CVE and update status of the FreeBSD ports tree3,532 unaddressed CVEs in 701 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 4fa1ce71cd
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
CPE
not set in the port, and none could be determined — that does not mean none exists
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,350)

Li-Wen Hsu (lwhsu) · 1.1_3
Document Jenkins Security Advisory 2018-10-10

Sponsored by:	The FreeBSD Foundation
54877c7d23
Dirk Meyer (dinoex) · 1.1_3
- add entry for tinc and tinc-devel
28157c6010
Matthias Fechner (mfechner) · 1.1_3
Document several vulnerabilities for gitlab-ce.

Approved by:	mentors (implicit)
ba75f66690
Larry Rosenman (ler) · 1.1_3
security/vuxml: add multiple vulnerabilities in security/clamav.

PR:		231924
Submitted by:	yasu@utahime.org
4206eaa82a
Wen Heping (wen) · 1.1_3
- Document django21 vulnerability
d820fc470e
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark firefox < 62.0.3 as vulnerable
e8eb28b711
Matthias Fechner (mfechner) · 1.1_3
Document several vulnerabilities for gitlab-ce.

Approved by:	mentors (implicit)
cf48a0fd97
Steve Wills (swills) · 1.1_3
Document pango DoS
49b4cd546b
Jochen Neumeister (joneum) · 1.1_3
Add entry for www/serendipity

Sponsored by:	Netzkommune GmbH
94333bb4aa
Kevin Bowling (kbowling) · 1.1_3
security/vuxml: Add entry for net-p2p/bitcoin CVE-2018-17144

Add VuXML for r480928

Approved by:	timur (mentor)
Differential Revision:	https://reviews.freebsd.org/D17360
52b244f12b
Niclas Zeising (zeising) · 1.1_3
Document spamassassin - multiple vulnerabilities

Document spamassassin vulnerabilities, as found in this announcement:
https://seclists.org/oss-sec/2018/q3/242
dbb7082708
Lars Engels (lme) · 1.1_3
security/vuxml:

Document wesnoth vulnerability
6d0e028acb
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Add Apache 2.4 vulnerability
14fe4cd259
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Update OpenJPEG vulnerability

CVE-2018-5785 was fixed in r480624.
23466f5db4
Tobias Kortkamp (tobik) · 1.1_3
Document mantis vulnerability
65da9b8659
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document rubygem-smart_proxy_dynflow vulnerability
1c965bf8b7
Wen Heping (wen) · 1.1_3
- Document mediawiki's multiple vulnerabilities
341124751e
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark firefox < 62.0.2 as vulnerable
4c701edabd
Guido Falsi (madpilot) · 1.1_3
Document new asterisk vulnerability.
797a45a4f7
Wen Heping (wen) · 1.1_3
- Document moodle multiple vulnerabilities
bc04385f23
Larry Rosenman (ler) · 1.1_3
security/vuxml: add Joomla3 Vulnerabilities
1189a311b7
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark waterfox < 56.2.3 as vulnerable
30e888bb8a
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Update OpenJPEG vulnerability

Only CVE-2017-17479 and CVE-2017-17480 were fixed in r477112.

Notified by:	tijl
834d39b748
Jochen Neumeister (joneum) · 1.1_3
Document vulnerability in www/mybb

Sponsored by:	Netzkommune GmbH
0b2b0799ae
Mark Felder (feld) · 1.1_3
Document FreeBSD-SA-18:12.elf
a9fb783da0
Yuri Victorovich (yuri) · 1.1_3
Add VuXML vulnerability CVE-2018-15598 for traefik.

Port update is already MFHed.
0e37068212
Jung-uk Kim (jkim) · 1.1_3
Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb18-31.html
775bd023f3
Mark Felder (feld) · 1.1_3
Improve formatting Also add plexmediaserver-plexpass package as vulnerable
b650bfd4d4
Mark Felder (feld) · 1.1_3
Document Plex vulnerability

Security:	CVE-2018-13415
6f6f767d3c
Adriaan de Groot (adridg) · 1.1_3
The 0.18 release of x11/sddm contains a fix for a security error that allows unlocking a session without a password, if the ReuseSession configuration option is set to true. The default configuration sets it to false.

