CVE and update status of the FreeBSD ports tree3,557 unaddressed CVEs in 714 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
6
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · ee92e78ad7
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
CPE
not set in the port, and none could be determined, and that does not mean none exists
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (6) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
300264maintainer-feedback? security/vuxml: correct double-encoded UTF-8 in Spotipy entry c3fb48ccIn Progress2026-10-29
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
Show all 6
PRSummaryStatusChanged
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,356)

Jason Unovitch (junovitch) · 1.1_2
Document Froxlor database password information disclosure vulnerability

PR:		202262
Security:	CVE-2015-5959
Security:	9ee72858-4159-11e5-93ad-002590263bf5
Approved by:	feld (mentor)
abe03f7039
Matthew Seaman (matthew) · 1.1_2
Document two XSS vulnerabilities in rt40, rt42.
1fea324cb0
Mark Felder (feld) · 1.1_2
Document py-foolscap vulnerability
6b20fc9e4b
Jan Beich (jbeich) · 1.1_2
Make libvpx-1.3.0 vulnerable by moving MFSA 2014-77 into separate entry
4e22ba8b0b
Koop Mast (kwm) · 1.1_2
Document newest flash vulnabilities. Also list the c6_64 flash port.
b38a24c915
Jan Beich (jbeich) · 1.1_2
Oops, mark bundled libvpx v1.4.0 in firefox as vulnerable again

libvpx v1.3.0-4418-g587ff64 in firefox-esr 38.x shouldn't be affected
given Mozilla hasn't backported the update there. MFSA 2015-89 says
otherwise though.

https://bugzilla.mozilla.org/show_bug.cgi?id=1178215
23a5407e4f
Jan Beich (jbeich) · 1.1_2
Move libvpx vulnerability into its own entry
22ff99085e
Jan Beich (jbeich) · 1.1_2
Document recent mozilla vulnerabilities
83f85a1d4f
Guido Falsi (madpilot) · 1.1_2
Document an already fixxed vulnerability in lighttpd 1.4.35 or older.

PR:		202134
Submitted by:	pkubaj at riseup.net
vuxml entry submitted by:	Jason Unovitch <jason.unovitch at gmail.com>
846e224899
Jason Unovitch (junovitch) · 1.1_2
Document PCRE heap overflow vulnerability in '(?|' situations

PR:		202209
Security:	ff0acfb4-3efa-11e5-93ad-002590263bf5
Approved by:	feld (mentor)
39531e5b46
Florian Smeets (flo) · 1.1_2
Mention all CVEs that are fixed in 4.2.4. The release notes only mentioned one.

Reported by:	junovitch
90bc8dd3a1
Jan Beich (jbeich) · 1.1_2
Document recent mozilla vulnerabilities
d16e69df1f
Florian Smeets (flo) · 1.1_2
Document wordpress vulnerabilities

Security:	CVE-2015-2213
0045db9f56
Lev A. Serebryakov (lev) · 1.1_2
Add two security issues for subversion.
576a556027
Jason Unovitch (junovitch) · 1.1_2
Document Elasticsearch directory traversal attack and remote code execution

PR:		201834
Security:	CVE-2015-5377
Security:	fb3668df-32d7-11e5-a4a5-002590263bf5
Security:	CVE-2015-5531
Security:	ae8c09cb-32da-11e5-a4a5-002590263bf5
Approved by:	feld (mentor)
1af58f4e7c
Jason Unovitch (junovitch) · 1.1_2
Document xen-tools QEMU heap overflow flaw with certain ATAPI commands

PR:		201931
Security:	CVE-2015-5154
Security:	da451130-365d-11e5-a4a5-002590263bf5
Approved by:	delphij (mentor)
60d42be396
Jason Unovitch (junovitch) · 1.1_2
Correct version range for libidn entry

PR:		201780
Security:	CVE-2015-2059
Security:	4caf01e2-30e6-11e5-a4a5-002590263bf5
Approved by:	feld (mentor)
4b94fc1c8c
Mark Felder (feld) · 1.1_2
Document older net-snmp DoS vulnerability

Security:	CVE-2014-3565
d0d41e120e
Mark Felder (feld) · 1.1_2
Document net-snmp vulnerability

Security:	CVE-2015-5621
87f3524b10
Jason Unovitch (junovitch) · 1.1_2
Reflect Chicken 4.10.0 RC2 as the minimum version with the CVE-2015-4556 fix

PR:		200980
Security:	CVE-2015-4556
Security:	0da404ad-1891-11e5-a1cf-002590263bf5
Approved by:	delphij (mentor)
2f584ead0c
Mark Felder (feld) · 1.1_2
Document bind CVE

Security:	CVE-2015-5477
11ea679b7f
Bryan Drewery (bdrewery) · 1.1_2
Document OpenSSH CVE-2015-5600 for MaxAuthTries bypass
ff50ff98cc
Mark Felder (feld) · 1.1_2
Document logstash SSL/TLS security vulnerability (FREAK attack)

PR:		201893
Security:	CVE-2015-5378
Security:	c470bcc7-33fe-11e5-a4a5-002590263bf5
f086d5f251
Rene Ladan (rene) · 1.1_2
Document new vulnerabilities in www/chromium < 44.0.2403.89

Obtained from:	http://googlechromereleases.blogspot.nl/
4d8ca6a514
Mark Felder (feld) · 1.1_2
Document shibboleth DoS

