Update VuXML entry for xorg-server issues Update VuXML entry for xorg-server issues related to CVE-2017-10971 and CVE-2017-10972. The version check was wrong missing the portepoch which meant that the entry never matched anything. It was also only added for xorg-server 1.19, while we have 1.18 in base. Fix formatting and edit the overly long lines.e033846822
Port details
security/vuxml 1.1_6
Vulnerability and eXposure Markup Language DTD
Port info
- Maintainer
- ports-secteam@FreeBSD.org
- Packages
- latest: 1.1_6
- Upstream
- up to date
- Last update
- to 1.1_6 · 4fa1ce71cd
- Quarterly
- 2026Q4: 1.1_6
- WWW
- https://vuxml.freebsd.org/
- CPE
- not set in the port, and none could be determined — that does not mean none exists
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install vuxmlinstalls 1.1_6 fromlatest; fromquarterly(2026Q4) 1.1_6- Port
# cd /usr/ports/security/vuxml && make install clean- Size
- 9.7 KiB download · 40 KiB installed
- License
- BSD2CLAUSE
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.1_6 | 1.1_6 | – |
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Dependencies
Depends on 5
- lang/python312 3.12.15 25 unaddressed
- textproc/libxslt 1.1.45
- textproc/xhtml-basic 1.0.20001219_2
- textproc/xhtml-modularization 1.0.20010410_1
- textproc/xmlcatmgr 2.2_4
Run and library dependencies of the package on latest. Build dependencies are not in the package index.
Required by 0
No package on latest depends on it.
Packages on latest that depend on it directly.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 1.1_6.Fixed (0)
No VuXML entries for this package.
Problem reports (5) · open in Bugzilla, most recently changed first
| PR | Summary | Status | Changed |
|---|---|---|---|
| 295797 | maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256 | In Progress | 2026-07-17 |
| 295836 | maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django | New | 2026-06-04 |
| 291717 | security/vuxml: add entry for uriparser < 1.0.0 | New | 2025-12-16 |
| 288090 | maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2 | New | 2025-07-08 |
| 270795 | security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries | In Progress | 2025-07-01 |
Commits (8,350)
Document curl vulnerability5e6a1f6dee
Document vulnerabilities in wavpack 5.1.0 and earlier PR: 228146 Submitted by: yasu@utahime.org967a20ac1c
Bump maximum description length to 5000 Details: Thanks to www/chromium, we now have a valid entry with 4933 characters. Entries this long will probably remain exceptions, but there should not be a warning for the currently valid entries.420e9032a1
Bump copyright to 20184ce21bec89
Document vulnerabilities in chromium before 66.0.3359.170 Reported by: Tommi Pernila <tommi.pernila@iki.fi> via e-mail6cef419de1
Document jenkins security issues1b8c2345a2
security/vuxml: mark firefox < 60 as vulnerable PR: 226476b10756e28d
security/vuxml: document kamailio CVE-2018-8828 PR: 227677 Submitted by: Ben Hood <ben@relops.com>3e594d8aa1
Document ftp/wget's cookie injection vulnerability Submitted by: Yasuhiro KIMURA <yasu@utahime.org> MFH: 2018Q2 Security: CVE-2018-04948394a9dadc
Document the latest Flash Player vulnerability. https://helpx.adobe.com/security/products/flash-player/apsb18-16.html8e2f20516e
Document FreeBSD-SA-18:06.debugreg667d296c73
Document python vulnerabilityddf52ddc56
Security notice regarding kwallet-pam (KDE Plasma5). https://www.kde.org/info/security/advisory-20180503-1.txt The port is not built by default through the regular KDE packages, and has been in the ports tree only a week; the impact is expected to be low. Approved by: tcberner (mentor, implicit)fd3dd76ee4
Document multiple vulnerabilities in www/drupal7 and www/drupal8c12bb9086f
Document vulnerabilities in gitlab for several versions. Reviewed by: eugen_grosbein.net, tz (mentor) Approved by: eugen_grosbein.net, tz (mentor) Differential Revision: https://reviews.freebsd.org/D15248d63606c90d
Document free-after-use issue in chromium before 66.0.3359.139 Submitted by: Tommi Pernila <tommi.pernila@iki.fi> via e-mail Security: CVE-2018-61181ce076d9b4
Document vulnerabilities in quassel before 0.12.5 Security: https://vuxml.freebsd.org/freebsd/499f6b41-58db-4f98-b8e7-da8c18985eda.html6f279b45d9
Document vulnerabilities in chromium before 66.0.3359.117 Submitted by: tommi.pernila@iki.fi (via mail to ports-secteam) Reviewed by: riggs43dad860ae
Document mbed TLS vulnerabilities Security: https://tls.mbed.org/tech-updates/releases/mbedtls-2.8.0-2.7.2-and-2.1.11-released895d3c2372
security/vuxml: Document MySQL vulns from quarterly Oracle CPU74dda441c9
Document wordpress issues1e06a0cf7e
Document the latest phpMyAdmin vulnerabilities175b9a19c7
- Document drupal8 vulnerability49453fad33
security/vuxml: Bump portrev for latest OpenSSL vuln3a36d250d4
security/vuxml: Add OpenSSL vulnerabilitybb447968c9
Add Blockquote pointy hat to joneumd891e0c9fb
Document multiple vulnerabilities in www/drupal7 Security: CVE-2018-76002855f782ad
Document Perl vulnerability6951142a53
Update freeimage vulnerabilityb047deaef1
ipsec-tools: document remotely exploitable computational-complexity attack. PR: 225066 Security: CVE-2016-10396d05a9e9985
Document nghttp2 vulnerability4f86aadb15
Document roundcube IMAP command injection vulnerability.85cff20e30
Document Jenkins vulnerabilities07dfa53347
Document the latest Flash Player vulnerability. https://helpx.adobe.com/security/products/flash-player/apsb18-08.html2e3fb33924
Fixed a wrong version definition for gitlab that report 10.4.6 as affected. PR: 227293 Reported by: majo-bugs.freebsd.org@cerny.sk Reviewed by: dbaio, swills (mentor) Approved by: swills (mentor) Differential Revision: https://reviews.freebsd.org/D14999efc76d02e5
Added information about security problems with port www/gitlab. Reviewed by: swills (mentor) Approved by: swills (mentor) Differential Revision: https://reviews.freebsd.org/D149742e8d356e48
Document FreeBSD-SA-18:05.ipsec0c69a64777
Document FreeBSD-SA-18:04.vtbb7bb07e56
security/vuxml: adjust thunderbird version for CVE-2018-5148 backport9fce20ddbc
security/vuxml: delist palemoon from CVE-2018-514[67] Let upstream to decide if the browser is affected. https://github.com/MoonchildProductions/Pale-Moon/commits/master/media/libvorbis/lib/vorbis_codebook.c https://github.com/MoonchildProductions/Pale-Moon/commits/master/media/libtremor/lib/tremor_codebook.cc9d6221821
security/vuxml: libxul didn't share release branch with thunderbirdd5ffd3c835
- Document Moodle vulnerabilityd297e205be
Fix space/tab to pet "make validate"4770d0078d
Document Ruby vulnerability8228eaa4df
security/vuxml: Document Node.js vulnerabilities https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/3f8e355638
Document gitlab vulnerability. Reviewed by: tz (mentor) Approved by: tz (mentor) Differential Revision: https://reviews.freebsd.org/D14870f83cc745aa
Fix typosa66d1fd4a1
Document www/webkit2-gtk3 vulnerabilitiese127faff7b
Document new vulnerability in www/chromium < 65.0.3325.181 Obtained from: https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop_20.htmlb485021388