CVE and update status of the FreeBSD ports tree3,541 unaddressed CVEs in 711 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · daf6d105b8
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,343)

Philip Paeps (philip) · 1.1_4
security/vuxml: correct a typo in SA-20:22.sqlite

Pointy hat to:  philip
8e63491f3d
Philip Paeps (philip) · 1.1_4
security/vuxml: add FreeBSD SA-20:23.sendmsg
497616ef80
Philip Paeps (philip) · 1.1_4
security/vuxml: add FreeBSD SA-20:21.usb_net
f52b013f3c
Philip Paeps (philip) · 1.1_4
security/vuxml: add FreeBSD SA to sqlite3 entry

Reference FreeBSD-SA-20:22.sqlite and correct the fixed patch releases
in the recent sqlite3 entry.
6f79e868b5
Jochen Neumeister (joneum) · 1.1_4
add entry for typo3-9 and typo3-10

PR:		248430 248429
Sponsored by:	Netzkommune GmbH
7843b6c9b0
Niclas Zeising (zeising) · 1.1_4
vuxml: Document vulns in xorg-server and libX11

Document two vulnerabilities, one in xorg-server and one in libX11.
The one in libX11 is a heap corruption vulnerability. [1]
The one in xorg-server (and slave ports) is a uninitialized memory
disclosure.  [2]

Security:	CVE-2020-14344[1], CVE-2020-14347 [2]
f7c7499aaa
Wen Heping (wen) · 1.1_4
- Document python38 multiple vulnerabilities
dcfdc903b3
Tobias C. Berner (tcberner) · 1.1_4
security/vuxml: fix randomly introduced typo

Pointy hat:	tcberner
Reported by:	kevans
c2332804ab
Tobias C. Berner (tcberner) · 1.1_4
Document vulnerability in archivers/ark

- fixed in r543704 (head), r543705 (2020Q3)
1476e75969
Rene Ladan (rene) · 1.1_4
Document new vulnerabilities in www/chromium < 84.0.4147.105

Obtained from:	https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html
b2a8d4a58e
Thomas Zander (riggs) · 1.1_4
Document out-of-bounds-read in libsndfile (CVE-2019-3832).

PR:		248268
1f57f61483
Kyle Evans (kevans) · 1.1_4
security/vuxml: document new vulnerability in net/freerdp < 2.2.0

PR:		248198
afa2ebc6f7
Craig Leres (leres) · 1.1_4
security/vuxml: Mark zeek < 3.0.8 as vulnerable as per:

https://github.com/zeek/zeek/releases/tag/v3.0.8

Two potential stack overflows.
afc3684437
Jochen Neumeister (joneum) · 1.1_4
Add entry for Cacti

PR:		248140
Sponsored by:	Netzkommune GmbH
068860a5e5
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4
Document wagtail vulnerability
390506a0bb
Jochen Neumeister (joneum) · 1.1_4
Fix typo

Reported by:	cmt
Sponsored by:	Netzkommune GmbH
e7169d408c
Jochen Neumeister (joneum) · 1.1_4
Add entry for pango

Sponsored by:	Netzkommune GmbH
2f61f9fa20
Jochen Neumeister (joneum) · 1.1_4
Fix typo

Sponsored by:	Netzkommune GmbH
f47b428eed
Jochen Neumeister (joneum) · 1.1_4
modified the tomcat entry and add CVE-2020-11996

PR:		247555
Sponsored by:	Netzkommune GmbH
569e7f20b3
Jochen Neumeister (joneum) · 1.1_4
Add entry for www/tomcat{7,85,9,-devel}

PR:		247975
Sponsored by:	Netzkommune GmbH
240d50eff0
Cy Schubert (cy) · 1.1_4
Fixup affected versions, imprecisely.

Reported by:	mat
705ef39311
Wen Heping (wen) · 1.1_4
- Document multiple vulnerabilities of python38 - Fix 2 typos in my last commit
0752463731
Guido Falsi (madpilot) · 1.1_4
Document multiple vulnerabilities in VirtualBox>

PR:		244212
Submitted by:	Nikita Stepanov <nikitastepan0v@bk.ru>
f2cfaf9f52
Kurt Jaeger (pi) · 1.1_4
security/vuxml: Document multiple vulnerabilities in clamav

- CVE-2020-3350, CVE-2020-3327, CVE-2020-3481

PR:		248027
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>
3a321b9f21
Matthias Andree (mandree) · 1.1_4
vuln db: record OpenEXR/ilmbase < 2.5.2 vulnerabilities

Security:	714e6c35-c75b-11ea-aa29-d74973d1f9f3
f020006913
Rene Ladan (rene) · 1.1_4
Document new vulnerabilities in www/chromium < 84.0.4147.89

Obtained from:	https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
c501061871
Li-Wen Hsu (lwhsu) · 1.1_4
Document Jenkins Security Advisory 2020-07-15

