Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-30 to 1.1_6 · d30441ad3d
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined, and that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,359)

2014-08-07 01:12Xin LI (delphij) · 1.1_2

Document OpenSSL multiple vulnerabilities.

52451d0c7d

2014-08-03 23:44Raphael Kubo da Costa (rakuco) · 1.1_2

Document CVE-2014-4607 in net/krfb.

MFH:		2014Q3

aebff0af1b

2014-08-02 17:17Ryan Steinmetz (zi) · 1.1_2

- Document net/samba4* vulnerability: CVE-2014-3560

ab46c8e531

2014-08-02 04:34Jason E. Hale (jhale) · 1.1_2

- Document vulnerability in security/gpgme (CVE-2014-3564)

a41405ac06

2014-07-31 17:23Raphael Kubo da Costa (rakuco) · 1.1_2

Document x11/kdelibs4 vulnerability

906c5d3c0e

2014-07-30 22:54Carlo Strub (cs) · 1.1_2

tor -- traffic confirmation attack

99d8e61c61

2014-07-28 20:38Carlo Strub (cs) · 1.1_2

Report serious i2p vulnerability

85baf00471

2014-07-25 16:12Olli Hauer (ohauer) · 1.1_2

- document bugzilla Cross Site Request Forgery (CVE-2014-1546)

MFH:		2014Q3

9c8cf238f6

2014-07-24 22:12Olli Hauer (ohauer) · 1.1_2

- document apache22 CVE entries

MFH:		2014Q3

1750b34970

2014-07-23 18:51Ryan Steinmetz (zi) · 1.1_2

- Document vulnerabilities in www/tomcat*: CVE-2014-0096, CVE-2014-0099, CVE-2014-0075

bc296ac1a2

2014-07-23 09:50Xin LI (delphij) · 1.1_2

Document Mozilla multiple vulnerabilities.

bc9db444b9

2014-07-21 23:36Raphael Kubo da Costa (rakuco) · 1.1_2

Fix the recent Qt vulnerability entry again.

The CVE patch applies to -imageformats in Qt4 but -gui in Qt5. I always get
confused by the different port names...

Noted by antoine@.

MFH:		2014Q3
Security:	904d78b8-0f7e-11e4-8b71-5453ed2e2b49

91c5ec7ce9

2014-07-21 23:20Steve Wills (swills) · 1.1_2

security/vuxml: document security issue in mcollective

e445944ac6

2014-07-20 23:47Matthew Seaman (matthew) · 1.1_2

Update the latest phpMyAdmin entry with CVE numbers and descriptive text from the security advisories, now that they have been published.

Security:	3f09ca29-0e48-11e4-b17a-6805ca0b3d42

e7389e3f98

2014-07-20 19:06Raphael Kubo da Costa (rakuco) · 1.1_2

Fix the list of packages affected by 904d78b8-0f7e-11e4-8b71-5453ed2e2b49.

Submitted by:	RyoTa SimaMoto <liangtai.s16@gmail.com>
MFH:		2014Q3

16b46fef8f

2014-07-19 22:24Raphael Kubo da Costa (rakuco) · 1.1_2

Document qt4-gui/qt5-gui vulnerability.

MFH:		2014Q3

9ee8152a5d

2014-07-19 15:46Olli Hauer (ohauer) · 1.1_2

- document apache24 CVE entries   until now there is no official CHANGELOG and apache-2.4.10   is not released, so take summary from upstream SVN.

406b6e43aa

2014-07-18 09:02Matthew Seaman (matthew) · 1.1_2

Yet another tranche of phpMyAdmin security alerts.  In typical style there has been a software release with warnings that it contains security fixes, but the Security Advisories are not yet available and CVE numbers have not yet been published.

169e50cc12

2014-07-17 10:29Rene Ladan (rene) · 1.1_2

Document new vulnerabilities in www/chromium < 36.0.1985.125

Submitted by:	Carlos Jacobo Puga Medina <cpm@fbsd.es> via freebsd-chromium
Obtained from:	http://googlechromereleases.blogspot.nl/
MFH:		2014Q3

7a9ca32269

2014-07-16 22:12Raphael Kubo da Costa (rakuco) · 1.1_2

Document x11/kdelibs4 vulnerability.

MFH:		2014Q3

860ef3cc85

2014-07-13 15:29Raphael Kubo da Costa (rakuco) · 1.1_2

Add entry for mail/postfixadmin.

