove the one committed by accident
5952f85233
Rene Ladan (rene) · 1.1_5
Document new vulnerabilities in www/chromium < 89.0.4389.114

Obtained from:  https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_30.html
a8416100c4
Matthias Fechner (mfechner) · 1.1_5
Document gitlab-ce vulnerabilities.
b1a2d52166
Matthias Andree (mandree) · 1.1_5
security/linux-c7-nettle: mark vulnerable, too

See https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=254355#c14

PR:		254355
Reported by:	Graham Perrin <grahamperrin@gmail.com>
8e13ac939f
Timur I. Bakeyev (timur) · 1.1_5
Add entry about recent Samba4* vulnerabilities:

CVE-2020-27840: An anonymous attacker can crash the Samba AD DC LDAP server by sending easily crafted DNs as part of a bind request. More serious heap corruption is likely also possible.
CVE-2021-20277: User-controlled LDAP filter strings against the AD DC LDAP server may crash the LDAP server.

Security:	CVE-2020-27840
		CVE-2021-20277
2a9edef057
Matthias Andree (mandree) · 1.1_5
vuln.xml: mention nettle < 3.7.2 ECDSA verify bugs

Security:	80f9dbd3-8eec-11eb-b9e8-3525f51429a0
594a30eefc
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Document High OpenSSL vulnerabilities

* While here, fix incorrect year in ec04f3d0-8cd9-11eb-bb9f-206a8a720317
edfebb8964
Cy Schubert (cy) · 1.1_5
security/vuxml: Document spamassassin CVE-2020-1946

PR:		254526
Security:	https://s.apache.org/ng9u9
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-1946
8f5481b3a2
Adam Weinberger (adamw) · 1.1_5
security/vuxml: Add entry for gitea < 1.13.6

PR:		254515
Submitted by:	maintainer
febb67bb59
Adam Weinberger (adamw) · 1.1_5
security/vuxml: Add entry for gitea < 1.13.5

PR:		254468
Submitted by:	maintainer
3c3bab2627
Bryan Drewery (bdrewery) · 1.1_5
OpenSSH CVE-2021-28041 fixed in 8.4.p1_4,1.

Also add flavored package names.
537b19df40
Bryan Drewery (bdrewery) · 1.1_5
Document OpenSSH CVE-2021-28041

PR:	254258
Submitted by:	Yasuhiro Kimura
57c5a601d9
Matthias Fechner (mfechner) · 1.1_5
Document gitlab vulnerability.
020833350b
Matthias Andree (mandree) · 1.1_5
fixup PORTEPOCH for dnsmasq-devel

which used to be at 3 already earlier. Adjust vuxml entry accordingly.

Security:	CVE-2021-3448
Security:	5b72b1ff-877c-11eb-bd4f-2f1d57dafe46
1f95359952
Matthias Andree (mandree) · 1.1_5
fixup version range for dnsmasq[-devel] to 2.85.r1,1 not 2.85r1,1

Security:	5b72b1ff-877c-11eb-bd4f-2f1d57dafe46
Security:	CVE-2021-3448
c367a12fd1
Matthias Andree (mandree) · 1.1_5
vuxml: Add dnsmasq < 2.85 cache poisoning vulnerability.

This affects only certain dnsmasq configurations,
and use of dnsmasq with NetworkManager.

Security:	CVE-2021-3448
68a6c5a227
Steve Wills (swills) · 1.1_5
Document minio issue
4d1f100864
Bernard Spil (brnrd) · 1.1_5
security/vuxml: Document LibreSSL potential use-after-free
ff6ddccf77
Rene Ladan (rene) · 1.1_5
Document new vulnerabilities in www/chromium < 89.0.4389.90

Obtained from:	https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_12.html
165de84995
Chris Rees (crees) · 1.1_5
Document CVE-2015-4645 in sysutils/squashfs-tools

Security:	CVE-2015-4645
3414b5cf63
Fernando Apesteguía (fernape) · 1.1_5
security/vuxml: Fix www/gitea entry.

s/1.13.24/1.13.4

PR:	254130
Reported by:	clubok@gmx.net
9c9217224b
Dmitri Goutnik (dmgk) · 1.1_5
security/vuxml: Document lang/go vulnerabilities
d0dcfadcc7
Neel Chauhan (nc) · 1.1_5
Document vulnerabilities in www/gitea < 1.13.4

PR:		254130
Submitted by:	stb AT lassitu DOT de (maintainer)
e86c9cf97a
Li-Wen Hsu (lwhsu) · 1.1_5
Document vulnerabilities in databases/mantis <2.24.4

PR:		252612
Submitted by:	Zoltan ALEXANDERSON BESSE <zab@zltech.eu>
3eb0a95332
Bradley T. Hughes (bhughes) · 1.1_5
security/vuxml: document Node.js February 2021 Security Releases

https://nodejs.org/en/blog/vulnerability/february-2021-security-releases/

Sponsored by:	Miles AS
bf065a0f49
Matthias Fechner (mfechner) · 1.1_5
Document gitlab vulnerabilities.
5e86414fa9
Guido Falsi (madpilot) · 1.1_5
Report new asterisk vulnerability.
4ba8058c35
Rene Ladan (rene) · 1.1_5
Document new vulnerabilities in www/chromium < 89.0.4389.72

Obtained from:	https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html
d293d664af
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_5
Document jasper vulnerability
9e608c5636
Olli Hauer (ohauer) · 1.1_5
- add CVE entries for saltstack
03ff2cd740
« newest← newerpage 43 of 167older →oldest »