CVE and update status of the FreeBSD ports tree3,557 unaddressed CVEs in 714 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
6
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · ee92e78ad7
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
CPE
not set in the port, and none could be determined, and that does not mean none exists
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (6) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
300264maintainer-feedback? security/vuxml: correct double-encoded UTF-8 in Spotipy entry c3fb48ccIn Progress2026-10-29
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
Show all 6
PRSummaryStatusChanged
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,356)

Jan Beich (jbeich) · 1.1_2
Document recent multiple mozilla vulnerabilities
2142c8ff74
Matthias Andree (mandree) · 1.1_2
Add PolarSSL < 1.2.14 issues.

See PR #201603 for a remedy.
b3fb0fb085
Tijl Coosemans (tijl) · 1.1_2
Latest libxml2 vulnerability also affects linux-*-libxml2
3b24aa8886
Tijl Coosemans (tijl) · 1.1_2
Document linux-*-libxml2 vulnerabilities
0b8062d39e
Tijl Coosemans (tijl) · 1.1_2
Document linux-c6-flac vulnerabilities
eb7966011b
Mark Felder (feld) · 1.1_2
- Document multiple security issues for libwmf

PR:		201513
Security:	CVE-2004-0941
Security:	CVE-2007-0455
Security:	CVE-2007-2756
Security:	CVE-2007-3472
Security:	CVE-2007-3473
Security:	CVE-2007-3477
Security:	CVE-2009-3546
Security:	CVE-2015-4695
Security:	CVE-2015-4696
Security:	CVE-2015-0848
Security:	CVE-2015-4588
Security:	ca139c7f-2a8c-11e5-a4a5-002590263bf5
efe33c1ada
Mark Felder (feld) · 1.1_2
Reference another URL for tidy's CVE

PR:		200631
Security:	bd1ab7a5-0e01-11e5-9976-a0f3c100ae18
dd15fe6134
Mark Felder (feld) · 1.1_2
CVEs have been assigned for tidy

Security:	bd1ab7a5-0e01-11e5-9976-a0f3c100ae18
Security:	CVE-2015-5522
Security:	CVE-2015-5523
e6f6190e96
Mark Felder (feld) · 1.1_2
Document multiple apache24 vulnerabilities

Security:	CVE-2015-3183
Security:	CVE-2015-3185
Security:	CVE-2015-0253
Security:	CVE-2015-0228
60cd13f0e9
Koop Mast (kwm) · 1.1_2
Fix typo in flash security bulletin.
0d1093ae75
Tijl Coosemans (tijl) · 1.1_2
- Update url of latest Flash plugin advisory - Document libXfont vulnerabilities in linux-*-xorg-libs
66873d0f39
Tijl Coosemans (tijl) · 1.1_2
Use the correct package name for linux-*-flashplugin

Reported by:	pluknet
f16f896af3
Koop Mast (kwm) · 1.1_2
Use correct <tag> to mark all versions vulnerable.
ab8a200529
Koop Mast (kwm) · 1.1_2
Add newest flash vulnerabilities CVE-2015-5122 and CVE-2015-5123.

No fixed version of flash available yet.
3c4341b2cf
Mark Felder (feld) · 1.1_2
Document php sqlite3 use-after-free vulnerability

Change previous entry title to be hyphenated
d0b5c0de83
Mark Felder (feld) · 1.1_2
Document php spl use-after-free vulnerability No CVE assigned yet
ec3ca64d19
Mark Felder (feld) · 1.1_2
Document PHP arbitrary code execution. No CVE assigned yet.

Fix missing blockquote URL in previous entry
81036778fa
Mark Felder (feld) · 1.1_2
php 5.4 package name is php5, not php54

Security:	36bd352d-299b-11e5-86ff-14dae9d210b8
70252280ce
Mark Felder (feld) · 1.1_2
Document CVE-2015-3152 "BACKRONYM" vulnerability

PHP resolved in recent releases
MySQL has fixed in 5.7 branch and did not backport to older branches
MariaDB resolved in 5.5.44 and 10.0.20
Percona has not included a fix in any release (5.1, 5.5, or 5.6)

Security:	CVE-2015-3152
9bab088577
Mark Felder (feld) · 1.1_2
hadoop2 and oozie ports fetch a version of tomcat that is vulnerable

Security:	25e0593d-13c0-11e5-9afb-3c970e169bc2
Security:	CVE-2014-0230
Security:	CVE-2014-7810
a98f3e6b76
Jimmy Olgeni (olgeni) · 1.1_2
Document CSRF remote execution vulnerability for devel/ipython (CVE pending).

