CVE and update status of the FreeBSD ports tree3,536 unaddressed CVEs in 701 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 4fa1ce71cd
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,350)

Tobias Kortkamp (tobik) · 1.1_4
Add recent lang/rust security advisory
5a6f5c2772
Jung-uk Kim (jkim) · 1.1_4
Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb19-26.html
596b8880d6
Bernard Spil (brnrd) · 1.1_4
security/vuxml: Document PHP-exif vulnerabilities
947e8bad18
Palle Girgensohn (girgen) · 1.1_4
Add security issues from latest postgresql release
afb577de76
Jochen Neumeister (joneum) · 1.1_4
Add entry for www/gitea

PR:		237734
Sponsored by:	Netzkommune GmbH
1b5ab2b556
Kubilay Kocak (koobs) · 1.1_4
security/vuxml: Add comms/hylafax -- Malformed fax sender remote code execution in JPEG support
251bdc21a4
Matthias Fechner (mfechner) · 1.1_4
Documented vulnerability for gitlab.
de7365df7c
Larry Rosenman (ler) · 1.1_4
security/vuxml: correct dovecot entry.

Reported by:	leres
18a78ce098
Larry Rosenman (ler) · 1.1_4
security/vuxml: document dovecot vulnerabilities
1acb198bb1
Matthias Fechner (mfechner) · 1.1_4
Document gitlab vulnerabilities.
390fe40188
Kubilay Kocak (koobs) · 1.1_4
security/vuxml: Add buildbot CRLF injection vulnerability
41dddc0643
Jose Alonso Cardenas Marquez (acm) · 1.1_4
- Add drupal7 and drupal8 entries
c9a2964717
Steve Wills (swills) · 1.1_4
add missed PORTEPOCH to libssh2 version
6942b99e98
Josh Paetzel (jpaetzel) · 1.1_4
Document py-yaml vulnerability

PR:	237501
Submitted by:	sergey@akhmatov.ru
Security:	CVE-2017-18342
6765ea38d9
Cy Schubert (cy) · 1.1_4
Document wpa_supplicant/hostapd EAP-pwd message reassembly issue with unexpected fragment.

Security:	no CVE documented,
	https://w1.fi/security/2019-5/eap-pwd-message-reassembly-issue-\
	with-unexpected-fragment.txt
27416f44d4
Cy Schubert (cy) · 1.1_4
Document wpa_supplicant/hostapd EAP-pwd missing commit validation. CVE-2019-9497 (EAP-pwd server not checking for reflection attack) CVE-2019-9498 (EAP-pwd server missing commit validation for scalar/element) CVE-2019-9499 (EAP-pwd peer missing commit validation for scalar/element)

Security:	CVE-2019-9497, CVE-2019-9498, CVE-2019-9499,
	https://w1.fi/security/2019-4/eap-pwd-missing-commit-validation.txt
f9ca6f54aa
Cy Schubert (cy) · 1.1_4
Document hostapd SAE confirm missing state validation. CVE-2019-9496 (SAE confirm missing state validation in hostapd/AP)

Security:	CVE-2019-9496,
    https://w1.fi/security/2019-3/sae-confirm-missing-state-validation.txt
804879bc6a
Cy Schubert (cy) · 1.1_4
Document wpa_supplicant/hostapd EAP-pwd side-channel attack. CVE-2019-9495 (cache attack against EAP-pwd)

Security:	CVE-2019-9495,
	https://w1.fi/security/2019-2/eap-pwd-side-channel-attack.txt
51e1aedfe7
Cy Schubert (cy) · 1.1_4
Document wpa_supplicant/hostapd SAE side-channel attacks. CVE-2019-9494 (cache attack against SAE)

Security:	CVE-2019-9494, VU#871675,
	https://w1.fi/security/2019-1/sae-side-channel-attacks.txt
8891f30e2f
Danilo Egea Gondolfo (danilo) · 1.1_4
- Document istio vulnerabilities.
bfec5191cd
Tijl Coosemans (tijl) · 1.1_4
Document Ghostscript CVE-2019-3835 and CVE-2019-3838.

PR:		237390
Security:	CVE-2019-3835, CVE-2019-3838
106f5b3f48
Tijl Coosemans (tijl) · 1.1_4
Document GNUTLS-SA-2019-03-27.

