CVE and update status of the FreeBSD ports tree3,535 unaddressed CVEs in 701 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 4fa1ce71cd
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,350)

Wen Heping (wen) · 1.1_4
- Document python 3.6 multiple vulnerabilities

PR:		238952
Submitted by:	wenheping2000@hotmail.com(myself)
Reviewed by:	koobs@
a45a66c21a
Tijl Coosemans (tijl) · 1.1_4
Add Linux packages to the latest libssh2 entry.  Also link to all CVEs.
ccd5a49f53
Tobias Kortkamp (tobik) · 1.1_4
Document webkit2-gtk3 vulnerabilities

PR:		239003
67f0f37998
Wen Heping (wen) · 1.1_4
- Document mediawiki multiple vulnerabilities
4e58056368
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4
Document ettercap vulnerability
98b573406d
Matthias Fechner (mfechner) · 1.1_4
Documented several gitlab security vulnerabilities.
e21d0f2ede
Dmitry Marakasov (amdmi3) · 1.1_4
Document SDL2_image vulnerabilities
2718e6ea4a
Kai Knoblich (kai) · 1.1_4
security/vuxml: Document irc/irssi issue

PR:		238892
Security:	CVE-2019-13045
c2274ec95e
Wen Heping (wen) · 1.1_4
- Document Django vulnerabilities.

PR:		238911, 238910
Submitted by:	koobs@
72cddc5bca
Steve Wills (swills) · 1.1_4
Document minor bzip2 issues

PR:		238854
ef10990a52
Steve Wills (swills) · 1.1_4
Document powerdns issue

PR:		239705
Submitted by:	Ralf van der Enden <tremere@cainites.net>
fb94128728
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4
Document typo3 vulnerability

PR:		238862, 238863
cb2ed8bd75
Palle Girgensohn (girgen) · 1.1_4
Add vuxml entry for postgresql lt 10.9 and lt 11.4
0561e1f21d
Danilo G. Baio (dbaio) · 1.1_4
security/vuxml: Document irc/znc issue

Security:	CVE-2019-12816
271a5b8571
Christoph Moench-Tegeder (cmt) · 1.1_4
document recent Mozilla advisories

MFSA2019-17, MFSA2019-19, MFSA2019-20
5bbda70d09
Thomas Zander (riggs) · 1.1_4
Document two vulnerabilities in vlc < 3.0.7.1, potential remote exploit
e4b710fa3c
Jan Beich (jbeich) · 1.1_4
security/vuxml: mark waterfox < 56.2.11 as vulnerable

https://github.com/MrAlex94/Waterfox/commit/27ce846f9d46
829f1e5856
Jan Beich (jbeich) · 1.1_4
security/vuxml: mark firefox < 67.0.3 as vulnerable
cd7557615e
Tobias Kortkamp (tobik) · 1.1_4
Fix version range of recent ImageMagick6 entry

graphics/ImageMagick6 has PORTEPOCH=1 (ImageMagick7 does not) but
it is not included in vuln.xml.  The recent vulnerabilities are
never raised by pkg audit as a result and users are left uninformed
about them.
42b7216d6c
Joe Marcus Clarke (marcus) · 1.1_4
Add an entry for netatalk3.

Document the netatalk3 remote code execution vulnerability fixed in 3.1.12.

PR:		238573
f093e27678
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4
Document GraphicsMagick vulnerability
06baa10c92
Rene Ladan (rene) · 1.1_4
security/vuxml: add entry for www/chromium < 75.0.3770.90
d95c09e2fe
Matthew Seaman (matthew) · 1.1_4
Document PMASA-2019-4; CSRF vulnerability in login form
1740ed3d08
Adam Weinberger (adamw) · 1.1_4
Add entry for Vim/NeoVim arbitrary code execution
813c2e9d8f
Jochen Neumeister (joneum) · 1.1_4
Add entry for www/mybb

Sponsored by:	Netzkommune GmbH
d579a6de24
Jung-uk Kim (jkim) · 1.1_4
Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb19-30.html
e98d00dca8
Jochen Neumeister (joneum) · 1.1_4
Set correct Port Name for last drupal7 entry

Sponsored by:	Netzkommune GmbG
ee59bcfda3
Glen Barber (gjb) · 1.1_4
Fix vuxml build.

