CVE and update status of the FreeBSD ports tree3,543 unaddressed CVEs in 709 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 898db4939a
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
CPE
not set in the port, and none could be determined — that does not mean none exists
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,355)

Timur I. Bakeyev (timur) · 1.1_3
Add an entry for the CVE-2017-11103 in Samba.

Security:	CVE-2017-11103
217a9c1705
Bradley T. Hughes (bhughes) · 1.1_3
ecurity/vuxml: add node.js vulnerabilities announced 2017-07-11

The vulnerability in the bundled c-ares dependency is not included,
since the Node.js ports use dns/c-ares as a dependency instead.

Approved by:	mat (co-mentor)
MFH:		2017Q3
Security:	http://www.vuxml.org/freebsd/3eff66c5-66c9-11e7-aa1d-3d2e663cef42.html
Differential Revision:	https://reviews.freebsd.org/D11561
dd8110c89c
Sergey A. Osokin (osa) · 1.1_3
Document nginx security advisory (CVE-2017-7529).
97b2a5d252
Jason Unovitch (junovitch) · 1.1_3
Document security issue fixed in CodeIgniter 3.1.5

Security:	https://vuxml.FreeBSD.org/freebsd/aaedf196-6436-11e7-8b49-002590263bf5.html
d95d21ffc0
Mark Felder (feld) · 1.1_3
Document irssi vulnerabilities

PR:		220544
Security:	CVE-2017-10965
Security:	CVE-2017-10966
9f0ba3dd3d
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Fix <url> for latest PHP entry
9add59c8ea
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Register oniguruma/php-mbstring vulns
5af02b8198
Jose Alonso Cardenas Marquez (acm) · 1.1_3
- Add drupal7 to vuxml entry
b997bc5876
Jose Alonso Cardenas Marquez (acm) · 1.1_3
- Document new vulnerabilities in www/drupal8 < 8.3.4
0e2de42119
Alexey Dokuchaev (danfe) · 1.1_3
Another round of spelling fixes, covering entries of the year 2015.
296f0009f9
Alexey Dokuchaev (danfe) · 1.1_3
Fix a bunch of noticed typos and spelling mistakes, covering years 2016-2017.  Some of those are so common that I've taken liberty to fix them all over the file.
fa3ffef0b1
Richard Gallamore (ultima) · 1.1_3
Added vxvml entry for security/dropbear

PR:		220158
Submitted by:	Piotr Kubaj <pkubaj@anongoth.pl> (maintainer)
Reviewed by:	lifanov (mentor)
Approved by:	lifanov (mentor)
MFH:		2017Q3
Security:	http://www.vuxml.org/freebsd/60931f98-55a7-11e7-8514-589cfc0654e1.html
Differential Revision:	https://reviews.freebsd.org/D11400
1a9c9614ed
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document smarty3 shell injection vuln
b18e666cea
Carlos J. Puga Medina (cpm) · 1.1_3
- Document libgcrypt side-channel attack on RSA secret keys

Security:	CVE-2017-7526
21b8f0deb5
Torsten Zuehlsdorff (tz) · 1.1_3
Document GitLab vulnerabilities
602b111e0f
Dmitry Marakasov (amdmi3) · 1.1_3
- Document tor security regression

Security:	CVE-2017-0377
8d88b88f6a
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Correct apache22 version

- vulns fixed in unreleased 2.2.33

Reported by:		filis (irc)
7b38545305
Vsevolod Stakhov (vsevolod) · 1.1_3
Document Stack Clash vulnerability related to Exim
04b53164d8
Martin Matuska (mm) · 1.1_3
Document pear-Horde_Image vulnerabilities.

Security:	CVE-2017-9773
Security:	CVE-2017-9774
c76378c02c
Matthias Andree (mandree) · 1.1_3
Document OpenVPN vulnerabilities.

Security:	9f65d382-56a4-11e7-83e3-080027ef73ec
Security:	CVE-2017-7508
Security:	CVE-2017-7512
Security:	CVE-2017-7520
Security:	CVE-2017-7521
Security:	CVE-2017-7522
d8de5f2fc3
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Fix entry uppercasing

- Introduced in 443943
4e914e3c8a
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document Apache httpd vulnerabilities
86908868c4
Carlos J. Puga Medina (cpm) · 1.1_3
Document new vulnerabilities in www/chromium < 59.0.3071.104

