CVE and update status of the FreeBSD ports tree3,532 unaddressed CVEs in 701 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 4fa1ce71cd
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
CPE
not set in the port, and none could be determined — that does not mean none exists
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,350)

Niclas Zeising (zeising) · 1.1_3
Update VuXML entry for xorg-server issues

Update VuXML entry for xorg-server issues related to CVE-2017-10971 and
CVE-2017-10972.  The version check was wrong missing the portepoch which
meant that the entry never matched anything.  It was also only added for
xorg-server 1.19, while we have 1.18 in base.

Fix formatting and edit the overly long lines.
e033846822
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document curl vulnerability
5e6a1f6dee
Thomas Zander (riggs) · 1.1_3
Document vulnerabilities in wavpack 5.1.0 and earlier

PR:		228146
Submitted by:	yasu@utahime.org
967a20ac1c
Thomas Zander (riggs) · 1.1_3
Bump maximum description length to 5000

Details:
Thanks to www/chromium, we now have a valid entry with 4933 characters.
Entries this long will probably remain exceptions, but there should
not be a warning for the currently valid entries.
420e9032a1
Thomas Zander (riggs) · 1.1_3
Bump copyright to 2018
4ce21bec89
Thomas Zander (riggs) · 1.1_3
Document vulnerabilities in chromium before 66.0.3359.170

Reported by:	Tommi Pernila <tommi.pernila@iki.fi> via e-mail
6cef419de1
Steve Wills (swills) · 1.1_3
Document jenkins security issues
1b8c2345a2
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark firefox < 60 as vulnerable

PR:		226476
b10756e28d
Kurt Jaeger (pi) · 1.1_3
security/vuxml: document kamailio CVE-2018-8828

PR:		227677
Submitted by:	Ben Hood <ben@relops.com>
3e594d8aa1
Vasil Dimov (vd) · 1.1_3
Document ftp/wget's cookie injection vulnerability

Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>
MFH:		2018Q2
Security:	CVE-2018-0494
8394a9dadc
Jung-uk Kim (jkim) · 1.1_3
Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb18-16.html
8e2f20516e
Mark Felder (feld) · 1.1_3
Document FreeBSD-SA-18:06.debugreg
667d296c73
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document python vulnerability
ddf52ddc56
Adriaan de Groot (adridg) · 1.1_3
Security notice regarding kwallet-pam (KDE Plasma5).

https://www.kde.org/info/security/advisory-20180503-1.txt

The port is not built by default through the regular KDE packages,
and has been in the ports tree only a week; the impact is expected
to be low.

Approved by:	tcberner (mentor, implicit)
fd3dd76ee4
Jochen Neumeister (joneum) · 1.1_3
Document multiple vulnerabilities in www/drupal7 and www/drupal8
c12bb9086f
Matthias Fechner (mfechner) · 1.1_3
Document vulnerabilities in gitlab for several versions.

Reviewed by:	eugen_grosbein.net, tz (mentor)
Approved by:	eugen_grosbein.net, tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D15248
d63606c90d
Thomas Zander (riggs) · 1.1_3
Document free-after-use issue in chromium before 66.0.3359.139

Submitted by:	Tommi Pernila <tommi.pernila@iki.fi> via e-mail
Security:	CVE-2018-6118
1ce076d9b4
Ben Woods (woodsb02) · 1.1_3
Document vulnerabilities in quassel before 0.12.5

Security:	https://vuxml.freebsd.org/freebsd/499f6b41-58db-4f98-b8e7-da8c18985eda.html
6f279b45d9
Thomas Zander (riggs) · 1.1_3
Document vulnerabilities in chromium before 66.0.3359.117

Submitted by:	tommi.pernila@iki.fi (via mail to ports-secteam)
Reviewed by:	riggs
43dad860ae
Tijl Coosemans (tijl) · 1.1_3
Document mbed TLS vulnerabilities

