CVE and update status of the FreeBSD ports tree3,532 unaddressed CVEs in 701 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 4fa1ce71cd
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,350)

Li-Wen Hsu (lwhsu) · 1.1_3
Document Jenkins Security Advisory 2018-12-05

Sponsored by:	The FreeBSD Foundation
482af6af5c
Wen Heping (wen) · 1.1_3
- Document moodle login CSRF vulnerability
1a09ea75e8
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document Rails vulnerability
05f54cfb4f
Thomas Zander (riggs) · 1.1_3
Document multiple vulnerabilities in net/uniparser

Reported by:	sebastian@pipping.org via e-mail
1fe05cf844
Tobias C. Berner (tcberner) · 1.1_3
Add info about security vulnerability in messagelib.
609b88101d
Kurt Jaeger (pi) · 1.1_3
security/vuxml: document www/payara vulnerabilities

PR:		233573
Submitted by:	Dmytro Bilokha <dmytro@posteo.net>
2ed1bff6ed
Matthias Fechner (mfechner) · 1.1_3
Document gitlab security vulnerabilities.

Approved by:	mentors (implicit)
20107d3325
Timur I. Bakeyev (timur) · 1.1_3
Add an entry about new vulnerabilities in the Samba packages.

Security:	CVE-2018-14629
		CVE-2018-16841
		CVE-2018-16851
		CVE-2018-16852
		CVE-2018-16853
		CVE-2018-16857
Sponsored by:	my wife
32c47c86c7
Jochen Neumeister (joneum) · 1.1_3
Modified entry and add phpmailer

PR:		233420 233416
Sponsored by:	Netzkommune GmbH
79af09fae9
Jochen Neumeister (joneum) · 1.1_3
Modified entry and add php70-imap

Sponsored by:	Netzkommune GmbH
b6df7ad0f2
Alex Dupre (ale) · 1.1_3
Add VuXML entry for php-imap vulnerability.
b1fc386c4e
Jochen Neumeister (joneum) · 1.1_3
Add entry for mail/phpmailer6

Sponsored by:	Netzkommune GmbH
f2e59058e6
Jung-uk Kim (jkim) · 1.1_3
Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb18-44.html
0a66c76edc
Matthias Fechner (mfechner) · 1.1_3
Document vulnerabilities for gitlab-ce.

Approved by:	mentors (implicit)
7fca44ad87
Kirill Ponomarev (krion) · 1.1_3
Add entry for dns/powerdns

PR:		233139
Submitted by:	maintainer
8fe64c6a69
Jochen Neumeister (joneum) · 1.1_3
Add entry for dns/powerdns-recursor40

PR:		233141
Sponsored by:	Netzkommune GmbH
5de8fe156c
Jochen Neumeister (joneum) · 1.1_3
Add entry for dns/powerdns-recursor

PR:		233140
Sponsored by:	Netzkommune GmbH
ddc54543ab
Guido Falsi (madpilot) · 1.1_3
Document recent asterisk vulneraability.
dbd0d9895c
Jung-uk Kim (jkim) · 1.1_3
Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb18-39.html
bbe7a9cf5f
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document openssl vulnerability
4c89fd7cf3
Tobias C. Berner (tcberner) · 1.1_3
security/vuxml: Add entry for devel/kio-extras <= 18.08.3_1

https://www.kde.org/info/security/advisory-20181012-1.txt

Security:	CVE-2018-19120
1c5c402e26
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Update openjpeg status
3d9c013241
Jan Beich (jbeich) · 1.1_3
security/vuxml: list CVE numbers forgotten in r484705
2cd55f201d
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark patch < 2.7.7 as vulnerable

Another copypasta because pkg-audit(8) doesn't grok CPE e.g.,
https://nvd.nist.gov/vuln/search/results?form_type=Advanced&cves=on&cpe_version=cpe:2.3:a:gnu:patch:2.7.6
a16ce878a1
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Update latest openssl entry

