CVE and update status of the FreeBSD ports tree3,560 unaddressed CVEs in 711 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
6
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 898db4939a
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
CPE
not set in the port, and none could be determined — that does not mean none exists
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (6) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
300264maintainer-feedback? security/vuxml: correct double-encoded UTF-8 in Spotipy entry c3fb48ccIn Progress2026-10-29
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
Show all 6
PRSummaryStatusChanged
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,355)

Sergey A. Osokin (osa) · 1.1_2
Fix latest cacti entry.

Found by:	make validate
No cookie for:	brnrd
f3bfc2ad2e
Sergey A. Osokin (osa) · 1.1_2
Add an entry about latest nginx vulnerability.
a851277a7f
Bernard Spil (brnrd) · 1.1_2
security/vuxml: Modify libressl < 2.3.4 range

- Change existing range to >2.3.0 and <2.3.4
  - Add <2.2.7 range
  - Update modified date

This addresses pkg audit showing LibreSSL 2.2.7 as vulnerable
ae38172850
Kurt Jaeger (pi) · 1.1_2
Document security issues fixed in cacti 0.8.8h

PR:		209809
Reported by:	Daniel Austin <freebsd-ports@dan.me.uk>
Security:	CVE-2016-3659
Security:	https://vuxml.FreeBSD.org/freebsd/6167b341-250c-11e6-a6fb-003048f2e514.html
e6f8ceb23f
Olli Hauer (ohauer) · 1.1_2
- document openvswitch CVE-2016-2074

PR:		208404
Submitted by:	ohauer
33f894a13f
Rene Ladan (rene) · 1.1_2
Document vulnerabilities in www/chromium:  < 50.0.2661.94  < 50.0.2661.102  < 51.0.2704.63

Obtained from:	http://googlechromereleases.blogspot.nl/
f5524c33df
Jason Unovitch (junovitch) · 1.1_2
Document security issues fixed in PHP 7.0.7, 5.6.22, and 5.5.36

PR:		209779
Reported by:	Fabiano Sidler <fabianosidler@swissonline.ch>
Security:	CVE-2013-7456
Security:	CVE-2016-4343
Security:	CVE-2016-5093
Security:	CVE-2016-5094
Security:	CVE-2016-5096
Security:	https://vuxml.FreeBSD.org/freebsd/6b110175-246d-11e6-8dd3-002590263bf5.html
94f8027565
Matthew Seaman (matthew) · 1.1_2
Add CVE names for the latest phpMyAdmin advisories, not that they have been released.
349c737413
Matthew Seaman (matthew) · 1.1_2
fix typo.
dd4c82e2e3
Matthew Seaman (matthew) · 1.1_2
Document two more phpMyAdmin vulnerabilities: PMSA-2016-14 and PMSA-2016-16.

(For anyone wondering about the suspicious gap in the sequence:
PMSA-2016-15 only affected unreleased code in their git master
development branch)
2ec3593b49
Baptiste Daroussin (bapt) · 1.1_2
Add a new keywork xmlcatmgr

It simplifies the handling of the XML and SMGL catalog
It brings a big of consistency by always specifying the catalog path absolute
instead of mixing absolute and relative path.
The keyword is also written a PKG_ROOTDIR friendly to simplify cross installing

Reviewed by:	hrs
Differential Revision:	https://reviews.freebsd.org/D6539
963854440c
Jason Unovitch (junovitch) · 1.1_2
Document security announcement from MediaWiki 1.26.3, 1.25.6, and 1.23.14 release.
08b4e6af85
Jason Unovitch (junovitch) · 1.1_2
Document wpa_supplicant security advisory 2016-1

PR:		209564
Reported by:	Sevan Janiyan <venture37@geeklan.co.uk>
Security:	CVE-2016-4477
Security:	CVE-2016-4476
Security:	https://vuxml.FreeBSD.org/freebsd/967b852b-1e28-11e6-8dd3-002590263bf5.html
6d4931d178
Jason Unovitch (junovitch) · 1.1_2
Document Expat XML Parser crash on malformed input

Security:	CVE-2016-0718
Security:	https://vuxml.FreeBSD.org/freebsd/57b3aba7-1e25-11e6-8dd3-002590263bf5.html
2b5ccc39ee
Olli Hauer (ohauer) · 1.1_2
- document bugzilla Cross-Site Scripting issue
2581bec91b
Matthias Andree (mandree) · 1.1_2
Mark openvpn-polarssl <v2.3.11 vulnerable, too, not just openvpn.

