CVE and update status of the FreeBSD ports tree3,543 unaddressed CVEs in 709 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 898db4939a
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
CPE
not set in the port, and none could be determined — that does not mean none exists
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,355)

Steve Wills (swills) · 1.1_3
Document phpmyfaq issues
f4f7a5fb8b
Steve Wills (swills) · 1.1_3
Document wordpress issues
e050fb72a9
Ryan Steinmetz (zi) · 1.1_3
- Fix invalid date entries - Purge 6887828f-0229-11e0-b84d-00262d5ed8ee as it has been superceded by other entries and it is massive. (We have hit 5M on vuln.xml)
3fea2451ab
Steve Wills (swills) · 1.1_3
Fix date format

While here, correct some grammar

PR:		222683
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>
c6c22ec78b
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark firefox < 56 as vulnerable
5c78d6fcbd
Steve Wills (swills) · 1.1_3
Document sam2p issue
fe81779c3d
Steve Wills (swills) · 1.1_3
docuent libraw issue
3a3ea2b528
Matthias Andree (mandree) · 1.1_3
Extend OpenVPN security issue to slave ports.

Security:	CVE-2017-12166
Security:	3dd6ccf4-a3c6-11e7-a52e-0800279f2ff8
d283f49f0d
Matthias Andree (mandree) · 1.1_3
Document OpenVPN <2.4.4 CVE-2017-12166 legacy vuln.

Security:	CVE-2017-12166
Security:	3dd6ccf4-a3c6-11e7-a52e-0800279f2ff8
a89a579ec2
Raphael Kubo da Costa (rakuco) · 1.1_3
Fix version range for libzip's CVE-2017-14107 (r450692).

I am going to land a fix for libzip 1.1.3 (the version currently in the ports
tree) instead of updating the port to 1.3.0. 1.3.0 has a different SOVERSION
number, which also requires updating dependent ports and makes MFH'ing the fix
more difficult.

PR:		222638
592874d5c4
Steve Wills (swills) · 1.1_3
Document ImageMagick issue
aca5ca871c
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Update rubygem-geminabox vulnerability
a1baac2402
Steve Wills (swills) · 1.1_3
Document libofx issue
9664247ff8
Steve Wills (swills) · 1.1_3
Correct version of libbson issue
b394453c20
Steve Wills (swills) · 1.1_3
Document sugarcrm issue
ecd79c8c16
Steve Wills (swills) · 1.1_3
Document libzip issue
a898e4b8f0
Steve Wills (swills) · 1.1_3
Document libbson issue
939dc9d56a
Steve Wills (swills) · 1.1_3
Document multiple vulnerabilities in tcpdump
da772adc9e
Steve Wills (swills) · 1.1_3
Document libraw issue
da41310fbc
Steve Wills (swills) · 1.1_3
Document libraw issue
d69bf4d9d8
Steve Wills (swills) · 1.1_3
Document issue in gd
9faf17f595
Steve Wills (swills) · 1.1_3
Document issue in php and gd
4716c7a03d
Steve Wills (swills) · 1.1_3
Document ledger vulnerabilities
e6f5dab676
Steve Wills (swills) · 1.1_3
Document aacplusenc issue
3a307f9b91
Steve Wills (swills) · 1.1_3
Document ansible issue
a63e096d67
Steve Wills (swills) · 1.1_3
Add second CVE To geminabox entry, update versions affected
e54a906076
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document WeeChat 1.9 vulnerability
80c3c1dfa0
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document Perl vulnerability
0fc5ab3d01
Carlos J. Puga Medina (cpm) · 1.1_3
Document new vulnerabilities in www/chromium < 61.0.3163.100

Obtained from:	https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop_21.html
67d406c540
Guido Falsi (madpilot) · 1.1_3
Add new asterisk ports vulnerability.
194195c1c9
Jan Beich (jbeich) · 1.1_3
security/vuxml: adjust for seamonkey 2.49.1
2781db487a
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document Ruby vulnerability
51c2b5935b
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document rubygem-geminabox vulnerability
29970b935d
Brad Davis (brd) · 1.1_3
Add new entry for Apache "OptionsBleed"

Reviewed by:	zi
f9494a7971
Torsten Zuehlsdorff (tz) · 1.1_3
Document GitLab vulnerabilities

Security: CVE-2017-5029
Security: CVE-2016-4738
Security: https://vuxml.FreeBSD.org/freebsd/6a177c87-9933-11e7-93f7-d43d7e971a1b.html
0007f621df
Ashish SHUKLA (ashish) · 1.1_3
- Add emacs-devel to the list of affected packages by emacs vulnerability - Move it to the top, didn't realize this before. Sorry
2c0e30aafe
Jung-uk Kim (jkim) · 1.1_3
Document latest Flash Player vulnerabilities.

https://helpx.adobe.com/security/products/flash-player/apsb17-28.html
935124ba0d
Ashish SHUKLA (ashish) · 1.1_3
- Correct package name in Emacs vulnerability - Also add emacs-nox11 to the list
70a32c8c07
Ashish SHUKLA (ashish) · 1.1_3
- Document emacs vulnerability
fab2d5f80b
Hajimu UMEMOTO (ume) · 1.1_3
Document cyrus-imapd vulnerability

Security:	CVE-2017-14230
20f6ebdb3c
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Fix indent
24a291e4e9
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document Django vulnerability
21d78d75ac
Don Lewis (truckman) · 1.1_3
Correct vulnerability range for atril and atril-lite.

PR:		221867
Submitted by:	rkoberman@gmail.com
Security:	CVE-2017-1000083
eeedb1f68b
Carlos J. Puga Medina (cpm) · 1.1_3
Document new vulnerabilities in www/chromium < 61.0.3163.79

Obtained from:	https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html
56ac4cf9b7
Mark Felder (feld) · 1.1_3
Cancel CVE-2017-6419 for security/clamav

This only affected clamav-devel / the unreleased code for 0.99.3.
d74b2c893d
Mark Felder (feld) · 1.1_3
Document clamav vulnerability

PR:		221608
Security:	CVE-2017-6419
57d0279086
Mark Felder (feld) · 1.1_3
Document gdk-pixbuf2 vulnerabilities

Security:	CVE-2017-2862 CVE-2017-2870
2188451f38
Guido Falsi (madpilot) · 1.1_3
Document vulnerabilities in asterisk ports.
6512c6b856
Carlos J. Puga Medina (cpm) · 1.1_3
Document libgcrypt side-channel attack vulnerability

Security:	CVE-2017-0379
f456ecea8f
Carlos J. Puga Medina (cpm) · 1.1_3
Update pspp version range to 1.0.1
7c912c7d9c
« newest← newerpage 70 of 168older →oldest »