Obtained from:	https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop_15.html
c8761bca57
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document cURL vulnerability
525a2c6a79
Matthew Seaman (matthew) · 1.1_3
Fix the range of vulnerable versions for p5-RT-Authen-ExternalAuth -- BestPractical have released a tarball of patches, but they've also pushed 0.27 up to CPAN and that has the fixes incorporated.
53eb9de1a8
Matthew Seaman (matthew) · 1.1_3
Document multiple vulnerabilities in www/rt42, www/rt44 and www/p5-RT-Authen-ExternalAuth
8c193ce674
Jung-uk Kim (jkim) · 1.1_3
Document latest Flash Player vulnerabilities.

https://helpx.adobe.com/security/products/flash-player/apsb17-17.html
4c3036164e
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark firefox < 54 as vulnerable
4bbbeb18a4
Ben Woods (woodsb02) · 1.1_3
Correct vulnerable versions of security/heimdal after the security fix was backported in 7.1.0_3

PR:		219657
Security:	CVE-2017-6594
68b389c19c
Mark Felder (feld) · 1.1_3
Document roundcube vulnerability

PR:		219789
966b76b35b
Tijl Coosemans (tijl) · 1.1_3
Document GNUTLS-SA-2017-4.

Security:	https://gnutls.org/security.html#GNUTLS-SA-2017-4
8eb897b178
Ryan Steinmetz (zi) · 1.1_3
- Document remote DoS in irc/irssi
0a9b462f00
Carlos J. Puga Medina (cpm) · 1.1_3
Document new vulnerabilities in www/chromium < 59.0.3071.86

Obtained from:	https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html
7edbed6993
Nikolai Lifanov (lifanov) · 1.1_3
Document vulnerability in sysutils/ansible (CVE-2017-7481)
76802e60d7
Ryan Steinmetz (zi) · 1.1_3
- Document authentication bypass in security/duo
cb7870f650
Ryan Steinmetz (zi) · 1.1_3
- Document vulnerability in net/freeradius3 (CVE-2017-9148)
874d897bcf
Mark Felder (feld) · 1.1_3
Document heimdal vulnerability

PR:		219657
Security:	CVE-2017-6594
dbe58d41fe
Torsten Zuehlsdorff (tz) · 1.1_3
Modify GitLab entries: - wrap long lines - add missing modfied
57760603d3
Koop Mast (kwm) · 1.1_3
Update imagemagick entry

* Fix indention
* Add ranges to the imagemagick 6 version check, to prep for
  ImageMagick patch for the branch.
* Add portepoch's to the imagemagick 6 versions.
* Bump imagemagick 6 version. This version fixes at least one of
  the mentioned CVE's.
* Change CVE-2017-8365 to CVE-2017-8765. CVE-2017-8365 is a
  libsndfile CVE.
* Add modified tag.
7400f000e0
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Fix latest ImageMagick entry

- Fix case in pkgname
 - Add version 7
 - add -nox pkgnamesuffix

PR:		219497
Submitted by:	Dani <i.dani@outlook.com>
6c00ad7b78
Mark Felder (feld) · 1.1_3
Document FreeBSD-SA-17:04.ipfilter
ecae403a59
Mark Felder (feld) · 1.1_3
Document FreeBSD-SA-17:03.ntp
8809611f92
Mark Felder (feld) · 1.1_3
Add missing info for FreeBSD-SA-17:02.openssl
0bb50bd842
Thomas Zander (riggs) · 1.1_3
Document remote code execution via subtitles in multimedia/vlc
ff5020fa8a
Matthias Andree (mandree) · 1.1_3
Document OpenEXR 2.2.0 vulnerabilities

Reported by:	Brandon Perry
Security:	803879e9-4195-11e7-9b08-080027ef73ec
Security:	CVE-2017-9116
Security:	CVE-2017-9115
Security:	CVE-2017-9114
Security:	CVE-2017-9113
Security:	CVE-2017-9112
Security:	CVE-2017-9111
Security:	CVE-2017-9110
a74acc3c96
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document ImageMagick vulnerabilities

PR:		219497
Reported by:	dani <i.dani@outlook.com>
155874b7b3
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document samba RCE vulnerability

- Add entry for samba
 - Fix tabs/space previous entry

Security:	CVE-2017-7494
27e6c3df17
Alexey Dokuchaev (danfe) · 1.1_3
Document another round of multiple vulnerabilities found in the kernel mode layer handler of nVidia GPU display driver.

Security:	CVE-2017-0350, CVE-2017-0351, CVE-2017-0352
PR:		219465
Submitted by:	Andrew Marks
f31628aa89
Dirk Meyer (dinoex) · 1.1_3
- add miniupnpc CVE-2017-8798
941c788569
Martin Wilke (miwi) · 1.1_3
- Fix spelling

Reported by:	remko
eac9c34fa4
« newest← newerpage 72 of 168older →oldest »