PR:		201515
Submitted by:	Jason Unovitch
ecf3f773f2
Mark Felder (feld) · 1.1_2
Document freeradius vulnerability

PR:		201059
Security:	CVE-2015-4680
a438971041
Mark Felder (feld) · 1.1_2
Correct range for non-devel version of v8

PR:		201450
Security:	864e6f75-2372-11e5-86ff-14dae9d210b8
fef08f60a8
Mark Felder (feld) · 1.1_2
CVE-2015-5380 also affects v8 and v8-devel

PR:		201450
Security:	864e6f75-2372-11e5-86ff-14dae9d210b8
Security:	CVE-2015-5380
aafc1833ae
Mark Felder (feld) · 1.1_2
Advisory URL was identical; remove duplicate
c1cdfdbf57
Mark Felder (feld) · 1.1_2
PowerDNS discovered the fix for CVE-2015-1868 was not complete in the previous releases.

Security:	64e6006e-f009-11e4-98c6-000c292ee6b8
Security:	CVE-2015-5470
654b4c1614
Mark Felder (feld) · 1.1_2
Add note on how to use the new html functionality
9ddc4d79f1
Mark Felder (feld) · 1.1_2
Add ability to produce html files for vuxml entries

This will allow committers to test complex vuxml entries before
submission.

A special thanks to hrs for responding to my plea for this feature

Submitted by:	hrs
5eaff4b827
Baptiste Daroussin (bapt) · 1.1_2
- Add xen-tools to the list of packages fixed in existing XSA-135 / CVE-2015-3209 entry

PR:		201416
Submitted by:	Jason Unovitch <jason.unovitch@gmail.com>
73cace0ff5
Baptiste Daroussin (bapt) · 1.1_2
Document all recent xen-kernel and xen-tools security issues

PR:		201416
Submitted by:	Jason Unovitch <jason.unovitch@gmail.com>
f16fce7ed0
Baptiste Daroussin (bapt) · 1.1_2
Document a few pivotx vulnerabilities
89cabfa8a6
Mark Felder (feld) · 1.1_2
Update squid entry to reflect new range of affected versions Still waiting on CVE assignment

PR:		201374
Security:	150d1538-23fa-11e5-a4a5-002590263bf5
9707ab0395
Xin LI (delphij) · 1.1_2
Document wpa_supplicant  WPS_NFC option payload length validation vulnerability

PR:		201432
Submitted by:	Jason Unovitch
bee941dbd5
Xin LI (delphij) · 1.1_2
Document OpenSSL alternative chains certificate forgery vulnerability.
185c899a20
Li-Wen Hsu (lwhsu) · 1.1_2
- Correct the version range of www/py-django-devel
c943e4c8ed
Mark Felder (feld) · 1.1_2
document django vulnerabilities

Security:	37ed8e9c-2651-11e5-86ff-14dae9d210b8
Security:	CVE-2015-5143
Security:	CVE-2015-5144
Security:	CVE-2015-5145
2ffcf208a8
Mark Felder (feld) · 1.1_2
node and iojs vuln now has a CVE assigned

Security:	864e6f75-2372-11e5-86ff-14dae9d210b8
Security:	CVE-2015-5380
35aa5ec869
Tijl Coosemans (tijl) · 1.1_2
Document Adobe Flash Plugin vulnerability (CVE-2015-5119)
1f96f19ce0
Mark Felder (feld) · 1.1_2
Fix other no-op formatting mistakes for the roundcube entry

Security:	038a5808-24b3-11e5-b0c8-bf4d8935d4fa
4a43dc4b78
Mark Felder (feld) · 1.1_2
Fix formatting by adding some breaks

Security:	038a5808-24b3-11e5-b0c8-bf4d8935d4fa
0466bdcb6b
Xin LI (delphij) · 1.1_2
Make version range closer to reality -- this should be a no-op (use of P2 and P1 without PORTREVISION is intentional).
9ef8e11cbf
Xin LI (delphij) · 1.1_2
-base options for dns/bind have been gone now.  Cover them with <gt>0</gt> for this entry so that existing users gets warned.

Noticed by:	mat
7acab0e9d7
Xin LI (delphij) · 1.1_2
Document BIND remote resolver DoS vulnerability when DNSsec validation is enabled.
c0546f0dce
Mark Felder (feld) · 1.1_2
cups-filters mentions wrong CVE in some places

incorrect: CVE-2015-3259
correct: CVE-2015-3279

Add mailing list post that clarifies this

Security:	bf1d9331-21b6-11e5-86ff-14dae9d210b8
c6964b555a
Mark Felder (feld) · 1.1_2
Document haproxy information leak

Security:	CVE-2015-3281
2bf9cf5963
Mark Felder (feld) · 1.1_2
Document roundcube vulnerabilities

Security:	CVE-2015-5381
Security:	CVE-2015-5383
79f0deac0f
Mark Felder (feld) · 1.1_2
Document SQL Injection in turnserver

PR:		201231
4b980ba773
Mark Felder (feld) · 1.1_2
Document recent squid vulnerabilities

PR:		201374
7517e4aa5c
Koop Mast (kwm) · 1.1_2
Use correct end tag.

Submitted by:	dvl@
c1ee75e499
Mark Felder (feld) · 1.1_2
Add iojs as affected package

Security:	864e6f75-2372-11e5-86ff-14dae9d210b8
cf9bfadd6b
« newest← newerpage 93 of 168older →oldest »