Security: 0dc8be9e-19af-11e6-8de0-080027ef73ec
3ff31d77d6
Matthias Andree (mandree) · 1.1_2
Mark OpenVPN before 2.3.11 vulnerable.

v2.3.11 fixed a buffer overrun in PAM authentication,
and a port-share bug with denial-of-service potential.
86aaef45fd
Mark Felder (feld) · 1.1_2
Fix vuxml
177b620cfc
Koop Mast (kwm) · 1.1_2
Add basic imagemagick entry.
ae096366da
Li-Wen Hsu (lwhsu) · 1.1_2
Fix affected versions
8cf4514559
Li-Wen Hsu (lwhsu) · 1.1_2
Document Jenkins Security Advisory 2016-05-11
632a708341
Jason Unovitch (junovitch) · 1.1_2
Document Perl taint protection bypass vulnerability

PR:		208879
Reported by:	Sevan Janiyan <venture37@geeklan.co.uk>
Security:	CVE-2016-2381
Security:	https://vuxml.FreeBSD.org/freebsd/d9f99491-1656-11e6-94fa-002590263bf5.html
a89044883a
Jason Unovitch (junovitch) · 1.1_2
Document Wordpress vulnerabilities fixed in 4.5.2

PR:		209409
PR:		209378 [1]
Reported by:	Mihail Timofeev <9267096@gmail.com> [1]
Security:	CVE-2016-4566
Security:	CVE-2016-4567
Security:	https://vuxml.FreeBSD.org/freebsd/3686917b-164d-11e6-94fa-002590263bf5.html
9fa87774a7
Jason Unovitch (junovitch) · 1.1_2
Fix version range for libarchive entry. [1]

While here, add CVE and wrap lines at <80

PR:		209404 [1]
Reported by:	dereks@lifeofadishwasher.com [1]
Security:	CVE-2016-1541
Security:	https://vuxml.FreeBSD.org/freebsd/2b4c8e1f-1609-11e6-b55e-b499baebfeaf.html
15a1974ad6
Bernard Spil (brnrd) · 1.1_2
security/vuxml: Add entry for libarchive

- Vulnerable < 2.3.0

Reviewed by:	feld (mentor)
Approved by:	feld (mentor, ports-secteam)
Security:	CVE-2016-1541
b162764570
Matthew Seaman (matthew) · 1.1_2
Update recent squid, squid-devel entry to add CVE Numbers
c6977bb14a
Matthew Seaman (matthew) · 1.1_2
Document three security advisories for the squid and squid-devel ports.  CVE numbers are not yet available.

PR:		209334
Submitted by:	timp87@gmail.com (maintainer)
37549c4c9b
Koop Mast (kwm) · 1.1_2
Add forgotten portepoch to the ImageMagick 6.x version.

PR:		209241
Reported by:	Ben Woods, Jason Unovitch
9fc62f0d7b
Koop Mast (kwm) · 1.1_2
Document ImageMagick vulnabilities.

PR:		209241
Submitted by:	Ben Woods
d06cca2e1c
Vanilla I. Shu (vanilla) · 1.1_2
Add entry of devel/jansson

PR:		209219
Submitted by:	junovitch@
cd225457e4
Jason Unovitch (junovitch) · 1.1_2
Fix <url> -> <cvename> tags in OpenSSL entry plus spacing fixes.

While here, combine both entries as they both refer to the same CVEs and
we've typically done these as combined entries in the past.
251486b3a1
Bernard Spil (brnrd) · 1.1_2
security/vuxml: Document LibreSSL vulnerabilities

Reviewed by:	swills
MFH:		2016Q3
0e62d5880d
Bernard Spil (brnrd) · 1.1_2
security/vuxml: Document OpenSSL 1.0.2g vulnerabilities

Reviewed by:	swills
MFH:		2016Q2
f7c15cbaac
Jason Unovitch (junovitch) · 1.1_2
Document gitlab privilege escalation via "impersonate" feature

PR:		209225
Reported by:	Torsten Zuehlsdorff <ports@toco-domains.de>
Security:	CVE-2016-4340
Security:	https://vuxml.FreeBSD.org/freebsd/be72e773-1131-11e6-94fa-002590263bf5.html
698146106d
Jason Unovitch (junovitch) · 1.1_2
Document php multiple vulnerabilities

