CVE and update status of the FreeBSD ports tree3,532 unaddressed CVEs in 701 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 4fa1ce71cd
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
CPE
not set in the port, and none could be determined — that does not mean none exists
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,350)

Roman Bogorodskiy (novel) · 1.1_3
security/vuxml: update version range for latest qutebrowser vuln

Update version for www/qutebrowser CVE-2018-10895 to reflect 2018Q3 fix.
def152b64f
Glen Barber (gjb) · 1.1_3
Comment a project-specific CVE reference in attempt to fix the build.

Sponsored by:	The FreeBSD Foundation
087c2ea8fd
Jochen Neumeister (joneum) · 1.1_3
Document vulberability for typo3-7 and typo3-8
c1755276ab
Fernando Apesteguía (fernape) · 1.1_3
security/vuxml: add entry for devel/upp

Affected by CVE-2018-874

PR:	227414
Reported by:	lightside@gmx.com
Approved by:	tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D16017
5d7b430219
Eugene Grosbein (eugen) · 1.1_3
Document several security defects in the Bouncy Castle Crypto APIs before version 1.60

Obtained from:	https://www.bouncycastle.org/latest_releases.html
Security:	https://vuxml.FreeBSD.org/freebsd/fe93803c-883f-11e8-9f0c-001b216d295b
1d3f53e158
Roman Bogorodskiy (novel) · 1.1_3
Document www/qutebrowser CSRF vulnerability

Reviewed by:	miwi
Security:	CVE-2018-10895
7998db5741
Jung-uk Kim (jkim) · 1.1_3
Fix typos.

Reported by:	N.J. Mann (njm at njm dot me dot uk)
0b098e21af
Jung-uk Kim (jkim) · 1.1_3
Document the latest Flash Player vulnerabilities.

https://helpx.adobe.com/security/products/flash-player/apsb18-24.html
c31225fc50
Matthias Fechner (mfechner) · 1.1_3
Document vulnerability for libgit2 < 0.27.3.

Reviewed by:	swills (mentor)
Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D16220
513b8763a5
Glen Barber (gjb) · 1.1_3
Fix build.

Sponsored by:	The FreeBSD Foundation
4c7a4fdebf
Dave Cottlehuber (dch) · 1.1_3
security/vuxml: add CVE for Apache CouchDB 1.7.2 (databases/couchdb)

Approved by:	jrm
Differential Revision:	https://reviews.freebsd.org/D16212
06f379b2e2
Larry Rosenman (ler) · 1.1_3
security/vuxml: document vulnerabilities in security/clamav.
491b6d6d8a
Martin Wilke (miwi) · 1.1_3
- Document devel/zziplib - multible vulnerabilities

PR:		226491
Sponsored by:	iXsystems Inc.
1637d2415f
Jochen Neumeister (joneum) · 1.1_3
Document wordpress issues
6393fc0cb3
Jan Beich (jbeich) · 1.1_3
security/vuxml: seamonkey-2.49.4 contains firefox-52.9.0
18e893d6aa
Jochen Neumeister (joneum) · 1.1_3
Document vulnerability in www/mybb
c29c30e0fa
Danilo G. Baio (dbaio) · 1.1_3
security/vuxml: Document expat vulnerabilities

libwww is also vulnerable because it has expat in its source tree.

Security:	CVE-2016-9063
Security:	CVE-2017-9233
6c26202947
Dave Cottlehuber (dch) · 1.1_3
security/vuxml: add CVE-2018-0608 for www/h2o

PR:		228762
Approved by:	jrm
Security:	CVE-2018-0608
Differential Revision:	https://reviews.freebsd.org/D16110
93b0e5a0af
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark firefox < 61 as vulnerable
bb2c08018e
Matthias Fechner (mfechner) · 1.1_3
Vulnerability entry for www/gitlab.

Reviewed by:	tz (mentor)
Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D16010
2345992298
Matthias Andree (mandree) · 1.1_3
Fixup
4f685d0e7c
Matthias Andree (mandree) · 1.1_3
Link release announcement to mail/mailman < 2.1.27 vuln/CVE 2018-0618
b2e187e874
Matthias Andree (mandree) · 1.1_3
Add mailman vulnerabilities/hardening.

