security/vuxml: update version range for latest qutebrowser vuln Update version for www/qutebrowser CVE-2018-10895 to reflect 2018Q3 fix.def152b64f
Port details
security/vuxml 1.1_6
Vulnerability and eXposure Markup Language DTD
Port info
- Maintainer
- ports-secteam@FreeBSD.org
- Packages
- latest: 1.1_6
- Upstream
- up to date
- Last update
- to 1.1_6 · 4fa1ce71cd
- Quarterly
- 2026Q4: 1.1_6
- WWW
- https://vuxml.freebsd.org/
- CPE
- not set in the port, and none could be determined — that does not mean none exists
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install vuxmlinstalls 1.1_6 fromlatest; fromquarterly(2026Q4) 1.1_6- Port
# cd /usr/ports/security/vuxml && make install clean- Size
- 9.7 KiB download · 40 KiB installed
- License
- BSD2CLAUSE
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.1_6 | 1.1_6 | – |
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Dependencies
Depends on 5
- lang/python312 3.12.15 25 unaddressed
- textproc/libxslt 1.1.45
- textproc/xhtml-basic 1.0.20001219_2
- textproc/xhtml-modularization 1.0.20010410_1
- textproc/xmlcatmgr 2.2_4
Run and library dependencies of the package on latest. Build dependencies are not in the package index.
Required by 0
No package on latest depends on it.
Packages on latest that depend on it directly.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 1.1_6.Fixed (0)
No VuXML entries for this package.
Problem reports (5) · open in Bugzilla, most recently changed first
| PR | Summary | Status | Changed |
|---|---|---|---|
| 295797 | maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256 | In Progress | 2026-07-17 |
| 295836 | maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django | New | 2026-06-04 |
| 291717 | security/vuxml: add entry for uriparser < 1.0.0 | New | 2025-12-16 |
| 288090 | maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2 | New | 2025-07-08 |
| 270795 | security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries | In Progress | 2025-07-01 |
Commits (8,350)
Comment a project-specific CVE reference in attempt to fix the build. Sponsored by: The FreeBSD Foundation087c2ea8fd
Document vulberability for typo3-7 and typo3-8c1755276ab
security/vuxml: add entry for devel/upp Affected by CVE-2018-874 PR: 227414 Reported by: lightside@gmx.com Approved by: tcberner (mentor) Differential Revision: https://reviews.freebsd.org/D160175d7b430219
Document several security defects in the Bouncy Castle Crypto APIs before version 1.60 Obtained from: https://www.bouncycastle.org/latest_releases.html Security: https://vuxml.FreeBSD.org/freebsd/fe93803c-883f-11e8-9f0c-001b216d295b1d3f53e158
Document www/qutebrowser CSRF vulnerability Reviewed by: miwi Security: CVE-2018-108957998db5741
Fix typos. Reported by: N.J. Mann (njm at njm dot me dot uk)0b098e21af
Document the latest Flash Player vulnerabilities. https://helpx.adobe.com/security/products/flash-player/apsb18-24.htmlc31225fc50
Document vulnerability for libgit2 < 0.27.3. Reviewed by: swills (mentor) Approved by: swills (mentor) Differential Revision: https://reviews.freebsd.org/D16220513b8763a5
Fix build. Sponsored by: The FreeBSD Foundation4c7a4fdebf
security/vuxml: add CVE for Apache CouchDB 1.7.2 (databases/couchdb) Approved by: jrm Differential Revision: https://reviews.freebsd.org/D1621206f379b2e2
security/vuxml: document vulnerabilities in security/clamav.491b6d6d8a
- Document devel/zziplib - multible vulnerabilities PR: 226491 Sponsored by: iXsystems Inc.1637d2415f
Document wordpress issues6393fc0cb3
security/vuxml: seamonkey-2.49.4 contains firefox-52.9.018e893d6aa