Sponsored by:	The FreeBSD Foundation
13840791cc
Bernard Spil (brnrd) · 1.1_4
security/vuxml: Add MySQL vulns from pre-announce
eea6653222
Philip Paeps (philip) · 1.1_4
security/vuxml: update CVE-2020-1266[23] entry

Note vulnerable FreeBSD releases and add a reference to
FreeBSD-SA-20:19.unbound.
d6ec7a2998
Philip Paeps (philip) · 1.1_4
security/vuxml: add FreeBSD SA-20:20.ipv6
d363364203
Philip Paeps (philip) · 1.1_4
security/vuxml: add FreeBSD SA-20:18.posix_spawnp
3e7c415e5c
Jochen Neumeister (joneum) · 1.1_4
Add entry for www/mybb

Sponsored by:	Netzkommune GmbH
9a21b35851
Cy Schubert (cy) · 1.1_4
Correct FreeBSD versions vulnerable to the latest sqlite3 vulnerabilities. This will be updated by so@ at a future date.

PR:		247865
Submitted by:	Yasuhiro KIMURA <yasu at utahime.org>
Reported by:	Yasuhiro KIMURA <yasu at utahime.org>
Approved by:	ports-secteam (jonenum)
fcca8344da
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4
Document rubygem-kramdown vulnerability
46aaa74b2c
Tijl Coosemans (tijl) · 1.1_4
Document Mbed TLS security advisory 2020-07.

Security:	https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-07
231c993a00
Matthias Fechner (mfechner) · 1.1_4
Document gitlab vulnerability.
4a6ea1c201
Wen Heping (wen) · 1.1_4
- Document python37 multiple vulnerabilities
1b52576459
Timur I. Bakeyev (timur) · 1.1_4
Add entry about Samba vulnerabilities CVE-2020-10730, CVE-2020-10745, CVE-2020-10760, CVE-2020-14303

PR:		247725
Security:	CVE-2020-10730
		CVE-2020-10745
		CVE-2020-10760
		CVE-2020-14303
58dd6baf1d
Jochen Neumeister (joneum) · 1.1_4
Add entry for anydesk

PR:		247406
Sponsored by:	Netzkommune GmbH
4dc97b03cd
Li-Wen Hsu (lwhsu) · 1.1_4
Document net-im/py-matrix-synapse security issue before 1.15.2

PR:		247720
Submitted by:	Sascha Biberhofer <ports@skyforge.at>
44e4942ff9
Tobias C. Berner (tcberner) · 1.1_4
Document vulnerability in dbus < 2.12.18

* See [1] for details.
* The port is already updated to 2.12.18.

[1] https://gitlab.freedesktop.org/dbus/dbus/-/issues/294

PR:		247340
Submitted by:	rob2g2 <spam123@bitbert.com>
Security:	CVE-2020-12049
d149552d70
Matthias Fechner (mfechner) · 1.1_4
Document gitlab vulnerabilities.
c97bf9210c
Yuri Victorovich (yuri) · 1.1_4
security/vuxml update: coturn CVE-2020-4067 for net/coturn
d29c828393
Jochen Neumeister (joneum) · 1.1_4
Add entrx for dns/powerdns-recursor

PR:		247707
Submitted by:	Ralf van der Enden <tremere@cainites.net>
Sponsored by:	Netzkommune GmbH
8036de8a56
Jochen Neumeister (joneum) · 1.1_4
Add entry for Drupal 7

Sponsored by:	Netzkommune GmbH
d9efe26e63
Koichiro Iwao (meta) · 1.1_4
Document xrdp CVE-2020-4044 vulnerability
91b6df7420
Kurt Jaeger (pi) · 1.1_4
security/vuxml: add mongodb CVE entry

- See also: https://jira.mongodb.org/browse/SERVER-45472

PR:		247392
Submitted by:	Ronald Klop <ronald-lists@klop.ws>
ea8b222760
Christian Weisgerber (naddy) · 1.1_4
Document libvorbis vulnerabilities CVE-2017-14160 and CVE-2018-10392.
65becbe58a
Matthias Andree (mandree) · 1.1_4
security/putty: two security vulnerabilities in versions < 0.74

Security:	6190c0cd-b945-11ea-9401-2dcf562daa69
Security:	CVE-2020-14002
Security:	FZI-2020-5
d7af2c86ac
Niclas Zeising (zeising) · 1.1_4
vuln.xml: Adjust sqlite version in sqlite entry

Update the sqlite versions affected in the latest sqlite entry.  The entry
failed to take PORTEPOCH into account, and without this fix pkg audit fails
to mark sqlite as vulnerable when it's not updated to the latest version,
since any version with PORTEPOCH set will always be greater than any version
without.

PR:		247149
1b2f532674
« newest← newerpage 48 of 167older →oldest »