security/vuxml: Document GnuTLS vulnerabilities536931e190
Port details
security/vuxml 1.1_6
Vulnerability and eXposure Markup Language DTD
Port info
- Maintainer
- ports-secteam@FreeBSD.org
- Packages
- latest: 1.1_6
- Upstream
- up to date
- Last update
- to 1.1_6 · 898db4939a
- Quarterly
- 2026Q4: 1.1_6
- WWW
- https://vuxml.freebsd.org/
- CPE
- not set in the port, and none could be determined — that does not mean none exists
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install vuxmlinstalls 1.1_6 fromlatest; fromquarterly(2026Q4) 1.1_6- Port
# cd /usr/ports/security/vuxml && make install clean- Size
- 9.7 KiB download · 40 KiB installed
- License
- BSD2CLAUSE
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.1_6 | 1.1_6 | – |
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Dependencies
Depends on 5
- lang/python312 3.12.15 25 unaddressed
- textproc/libxslt 1.1.45
- textproc/xhtml-basic 1.0.20001219_2
- textproc/xhtml-modularization 1.0.20010410_1
- textproc/xmlcatmgr 2.2_4
Run and library dependencies of the package on latest. Build dependencies are not in the package index.
Required by 0
No package on latest depends on it.
Packages on latest that depend on it directly.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 1.1_6.Fixed (0)
No VuXML entries for this package.
Problem reports (5) · open in Bugzilla, most recently changed first
| PR | Summary | Status | Changed |
|---|---|---|---|
| 295797 | maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256 | In Progress | 2026-07-17 |
| 295836 | maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django | New | 2026-06-04 |
| 291717 | security/vuxml: add entry for uriparser < 1.0.0 | New | 2025-12-16 |
| 288090 | maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2 | New | 2025-07-08 |
| 270795 | security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries | In Progress | 2025-07-01 |
Commits (8,355)
Modify affected version of w3m entry accordingly since w3m port has been updated to fixed version. MFH: 2017Q171ebfbc45a
Tag irssi entry with assigned CVEs, while here wrap at 80 and reference PR PR: 215800 Security: CVE-2017-5193 Security: CVE-2017-5194 Security: CVE-2017-5195 Security: CVE-2017-5196 Security: https://vuxml.FreeBSD.org/freebsd/3d6be69b-d365-11e6-a071-001e67f15f5a.htmlc1433a201b
Document last quarter of Tomcat security advisories Latest advisory is awaiting upstream release PR: 214599 PR: 215865 Security: CVE-2016-0762 Security: CVE-2016-5018 Security: CVE-2016-6794 Security: CVE-2016-6796 Security: CVE-2016-6797 Security: CVE-2016-6816 Security: CVE-2016-8735 Security: CVE-2016-8745 Security: https://vuxml.FreeBSD.org/freebsd/0b9af110-d529-11e6-ae1b-002590263bf5.html Security: https://vuxml.FreeBSD.org/freebsd/3ae106e2-d521-11e6-ae1b-002590263bf5.html Security: https://vuxml.FreeBSD.org/freebsd/e5ec2767-d529-11e6-ae1b-002590263bf5.htmlbe01232083
Document irc/irssi. PR: 215801 Submitted by: Vladimir Krstulja <vlad-fbsd at acheronmedia.com>875b456878
Document security issues fixed in CodeIgniter 3.1.0 and 3.1.2 Note the security issue in CodeIgniter 3.1.1 is documented being valid on PHP 5.3 only. Security: https://vuxml.FreeBSD.org/freebsd/5e439ee7-d3bd-11e6-ae1b-002590263bf5.html Security: https://vuxml.FreeBSD.org/freebsd/496160d3-d3be-11e6-ae1b-002590263bf5.html147a47fef2
security/vuxml: Update latest PHP 7 entry - Vulnerable versions for all the referenced CVEs now known40ebf52be6
- Document multiple vulnerabilities in w3m ports PR: 215070 Submitted by: kcwu@csie.org Security: eafa3aec-211b-4dd4-9b8a-a664a3f0917a9f7d37d9fa
security/vuxml: Don't category prefix the <topic>4a4c770eae
security/vuxml: Fix entry date on most recent commit226069dc5a
security/vuxml: Document h2o vulnerability PR: 215587 Submitted by: Dave Cottlehuber <dch@skunkwerks.at> (maintainer)584da89984
security/vuxml: Document PHP 0-day vulnerabilities - Two solved, not referenced in ChangeLogeb71eaf488
security/vuxml: Document PHP vulnerabilities - Vulnerabilities fixed in 7.0.14f552072935
Adding tt-rss to the phpmailer's vulnerabilities.29b3b53dec
security/vuxml: Document phpmailer vulnerability - NB: This is not a duplicate Security: c7656d4c-cb60-11e6-a9a5-b499baebfeaf Security: CVE-2016-10045af48d825f7
Add entry for multiple samba 3.6.* - 4.4.* vulnerabilities. Security: CVE-2016-2123 CVE-2016-2125 CVE-2016-2126b9785e5d50
