CVE and update status of the FreeBSD ports tree3,561 unaddressed CVEs in 710 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 898db4939a
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
CPE
not set in the port, and none could be determined — that does not mean none exists
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,355)

Mark Felder (feld) · 1.1_3
Document ImageMagick7 vulnerabilities

PR:		214514
Security:	CVE-2016-9298
Security:	CVE-2016-8866
Security:	CVE-2016-8862
eb79d7ec35
Mark Felder (feld) · 1.1_3
Document py-pillow vulnerabilities

PR:		214410
Security:	CVE-2016-9189
Security:	CVE-2016-9190
29adf414c3
Mark Felder (feld) · 1.1_3
Document ImageMagick vulnerability

PR:		214520
Security:	CVE-2016-9298
2e5c0f84a9
Mark Felder (feld) · 1.1_3
Document py-cryptography vulnerability

PR:		214915
Security:	CVE-2016-9243
09bca54b32
Mark Felder (feld) · 1.1_3
Document qemu vulnerability

PR:		206725
Security:	CVE-2015-1779
dbff5ba7f4
Jason Unovitch (junovitch) · 1.1_3
Document Xen Security Advisories (XSAs 185-188, 190-195, 197-198)

PR:		214936
Security:	CVE-2016-7092
Security:	CVE-2016-7093
Security:	CVE-2016-7094
Security:	CVE-2016-7154
Security:	CVE-2016-7777
Security:	CVE-2016-9379
Security:	CVE-2016-9380
Security:	CVE-2016-9381
Security:	CVE-2016-9382
Security:	CVE-2016-9383
Security:	CVE-2016-9384
Security:	CVE-2016-9385
Security:	CVE-2016-9386
Security:	https://vuxml.FreeBSD.org/freebsd/45ca25b5-ba4d-11e6-ae1b-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/49211361-ba4d-11e6-ae1b-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/4aae54be-ba4d-11e6-ae1b-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/4d7cf654-ba4d-11e6-ae1b-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/50ac2e96-ba4d-11e6-ae1b-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/523bb0b7-ba4d-11e6-ae1b-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/53dbd096-ba4d-11e6-ae1b-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/5555120d-ba4d-11e6-ae1b-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/56f0f11e-ba4d-11e6-ae1b-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/58685e23-ba4d-11e6-ae1b-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/59f79c99-ba4d-11e6-ae1b-002590263bf5.html
ad844c34c3
Joe Marcus Clarke (marcus) · 1.1_3
Add an entry for wireshark < 2.2.2

PR:		214753
Submitted by:	Piotr Kubaj <pkubaj@anongoth.pl>
90d860c5ef
Christoph Moench-Tegeder (cmt) · 1.1_3
document mozilla vulnerabilities CVE-2016-9079

PR:		214978
Approved by:	jbeich, rene (mentor, implicit)
a5718b5cd7
Tijl Coosemans (tijl) · 1.1_3
linux-c7-libgcrypt 1.5.3_1 fixes CVE-2016-6313.
5d17009b0b
Tijl Coosemans (tijl) · 1.1_3
Fix a package name.
4f44bbd5d2
Tijl Coosemans (tijl) · 1.1_3
Add linux-*-expat to CVE-2016-0718 entry.

PR:		214951
Security:	https://rhn.redhat.com/errata/RHSA-2016-2824.html
7c39960db8
Vasil Dimov (vd) · 1.1_3
Document ftp/wget's Access List Bypass / Race Condition vulnerability

PR:		214941
Submitted by:	Sevan Janiyan <venture37@geeklan.co.uk>
Security:	CVE-2016-7098
1ce68abac6
Raphael Kubo da Costa (rakuco) · 1.1_3
Add entry for CVE-2016-9296 in archivers/p7zip.
bd21ffaea5
Cy Schubert (cy) · 1.1_3
Document Apache Subverision vulnerability CVE-2016-8734: Unrestricted XML entity expansion in mod_dontdothat and Subversion clients using http(s)://

Reported by:	Evgeny Kotkov <kotkov@apache.org>
Security:	CVE-2016-8734
2dc1f47042
Jason Unovitch (junovitch) · 1.1_3
Document libwww vulnerabilities

PR:		214532
Submitted by:	Danilo G. Baio <dbaio@bsd.com.br>
Security:	CVE-2009-3720
Security:	CVE-2009-3560
Security:	CVE-2005-3183
Security:	https://vuxml.FreeBSD.org/freebsd/18449f92-ab39-11e6-8011-005056925db4.html
f5141b42c6
Jan Beich (jbeich) · 1.1_3
security/vuxml: mark www/firefox < 50.0.1,1 as vulnerable
8224e34d7f
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document Roundcube vulnerability
bcd89f6cac
Jason Unovitch (junovitch) · 1.1_3
Remove trailing period in version and re-wrap Drupal entry at <=80 lines

PR:		214813
a2a8e2e1a6
Jason Unovitch (junovitch) · 1.1_3
Revise earlier Moodle entry with released advisories (MSA-16-0023 - MSA-16-026)

Security:	CVE-2016-8642
Security:	CVE-2016-8643
Security:	CVE-2016-8644
184446a3fa
Torsten Zuehlsdorff (tz) · 1.1_3
Document Drupal vulnerabilities

PR:       214813
Security: CVE-2016-9449
Security: CVE-2016-9450
Security: CVE-2016-9451
Security: CVE-2016-9452
Security: https://vuxml.freebsd.org/freebsd/8db24888-b2f5-11e6-8153-00248c0c745d.html

Approved by: mentors (implicit)
c96928fd29
Matthew Seaman (matthew) · 1.1_3
Document the latest batch of phpMyAdmin security advisories.  All 14 of them.
051280a7cc
Tijl Coosemans (tijl) · 1.1_3
Add linux-c7-libgcrypt to CVE-2016-6313 entry. Presumably a fix will be released with CentOS 7.3.