PR:		209145
Reported by	Christian Schwarz <me@cschwarz.com>
Security:	CVE-2016-3074
Security:	https://vuxml.FreeBSD.org/freebsd/5764c634-10d2-11e6-94fa-002590263bf5.html
b2b65f3cd2
Jason Unovitch (junovitch) · 1.1_2
Document libksba local denial of service vulnerabilities

Security:	CVE-2016-4353
Security:	CVE-2016-4354
Security:	CVE-2016-4355
Security:	CVE-2016-4356
Security:	https://vuxml.FreeBSD.org/freebsd/a1134048-10c6-11e6-94fa-002590263bf5.html
46dd503088
Jason Unovitch (junovitch) · 1.1_2
Document denial of service advisories from Wireshark's recent release

Security:	https://vuxml.FreeBSD.org/freebsd/7e36c369-10c0-11e6-94fa-002590263bf5.html
df85b22260
Olivier Duchateau (olivierd) · 1.1_2
Document arbitrary code execution vulnerability in Mercurial

Security:	CVE-2016-3105
37751c6817
Bernard Spil (brnrd) · 1.1_2
security/vuxml: Add entry for MySQL/MariaDB/Percona April Critical Patch Update

- Add entry for 31 security fixes for Oracle MySQL
  - Add also affected MariaDB packages
  - Add also affected Percona packages

Reviewed by:	junovitch (ports-secteam)
Approved by:	junovitch (ports-secteam)
Differential Revision:	D6159
dbfbe23221
Matthew Seaman (matthew) · 1.1_2
Logstash password disclosure vulnerability.
06dd6c6dc6
Lev A. Serebryakov (lev) · 1.1_2
Add two CVEs for subversion:

http://subversion.apache.org/security/CVE-2016-2167-advisory.txt
   http://subversion.apache.org/security/CVE-2016-2168-advisory.txt
2dcfa94faa
Xin LI (delphij) · 1.1_2
Document NTP multiple vulnerabilities.
590aa7fa02
Jan Beich (jbeich) · 1.1_2
Document recent Firefox vulnerabilities
4b97fe7c4f
Florian Smeets (flo) · 1.1_2
Document phpmyfaq vulnerability

Security:	https://vuxml.freebsd.org/freebsd/f87a9376-0943-11e6-8fc4-00a0986f28c4.html
Security:	http://www.phpmyfaq.de/security/advisory-2016-04-11
Sponsored by:	Essen Linuxhotel Hackathon 2016
cdbf450860
Jason Unovitch (junovitch) · 1.1_2
Document libtasn1 denial of service via parsing malicious DER certificates

Security:	CVE-2016-4008
Security:	https://vuxml.FreeBSD.org/freebsd/1b0d2938-0766-11e6-94fa-002590263bf5.html
8d403d568d
Jason Unovitch (junovitch) · 1.1_2
Document squid -- multiple vulnerabilities

PR:		208939
Reported by:	Pavel Timofeev <timp87@gmail.com>
Security:	CVE-2016-4054
Security:	CVE-2016-4053
Security:	CVE-2016-4052
Security:	CVE-2016-4051
Security:	https://vuxml.FreeBSD.org/freebsd/e05bfc92-0763-11e6-94fa-002590263bf5.html
41641f6570
Matthew Seaman (matthew) · 1.1_2
CVE-2016-3096 -- ansible and ansible1 vulnerability due to using predictable temporary file names when managing LXC containers.
40e279eadb
Martin Matuska (mm) · 1.1_2
Document security vulnerability in proftpd mod_tls.

PR:		208876
Security:	CVE-2016-3125
baa871e408
Rene Ladan (rene) · 1.1_2
Doument new vulnerabilities in www/chromium < 50.0.2661.75

Obtained from:	http://googlechromereleases.blogspot.nl/2016/04/stable-channel-update_13.html
1c53ed88f9
Jason Unovitch (junovitch) · 1.1_2
Document wpa_supplicant security advisories

PR:		208482
Security:	CVE-2015-5310
Security:	CVE-2015-5315
Security:	CVE-2015-5316
Security:	https://vuxml.FreeBSD.org/freebsd/976567f6-05c5-11e6-94fa-002590263bf5.html
07f3f9ed8d
« newest← newerpage 83 of 168older →oldest »