CVE and update status of the FreeBSD ports tree3,541 unaddressed CVEs in 711 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · daf6d105b8
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,343)

Rene Ladan (rene) · 1.1_4
Document new vulnerabilities in www/chromium < 85.0.4183.102

Obtained from:	https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html
5e0537a255
Xin LI (delphij) · 1.1_4
Sigh, fix previous entry as it's already documented, combine the information into previous entry.
130bd47749
Xin LI (delphij) · 1.1_4
Document mpd multiple vulnerabilities.
3cf2794ffa
Eugene Grosbein (eugen) · 1.1_4
Document remotely exploitable crash in the mpd5.

Reported by:	chennan at SourceForge
Obtained from:	http://mpd.sourceforge.net/doc5/mpd4.html#4
f5465e43bd
Tijl Coosemans (tijl) · 1.1_4
Document Mbed TLS 2020-09-1 and 2020-09-2.

Security:	https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-09-1
Security:	https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-09-2
df19ff75c1
Tijl Coosemans (tijl) · 1.1_4
Document GNUTLS-SA-2020-09-04.

Security:	https://gnutls.org/security-new.html#GNUTLS-SA-2020-09-04
cd91da0ddc
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4
Update jasper vulnerability
f0dd6a6ecb
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4
Document Django vulnerability
aca0331314
Adam Weinberger (adamw) · 1.1_4
security/vuxml: Fix gnupg version range specification

Thanks to swills for pointing me to the error here.

PR:		249110
Reported by:	jjuanino gmail
97bd56c544
Li-Wen Hsu (lwhsu) · 1.1_4
Fix format
48b2cc7d4b
Adam Weinberger (adamw) · 1.1_4
vuxml: Add entry for gnupg 2.2.21 - 2.2.22
672ce5d301
Philip Paeps (philip) · 1.1_4
security/vuxml: add FreeBSD SA-20:26.dhclient
f78f8bc162
Philip Paeps (philip) · 1.1_4
security/vuxml: add FreeBSD SA-20:25.sctp
52a9605084
Philip Paeps (philip) · 1.1_4
security/vuxml: add FreeBSD SA-20:24.ipv6
986e599a69
Matthias Fechner (mfechner) · 1.1_4
Document gitlab vulnerabilities.
df941c88fb
Dmitri Goutnik (dmgk) · 1.1_4
security/vuxml: Document lang/go vulnerability
8d14a6949f
Tobias C. Berner (tcberner) · 1.1_4
security/vuxml: document vulnerability in ark
fc5c7433e8
Craig Leres (leres) · 1.1_4
security/vuxml: Mark php72, php73, and php74 vulnerable as per:

https://www.php.net/ChangeLog-7.php#PHP_7_4
    https://www.php.net/ChangeLog-7.php#PHP_7_3
    https://www.php.net/ChangeLog-7.php#PHP_7_2

The phar_parse_zipfile function had [a] use-after-free vulnerability
because of [a] mishandling of the actual_alias variable.

Security:	CVE-2020-7068
1eab12760e
Rene Ladan (rene) · 1.1_4
Document new vulnerabilities in www/chromium < 85.0.4183.83
51af93a416
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4
Document jasper vulnerability
9c18d40b7a
Niclas Zeising (zeising) · 1.1_4
vuxml: Document xorg-server and libX11 vulns

Document newly announced vulnerabilities in libX11 and xorg-server.
5ff4f6245e
Matthias Fechner (mfechner) · 1.1_4
Updated entry for gitlab to clarify that the previously reported version does not fix the problem. Please also see this upstream issue: https://gitlab.com/gitlab-org/gitlab/-/issues/233881
a89892bf02
Matthias Andree (mandree) · 1.1_4
vuln.xml: add chrony < 3.5.1 pidfile symlink vulnerability

Security:	719f06af-e45e-11ea-95a1-c3b8167b8026
Security:	CVE-2020-14367
54b44bff84
Ryan Moeller (freqlabs) · 1.1_4
security/vuxml: Document sysutils/openzfs-kmod issues

