CVE and update status of the FreeBSD ports tree3,543 unaddressed CVEs in 709 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 898db4939a
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
CPE
not set in the port, and none could be determined — that does not mean none exists
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,355)

Jochen Neumeister (joneum) · 1.1_3
- Document Wordpress multible vulnerabilities

Approved by:	miwi (mentor)
Differential Revision:	https://reviews.freebsd.org/D10789
3753ed400f
Guido Falsi (madpilot) · 1.1_3
Document net/asterisk13 and net/pjsip vulnerabilities.
d549dd6ac1
Larry Rosenman (ler) · 1.1_3
Clean up joomla3 entry.

Submitted by:	zi
472d9c6726
Larry Rosenman (ler) · 1.1_3
Add cvename
c8ef2cd917
Larry Rosenman (ler) · 1.1_3
Add entry for Joomla3 20170501.
37c7869144
Torsten Zuehlsdorff (tz) · 1.1_3
Document recent GitLab vulnerabilities.

Security: https://vuxml.FreeBSD.org/freebsd/9704930c-3bb7-11e7-93f7-d43d7e971a1b.html
707e59a538
Torsten Zuehlsdorff (tz) · 1.1_3
Fix name of old gitlab-entry, its gitlab instead of rubygem-gitlab
b43a636a51
Torsten Zuehlsdorff (tz) · 1.1_3
Document GitLab vulnerabilities.

Security: CVE-2017-0882
Security: https://vuxml.FreeBSD.org/freebsd/5d62950f-3bb5-11e7-93f7-d43d7e971a1b.html
13939e87cf
Koop Mast (kwm) · 1.1_3
Document freetype2 vulnability.

Security:	CVE-2017-8105, CVE-2017-8287
8d9004340f
Matthias Andree (mandree) · 1.1_3
Add openvpn < 2.3.15/< 2.4.2 DoS vuln.

https://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits

Reported by:	Samuli Seppänen
Security:	04cc7bd2-3686-11e7-aa64-080027ef73ec
Security:	CVE-2017-7478
Security:	CVE-2017-7479
d462a62dd2
Palle Girgensohn (girgen) · 1.1_3
Add information about vulnerabilities in PostgreSQL

Security:	CVE-2017-7484 CVE-2017-7485 CVE-2017-7486
04da822ae2
Tobias C. Berner (tcberner) · 1.1_3
Document kauth privilege escalation.

Reviewed by:	rakuco
Approved by:	rakuco (mentor)
Security:	CVE-2017-8422
Differential Revision:	https://reviews.freebsd.org/D10660
2e6aa98ce1
Pawel Pekala (pawel) · 1.1_3
Document mail/libetpan null dereference vulnerability
8c69ab1505
Jung-uk Kim (jkim) · 1.1_3
CVE-2017-7867 and CVE-2017-7868 were fixed in r440117.
ad1c451fde
Carlos J. Puga Medina (cpm) · 1.1_3
Document new vulnerability in www/chromium < 58.0.3029.96

Obtained from:	https://chromereleases.googleblog.com/2017/05/stable-channel-update-for-desktop.html
37b69836dd
Larry Rosenman (ler) · 1.1_3
security/vuxml: Document dovecot2 vulnerability

PR:		218671
Approved by:	adamw (mentor, implicit), ports-secteam (maintainer timeout)
Security:	CVE-2017-2669
5e42698490
Bernard Spil (brnrd) · 1.1_3
security/libressl-devel: Mark vulnerabile 2.5.3
eb0fe4115c
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document LibreSSL vulnerability

- CVE-2017-8301 TLS verification vulnerability
a7c3133628
Li-Wen Hsu (lwhsu) · 1.1_3
Document Jenkins Security Advisory 2017-04-26
7857b2d4db
Jason Unovitch (junovitch) · 1.1_3
Document security issues fixed in CodeIgniter 3.1.4

Security:	https://vuxml.FreeBSD.org/freebsd/df0144fb-295e-11e7-970f-002590263bf5.html
24380ad8b2
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document weechat vulnerability

PR:		218852
Submitted by:	Jochen Neumeister <joneum@bsdproject.de>
0dfb791707
Mathieu Arnold (mat) · 1.1_3
and make validate for something I did not do.

Pointy hat:	acm
Sponsored by:	Absolight
a78ec8def0
Mathieu Arnold (mat) · 1.1_3
I'm stupid.