I'm setting the version to < 0.17.0_1 here, because I'm going
to update 0.17 with backports rather than pull in 0.18 (there's
a lot more work in that update, because of reorganisation upstream
and none of our patches apply anymore).

PR:		230029
Reported by:	doctorwhoguy@gmail.com
a314e23802
Jochen Neumeister (joneum) · 1.1_3
Document vulnerability in www/mybb

Sponsored by:	Netzkommune GmbH
cf76dce37b
Florian Smeets (flo) · 1.1_3
Document gitea vulnerability.

PR:		231180
Submitted by:	stb@lassitu.de
Security:	7c750960-b129-11e8-9fcd-080027f43a02
88c2e68f3c
Cy Schubert (cy) · 1.1_3
Remove duplicate entry for WPA EAPOL vulnerability. Use r477829 instead as its version range is more complete.

PR:		231054
Reported by:	000.fbsd@quip.cz
00b71b3f04
Yuri Victorovich (yuri) · 1.1_3
Add VuXML entry for the fixed CVE-2017-11114 in www/links

PR:		230849
Submitted by:	Dmitri Goutnik <dg@syrec.org>
85e19cb117
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document curl vulnerability
c8527520d6
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark firefox < 62 as vulnerable
4ffc877f78
Tijl Coosemans (tijl) · 1.1_3
Document Ghostscript -dSAFER sandbox bypass vulnerabilities.

PR:		231148
Security:	https://www.kb.cert.org/vuls/id/332928
1e447158f7
Steve Wills (swills) · 1.1_3
Document grafana issues

PR:		 231019
PR:		 231020
PR:		 231021
PR:		 231022
31a8fda0e8
Matthias Fechner (mfechner) · 1.1_3
Document several vulnerabilities for gitlab-ce.

Approved by:	mentors (implicit)
5209eb1744
TAKATSU Tomonari (tota) · 1.1_3
- Fix range for ja-mailman in CVE-2018-13796
a0d104b1af
Craig Leres (leres) · 1.1_3
Mark bro < 2.5.5 as vulnerable as per:

https://www.bro.org/download/NEWS.bro.html

Reviewed by:	ler (mentor)
Approved by:	ler (mentor)
Differential Revision:	https://reviews.freebsd.org/D16948
cd90123fd1
Bradley T. Hughes (bhughes) · 1.1_3
security/vuxml: document Node.js vulnerabilities

https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/

Sponsored by:	Miles AS
7e10165df3
Tobias Kortkamp (tobik) · 1.1_3
Fix databases/mantis entry after r477954
9d0ae0dd69
Matthew Seaman (matthew) · 1.1_3
Apparently you can have more than on <name></name> item inside a <package></packge> group.  Also, re-add plain 'phpMyAdmin' without a flavour suffix as a possible package name -- it's only been a few months since flavourization, and there may well be some older installs still out there.  (Although those should already be flagging for the previous PMASA)

Reported by:	mat
7501a34dd5
Matthew Seaman (matthew) · 1.1_3
Third time's the charm.  Now capitalize the package names correctly.
edae4eab0c
Matthew Seaman (matthew) · 1.1_3
phpMyAdmin is flavoured now: use the correct package names.
35c23073c2
Mark Felder (feld) · 1.1_3
Document FreeBSD-SA-18:11.hostapd
a4fc68222a
Mark Felder (feld) · 1.1_3
Document FreeBSD-SA-18:10.ip
edba193b3a
Mark Felder (feld) · 1.1_3
Document FreeBSD-SA-18:09.l1tf
4eae1d0a11
Steve Wills (swills) · 1.1_3
Document gogs open redirect issue

PR:		230800
Submitted by:	Dmitri Goutnik <dg@syrec.org>
2372bbe88d
« newest← newerpage 61 of 167older →oldest »