PR:		248787
Reported by:	Andrew Walker
Reviewed by:	wg
Approved by:	wg (ports)
Sponsored by:	iXsystems, Inc.
Differential Revision:	https://reviews.freebsd.org/D26121
b0d91d98c5
Dmitri Goutnik (dmgk) · 1.1_4
security/vuxml: Document textproc/elasticsearch6 vulnerability

PR:		248761
Submitted by:	Juraj Lutter <juraj@lutter.sk> (maintainer)
7276747700
Niclas Zeising (zeising) · 1.1_4
vuxml: Document dns/adns security issues

Document several securiy issues in dns/adns.
While here, fix whitespace in adjacent entries, as reported by make
validate.
3cee13ce15
Lars Engels (lme) · 1.1_4
Document icingaweb2 vulnerability
1843ae0614
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4
Document curl vulnerability
3cc8f6d211
Wen Heping (wen) · 1.1_4
- Update a cvename entry
be3d82501c
Wen Heping (wen) · 1.1_4
- Document python37 and python36 multiple vulnerabilities

PR:		248751
Submitted by:	mwalker@carbonhouse.com
4bb51dc8e7
Niclas Zeising (zeising) · 1.1_4
vuxml: Document security/trousers issues

Reapply r545263, but do it properly this time.
Document security issues in security/trousers.
4951d0f103
Glen Barber (gjb) · 1.1_4
Revert r545263, which excludes the package name, version(s) affected, and includes "INSERT BLOCKQUOTE URL HERE" for a URL, suggesting the 'make validate' target was clearly not executed.
bcba2bb3c1
Niclas Zeising (zeising) · 1.1_4
vuxml: Document security issues in security/trousers
89d7a12642
Rene Ladan (rene) · 1.1_4
Document new vulnerability in www/chromium < 84.0.4147.135
09551cd8d2
Florian Smeets (flo) · 1.1_4
Document ceph vulnerability

PR:		248673
Submitted by:	Willem Jan Withagen <wjw@digiware.nl>
4c51f2fe71
Li-Wen Hsu (lwhsu) · 1.1_4
Document Jenkins Security Advisory 2020-08-17

Sponsored by:	The FreeBSD Foundation
310173619e
Rodrigo Osorio (rodrigo) · 1.1_4
security/vuxml: Update rsync issues with zlib
613f32fa9f
Steve Wills (swills) · 1.1_4
Document py-ecdsa issue
73e70997c1
Danilo G. Baio (dbaio) · 1.1_4
security/vuxml: Document net-mgmt/snmptt issue

PR:		248162
Reported by:	nistor@snickers.org
bd8200e013
Larry Rosenman (ler) · 1.1_4
security/vuxml: mail/dovecot multiple vulnerabilities.
d0c0209b77
Matthias Andree (mandree) · 1.1_4
graphics/ilmbase, graphics/openexr: mention security fixes in v2.5.3

No CVE numbers available at this time.

Security:	b1d6b383-dd51-11ea-a688-7b12871ef3ad
fb28a3886d
Li-Wen Hsu (lwhsu) · 1.1_4
Document Jenkins Security Advisory 2020-08-12

Sponsored by:	The FreeBSD Foundation
38f33bbc7a
Rene Ladan (rene) · 1.1_4
Document new vulnerabilities in www/chromium < 84.0.4147.125
85387e39d5
Romain Tartière (romain) · 1.1_4
Document puppetdb5 vulnerability
a5b131e507
Danilo Egea Gondolfo (danilo) · 1.1_4
- Document ftp/bftpd vulnerabilities
15b8ea2143
Kurt Jaeger (pi) · 1.1_4
security/vuxml: add www/trafficserver entry for CVE-2020-9494

PR:		247713
Submitted by:	spam123@bitbert.com
35410e120d
Bernard Spil (brnrd) · 1.1_4
security/vuxml: www/mod_http2 also vulnerable to latest Apache httpd vulns
756d45957a
Bernard Spil (brnrd) · 1.1_4
security/vuxml: Add Apache httpd vulnerabilities
3c7fe401d7
Dmitri Goutnik (dmgk) · 1.1_4
security/vuxml: Document lang/go vulnerability
126df74d0d
Matthias Fechner (mfechner) · 1.1_4
Document gitlab-ce vulnerabilities.
cd9d8addb6
« newest← newerpage 47 of 167older →oldest »