CVE and update status of the FreeBSD ports tree3,532 unaddressed CVEs in 701 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 4fa1ce71cd
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
CPE
not set in the port, and none could be determined — that does not mean none exists
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,350)

Matthew Seaman (matthew) · 1.1_3
Document the latest phpMyAdmin security advisory PMASA-2018-5
1253e4178b
Niclas Zeising (zeising) · 1.1_3
Document libX11 vulnerabilities.

CVE-2018-14598
CVE-2018-14599
CVE-2018-14600

https://lists.x.org/archives/xorg-announce/2018-August/002915.html
5057ac4f25
Dave Cottlehuber (dch) · 1.1_3
security/vuxml: add CVE-2018-11769 for databases/couchdb versions < 2.2.0

Reported by:	Apache CouchDB PMC
Approved by:	jrm
Security:	CVE-2018-11769
Security:	https://lists.apache.org/thread.html/1052ad7a1b32b9756df4f7860f5cb5a96b739f444117325a19a4bf75@%3Cdev.couchdb.apache.org%3E
Differential Revision:	https://reviews.freebsd.org/D16820
7eca37dc8f
Steve Wills (swills) · 1.1_3
Document issue in security/botan2

PR:		230666
11658a1bcb
Li-Wen Hsu (lwhsu) · 1.1_3
Document Jenkins Security Advisory 2018-08-15

Sponsored by:	The FreeBSD Foundation
721fbc044e
Cy Schubert (cy) · 1.1_3
Document WPA unauthenticated encrypted EAPOL-Key data vunlerability.

Security:	CVE-2018-14526
105a748c05
Jung-uk Kim (jkim) · 1.1_3
Document the latest Flash Player vulnerabilities.

https://helpx.adobe.com/security/products/flash-player/apsb18-25.html
d83895f028
Timur I. Bakeyev (timur) · 1.1_3
Add an entry about multiple Samba vulnerabilities:

* CVE-2018-1139  (Weak authentication protocol allowed.)
* CVE-2018-1140  (Denial of Service Attack on DNS and LDAP server.)
* CVE-2018-10858 (Insufficient input validation on client directory
  listing in libsmbclient.)
* CVE-2018-10918 (Denial of Service Attack on AD DC DRSUAPI server.)
* CVE-2018-10919 (Confidential attribute disclosure from the AD LDAP
  server.)

Security:	CVE-2018-1139
		CVE-2018-1140
		CVE-2018-10858
		CVE-2018-10918
		CVE-2018-10919
Sponsored by:	iXsystems Inc.
7c00a96f8a
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document GraphicsMagick vulnerability
5705d363fe
Tobias Kortkamp (tobik) · 1.1_3
Document lang/chicken vulerabilities
7cf69138a4
Florian Smeets (flo) · 1.1_3
Document www/gitea vulnerability, with the scarce details provided by Gitea

PR:		230512
d3b32334cb
Tijl Coosemans (tijl) · 1.1_3
Document mbed TLS Security Advisory 2018-02.

Security:	https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-02
5db1137823
Palle Girgensohn (girgen) · 1.1_3
Add entry about postgresql vulnerabilites
6093198910
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document Oracle's Crititcal Patch Update
8d0d6ae530
Palle Girgensohn (girgen) · 1.1_3
Add vulnerability information about apache-xml-security-c
774faebe1c
Mark Felder (feld) · 1.1_3
Document FreeBSD-SA-18:08.tcp
837fbe3153
Kubilay Kocak (koobs) · 1.1_3
security/py-cryptography: Add tag forgery vulnerability

PR:	226906
7887559e36
Thomas Zander (riggs) · 1.1_3
Document CVE-2018-14912 in devel/cgit before version 1.2.1

PR:		230360
Submitted by:	yasu@utahime.org
eb3a218844
Matthias Fechner (mfechner) · 1.1_3
Documented vulnerability of copied security/rubygem-doorkeeper43.

Approved by:	mentors (implicit)
c7ea1cce46
Adam Weinberger (adamw) · 1.1_3
Fix a common grammar error: "can not" means the opposite of "cannot."

"Can not" means "it is possible not to," and "cannot" means "it is impossible to."
c04cc57a1d
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document rubygem-doorkeeper vulnerability
1be4ffab2d
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document rubygem-sinatra vulnerability
af5b1729c2
Matthias Andree (mandree) · 1.1_3
Add new Mailman < 2.1.28 security issue.

https://bugs.launchpad.net/mailman/+bug/1780874
https://mail.python.org/pipermail/mailman-announce/2018-July/000241.html

Security:	b4f0ad36-94a5-11e8-9007-080027ac955c
Security:	CVE-2018-13796
44314d591f
TAKATSU Tomonari (tota) · 1.1_3
- Fix range for ja-mailman in CVE-2018-0618
79c0cae0a7
Jochen Neumeister (joneum) · 1.1_3
document mantis issues

