CVE and update status of the FreeBSD ports tree3,543 unaddressed CVEs in 709 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 898db4939a
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
CPE
not set in the port, and none could be determined — that does not mean none exists
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,355)

Guido Falsi (madpilot) · 1.1_3
Document new asterisk and pjsip vulnerabilities.
cb3c26858a
Matthew Seaman (matthew) · 1.1_3
Document the latest phpMyAdmin security advisory PMASA-2018-1
2ceb98c2b1
Torsten Zuehlsdorff (tz) · 1.1_3
Document GitLab Vulnerability

Security: https://vuxml.FreeBSD.org/freebsd/86291013-16e6-11e8-ae9f-d43d7e971a1b.html
f48310daac
Danilo G. Baio (dbaio) · 1.1_3
security/vuxml: Document multiple vulnerabilities in irc/irssi

Security:	CVE-2018-7054
Security:	CVE-2018-7053
Security:	CVE-2018-7052
Security:	CVE-2018-7051
Security:	CVE-2018-7050

PR:		226001
Reported by:	tj@mrsk.me (email)
Reported by:	David O'Rourke <dor.bsd@xm0.uk>
8e7e56ffc4
Adam Weinberger (adamw) · 1.1_3
Add Mojolicious vulnerability, for which there is very little information about the actual issue.
a66064b548
Olli Hauer (ohauer) · 1.1_3
- document bugzilla44 and bugzilla50 CVE issue
7c24a0625e
Craig Leres (leres) · 1.1_3
Mark bro < 2.5.3 as vulnerable as per:

http://blog.bro.org/2018/02/bro-253-released-security-update.html

Reviewed by:	matthew (mentor)
Approved by:	matthew (mentor)
Differential Revision:	https://reviews.freebsd.org/D14395
d4cfca03c5
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Fix typo
217bce4c74
Steve Wills (swills) · 1.1_3
Document consul issue
31aaccf446
Craig Leres (leres) · 1.1_3
Mark bro < 2.5.2 as vulnerable as per:

http://blog.bro.org/2017/10/bro-252-242-release-security-update.html

Reviewed by:	ler (mentor)
Approved by:	ler (mentor)
Security:	CVE-2017-1000458
Differential Revision:	https://reviews.freebsd.org/D14394
a33e9690dc
Kurt Jaeger (pi) · 1.1_3
security/vuxml: 4 CVEs for net/quagga
c076102e5d
Jason E. Hale (jhale) · 1.1_3
Document vulnerabilities in graphics/libraw
91ee65f126
Yuri Victorovich (yuri) · 1.1_3
VulnXML: Bitmessage vulnerability

No CVE is available. CVE is requested.
The bitmessage port will be updated shortly.

Approved by:	tcberner
73eb00859b
Steve Wills (swills) · 1.1_3
Document Jenkins vulnerability
0643c87f84
Yuri Victorovich (yuri) · 1.1_3
VulnXML records for vulnerabilities of sysutils/bchunk fixed in the upcoming update to 1.2.2 (bug#225772)

Approved by:	tcberner (mentor, implicit)
e090408eac
Vsevolod Stakhov (vsevolod) · 1.1_3
- Document www/uwsgi vulnerability
f58eb147ef
Vsevolod Stakhov (vsevolod) · 1.1_3
- Fix URL in blockquote

Reported by:	remko via private email
808e1eb530
Carlos J. Puga Medina (cpm) · 1.1_3
Correct affected version of Mpv
bfd09f2bf9
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document python vulnerability
55a8f1f244
Emanuel Haupt (ehaupt) · 1.1_3
Document vulnerability in finance/electrum and finance/electrum2.

PR:		225056
Submitted by:	pete@nomadlogic.org, vermaden@interia.pl (via mail)
Security:	CVE-2018-6353
5ccbbd8ce1
Danilo G. Baio (dbaio) · 1.1_3
security/vuxml: Document vulnerability in net-p2p/libtorrent

PR:		224664
Reported by:	Henry David Bartholomew <PopularMoment@protonmail.com>
469381ce65
Vsevolod Stakhov (vsevolod) · 1.1_3
- Document CVE-2018-6789 in mail/exim

Security:	316b3c3e-0e98-11e8-8d41-97657151f8c2
8cfb21be8e
Raphael Kubo da Costa (rakuco) · 1.1_3
Add entries for CVE-2017-17969 and CVE-2018-5996 in p7zip

Security:	CVE-2017-17969
Security:	CVE-2018-5996
72ac4629a5
Carlos J. Puga Medina (cpm) · 1.1_3
Document vulnerability in Mpv