Security:	CVE-2015-2684
dba923bdb3
Mark Felder (feld) · 1.1_2
Adjust wordpress range -- www/wordpress has PORTEPOCH

Security:	c80b27a2-3165-11e5-8a1d-14dae9d210b8
5859d7655b
Mark Felder (feld) · 1.1_2
Update Wordpress entry to add CVEs

Security:	c80b27a2-3165-11e5-8a1d-14dae9d210b8
Security:	CVE-2015-5622
Security:	CVE-2015-5623
813a18f16d
Mark Felder (feld) · 1.1_2
Document wordpress XSS

Changes:	https://codex.wordpress.org/Version_4.2.3
f4d53cf11b
Mark Felder (feld) · 1.1_2
Document libidn out-of-bounds read issue with invalid UTF-8 input

PR:		201780
Security:	CVE-2015-2059
Security:	4caf01e2-30e6-11e5-a4a5-002590263bf5
ddbda929af
Mark Felder (feld) · 1.1_2
Document buffer overflow vulnerabilities in SoX

PR:		201778
CVE:		CVE-2014-8145
Security:	9dd761ff-30cb-11e5-a4a5-002590263bf5
Security:	92cda470-30cb-11e5-a4a5-002590263bf5
2389e5446d
Jimmy Olgeni (olgeni) · 1.1_2
Document CVE assignment in iPython 3.2.1 entry.

PR:		201515
Security:	CVE-2015-5607
Security:	81326883-2905-11e5-a4a5-002590263bf5
a346ea5b04
Koop Mast (kwm) · 1.1_2
Add gdk-pixbuf2 vulnability.

Notified by:	feld@
7ba3aedb1d
Mark Felder (feld) · 1.1_2
Adjust range for apache22 We intended to commit 2.2.31 to ports but there are some issues. We will instead backport the CVE fix to 2.2.29_6 for now.

Security:	CVE-2015-3183
9828f3208f
Mark Felder (feld) · 1.1_2
Document PCRE buffer overflow

PR:		201188
Security:	CVE-2015-5073
a18c28d59d
Mark Felder (feld) · 1.1_2
Fix moodle reference URL

PR:		201675
Security:	43891162-2d5e-11e5-a4a5-002590263bf5
66eff4eebe
Mark Felder (feld) · 1.1_2
Document Cacti Multiple XSS and SQL injection vulnerabilities

PR:		201702
Security:	CVE-2015-4634
Security:	0bfda05f-2e6f-11e5-a4a5-002590263bf5
acd94bf6a8
Mark Felder (feld) · 1.1_2
Document php-phar vulnerabilities

Add missing modified date to zenphoto entry

Security:	CVE-2015-5589
Security:	CVE-2015-5590
82117237b4
Mark Felder (feld) · 1.1_2
zenphoto was assigned CVEs

Security:	5c399624-2bef-11e5-86ff-14dae9d210b8
55c06219e4
Mark Felder (feld) · 1.1_2
Document recent Moodle security advisories

Security:	CVE-2015-3272
Security:	CVE-2015-3273
Security:	CVE-2015-3274
Security:	CVE-2015-3275
Security:	43891162-2d5e-11e5-a4a5-002590263bf5

PR:		201675
eaeeb99d09
Mark Felder (feld) · 1.1_2
package name is mariadb100, not mariadb10

Security:	36bd352d-299b-11e5-86ff-14dae9d210b8
82652125ce
Mark Felder (feld) · 1.1_2
MySQL SSL Downgrade affects the client not the server Remove mention of MySQL & friends that are not getting patched: We will update their packages with a pkg-message to notify users

Security:	36bd352d-299b-11e5-86ff-14dae9d210b8
6ae8532dfb
Mark Felder (feld) · 1.1_2
Add missing <cvename> to apache entry

Security:	29083f8e-2ca8-11e5-86ff-14dae9d210b8
9fa7db8dbb
Mark Felder (feld) · 1.1_2
Add missing apache22 packages for other "workers"

Security:	29083f8e-2ca8-11e5-86ff-14dae9d210b8
914bb920a5
Mark Felder (feld) · 1.1_2
Apache 2.2.31 is now public, fixing CVE-2015-3183

Security:	CVE-2015-3183
27468dc29d
Mark Felder (feld) · 1.1_2
CVE now assigned to squid

Security:	150d1538-23fa-11e5-a4a5-002590263bf5
Security:	CVE-2015-5400
84069dba92
Koop Mast (kwm) · 1.1_2
Update flash entry.

Fixed version was released for CVE-2015-5122, CVE-2015-5123.
c226ecb73e
Mark Felder (feld) · 1.1_2
Correct range for libav I was led to believe that 11.5 and 12.0 releases existed and included the fix. They have not yet been issued by upstream. We will backport the fix and bump PORTREVISION.

Security:	a928960a-2bdc-11e5-86ff-14dae9d210b8
301953df6f
Mark Felder (feld) · 1.1_2
Document zenphoto vulnerabilities No CVE assigned yet
7e42716ea4
Mark Felder (feld) · 1.1_2
Document groovy vulnerability

Security:	CVE-2015-3253
37f5cfceef
Mark Felder (feld) · 1.1_2
Document libav vulnerability

Security:	CVE-2015-5479
a4928ec178
« newest← newerpage 92 of 168older →oldest »