PR:		189248
MFH:		2014Q3

d82277eb31

2014-07-04 08:38Steve Wills (swills) · 1.1_2

- Add seamonkey to list of things affected by mozilla issue

949f87d9ea

2014-07-03 16:57Koop Mast (kwm) · 1.1_2

Document more dbus vulnabilities.

66c747aa5c

2014-06-28 14:09Thomas Zander (riggs) · 1.1_2

Add vuln entries for mplayer and mencoder for CVE-2014-4610 (integer overflow in ffmpeg's lzo code)

Approved by:	mentors (implicit)
MFH:	2014Q2

b324fb648f

2014-06-26 20:08Matthias Andree (mandree) · 1.1_2

Add a vulnerability entry for lzo2.

bb9cd2e711

2014-06-24 16:49Jun Kuriyama (kuriyama) · 1.1_2

Add also gnupg-2.0.24.

de8645c23b

2014-06-24 08:48Matthew Seaman (matthew) · 1.1_2

Update vuln.xml now that advisories have been published.

3ed3495184

2014-06-24 02:07Jun Kuriyama (kuriyama) · 1.1_2

Add about gnupg-1.4.17.

2e9f7ed9b7

2014-06-23 20:29Ryan Steinmetz (zi) · 1.1_2

- Document recent samba vulnerabilities (CVE-2014-3493, CVE-2014-0244)

d01674b06e

2014-06-21 01:24Matthew Seaman (matthew) · 1.1_2

Document the latest phpMyAdmin vulnerabilities.  Very little information has been published as yet.  What there is here has been gleaned from the ChangeLog at http://sourceforge.net/projects/phpmyadmin/files/phpMyAdmin/4.2.4/phpMyAdmin-4.2.4-notes.html/view

Updates and CVE numbers to follow, as they are made available.

debc0af6e0

2014-06-19 00:02David Thiel (lx) · 1.1_2

Add vuln entry for iodine.

Submitted by:	Kenta S.

5dd9c831ed

2014-06-17 10:12Florian Smeets (flo) · 1.1_2

Document asterisk vulnerabilities

fe17ed8a7e

2014-06-14 14:16Koop Mast (kwm) · 1.1_2

Document dbus local dos

MFH:		2014Q2

3e0366bb14

2014-06-11 10:06Rene Ladan (rene) · 1.1_2

Document new vulnerabilities in www/chromium < 35.0.1916.153

Submitted by:	Carlos Jacobo Puga Medina <cpm@fbsd.es>
Obtained from:	http://www.googlechromereleases.blogspot.nl/
MFH:		2014Q2

2862518708

2014-06-10 22:12Beat Gaetzi (beat) · 1.1_2

Document mozilla vulnerabilities

8997d60dcf

2014-06-05 14:34Xin LI (delphij) · 1.1_2

Document OpenSSL multiple vulnerabilities.

bcdab77b11

2014-06-04 22:15Matthias Andree (mandree) · 1.1_2

Fix extraneous <vuxml> open tag on line 88.

3fbfdd5ba5

2014-06-04 21:07Wesley Shields (wxs) · 1.1_2

Fix build.

2af70fc429

2014-06-04 20:50Cy Schubert (cy) · 1.1_2

Document gnutls CVE-2014-3466 to prevent memory corruption due to server hello parsing.

Security:       CVE-2014-3466

42945633eb

2014-06-03 21:42Ryan Steinmetz (zi) · 1.1_2

- Document vulnerability in security/gnutls3 (CVE-2014-3466)

3104b11353

2014-05-29 17:27Mark Felder (feld) · 1.1_2

Fixing range of affected versions of mumble 1.2.4 to cover all portrevisions

a859fc0e2f

2014-05-29 17:24Martin Wilke (miwi) · 1.1_2

- Fix formating

75d79bcf0c

2014-05-29 17:13Mark Felder (feld) · 1.1_2

audio/mumble vulnerabilities

My first foray into this dark, scary vuxml dungeon.

b69a918fb8

2014-05-29 11:22Eygene Ryabinkin (rea) · 1.1_2

VuXML: cancel Exim's CVE-2014-2957

Current port isn't built with DMARC support and has no knobs to enable it.

b29317c72d

2014-05-28 20:36Ryan Steinmetz (zi) · 1.1_2

- Document exim vulnerability (CVE-2014-2957)

47c561915f

2014-05-26 23:01Eitan Adler (eadler) · 1.1_2

Undo my poor merge conflict editing.