PR:		229880
Submitted by:	Nathan <ndowens.fbsd@yandex.com>
3fe0568f29
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Fix version range of curl vulnerability
4a9b823d8d
Steve Wills (swills) · 1.1_3
security/vuxml: document py-bleach issue

PR:		226851
ddb9b76c52
Steve Wills (swills) · 1.1_3
security/vuxml: document lshell issues

PR:		215988
Submitted by:	Damien Fleuriot <dam@my.gd>
d21a40b927
Steve Wills (swills) · 1.1_3
security/vuxml: document openjpeg issues

PR:		225805
Submitted by:	VK <vlad-fbsd@acheronmedia.com>
442bfe22b4
Steve Wills (swills) · 1.1_3
security/vuxml: Document ffmpeg issues

PR:		223626
Submitted by:	VK <vlad-fbsd@acheronmedia.com>
cf93c8a7c8
Steve Wills (swills) · 1.1_3
security/vuxml: document gimp issue

While here, fix entry date on curl entry

PR:		225636
Submitted by:	D. Ebdrup <debdrup@gmail.com>
3dea0bc20d
Carlos J. Puga Medina (cpm) · 1.1_3
Document new vulnerabilites in www/chromium < 68.0.3440.75

Obtained from:	https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html
6004a788e9
Steve Wills (swills) · 1.1_3
security/vuxml: Document curl issue

PR:		229752
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>
8558af9bc9
Matthias Fechner (mfechner) · 1.1_3
Documented vulnerabilities for gitlab-ce.

Approved by:	mentors (implicit)
340709b56a
Danilo Egea Gondolfo (danilo) · 1.1_3
- Document a graphics/vips buffer overflow.

https://github.com/jcupitt/libvips/releases/tag/v8.6.5
11de37c6f3
Fernando Apesteguía (fernape) · 1.1_3
Document vulnerabilities for graphics/sixel 1.8.1

* CVE-2018-14072
* CVE-2018-14073

PR:	229975
Reported by:	sue@iwmt.org (maintainer)
Approved by:	tcberner (mentor)
2e891f5f2d
Martin Wilke (miwi) · 1.1_3
- Exclude LibreSSL 2.6.5 from CVE-2018-0732 entry

PR:		229037
Sponsored by:	iXsystems Inc.
1abc192976
Tijl Coosemans (tijl) · 1.1_3
Remove linux expat packages from latest expat entry.  Red Hat has marked these "will not fix" because of the low impact so there's no point in nagging users about this.

https://access.redhat.com/security/cve/cve-2016-9063
https://access.redhat.com/security/cve/cve-2017-9233
72266cca7b
Ben Woods (woodsb02) · 1.1_3
security/vuxml: Add CVE details for VLC vulnerability
12ce309ba3
Ben Woods (woodsb02) · 1.1_3
security/vuxml: document VLC vulnerability
8230b6c80f
Fernando Apesteguía (fernape) · 1.1_3
security/vuxml: add mutt vulnerabilities

Include mutt vulnerabilities for mutt < 1.10.1

PR:	229810
Submitted by:	dereks@lifeofadishwasher.com
Approved by:	tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D16321
106120c45e
Pietro Cerutti (gahr) · 1.1_3
security/vuxml: fix typo
c2c470bfee
Pietro Cerutti (gahr) · 1.1_3
security/vuxml: document NeoMutt and Mutt vulnerabilities
212940bd07
Matthias Fechner (mfechner) · 1.1_3
Document gitlab < 11.0.4 vulnerability.

Reviewed by:	swills (mentor)
Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D16317
b73a4c6c64
Li-Wen Hsu (lwhsu) · 1.1_3
Update CVE number of 20a1881e-8a9e-11e8-bddf-d017c2ca229d

Sponsored by:	The FreeBSD Foundation
c0f154d269
Li-Wen Hsu (lwhsu) · 1.1_3
Fix range of 20a1881e-8a9e-11e8-bddf-d017c2ca229d

Sponsored by:	The FreeBSD Foundation
c65a1f7aca
Li-Wen Hsu (lwhsu) · 1.1_3
Document Jenkins Security Advisory 2018-07-18

Sponsored by:	The FreeBSD Foundation
dad6ec3dc2
Danilo G. Baio (dbaio) · 1.1_3
security/vuxml: Document irc/znc vulnerabilities

Reported by:	gordon
Security:	CVE-2018-14055
Security:	CVE-2018-14056
a318515eb4
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document Apache httpd vulns
0ef92df46a
Glen Barber (gjb) · 1.1_3
Remove vendor-specific CVE numbers, following r474804.  This tag is reserved for Mitre CVE numbers, otherwise it does not pass validation.

Sponsored by:	The FreeBSD Foundation
cf320394fc
« newest← newerpage 62 of 167older →oldest »