Security:	https://www.gnutls.org/security-new.html#GNUTLS-SA-2019-03-27
825d7be425
Larry Rosenman (ler) · 1.1_4
security/vuxml: Document dovecot json encoder issue
7d913da0c8
Steve Wills (swills) · 1.1_4
Document libssh2 issue
851f651152
Jochen Neumeister (joneum) · 1.1_4
Add entry for gitea

PR:		237303
Sponsored by:	Netzkommune GmbH
6b48fab2f8
Bernard Spil (brnrd) · 1.1_4
security/vuxml: Document vulnerabilities for MySQL

- Pre-notification by Oracle, final to be published in 3 days
282b66a678
Vasil Dimov (vd) · 1.1_4
Document ftp/wget's metadata in extended attributes vulnerability

Security:	CVE-2018-20483
fa657e65e3
Matthias Fechner (mfechner) · 1.1_4
Document gitlab vulnerability.
7ac3997e65
Li-Wen Hsu (lwhsu) · 1.1_4
Document Jenkins Security Advisory 2019-04-10

Sponsored by:	The FreeBSD Foundation
1aef3592e8
Jung-uk Kim (jkim) · 1.1_4
Document the latest Flash Player vulnerabilities.

https://helpx.adobe.com/security/products/flash-player/apsb19-19.html
312a5f0074
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4
Update py-notebook status
ce4de3653c
Matthias Fechner (mfechner) · 1.1_4
Documented vulnerabilities for clamav.
293d03ffd7
Romain Tartière (romain) · 1.1_4
Update sysutils/puppetserver5 entry

Puppetlabs released version 5.3.8 of Puppet Server which address the issue:
https://puppet.com/docs/puppetserver/5.3/release_notes.html#puppet-server-538

With hat:	puppet
6e40eea1d5
Matthias Fechner (mfechner) · 1.1_4
Documented gitlab vulnerability.
9ebd0a5e42
Bernard Spil (brnrd) · 1.1_4
security/vuxml: Document Apache httpd vulnerabilities
7c51a0ae65
Danilo Egea Gondolfo (danilo) · 1.1_4
- Document sysutils/kubectl CVE-2019-1002101
cafe07b3a8
Danilo G. Baio (dbaio) · 1.1_4
security/vuxml: Document irc/znc issue

Security:	CVE-2019-9917
76b6465ee5
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4
Document py-notebook vulnerability
98064f0618
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4
Update openjpeg status
f345d876dd
Larry Rosenman (ler) · 1.1_4
vuxml: Document mail/dovecot buffer overflow.
c32d138002
Jochen Neumeister (joneum) · 1.1_4
Add modified line for drupal after r496987

Sponsored by:	Netzkommune GmbH
ee6ee6c2af
Jose Alonso Cardenas Marquez (acm) · 1.1_4
- Update 94d63fd7-508b-11e9-9ba0-4c72b94353b5 entry
f7ed7e21d4
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4
Update Python vulnerability (d74371d2-4fee-11e9-a5cd-1df8a848de3d)
5742a6d17b
Jochen Neumeister (joneum) · 1.1_4
Add entry for www/drupal7

Sponsored by:	Netzkommune GmbH
9717d9fea1
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4
Document Python vulnerability
269d1bfae8
Niclas Zeising (zeising) · 1.1_4
Update the libXdmcp entry to make it clearer.
9014201185
Jochen Neumeister (joneum) · 1.1_4
Add entry for wordpress

Sponsored by:	Netzkommune GmbH
f23150baf6
Matthias Fechner (mfechner) · 1.1_4
Documented gitlab vulnerability.
152cd7446c
Niclas Zeising (zeising) · 1.1_4
Add entry for x11/libXdmcp vulnerabilty.

Add entry for x11/libXdmcp vulnerabilty, insufficient entripy generating
session keys.  It is unknown if this actually affects FreeBSD.

Security:	CVE-2017-2625
39866386b5
Matthias Fechner (mfechner) · 1.1_4
Documented security vulnerability for gitlab < 11.8.2.
d27e1ea02b
« newest← newerpage 57 of 167older →oldest »