Security:	https://tls.mbed.org/tech-updates/releases/mbedtls-2.8.0-2.7.2-and-2.1.11-released
895d3c2372
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document MySQL vulns from quarterly Oracle CPU
74dda441c9
Jochen Neumeister (joneum) · 1.1_3
Document wordpress issues
1e06a0cf7e
Matthew Seaman (matthew) · 1.1_3
Document the latest phpMyAdmin vulnerabilities
175b9a19c7
Jose Alonso Cardenas Marquez (acm) · 1.1_3
- Document drupal8 vulnerability
49453fad33
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Bump portrev for latest OpenSSL vuln
3a36d250d4
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Add OpenSSL vulnerability
bb447968c9
Jochen Neumeister (joneum) · 1.1_3
Add Blockquote

pointy hat to joneum
d891e0c9fb
Jochen Neumeister (joneum) · 1.1_3
Document multiple vulnerabilities in www/drupal7

Security:	CVE-2018-7600
2855f782ad
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document Perl vulnerability
6951142a53
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Update freeimage vulnerability
b047deaef1
Eugene Grosbein (eugen) · 1.1_3
ipsec-tools: document remotely exploitable computational-complexity attack.

PR:		225066
Security:	CVE-2016-10396
d05a9e9985
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document nghttp2 vulnerability
4f86aadb15
Alex Dupre (ale) · 1.1_3
Document roundcube IMAP command injection vulnerability.
85cff20e30
Steve Wills (swills) · 1.1_3
Document Jenkins vulnerabilities
07dfa53347
Jung-uk Kim (jkim) · 1.1_3
Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb18-08.html
2e3fb33924
Matthias Fechner (mfechner) · 1.1_3
Fixed a wrong version definition for gitlab that report 10.4.6 as affected.

PR:		227293
Reported by:	majo-bugs.freebsd.org@cerny.sk
Reviewed by:	dbaio, swills (mentor)
Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D14999
efc76d02e5
Matthias Fechner (mfechner) · 1.1_3
Added information about security problems with port www/gitlab.

Reviewed by:	swills (mentor)
Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D14974
2e8d356e48
Mark Felder (feld) · 1.1_3
Document FreeBSD-SA-18:05.ipsec
0c69a64777
Mark Felder (feld) · 1.1_3
Document FreeBSD-SA-18:04.vt
bb7bb07e56
Jan Beich (jbeich) · 1.1_3
security/vuxml: adjust thunderbird version for CVE-2018-5148 backport
9fce20ddbc
Jan Beich (jbeich) · 1.1_3
security/vuxml: delist palemoon from CVE-2018-514[67]

Let upstream to decide if the browser is affected.
https://github.com/MoonchildProductions/Pale-Moon/commits/master/media/libvorbis/lib/vorbis_codebook.c
https://github.com/MoonchildProductions/Pale-Moon/commits/master/media/libtremor/lib/tremor_codebook.c
c9d6221821
Jan Beich (jbeich) · 1.1_3
security/vuxml: libxul didn't share release branch with thunderbird
d5ffd3c835
Wen Heping (wen) · 1.1_3
- Document Moodle vulnerability
d297e205be
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Fix space/tab to pet "make validate"
4770d0078d
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document Ruby vulnerability
8228eaa4df
Bradley T. Hughes (bhughes) · 1.1_3
security/vuxml: Document Node.js vulnerabilities

https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/
3f8e355638
Matthias Fechner (mfechner) · 1.1_3
Document gitlab vulnerability.

Reviewed by:	tz (mentor)
Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D14870
f83cc745aa
Tobias Kortkamp (tobik) · 1.1_3
Fix typos
a66d1fd4a1
Tobias Kortkamp (tobik) · 1.1_3
Document www/webkit2-gtk3 vulnerabilities
e127faff7b
Carlos J. Puga Medina (cpm) · 1.1_3
Document new vulnerability in www/chromium < 65.0.3325.181

Obtained from:	https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop_20.html
b485021388