CVE and update status of the FreeBSD ports tree3,544 unaddressed CVEs in 709 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 898db4939a
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
CPE
not set in the port, and none could be determined — that does not mean none exists
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,355)

Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document GnuTLS vulnerabilities
536931e190
MANTANI Nobutaka (nobutaka) · 1.1_3
Modify affected version of w3m entry accordingly since w3m port has been updated to fixed version.

MFH:		2017Q1
71ebfbc45a
Jason Unovitch (junovitch) · 1.1_3
Tag irssi entry with assigned CVEs, while here wrap at 80 and reference PR

PR:		215800
Security:	CVE-2017-5193
Security:	CVE-2017-5194
Security:	CVE-2017-5195
Security:	CVE-2017-5196
Security:	https://vuxml.FreeBSD.org/freebsd/3d6be69b-d365-11e6-a071-001e67f15f5a.html
c1433a201b
Jason Unovitch (junovitch) · 1.1_3
Document last quarter of Tomcat security advisories

Latest advisory is awaiting upstream release

PR:		214599
PR:		215865
Security:	CVE-2016-0762
Security:	CVE-2016-5018
Security:	CVE-2016-6794
Security:	CVE-2016-6796
Security:	CVE-2016-6797
Security:	CVE-2016-6816
Security:	CVE-2016-8735
Security:	CVE-2016-8745
Security:	https://vuxml.FreeBSD.org/freebsd/0b9af110-d529-11e6-ae1b-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/3ae106e2-d521-11e6-ae1b-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/e5ec2767-d529-11e6-ae1b-002590263bf5.html
be01232083
Vanilla I. Shu (vanilla) · 1.1_3
Document irc/irssi.

PR:		215801
Submitted by:	Vladimir Krstulja <vlad-fbsd at acheronmedia.com>
875b456878
Jason Unovitch (junovitch) · 1.1_3
Document security issues fixed in CodeIgniter 3.1.0 and 3.1.2

Note the security issue in CodeIgniter 3.1.1 is documented being valid on
PHP 5.3 only.

Security:	https://vuxml.FreeBSD.org/freebsd/5e439ee7-d3bd-11e6-ae1b-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/496160d3-d3be-11e6-ae1b-002590263bf5.html
147a47fef2
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Update latest PHP 7 entry

- Vulnerable versions for all the referenced CVEs now known
40ebf52be6
Ryan Steinmetz (zi) · 1.1_3
- Document multiple vulnerabilities in w3m ports

PR:		215070
Submitted by:	kcwu@csie.org
Security:	eafa3aec-211b-4dd4-9b8a-a664a3f0917a
9f7d37d9fa
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Don't category prefix the <topic>
4a4c770eae
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Fix entry date on most recent commit
226069dc5a
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document h2o vulnerability

PR:		215587
Submitted by:	Dave Cottlehuber <dch@skunkwerks.at> (maintainer)
584da89984
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document PHP 0-day vulnerabilities

- Two solved, not referenced in ChangeLog
eb71eaf488
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document PHP vulnerabilities

- Vulnerabilities fixed in 7.0.14
f552072935
Thierry Thomas (thierry) · 1.1_3
Adding tt-rss to the phpmailer's vulnerabilities.
29b3b53dec
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document phpmailer vulnerability

- NB: This is not a duplicate

Security:	c7656d4c-cb60-11e6-a9a5-b499baebfeaf
Security:	CVE-2016-10045
af48d825f7
Timur I. Bakeyev (timur) · 1.1_3
Add entry for multiple samba 3.6.* - 4.4.* vulnerabilities.

Security:	CVE-2016-2123
		CVE-2016-2125
		CVE-2016-2126
b9785e5d50
Pawel Pekala (pawel) · 1.1_3
Document devel/upnp 2 security vulnerabilities: - unhandled write of files to filesystem via POST by default - heap buffer overflow in create_url_list function
fd60857091
Baptiste Daroussin (bapt) · 1.1_3
Fix range for exim vulnerability
b59515b2a8
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document phpmailer vulnerability
122e96b00c
Vsevolod Stakhov (vsevolod) · 1.1_3
- Document CVE-2016-9963 for exim
0203b2ebcf
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document OpenSSH vulnerabilities
2b1fc71ffa
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
- Fix space/tab: it was not caught by 'make validate'
8f6e6a4757
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3
- Document cURL vulnerability
f83ff06f37
Jason Unovitch (junovitch) · 1.1_3
Document information disclosure CVEs in SQUID-2016:10 and SQUID-2016:11

PR:		215416
PR:		215418
Security:	CVE-2016-10002
Security:	CVE-2016-10003
Security:	https://vuxml.FreeBSD.org/freebsd/41f8af15-c8b9-11e6-ae1b-002590263bf5.html
56275ac313
Jason Unovitch (junovitch) · 1.1_3
Document command execution in vim/neovim via specially crafted files

Reported by:	ohaur
Security:	CVE-2016-1248
Security:	https://vuxml.FreeBSD.org/freebsd/c11629d3-c8ad-11e6-ae1b-002590263bf5.html
dd24078860
Baptiste Daroussin (bapt) · 1.1_3
Add a entry about a XSS concerning www/pligg
06446d1615
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Add severity to recent Apache vulnerabilities
d9f64ad554
Mark Felder (feld) · 1.1_3
Document FreeBSD-SA-16:39.ntp
77f8042137
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document cURL 7.51 vulnerability
905e98fab2
Jason Unovitch (junovitch) · 1.1_3
Document Joomla! security advisories since 3.4.6 was released.