- LibreSSL prior to 2.8 not vulnerable
 - LibreSSL likely not vulnerable to CVE-2018-0735

PR:		233109
Submitted by:	Franco Fichtner <franco opnsense org>
c127d6ff20
Dirk Meyer (dinoex) · 1.1_3
- lighttpd - use-after-free vulnerabilities PR:		232278
6603823496
Palle Girgensohn (girgen) · 1.1_3
Add info about security vulnerability in PostgreSQL

Security:	CVE-2018-16850
4c4f74caff
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Mark MariaDB 10.3.10 vulnerable

- From MariaDB release notes (not released yet)

See: https://mariadb.com/kb/en/library/mariadb-10311-release-notes/

PR:		233068
4c56113a13
Jochen Neumeister (joneum) · 1.1_3
Add modified entrey for drupal after changes in r484148

Sponsored by:	Netzkommune GmbH
c202d8be9b
Jochen Neumeister (joneum) · 1.1_3
Add entry for nginx and nginx-devel

Sponsored by:	Netzkommune GmbH
c8126c2010
Jose Alonso Cardenas Marquez (acm) · 1.1_3
- Add www/drupal8 entry
f90e21ae46
Florian Smeets (flo) · 1.1_3
Document gitea vulnerability

PR:		232897
Submitted by:	stb@lassitu.de (maintainer)
3b2e1c9e18
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document curl vulnerability
faca8dd00d
Matthias Fechner (mfechner) · 1.1_3
Document gilab-ce vulnerability.

Approved by:	mentors (implicit)
0d57b1ac4d
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document rubygem-loofah vulnerability
709932e14b
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Update latest OpenSSL entry

- As per a LibreSSL dev, also vulnerable
7cab3c9116
Matthias Fechner (mfechner) · 1.1_3
Documented several security issues with www/gitlab-ce.

Approved by:	mentors (implicit)
3835626b3f
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document OpenSSL 1.1.x vulnerabilities
b1b8c8a29a
Thomas Zander (riggs) · 1.1_3
Document potential remote code execution in net/liveMedia (CVE-2018-4013)
a67ebd8cdb
Craig Leres (leres) · 1.1_3
Mark mini_httpd < 1.30 as vulnerable as per:

http://acme.com/updates/archive/211.html

The issue is arbitrary file disclosure in some circumstances.

Reviewed by:	matthew (mentor)
Approved by:	matthew (mentor)
Differential Revision:	https://reviews.freebsd.org/D17718
5d617e602a
Ben Woods (woodsb02) · 1.1_3
Add entry for sysutils/py-salt

PR:		232663
Reported by:	Christer Edwards <christer.edwards@gmail.com>
Security:	https://www.vuxml.org/freebsd/4f7c6af3-6a2c-4ead-8453-04e509688d45.html
18f80fae98
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark firefox < 63 as vulnerable
2079613763
Jochen Neumeister (joneum) · 1.1_3
Add entry for www/drupal7

Sponsored by:	Netzkommune GmbH
a0b7ab8060
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document ruby vulnerability

PR:		232427 (based on)
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>
4adccb1351
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document 2018-10 MySQL vulnerabilities
f0fdfc46ba
Jochen Neumeister (joneum) · 1.1_3
Add entry for www/matomo

Sponsored by:	Netzkommune GmbH
86cecfbfc7
Mark Felder (feld) · 1.1_3
Document libssh vulnerability

PR:		232344
Security:	CVE-2018-10933
66d9df883f
Matthias Fechner (mfechner) · 1.1_3
Document security vulnerability with devel/libgit2 < 0.27.5.

Approved by:	mentors (implicit)
9fd63e070a
Thierry Thomas (thierry) · 1.1_3
Add an entry for a memory leak bug in net-im/tox < v0.2.8.
908541516a
Jochen Neumeister (joneum) · 1.1_3
Add entry for www/gitea

PR:		232123
Reported by:	maintainer
Sponsored by:	Netzkommune GmbH
fc6c30b1a7