Sponsored by:	The FreeBSD Foundation
be78fe7c40
Jochen Neumeister (joneum) · 1.1_4
Add entry for drupal7

- Set correct modified Date for 183d700e-ec70-487e-a9c4-632324afa934

Sponsored by:	Netzkommune GmbH
9c7dbd6306
Vsevolod Stakhov (vsevolod) · 1.1_4
Document Exim RCE CVE-2019-10149
b294778455
Wen Heping (wen) · 1.1_4
- Document Django vulnerabilities.
36dad9bfe4
Koop Mast (kwm) · 1.1_4
Fix modification date, the future isn't quite here yet.

Reported by:	Daniel Ebdrup
672bc6506c
Koop Mast (kwm) · 1.1_4
Fix Imagemagick 6 package name.
e0c2ab5473
Matthias Fechner (mfechner) · 1.1_4
Document gitlab vulnerabilities.
088d0930c1
Kubilay Kocak (koobs) · 1.1_4
security/vuxml: Add buildbot -- OAuth Authentication Vulnerability
4145ed066f
Craig Leres (leres) · 1.1_4
security/vuxml: Mark bro < 2.6.2 as vulnerable as per:

https://raw.githubusercontent.com/zeek/zeek/bb979702cf9a2fa67b8d1a1c7f88d0b56c6af104/NEWS

The issue is unsafe integer conversions that can cause unintentional
code paths to be executed.

Reviewed by:	ler (mentor)
Approved by:	ler (mentor)
Security:	CVE-2019-12175
Differential Revision:	https://reviews.freebsd.org/D20481
0cdd6b2f5c
Koop Mast (kwm) · 1.1_4
Document ImageMagick issues.

PR:		238199
Reported by:	Tommy P <tommyhp2@gmail.com>
Security:	CVE-2019-7175, CVE-2019-7395, CVE-2019-7396, CVE-2019-7397,
		CVE-2019-7398, CVE-2019-9956, CVE-2019-10131, CVE-2019-10649,
		CVE-2019-10650, CVE-2019-10714, CVE-2019-11470, CVE-2019-11472,
		CVE-2019-11597, CVE-2019-11598
4b6ce276bb
Hajimu UMEMOTO (ume) · 1.1_4
fix package name of cyrus-imapd.
ee8853b3b4
Hajimu UMEMOTO (ume) · 1.1_4
Document cyrus-imapd buffer overrun in httpd.

Security:	CVE-2019-11356
0afcd4aa71
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4
Remove superfluous dot
d477af59e1
Carlo Strub (cs) · 1.1_4
Clarify CVE-2019-10691
3b9ed3c0f1
Carlo Strub (cs) · 1.1_4
Serendipity -- XSS

Security:	CVE-2019-11870
df3acbd824
Carlo Strub (cs) · 1.1_4
Add missing quote link
d14c7c8d44
Carlo Strub (cs) · 1.1_4
SQLite use after free Security:	CVE-2019-5018
11982f5045
Carlo Strub (cs) · 1.1_4
Add proper cvename reference to recent OCaml entry
d534e476ee
Carlo Strub (cs) · 1.1_4
suricata vulnerability

Security:	CVE-2019-10053
e5e9416f17
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4
Document curl vulnerability
5dc1e66894
Carlo Strub (cs) · 1.1_4
Multiple vulnerabilities in OCaml

PR:		223039
Submitted by:	Phil Pennock <freebsd@phil.spodhuis.org>
Security:	CVE-2015-8869
5315d35ca6
Jan Beich (jbeich) · 1.1_4
security/vuxml: mark firefox < 67 as vulnerable
ab54381da4
Timur I. Bakeyev (timur) · 1.1_4
Add entry about Samba4* vulnerabilities.

Security:	CVE-2018-16860
		CVE-2019-3880
6bd31f48e7
« newest← newerpage 56 of 167older →oldest »