While here, update entry for 3.4.6 with final advisory information from
JSST page.

A big thanks to Larry Rosenman for reporting the open issues and getting the
port up to date.

PR:		215058
Reported by:	Larry Rosenman <ler@lerctr.org>
Security:	CVE-2016-8869
Security:	CVE-2016-8870
Security:	CVE-2016-9081
Security:	CVE-2016-9836
Security:	CVE-2016-9837
Security:	CVE-2016-9838
Security:	https://vuxml.FreeBSD.org/freebsd/624b45c0-c7f3-11e6-ae1b-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/a27d234a-c7f2-11e6-ae1b-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/c0ef061a-c7f0-11e6-ae1b-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/f0806cad-c7f1-11e6-ae1b-002590263bf5.html
060e94a093
Jason Unovitch (junovitch) · 1.1_3
Document Xen Security Advisory (XSA 202)

Security:	CVE-2016-10024
Security:	https://vuxml.FreeBSD.org/freebsd/3ae078ca-c7eb-11e6-ae1b-002590263bf5.html
12597ace7f
Olli Hauer (ohauer) · 1.1_3
- document Apache httpd-2.4.x defects
6390c2348a
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Mark openssl-devel not vulnerable to CVE-2016-2178

PR:		214995
Reported by:	Melvyn Sopacua <m.r.sopacua@gmail.com>
cc60663057
Jason Unovitch (junovitch) · 1.1_3
Document Xen Security Advisory (XSA 204)

Reported by:	royger
Security:	CVE-2016-10013
Security:	https://vuxml.FreeBSD.org/freebsd/942433db-c661-11e6-ae1b-002590263bf5.html
79e84c9aba
Jan Beich (jbeich) · 1.1_3
security/vuxml: oops, seamonkey 2.46 has CVE-2016-9079 fix

https://hg.mozilla.org/releases/mozilla-release/rev/8b8d2820718f
33f86b3c51
Jason Unovitch (junovitch) · 1.1_3
Document two CVEs fixed in Atheme 7.2.7

PR:		209217
Security:	CVE-2014-9773
Security:	CVE-2016-4478
Security:	https://vuxml.FreeBSD.org/freebsd/e47ab5db-c333-11e6-ae1b-002590263bf5.html
e85b24d14f
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark www/firefox < 50.1_1,1 as vulnerable
5775c96ed1
Jason Unovitch (junovitch) · 1.1_3
Update Roundcube entry with CVE and Bugtraq ID and switch to more detailed Mitre verbiage.

PR:		214925
Security:	CVE-2016-9920
Security:	https://vuxml.FreeBSD.org/freebsd/125f5958-b611-11e6-a9a5-b499baebfeaf.html
f6f4d6c54f
Jason Unovitch (junovitch) · 1.1_3
Document Wordpress security issues in 4.6.1.

I didn't see any security updates in the 4.7 blog entry but we missed
capturing these fixes from 4.6.1 earlier.

Security:	https://vuxml.FreeBSD.org/freebsd/54e50cd9-c1a8-11e6-ae1b-002590263bf5.html
5ac6c65656
Jason Unovitch (junovitch) · 1.1_3
Document Xen Security Advisory (XSA 200)

Reported by:	royger
Security:	CVE-2016-9932
Security:	https://vuxml.FreeBSD.org/freebsd/80a897a2-c1a6-11e6-ae1b-002590263bf5.html
ec65b81c0e
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document PHP 7.0.13 & 5.6.29 vulnerabilities

- No further detail provided by the PHP project
9ed40c74db
Guido Falsi (madpilot) · 1.1_3
Document vulnerabilities in net/asterisk11 and net/asterisk13.
cbb0697fdb
Mark Felder (feld) · 1.1_3
Revise FreeBSD-SA-16:37.libc entry
033d27d3b1
Jason E. Hale (jhale) · 1.1_3
Document vulnerabilities in security/cryptopp

Security:	CVE-2015-2141
Security:	CVE-2016-3995
Security:	CVE-2016-7420
8903d775bb
Mark Felder (feld) · 1.1_3
Fix a couple <freebsdsa> that were meant to be <freebsdpr>
3d549abf10
Mark Felder (feld) · 1.1_3
Document FreeBSD-SA-16:38.bhyve

Security:	CVE-2016-1889
d10e089bf7
Mark Felder (feld) · 1.1_3
Document FreeBSD-SA-16:37.libc

Security:	CVE-2016-6559
5ce4da25bb
Mark Felder (feld) · 1.1_3
Document FreeBSD-SA-16:36.telnetd

Security:	CVE-2016-1888
36b7709b6a
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document Apache HTTP/2 vulnerability

Security:	CVE-2016-8740
a4e5a8b806
Rene Ladan (rene) · 1.1_3
Document new vulnerabilities in www/chromium < 55.0.2883.75

Obtained from:	https://googlechromereleases.blogspot.nl/2016/12/stable-channel-update-for-desktop.html
3618de0a42