Obtained from:	Mark Sapiro
Security:	739948e3-78bf-11e8-b23c-080027ac955c
Security:	CVE-2018-0618
Security:	JVN#00846677
Security:	JPCERT#97432283
669aa5d1dd
Matthew Seaman (matthew) · 1.1_3
Docuement the latest phpMyAdmin vulnerabilities
5da6fdd5ee
Mark Felder (feld) · 1.1_3
Document SA-18:07.lazyfpu
082725e73a
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document GraphicsMagick vulnerability

PR:		223629
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>
0e42173d87
Matthias Fechner (mfechner) · 1.1_3
Document vulnerability for libgit2 and py-pygit2.

Reviewed by:	tz (mentor)
Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D15668
cc6407e923
Joseph Mingrone (jrm) · 1.1_3
security/vuxml: document Slurm vulnerability

https://lists.schedmd.com/pipermail/slurm-announce/2018/000008.html

While here, silence validation warnings caused by node.js 2018-06-15 entry.
68c9ca8da2
Bradley T. Hughes (bhughes) · 1.1_3
security/vuxml: document Node.js vulnerabilities

https://nodejs.org/en/blog/vulnerability/june-2018-security-releases/
f3e663c2fc
Rene Ladan (rene) · 1.1_3
List GPG parsing vulnerabilities in sysutils/password-store < 1.7.2
0f89e90b1f
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document LibreSSL vuln
32856eca64
Carlos J. Puga Medina (cpm) · 1.1_3
Document libgcrypt side-channel attack vulnerability

Security:	CVE-2018-0495
05e4b288bd
Adam Weinberger (adamw) · 1.1_3
Update gnupg entry now that gnupg1-1.4.23 has landed
b6c887d86d
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Bump PORTREV for openssl

- Chase missing svn add for openssl
5c2f9cf663
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document today's OpenSSL vuln (low)
a8bda6cd1f
Guido Falsi (madpilot) · 1.1_3
Document new asterisk vulnerabilities.
3c4d6917ec
Guido Falsi (madpilot) · 1.1_3
Fix error in old asterisk entry.
189ebd5e1d
Carlos J. Puga Medina (cpm) · 1.1_3
Document new vulnerability in www/chromium < 67.0.3396.79

Obtained from:	https://chromereleases.googleblog.com/2018/06/stable-channel-update-for-desktop.html
f3d9bad2a5
Glen Barber (gjb) · 1.1_3
Fix vuxml build.

Sponsored by:	The FreeBSD Foundation
272cba7bd4
Adam Weinberger (adamw) · 1.1_3
Add entry for gnupg CVE
369b852083
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark firefox < 60.0.2 as vulnerable
766c7c4638
Jung-uk Kim (jkim) · 1.1_3
Document the latest Flash Player vulnerabilities.

https://helpx.adobe.com/security/products/flash-player/apsb18-19.html
ff3447dad0
Craig Leres (leres) · 1.1_3
Mark bro < 2.5.4 as vulnerable as per:

https://www.bro.org/download/NEWS.bro.html

Reviewed by:	ler (mentor)
Approved by:	ler (mentor)
Differential Revision:	https://reviews.freebsd.org/D15677
ba30ec612f
Joseph Mingrone (jrm) · 1.1_3
security/vuxml/vuln.xml: Fix indentation (silences make validate)

Reported by:	mfechner
67e692816e
Matthias Fechner (mfechner) · 1.1_3
Document new vulnerabilities in www/gitlab < 10.8.2 or < 10.7.5 or < 10.6.6.

Reviewed by:	tz (mentor)
Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D15635
a8382f5fe4
Joseph Mingrone (jrm) · 1.1_3
security/vuxml: Fix version ranges for latest Git vulnerabilities

Reported by:	jbeich
7d25661634
Joseph Mingrone (jrm) · 1.1_3
security/vuxml: Document devel/git CVEs (2018-11233 and 2018-11235)
c732025975
Kirill Ponomarev (krion) · 1.1_3
Document security/strongswan multiple vulnerabilities ((CVE-2018-10811, CVE-2018-5388)

PR:		228631
Submitted by:	strongswan@Nanoteq.com
705471f52f
Carlos J. Puga Medina (cpm) · 1.1_3
Document new vulnerabilities in www/chromium < 67.0.3396.62

Obtained from:	https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html
68d03bbca8
Xin LI (delphij) · 1.1_3
Document BIND multiple vulnerabilities.
577b235fd0