CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/py-signxml 5.1.0

Python XML Signature and XAdES library

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 5.1.0
Upstream
Higher version available: 5.2.0
Last update
to 5.1.0 · 650762bdf8
Quarterly
2026Q4: 5.1.0
WWW
https://xml-security.github.io/signxml/
Links
cgit · VuXML

Install

Package
# pkg install py312-signxml
installs 5.1.0 from latest; from quarterly (2026Q4) 5.1.0
Port
# cd /usr/ports/security/py-signxml && make install clean
Size
90 KiB download · 538 KiB installed
Depends on
devel/py-lxml 6.1.3, lang/python312 3.12.15, security/py-certifi 2026.7.22, security/py-cryptography 50.0.1_1,1
License
APACHE20

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 165.1.05.1.0–
FreeBSD 155.1.05.1.0–
FreeBSD 145.1.05.1.05.1.0

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 155.1.05.1.0–
FreeBSD 145.1.05.1.05.1.0

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 5.1.0.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (7)

Po-Chuan Hsieh (sunpoet) · 5.1.0
security/py-signxml: Update to 5.1.0

Changes:	https://github.com/XML-Security/signxml/releases
650762bdf8
Po-Chuan Hsieh (sunpoet) · 5.0.1
security/py-signxml: Update to 5.0.1

Changes:	https://github.com/XML-Security/signxml/releases
7a43ee920d
Po-Chuan Hsieh (sunpoet) · 4.4.0
security/py-signxml: Update to 4.4.0

Changes:	https://github.com/XML-Security/signxml/releases
39a48d1042
Po-Chuan Hsieh (sunpoet) · 4.3.0
security/py-signxml: Update to 4.3.0

Changes:	https://github.com/XML-Security/signxml/releases
8a665fbb7f
Po-Chuan Hsieh (sunpoet) · 4.2.2
security/py-signxml: Update to 4.2.2

Changes:	https://github.com/XML-Security/signxml/releases
80f8f6356a
Hiroki Tagato (tagattie) · 4.2.0_1
*/*: switch dependency from devel/py-lxml5 to devel/py-lxml

Currently, there are two versions of python XML processing library
which conflict each other in the ports tree, namely:
- devel/py-lxml5 (now at version 5.4.0)
- devel/py-lxml  (now at version 6.0.1)

To avoid the situation that some ports depend on py-lxml5 and some
others do on py-lxml (by switching dependencies individually), this
commit switches the dependencies from py-lxml5 to py-lxml at once.

Additional note: There are still two ports (textproc/py-rdflib and
www/py-draftjs-exporter) depending on py-lxml5 since they limit upper
version to less than 6.

PR:		289491
Approved by:	Michiel van Baak Jansen <michiel@vanbaak.eu>, arrowd,
		crees, madpilot, delphij, marcus, nivit, kai,
		skreuzer, fluffy, bofh, thierry, stephen, sunpoet,
		0mp, Eric Camachat <eric@camachat.org>
a6233e5a2f
Po-Chuan Hsieh (sunpoet) · 4.2.0
security/py-signxml: Add py-signxml 4.2.0

SignXML is an implementation of the W3C XML Signature standard in Python. This
standard (also known as "XMLDSig") is used to provide payload security in SAML
2.0, XAdES, EBICS, and WS-Security, among other uses. The standard is defined in
the W3C Recommendation XML Signature Syntax and Processing Version 1.1. SignXML
implements all of the required components of the Version 1.1 standard, and most
recommended ones. Its features are:
- Use of a libxml2-based XML parser configured to defend against common XML
  attacks when verifying signatures
- Extensions to allow signing with and verifying X.509 certificate chains,
  including hostname/CN validation
- Extensions to sign and verify XAdES signatures
- Support for exclusive XML canonicalization with inclusive prefixes
  (InclusiveNamespaces PrefixList, required to verify signatures generated by
  some SAML implementations)
- Modern Python compatibility (3.9-3.13+ and PyPy)
- Well-supported, portable, reliable dependencies: lxml and cryptography
- Comprehensive testing (including the XMLDSig interoperability suite) and
  continuous integration
- Simple interface with useful, ergonomic, and secure defaults (no network
  calls, XSLT or XPath transforms)
- Compactness, readability, and extensibility
8dd2e56b94