Reported by:	rene, mat

f0fd32d0bc

2014-05-26 22:36Eitan Adler (eadler) · 1.1_2

Report the latest flash security issue

35ab2d312e

2014-05-24 16:28Koop Mast (kwm) · 1.1_2

Document a bunch of openjpeg vulnabilities.

MFH:		2014Q2

1b6f976988

2014-05-20 22:36Rene Ladan (rene) · 1.1_2

Document new vulnerabilities in www/chromium < 35.0.1916.114

Obtained from:	http://googlechromereleases.blogspot.nl/
MFH:		2014Q2

36300eeda5

2014-05-17 19:58Ryan Steinmetz (zi) · 1.1_2

- Add STAGE support - Add LICENSE - Cleanup plist-related clever - Pacify portlint(1) - Bump PORTREVISION

With hat:	ports-secteam

e77550ecd9

java/intellij 14 unaddressed · 9.0	Oct 30
databases/jetbrains-datagrip 1 unaddressed · 8.0	Oct 30
devel/jetbrains-clion 1 unaddressed · 8.0	Oct 30
devel/pycharm 3 unaddressed · 8.4	Oct 30
net/sniproxy 1 unaddressed · 8.7	Oct 30
devel/py-keystonemiddleware 1 unaddressed · 8.3	Oct 30
net/croc 1 CVE · 4.2 fixed 11.5.5	Oct 30
devel/qt6 10 unaddressed · 4.5	Oct 30
net/traefik 29 CVEs · 9.3 fixed 3.7.16	Oct 30
www/p5-Starlet 4 unaddressed · –	Oct 30
www/p5-HTTP-Parser-XS 1 unaddressed · –	Oct 30
devel/qt5 12 unaddressed · 8.7	Oct 30
databases/sqlite2 +2 related 11 unaddressed · 8.5	Oct 30
net-mgmt/prometheus1 +2 related 1 unaddressed · 6.3	Oct 30
databases/phpmyadmin +1 related 7 unaddressed · 7.7	Oct 30

CVE-2026-118697 9.0 java/intellij	Oct 30
CVE-2026-118696 8.0 devel/pycharm +2 more	Oct 30
CVE-2026-119760 8.7 net/sniproxy	Oct 30
CVE-2026-115642 8.3 devel/py-keystonemiddleware	Oct 30
CVE-2026-119298 fixed 4.2 net/croc	Oct 30
CVE-2026-111487 4.3 devel/qt6	Oct 30
CVE-2026-119574 fixed 8.2 net/traefik	Oct 30
CVE-2026-119573 fixed 2.1 net/traefik	Oct 30
CVE-2026-119572 fixed 7.0 net/traefik	Oct 30
CVE-2026-116128 – www/p5-Starlet	Oct 30
CVE-2026-116127 – www/p5-Starlet	Oct 30
CVE-2026-115866 – www/p5-Starlet	Oct 30
CVE-2026-115865 – www/p5-Starlet	Oct 30
CVE-2026-116130 – www/p5-HTTP-Parser-XS	Oct 30
CVE-2026-105924 4.3 devel/qt5 +1 more	Oct 30

metasploit	Oct 30
openresty	Oct 30
py311-dj61-djangorestframework	Oct 30
py311-djangorestframework	Oct 30
py312-dj60-djangorestframework	Oct 30
py312-dj61-djangorestframework	Oct 30
py312-djangorestframework	Oct 30
py313-dj60-djangorestframework	Oct 30
py313-dj61-djangorestframework	Oct 30
py313-djangorestframework	Oct 30
py313t-dj60-djangorestframework	Oct 30
py313t-dj61-djangorestframework	Oct 30
py313t-djangorestframework	Oct 30
py314-dj60-djangorestframework	Oct 30
py314-dj61-djangorestframework	Oct 30
py314-djangorestframework	Oct 30
py314t-dj60-djangorestframework	Oct 30
py314t-dj61-djangorestframework	Oct 30
py314t-djangorestframework	Oct 30
py315-dj60-djangorestframework	Oct 30
py315-dj61-djangorestframework	Oct 30
py315-djangorestframework	Oct 30
git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28