PR:		225783
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>
Obtained from:	https://nvd.nist.gov/vuln/detail/CVE-2018-6360
Security:	CVE-2018-6360
d1c59cd50d
Matthias Andree (mandree) · 1.1_3
Extend mailman CVE-2018-5950 vuln entry to mailman-with-htdig

Security:	3d0eeef8-0cf9-11e8-99b0-d017c2987f9a
Security:	CVE-2018-5950
d706700662
Matthias Andree (mandree) · 1.1_3
Document Mailman vulnerability

PR:		225767
Submitted by:	Vladimir Krstulja
Reviewed by:	Matthias Andree
Security:	CVE-2018-5950
Security:	3d0eeef8-0cf9-11e8-99b0-d017c2987f9a
06ae662ddd
Palle Girgensohn (girgen) · 1.1_3
Add security notice for PostgreSQL

Security:	CVE-2018-1052
Security:	CVE-2018-1053
a02d810ddf
Kurt Jaeger (pi) · 1.1_3
security/vuxml: Document recent tiff CVEs

PR:		225545
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>
0145ab609f
Jung-uk Kim (jkim) · 1.1_3
Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb18-03.html
de9fdb4c90
Craig Leres (leres) · 1.1_3
Mark mini_httpd < 1.28 and thttpd < 2.28 as vulnerable as per:

http://acme.com/updates/archive/199.html

While we're here, fix whitespace in vuln.xml that "make validate"
flagged.

Reviewed by:	ler (mentor)
Approved by:	ler (mentor)
Security:	CVE-2017-17663
Differential Revision:	D14217
7579dbe3da
Yuri Victorovich (yuri) · 1.1_3
Adding VuXML record for vulnerability CVE-2017-15924 in net/shadowsocks-libev.

D14200 (part I).

The next commit will update net/shadowsocks-libev and fix this
vulnerability.

PR:		225442
Submitted by:	myself
Approved by:	adamw (mentor)
Differential Revision:	https://reviews.freebsd.org/D14200
575834304a
MANTANI Nobutaka (nobutaka) · 1.1_3
Add modification date for the entry of w3m vulnerabilities.

Spotted by:	 dbaio
bf675d75e9
MANTANI Nobutaka (nobutaka) · 1.1_3
Update entry of w3m vulnerabilities.

PR:		225611
Submitted by:	D. Ebdrup <debdrup@gmail.com>
3a0efcc56d
Tobias Kortkamp (tobik) · 1.1_3
Document www/palemoon vulnerabilities

PR:		225644
Security:	CVE-2018-5102
Security:	CVE-2018-5122
32281f8646
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document django vulnerability
28b411b3f3
Brad Davis (brd) · 1.1_3
Document vulns in www/w3m.

PR:		225611
Submitted by:	D. Ebdrup <debdrup@gmail.com>
e9e955ccea
Niclas Zeising (zeising) · 1.1_3
Update range for dovecot vulnerability.
c73bb7b95f
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark waterfox < 56.0.3.65 as vulnerable
1ffe89b539
Niclas Zeising (zeising) · 1.1_3
Add modified date, forgotten in r460325
15cd370d0a
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark firefox < 58.0.1 as vulnerable
fe935e6c40
Jan Beich (jbeich) · 1.1_3
security/vuxml: bump min waterfox version with FF58 fixes
dc36925832
Tijl Coosemans (tijl) · 1.1_3
Update range for linux-*-nss.

PR:		225541
Submitted by:	dbn
Security:	https://access.redhat.com/errata/RHSA-2017:2832
de1786f179
Niclas Zeising (zeising) · 1.1_3
FIx range for dovecot

2.2.33.2_2 is vulnerable.
11049b769a
Koop Mast (kwm) · 1.1_3
Document gcab stack overflow.

Security:	CVE-2018-5345
0729de262d
Steve Wills (swills) · 1.1_3
Document dovecot issue

Submitted by:	Roger Marquis <marquis@roble.com>
47d8ff45e3
Steve Wills (swills) · 1.1_3
Document curl issue

Submitted by:	Roger Marquis <marquis@roble.com>
f610844383
Christoph Moench-Tegeder (cmt) · 1.1_3
document recent clamav vulnerabilities

See: http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
f4725969a9
Dmitry Marakasov (amdmi3) · 1.1_3
Fix wordpress entries in vuxml

- Fix incorrect package names
- Fix epoch in older entry which makes it incorrectly report fresh ports as vulnerable

With hat:	ports-secteam
c44ed68243
Jan Beich (jbeich) · 1.1_3
security/vuxml: seamonkey 2.49.2 will use firefox-esr 52.6 engine
4c499f8fac
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark firefox < 58 as vulnerable
7baa08e356