Document vulnerability in www/mybbc29c30e0fa
security/vuxml: Document expat vulnerabilities libwww is also vulnerable because it has expat in its source tree. Security: CVE-2016-9063 Security: CVE-2017-92336c26202947
security/vuxml: add CVE-2018-0608 for www/h2o PR: 228762 Approved by: jrm Security: CVE-2018-0608 Differential Revision: https://reviews.freebsd.org/D1611093b0e5a0af
security/vuxml: mark firefox < 61 as vulnerablebb2c08018e
Vulnerability entry for www/gitlab. Reviewed by: tz (mentor) Approved by: tz (mentor) Differential Revision: https://reviews.freebsd.org/D160102345992298
Fixup4f685d0e7c
Link release announcement to mail/mailman < 2.1.27 vuln/CVE 2018-0618b2e187e874
Add mailman vulnerabilities/hardening. Obtained from: Mark Sapiro Security: 739948e3-78bf-11e8-b23c-080027ac955c Security: CVE-2018-0618 Security: JVN#00846677 Security: JPCERT#97432283669aa5d1dd
Docuement the latest phpMyAdmin vulnerabilities5da6fdd5ee
Document SA-18:07.lazyfpu082725e73a
Document GraphicsMagick vulnerability PR: 223629 Submitted by: Vladimir Krstulja <vlad-fbsd@acheronmedia.com>0e42173d87
Document vulnerability for libgit2 and py-pygit2. Reviewed by: tz (mentor) Approved by: tz (mentor) Differential Revision: https://reviews.freebsd.org/D15668cc6407e923
security/vuxml: document Slurm vulnerability https://lists.schedmd.com/pipermail/slurm-announce/2018/000008.html While here, silence validation warnings caused by node.js 2018-06-15 entry.68c9ca8da2
security/vuxml: document Node.js vulnerabilities https://nodejs.org/en/blog/vulnerability/june-2018-security-releases/f3e663c2fc
List GPG parsing vulnerabilities in sysutils/password-store < 1.7.20f89e90b1f
security/vuxml: Document LibreSSL vuln32856eca64
Document libgcrypt side-channel attack vulnerability Security: CVE-2018-049505e4b288bd
Update gnupg entry now that gnupg1-1.4.23 has landedb6c887d86d
security/vuxml: Bump PORTREV for openssl - Chase missing svn add for openssl5c2f9cf663
security/vuxml: Document today's OpenSSL vuln (low)a8bda6cd1f
Document new asterisk vulnerabilities.3c4d6917ec
Fix error in old asterisk entry.189ebd5e1d
Document new vulnerability in www/chromium < 67.0.3396.79 Obtained from: https://chromereleases.googleblog.com/2018/06/stable-channel-update-for-desktop.htmlf3d9bad2a5
Fix vuxml build. Sponsored by: The FreeBSD Foundation272cba7bd4
Add entry for gnupg CVE369b852083
security/vuxml: mark firefox < 60.0.2 as vulnerable766c7c4638
Document the latest Flash Player vulnerabilities. https://helpx.adobe.com/security/products/flash-player/apsb18-19.htmlff3447dad0
Mark bro < 2.5.4 as vulnerable as per: https://www.bro.org/download/NEWS.bro.html Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D15677ba30ec612f
security/vuxml/vuln.xml: Fix indentation (silences make validate) Reported by: mfechner67e692816e
Document new vulnerabilities in www/gitlab < 10.8.2 or < 10.7.5 or < 10.6.6. Reviewed by: tz (mentor) Approved by: tz (mentor) Differential Revision: https://reviews.freebsd.org/D15635a8382f5fe4
security/vuxml: Fix version ranges for latest Git vulnerabilities Reported by: jbeich7d25661634
security/vuxml: Document devel/git CVEs (2018-11233 and 2018-11235)c732025975
Document security/strongswan multiple vulnerabilities ((CVE-2018-10811, CVE-2018-5388) PR: 228631 Submitted by: strongswan@Nanoteq.com705471f52f
Document new vulnerabilities in www/chromium < 67.0.3396.62 Obtained from: https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html68d03bbca8
Document BIND multiple vulnerabilities.577b235fd0