CVE and update status of the FreeBSD ports tree3,532 unaddressed CVEs in 701 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 4fa1ce71cd
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
CPE
not set in the port, and none could be determined — that does not mean none exists
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,350)

Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document OpenSSL vulnerabilities
8389a17fe2
Glen Barber (gjb) · 1.1_3
Attempt to fix vuxml build.

Sponsored by:	The FreeBSD Foundation
b211629e04
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Mark Apache 2.2 vulnerable

- Upstream has removed all patches for 2.2.34

With hat:	apache
9053274a19
Glen Barber (gjb) · 1.1_3
Fix build after r465658.

Sponsored by:	The FreeBSD Foundation
bfd3542dd4
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark firefox < 59.0.2 as vulnerable
7643e0ff84
Christoph Moench-Tegeder (cmt) · 1.1_3
thunderbird: fix affected versions for CVE-2018-5146

according to https://www.mozilla.org/en-US/security/advisories/mfsa2018-09/ ,
CVE-2018-5146 has been fixed in thunderbird 52.7.0 (and CVE-2018-5147
affects Android platforms as per it's description).
Add link to the thunderbird security advisory MFSA 2018-09, as this has
the info for thunderbird.
811872c6fa
Jason E. Hale (jhale) · 1.1_3
Fix mythtv ranges. Forgot to factor in PORTEPOCH.
9d32ddd8ef
Jason E. Hale (jhale) · 1.1_3
Update entries for mythtv and mythtv-frontend

PR:		225652
7eaaec0185
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document rubygem-rails-html-sanitizer vulnerability
c4d66464e7
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document recent Apache httpd vulnerabilities
e0e7414ef8
Jochen Neumeister (joneum) · 1.1_3
Document vulnerability in www/mybb
7b9cb0a1dc
Yuri Victorovich (yuri) · 1.1_3
VulnXML record: CVE-2018-8740: SQLite -- Corrupt DB can cause a NULL pointer dereference

Patched in r465275.
d362a068ad
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document rubygem-sanitize vulnerability
4bed8828e4
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document rubygem-loofah vulnerability
c9e493b799
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document py-notebook vulnerability
cb24b702f9
Thomas Zander (riggs) · 1.1_3
Document zero-day remote vulnerability in mail/squirrelmail

Reported by:	Roger Marquis <marquis@roble.com> via e-mail
Security:	CVE-2018-8741
82e600a61f
Joseph Mingrone (jrm) · 1.1_3
security/vuxml: mark slurm-wlm < 17.02.10 as vulnerable

Security:	CVE-2018-7033
2dafff5e57
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark libvorbis < 1.3.6 as vulnerable
6c568d064a
Jan Beich (jbeich) · 1.1_3
security/vuxml: bump waterfox version after r464679
bd332b5090
Matthias Andree (mandree) · 1.1_3
Mark e2fsprogs < 1.44.0 vulnerable.
da5c2b8869
Mark Felder (feld) · 1.1_3
Initial entry for the speculative execution vulnerability (FreeBSD-SA-18:03.speculative_execution)
8d6c9432ca
Mark Felder (feld) · 1.1_3
Update NTP entry to add the FreeBSD SA information (FreeBSD-SA-18:02.ntp)
8ba5607b9a
Mark Felder (feld) · 1.1_3
Document FreeBSD-SA-18:01.ipsec
507f4b4893
Jung-uk Kim (jkim) · 1.1_3
Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb18-05.html
546d69645f
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark firefox < 59 as vulnerable
4044cac410
Timur I. Bakeyev (timur) · 1.1_3
Add an entry for Samba vulnerabilities CVE-2018-1050 and CVE-2018-1057

Security:	CVE-2018-1050
		CVE-2018-1057
7e9e79d64a
Tijl Coosemans (tijl) · 1.1_3
Document mbed TLS Security Advisory 2018-01.

