Document Jenkins Security Advisory 2018-12-05 Sponsored by: The FreeBSD Foundation482af6af5c
Port details
security/vuxml 1.1_6
Vulnerability and eXposure Markup Language DTD
Port info
- Maintainer
- ports-secteam@FreeBSD.org
- Packages
- latest: 1.1_6
- Upstream
- up to date
- Last update
- to 1.1_6 · 4fa1ce71cd
- Quarterly
- 2026Q4: 1.1_6
- WWW
- https://vuxml.freebsd.org/
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install vuxmlinstalls 1.1_6 fromlatest; fromquarterly(2026Q4) 1.1_6- Port
# cd /usr/ports/security/vuxml && make install clean- Size
- 9.7 KiB download · 40 KiB installed
- License
- BSD2CLAUSE
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.1_6 | 1.1_6 | – |
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Dependencies
Depends on 5
- lang/python312 3.12.15 25 unaddressed
- textproc/libxslt 1.1.45
- textproc/xhtml-basic 1.0.20001219_2
- textproc/xhtml-modularization 1.0.20010410_1
- textproc/xmlcatmgr 2.2_4
Run and library dependencies of the package on latest. Build dependencies are not in the package index.
Required by 0
No package on latest depends on it.
Packages on latest that depend on it directly.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 1.1_6.Fixed (0)
No VuXML entries for this package.
Problem reports (5) · open in Bugzilla, most recently changed first
| PR | Summary | Status | Changed |
|---|---|---|---|
| 295797 | maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256 | In Progress | 2026-07-17 |
| 295836 | maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django | New | 2026-06-04 |
| 291717 | security/vuxml: add entry for uriparser < 1.0.0 | New | 2025-12-16 |
| 288090 | maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2 | New | 2025-07-08 |
| 270795 | security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries | In Progress | 2025-07-01 |
Commits (8,350)
- Document moodle login CSRF vulnerability1a09ea75e8
Document Rails vulnerability05f54cfb4f
Document multiple vulnerabilities in net/uniparser Reported by: sebastian@pipping.org via e-mail1fe05cf844
Add info about security vulnerability in messagelib.609b88101d
security/vuxml: document www/payara vulnerabilities PR: 233573 Submitted by: Dmytro Bilokha <dmytro@posteo.net>2ed1bff6ed
Document gitlab security vulnerabilities. Approved by: mentors (implicit)20107d3325
Add an entry about new vulnerabilities in the Samba packages. Security: CVE-2018-14629 CVE-2018-16841 CVE-2018-16851 CVE-2018-16852 CVE-2018-16853 CVE-2018-16857 Sponsored by: my wife32c47c86c7
Modified entry and add phpmailer PR: 233420 233416 Sponsored by: Netzkommune GmbH79af09fae9
Modified entry and add php70-imap Sponsored by: Netzkommune GmbHb6df7ad0f2
Add VuXML entry for php-imap vulnerability.b1fc386c4e
Add entry for mail/phpmailer6 Sponsored by: Netzkommune GmbHf2e59058e6
Document the latest Flash Player vulnerability. https://helpx.adobe.com/security/products/flash-player/apsb18-44.html0a66c76edc
Document vulnerabilities for gitlab-ce. Approved by: mentors (implicit)7fca44ad87
Add entry for dns/powerdns PR: 233139 Submitted by: maintainer8fe64c6a69
Add entry for dns/powerdns-recursor40 PR: 233141 Sponsored by: Netzkommune GmbH5de8fe156c
Add entry for dns/powerdns-recursor PR: 233140 Sponsored by: Netzkommune GmbHddc54543ab
Document recent asterisk vulneraability.dbd0d9895c
Document the latest Flash Player vulnerability. https://helpx.adobe.com/security/products/flash-player/apsb18-39.htmlbbe7a9cf5f
security/vuxml: Document openssl vulnerability4c89fd7cf3
security/vuxml: Add entry for devel/kio-extras <= 18.08.3_1 https://www.kde.org/info/security/advisory-20181012-1.txt Security: CVE-2018-191201c5c402e26
Update openjpeg status3d9c013241
security/vuxml: list CVE numbers forgotten in r4847052cd55f201d
security/vuxml: mark patch < 2.7.7 as vulnerable Another copypasta because pkg-audit(8) doesn't grok CPE e.g., https://nvd.nist.gov/vuln/search/results?form_type=Advanced&cves=on&cpe_version=cpe:2.3:a:gnu:patch:2.7.6a16ce878a1
security/vuxml: Update latest openssl entry - LibreSSL prior to 2.8 not vulnerable - LibreSSL likely not vulnerable to CVE-2018-0735 PR: 233109 Submitted by: Franco Fichtner <franco opnsense org>c127d6ff20
- lighttpd - use-after-free vulnerabilities PR: 2322786603823496
Add info about security vulnerability in PostgreSQL Security: CVE-2018-168504c4f74caff
security/vuxml: Mark MariaDB 10.3.10 vulnerable - From MariaDB release notes (not released yet) See: https://mariadb.com/kb/en/library/mariadb-10311-release-notes/ PR: 2330684c56113a13
Add modified entrey for drupal after changes in r484148 Sponsored by: Netzkommune GmbHc202d8be9b
Add entry for nginx and nginx-devel Sponsored by: Netzkommune GmbHc8126c2010
- Add www/drupal8 entryf90e21ae46
Document gitea vulnerability PR: 232897 Submitted by: stb@lassitu.de (maintainer)3b2e1c9e18
Document curl vulnerabilityfaca8dd00d
Document gilab-ce vulnerability. Approved by: mentors (implicit)0d57b1ac4d
Document rubygem-loofah vulnerability709932e14b
security/vuxml: Update latest OpenSSL entry - As per a LibreSSL dev, also vulnerable7cab3c9116
Documented several security issues with www/gitlab-ce. Approved by: mentors (implicit)3835626b3f
security/vuxml: Document OpenSSL 1.1.x vulnerabilitiesb1b8c8a29a
Document potential remote code execution in net/liveMedia (CVE-2018-4013)a67ebd8cdb
Mark mini_httpd < 1.30 as vulnerable as per: http://acme.com/updates/archive/211.html The issue is arbitrary file disclosure in some circumstances. Reviewed by: matthew (mentor) Approved by: matthew (mentor) Differential Revision: https://reviews.freebsd.org/D177185d617e602a
Add entry for sysutils/py-salt PR: 232663 Reported by: Christer Edwards <christer.edwards@gmail.com> Security: https://www.vuxml.org/freebsd/4f7c6af3-6a2c-4ead-8453-04e509688d45.html18f80fae98
security/vuxml: mark firefox < 63 as vulnerable2079613763
Add entry for www/drupal7 Sponsored by: Netzkommune GmbHa0b7ab8060
Document ruby vulnerability PR: 232427 (based on) Submitted by: Yasuhiro KIMURA <yasu@utahime.org>4adccb1351
security/vuxml: Document 2018-10 MySQL vulnerabilitiesf0fdfc46ba
Add entry for www/matomo Sponsored by: Netzkommune GmbH86cecfbfc7
Document libssh vulnerability PR: 232344 Security: CVE-2018-1093366d9df883f
Document security vulnerability with devel/libgit2 < 0.27.5. Approved by: mentors (implicit)9fd63e070a
Add an entry for a memory leak bug in net-im/tox < v0.2.8.908541516a
Add entry for www/gitea PR: 232123 Reported by: maintainer Sponsored by: Netzkommune GmbHfc6c30b1a7