Document devel/upnp 2 security vulnerabilities: - unhandled write of files to filesystem via POST by default - heap buffer overflow in create_url_list functionfd60857091
Fix range for exim vulnerabilityb59515b2a8
security/vuxml: Document phpmailer vulnerability122e96b00c
- Document CVE-2016-9963 for exim0203b2ebcf
security/vuxml: Document OpenSSH vulnerabilities2b1fc71ffa
- Fix space/tab: it was not caught by 'make validate'8f6e6a4757
- Document cURL vulnerabilityf83ff06f37
Document information disclosure CVEs in SQUID-2016:10 and SQUID-2016:11 PR: 215416 PR: 215418 Security: CVE-2016-10002 Security: CVE-2016-10003 Security: https://vuxml.FreeBSD.org/freebsd/41f8af15-c8b9-11e6-ae1b-002590263bf5.html56275ac313
Document command execution in vim/neovim via specially crafted files Reported by: ohaur Security: CVE-2016-1248 Security: https://vuxml.FreeBSD.org/freebsd/c11629d3-c8ad-11e6-ae1b-002590263bf5.htmldd24078860
Add a entry about a XSS concerning www/pligg06446d1615
security/vuxml: Add severity to recent Apache vulnerabilitiesd9f64ad554
Document FreeBSD-SA-16:39.ntp77f8042137
security/vuxml: Document cURL 7.51 vulnerability905e98fab2
Document Joomla! security advisories since 3.4.6 was released. While here, update entry for 3.4.6 with final advisory information from JSST page. A big thanks to Larry Rosenman for reporting the open issues and getting the port up to date. PR: 215058 Reported by: Larry Rosenman <ler@lerctr.org> Security: CVE-2016-8869 Security: CVE-2016-8870 Security: CVE-2016-9081 Security: CVE-2016-9836 Security: CVE-2016-9837 Security: CVE-2016-9838 Security: https://vuxml.FreeBSD.org/freebsd/624b45c0-c7f3-11e6-ae1b-002590263bf5.html Security: https://vuxml.FreeBSD.org/freebsd/a27d234a-c7f2-11e6-ae1b-002590263bf5.html Security: https://vuxml.FreeBSD.org/freebsd/c0ef061a-c7f0-11e6-ae1b-002590263bf5.html Security: https://vuxml.FreeBSD.org/freebsd/f0806cad-c7f1-11e6-ae1b-002590263bf5.html060e94a093
Document Xen Security Advisory (XSA 202) Security: CVE-2016-10024 Security: https://vuxml.FreeBSD.org/freebsd/3ae078ca-c7eb-11e6-ae1b-002590263bf5.html12597ace7f
- document Apache httpd-2.4.x defects6390c2348a
security/vuxml: Mark openssl-devel not vulnerable to CVE-2016-2178 PR: 214995 Reported by: Melvyn Sopacua <m.r.sopacua@gmail.com>cc60663057
Document Xen Security Advisory (XSA 204) Reported by: royger Security: CVE-2016-10013 Security: https://vuxml.FreeBSD.org/freebsd/942433db-c661-11e6-ae1b-002590263bf5.html79e84c9aba
security/vuxml: oops, seamonkey 2.46 has CVE-2016-9079 fix https://hg.mozilla.org/releases/mozilla-release/rev/8b8d2820718f33f86b3c51
Document two CVEs fixed in Atheme 7.2.7 PR: 209217 Security: CVE-2014-9773 Security: CVE-2016-4478 Security: https://vuxml.FreeBSD.org/freebsd/e47ab5db-c333-11e6-ae1b-002590263bf5.htmle85b24d14f
security/vuxml: mark www/firefox < 50.1_1,1 as vulnerable5775c96ed1
Update Roundcube entry with CVE and Bugtraq ID and switch to more detailed Mitre verbiage. PR: 214925 Security: CVE-2016-9920 Security: https://vuxml.FreeBSD.org/freebsd/125f5958-b611-11e6-a9a5-b499baebfeaf.htmlf6f4d6c54f
Document Wordpress security issues in 4.6.1. I didn't see any security updates in the 4.7 blog entry but we missed capturing these fixes from 4.6.1 earlier. Security: https://vuxml.FreeBSD.org/freebsd/54e50cd9-c1a8-11e6-ae1b-002590263bf5.html5ac6c65656
Document Xen Security Advisory (XSA 200) Reported by: royger Security: CVE-2016-9932 Security: https://vuxml.FreeBSD.org/freebsd/80a897a2-c1a6-11e6-ae1b-002590263bf5.htmlec65b81c0e
security/vuxml: Document PHP 7.0.13 & 5.6.29 vulnerabilities - No further detail provided by the PHP project9ed40c74db
Document vulnerabilities in net/asterisk11 and net/asterisk13.cbb0697fdb
Revise FreeBSD-SA-16:37.libc entry033d27d3b1
Document vulnerabilities in security/cryptopp Security: CVE-2015-2141 Security: CVE-2016-3995 Security: CVE-2016-74208903d775bb
Fix a couple <freebsdsa> that were meant to be <freebsdpr>3d549abf10
Document FreeBSD-SA-16:38.bhyve Security: CVE-2016-1889d10e089bf7
Document FreeBSD-SA-16:37.libc Security: CVE-2016-65595ce4da25bb
Document FreeBSD-SA-16:36.telnetd Security: CVE-2016-188836b7709b6a
security/vuxml: Document Apache HTTP/2 vulnerability Security: CVE-2016-8740a4e5a8b806
Document new vulnerabilities in www/chromium < 55.0.2883.75 Obtained from: https://googlechromereleases.blogspot.nl/2016/12/stable-channel-update-for-desktop.html3618de0a42