PR:		214460
Security:	https://rhn.redhat.com/errata/RHSA-2016-2674.html
41a0c7d7a6
Mark Felder (feld) · 1.1_3
Document additional MySQL vulnerable versions

No information on which versions of MariaDB or Percona are affected.

PR:		212612
Security:	CVE-2016-6662
079f2592e9
Mark Felder (feld) · 1.1_3
Document MySQL RCE vulnerability

PR:		212612
Security:	CVE-2016-6662
afece2becd
Tijl Coosemans (tijl) · 1.1_3
Fix linux-*-nss range for CVE-2016-2834.

PR:		214755
Security:	https://access.redhat.com/errata/RHSA-2016:2779
294f5a9b19
Xin LI (delphij) · 1.1_3
Document multiple ntp vulnerabilities.
d3c4a4d30b
Dmitry Marakasov (amdmi3) · 1.1_3
- Document Teeworlds remote code execution
3258e63c2d
Steve Wills (swills) · 1.1_3
Document Jenkins Security Advisory 2016-11-16
669e3eedab
Jason Unovitch (junovitch) · 1.1_3
Document Moodle security advisories from September (MSA-16-0022) and November releases.

Security:	CVE-2016-7038
9da7d04af3
Jan Beich (jbeich) · 1.1_3
security/vuxml: add entry for r425098, r425099, r425470
58ee365cce
Tijl Coosemans (tijl) · 1.1_3
Add linux-c6-libgcrypt to CVE-2016-6313 entry.

PR:		214460
Security:	https://rhn.redhat.com/errata/RHSA-2016-2674.html
f8d1a1f6b9
Pawel Pekala (pawel) · 1.1_3
Document multimedia/lives security issues
d176a96855
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Fix version number for OpenSSL 1.1.0c

Reported by:	matthew
6b89885bbe
Carlos J. Puga Medina (cpm) · 1.1_3
- Fix affected chromium version.

Approved by:	rene
4b2e87b9e6
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document new OpenSSL 1.1.0 vulnerabilities
5d5e3ed4eb
Carlos J. Puga Medina (cpm) · 1.1_3
Document new vulnerabilities in www/chromium < 54.0.2840.98

Approved by:	rene
Obtained from:	https://googlechromereleases.blogspot.nl/2016/11/stable-channel-update-for-desktop_9.html
3f70bf7e5f
Tijl Coosemans (tijl) · 1.1_3
Document latest flash plugin vulnerabilities.

Security:	https://helpx.adobe.com/security/products/flash-player/apsb16-37.html
9d8cd5768b
Mark Felder (feld) · 1.1_3
Document gitlab vulnerability

PR:		214360
Security:	CVE-2016-9086
cf27d8aa60
Tijl Coosemans (tijl) · 1.1_3
Undocument linux-*-expat vulnerabilities.

linux-*-expat is only used by linux-*-fontconfig to read configuration
files written in XML and by dbus-binding-tool(1) from linux-*-dbus-glib, a
development tool that generates C code from an Introspection XML file to
expose a GObject via D-Bus.

These vulnerabilities are therefore not believed to be exploitable on
FreeBSD and only cause annoying warnings and prevent installation of
linux-*-expat.  It also does not look like Red Hat will provide fixes for
these any time soon.

PR:		210155
d4b0dd66c9
Rene Ladan (rene) · 1.1_3
Fix version number in last entry
1b101d5766
Rene Ladan (rene) · 1.1_3
Document new vulnerability in www/chromium < 54.0.2840.90

Obtained from:	https://googlechromereleases.blogspot.nl/2016/11/stable-channel-update-for-desktop.html
35730e217d
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Mark correct OpenSSL 1.0.2 and 1.1.0 versions

- "BTW, the issue has been fixed in the official release on September 22nd."
758c7b4079
Li-Wen Hsu (lwhsu) · 1.1_3
Fix affected ports versions
69888fed38
Mark Felder (feld) · 1.1_3
Update openssh vuxml entry to add FreeBSD SA information

Security:	CVE-2016-8858
Security:	SA-16:33.openssh
158cfa8e63
Mark Felder (feld) · 1.1_3
Document openssl vulnerability

Security:	CVE-2016-8610
fb471795c2
Li-Wen Hsu (lwhsu) · 1.1_3
Spelling fix
9337750b99
Li-Wen Hsu (lwhsu) · 1.1_3
Document Django vulnerabilities CVE-2016-9013, CVE-2016-9014
22137f3f46
Mathieu Arnold (mat) · 1.1_3
Fix up bind9-devel's range for CVE-2016-8864.

Sponsored by:	Absolight
8b6ad8134c
Bernard Spil (brnrd) · 1.1_3
security/vuxml: Document 2016-11-02 cURL vulnerabilities
2e4d013c65
Xin LI (delphij) · 1.1_3
Document BIND remote DoS vulnerability.
032da6e514