Security:	https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-01
Security:	CVE-2018-0487
Security:	CVE-2018-0488
bf1a5c7fc2
Thomas Zander (riggs) · 1.1_3
Document vulnerabilities in www/chromium before 65.0.3325.146

Submitted by:	Tommi Pernila <tommi.pernila@iki.fi> (via e-mail)
f59d188045
Christoph Moench-Tegeder (cmt) · 1.1_3
document vulnerabilities for net/wireshark{,-lite,qt5} and net/tshark{,-lite}

PR:		226355
Obtained from:	https://www.wireshark.org/security/
e947627762
Ryan Steinmetz (zi) · 1.1_3
- Document vulnerabilities (CVE-2018-5732, CVE-2018-5733) in isc-dhcp ports
85c321bc73
Jason E. Hale (jhale) · 1.1_3
Document additional vulnerabilities in audio/libsndfile
eca47ca4b9
Palle Girgensohn (girgen) · 1.1_3
Document PostgreSQL vulnerability

Security:	CVE-2018-1058
5e656404f0
Renato Botelho (garga) · 1.1_3
Document strongswan vulnerability

PR:		226043
Submitted by:	strongswan@Nanoteq.com
Security:	CVE-2018-6459
Sponsored by:	Rubicon Communications, LLC (Netgate)
850ec8f718
Jason E. Hale (jhale) · 1.1_3
Document vulnerability in audio/libsndfile and audio/linux-c[6|7]-libsndfile
5aa8cdf70f
Xin LI (delphij) · 1.1_3
Document multiple NTP vulnerabilities.
6c71b3b274
Thomas Zander (riggs) · 1.1_3
Document CVE-2018-6056 in chromium 64.0.3282.167

Reported by:	Tommi Pernila <tommi.pernila@iki.fi> (via e-mail)
d2cf99fef0
Thomas Zander (riggs) · 1.1_3
Document multiple vulnerabilities in chromium 64.0.3282.119

Reported by:	Tommi Pernila <tommi.pernila@iki.fi> (via e-mail)
87c8e11f12
Thomas Zander (riggs) · 1.1_3
Document CVE-2018-1304 and CVE-2018-1305 in Apache Tomcat

Submitted by:	Roger Marquis <marquis@roble.com> via e-mail
6a59cb60f8
Palle Girgensohn (girgen) · 1.1_3
Document security problems with shibboleth-sp

Security:	CVE-2018-0489
3dee972cc3
Jochen Neumeister (joneum) · 1.1_3
Document multiple vulnerabilities in www/drupal7 and www/drupal8

Security:	CVE-2017-6927
Security:	CVE-2017-6928
Security:	CVE-2017-6929
Security:	CVE-2017-6930
Security:	CVE-2017-6931
Security:	CVE-2017-6932
ef63f86dac
TAKATSU Tomonari (tota) · 1.1_3
- Fix range for ja-mailman in CVE-2018-5950
2c75753c6b
Thomas Zander (riggs) · 1.1_3
Document ssh injection vulnerability in devel/cvs

PR:		226088
Reported by:	fk@fabiankeil.de
Security:	CVE-2017-12836
f70f4a2f75
Danilo G. Baio (dbaio) · 1.1_3
security/vuxml: Document vulnerability in editors/libreoffice

Security:	CVE-2018-6871

PR:		225797
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>
a6a9d5abcd
Danilo G. Baio (dbaio) · 1.1_3
security/vuxml: Document vulnerabilities in www/squid

Security:	CVE-2018-1000024
Security:	CVE-2018-1000027

PR:		226138
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>
0ab22e8ac9
Danilo G. Baio (dbaio) · 1.1_3
security/vuxml: Fix freebsdpr entry (r462310)
95cb566af8
Guido Falsi (madpilot) · 1.1_3
Document new asterisk and pjsip vulnerabilities.
cb3c26858a
Matthew Seaman (matthew) · 1.1_3
Document the latest phpMyAdmin security advisory PMASA-2018-1
2ceb98c2b1
Torsten Zuehlsdorff (tz) · 1.1_3
Document GitLab Vulnerability

Security: https://vuxml.FreeBSD.org/freebsd/86291013-16e6-11e8-ae9f-d43d7e971a1b.html
f48310daac
Danilo G. Baio (dbaio) · 1.1_3
security/vuxml: Document multiple vulnerabilities in irc/irssi

Security:	CVE-2018-7054
Security:	CVE-2018-7053
Security:	CVE-2018-7052
Security:	CVE-2018-7051
Security:	CVE-2018-7050

PR:		226001
Reported by:	tj@mrsk.me (email)
Reported by:	David O'Rourke <dor.bsd@xm0.uk>
8e7e56ffc4
Adam Weinberger (adamw) · 1.1_3
Add Mojolicious vulnerability, for which there is very little information about the actual issue.
a66064b548
« newest← newerpage 65 of 167older →oldest »