Pointy hat:	mat
Sponsored by:	Absolight
3aac5c11cb
Mathieu Arnold (mat) · 1.1_3
This was fixed a while ago.

Sponsored by:	Absolight
0bc6ddf683
Jose Alonso Cardenas Marquez (acm) · 1.1_3
- Document new vulnerability in www/drupal8 < 8.3.1
f56abe4718
Carlos J. Puga Medina (cpm) · 1.1_3
Document new vulnerabilities in www/chromium < 58.0.3029.81

Obtained from:	https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html
96ee5913e6
Jung-uk Kim (jkim) · 1.1_3
Add a separate entry for linux-c7-graphite2.  It is not fixed yet.
765e97223e
Jung-uk Kim (jkim) · 1.1_3
CVE-2017-5436 was fixed by r438984.
401cc2f042
Jan Beich (jbeich) · 1.1_3
security/vuxml: back out r438981 as I've confused already extracted directory
7ffa90ccb5
Jan Beich (jbeich) · 1.1_3
security/vuxml: icu 59.1 doesn't have the fix
2b499991d8
Jan Beich (jbeich) · 1.1_3
security/vuxml: oops, forgot PORTEPOCH from r418152
50c2236c78
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark icu < 59.1 as vulnerable
8f88dc5b75
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark old sndfile/samplerate/tiff as vulnerable
8274d4b7f3
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
Document cURL vulnerability
f68851e4e5
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark some firefox < 53 bundled deps as vulnerable
0e10a64637
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark firefox < 53 as vulnerable
d472c92435
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document vulnerabilities from Oracle 2017Q2 update
32482ef75e
Mathieu Arnold (mat) · 1.1_3
Adjust the bind9-devel version it was fixed in.

Sponsored by:	Absolight
e962d6f96d
Xin LI (delphij) · 1.1_3
Document BIND multiple vulnerabilities.
dd6f3458de
Dominic Fandrey (kami) · 1.1_3
security/vuxml: Add id Tech 3 remote code execution

PR:		217911
Reviewed by:	delphij, #ports_secteam
Approved by:	delphij, #ports_secteam
Security:	CVE-2017-6903
Differential Revision:	https://reviews.freebsd.org/D10244
d6777210d4
Jason Unovitch (junovitch) · 1.1_3
Document Xen Security Advisory (XSA 212)

Security:	CVE-2017-7228
Security:	https://vuxml.FreeBSD.org/freebsd/90becf7c-1acf-11e7-970f-002590263bf5.html
61e2c5570d
Jason Unovitch (junovitch) · 1.1_3
Update curl version. Patch backported in 437808 instead of version bump.
137e5bce8c
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Add missing topic

Reported by:	Guido Falsi <madpilot@FreeBSD.org>
0d932288af
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document curl vulnerability
9d6fc16e27
Martin Wilke (miwi) · 1.1_3
- Document django -- multible vulnerabilities
abec34cd06
Guido Falsi (madpilot) · 1.1_3
Document net/asterisk13 vulnerability.
8fbe9c3dc9
Alexey Dokuchaev (danfe) · 1.1_3
- Document recent NVIDIA GPU display driver vulnerabilities - Spell "NVIDIA UNIX driver" consistently throughout the file

PR:	217341
f333635680
Carlos J. Puga Medina (cpm) · 1.1_3
Document new vulnerabilities in www/chromium < 57.0.2987.133

Obtained from:	https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html
d40fc5aa91
Jason Unovitch (junovitch) · 1.1_3
Document Xen Security Advisory (XSA 206)

CVE lists none (yet) assigned

While here, fix a typo on my last Xen entry

Security:	https://vuxml.FreeBSD.org/freebsd/47873d72-14eb-11e7-970f-002590263bf5.html
d544c46db1
Jason Unovitch (junovitch) · 1.1_3
Actually, let's refer to the original entries for these hostapd CVEs

Reflect CVE-2016-4476 / VID 967b852b-1e28-11e6-8dd3-002590263bf5 in cancelled

CVE-2015-5314 is in VID 976567f6-05c5-11e6-94fa-002590263bf5

PR:		217906
Security:	https://vuxml.FreeBSD.org/freebsd/976567f6-05c5-11e6-94fa-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/967b852b-1e28-11e6-8dd3-002590263bf5.html
e61f6dcac2
« newest← newerpage 73 of 168older →oldest »