Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-30 to 1.1_6 · b1ef337e1f
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined, and that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,358)

2013-06-19 22:46Eitan Adler (eadler) · 1.1_1

Add an additional validation script to the vuxml port. At this point it is not tied to the validate: target because validation fails.

Reviewed by:	simon, delphij
With Hat:	ports-secteam

6eb7da5901

2013-06-19 13:08Carlo Strub (cs) · 1.1_1

Fix typo soccat -> socat

3c16878418

2013-06-19 13:07Carlo Strub (cs) · 1.1_1

Add vulnerability on OTRS

3c635bcb65

2013-06-18 17:50Xin LI (delphij) · 1.1_1

Fix date for flashpluginwrapper.

1c18fc94e4

2013-06-18 17:45Xin LI (delphij) · 1.1_1

Add entry for SA-13:06.mmap.

d5b6f823e9

2013-06-18 17:15Palle Girgensohn (girgen) · 1.1_1

Security update for apache-xml-security-c. Dependant ports, especially shibboleth2-sp, opensaml2, xmltooling and log4shib should all be updated.

Security: CVE-2013-2156

179f046f0c

2013-06-17 05:23Brendan Fabeny (bf) · 1.1_1

Document Tor bug 9072

278a353a2f

2013-06-14 08:21Alex Kozlov (ak) · 1.1_1

- Fix typo in dbus entry

Reported by:	Christoph Mallon <christoph.mallon@gmx.de>

57cf43f89f

2013-06-13 21:54Koop Mast (kwm) · 1.1_1

Update to 1.6.12.

I'm not completly sure this affects us, but beter safe then sorry.
While here wordsmith Options description to try to make it clearer.

Security:	CVE-2013-2168

93fc4d80bf

2013-06-12 00:44Eitan Adler (eadler) · 1.1_1

Update to 11.2r202.291

PR:		ports/179502
Submitted by:	Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>

933455bf44

2013-06-11 23:03Frederic Culot (culot) · 1.1_1

- Document vulnerabilities in www/owncloud

Security:	d7a43ee6-d2d5-11e2-9894-002590082ac6
Obtained from:	http://owncloud.org/about/security/advisories/

c14a0f2716

2013-06-07 17:19Florian Smeets (flo) · 1.1_1

Update to 5.3.26

Security:	59e7163c-cf84-11e2-907b-0025905a4770

f011d407e4

2013-06-07 08:30Erwin Lansing (erwin) · 1.1_1

Match only the most recent Bind9* version in the latest vulnerability, older versions are not affected.

90decc5694

2013-06-06 12:59Erwin Lansing (erwin) · 1.1_1

Fix typo in previous revision.

20d85a9876

2013-06-06 10:36Erwin Lansing (erwin) · 1.1_1

Add entry for the latest Bind vulnerabilities in CVE-2013-3919.

38f95d861c

2013-06-06 00:02Matthew Seaman (matthew) · 1.1_1

Security upgrade to 4.0.3

Advisory: http://www.phpmyadmin.net/home_page/security/PMASA-2013-6.php

ChangeLog: http://sourceforge.net/projects/phpmyadmin/files/phpMyAdmin/4.0.3/phpMyAdmin-4.0.3-notes.html/view

Security:	6b97436c-ce1e-11e2-9cb2-6805ca0b3d42

e9dd2fa24f

2013-06-05 11:02Koop Mast (kwm) · 1.1_1

Update to 0.16.6.

Obtained from:	GNOME dev repo
Security:	CVE-2013-1431

218db049e2

2013-06-05 00:30Rene Ladan (rene) · 1.1_1

Document vulnerabilities in www/chromium < 27.0.1453.110

Obtained from:	http://googlechromereleases.blogspot.nl/

9ea8c3f037

2013-06-04 23:52Eitan Adler (eadler) · 1.1_1

- Fix build - Ensure validation

c07672e4ab

2013-06-04 21:31Niclas Zeising (zeising) · 1.1_1

Fix security issues in xorg client libraries. Most libraries were updated to newer versions, in some cases patches were backported instead.

Most notably, x11/libX11 was updated to 1.6.0

Security:	CVE-2013-1981
		CVE-2013-1982
		CVE-2013-1983
		CVE-2013-1984
		CVE-2013-1985
		CVE-2013-1986
		CVE-2013-1987
		CVE-2013-1988
		CVE-2013-1989
		CVE-2013-1990
		CVE-2013-1991
		CVE-2013-1992
		CVE-2013-1993
		CVE-2013-1994
		CVE-2013-1995
		CVE-2013-1996
		CVE-2013-1997
		CVE-2013-1998
		CVE-2013-1999
		CVE-2013-2000
		CVE-2013-2001
		CVE-2013-2002
		CVE-2013-2003
		CVE-2013-2004
		CVE-2013-2005
		CVE-2013-2062
		CVE-2013-2063
		CVE-2013-2064
		CVE-2013-2066

d516c8b663

2013-06-04 06:45Cy Schubert (cy) · 1.1_1

Update krb5 1.11.2 --> 1.11.3.

This is a bugfix release.

* Fix a UDP ping-pong vulnerability in the kpasswd (password changing)
  service.  [CVE-2002-2443]

* Improve interoperability with some Windows native PKINIT clients.

Security:	CVE-2002-2443

fd0bfa7a6d

2013-06-03 20:29Chris Rees (crees) · 1.1_1

Update to 1.6.2

* Fix buffer overflows in fileserver and ptserver.
* Fix rare file corruption during background sync (Gerrit 8796).
* Fix corrupting clients' metadata cache during certain errors (Gerrit 6957).
* Fix cache corruption when reading from a file another client is simultaneously writing to (Gerrit 7994).
* Fix fileservers to properly report >2 TiB partitions.

and some other less serious changes.

PR:		ports/179259
Submitted by:	Adam Nowacki <nowak@tepeserwery.pl>
Submitted by:	bjk (maintainer)
Security:	CVE-2013-1794

c27d53f4c2

2013-06-03 08:51Marcelo Araujo (araujo) · 1.1_1

- Update to 2.7.4.

More info:
https://github.com/SpiderLabs/ModSecurity/blob/master/CHANGES

PR:		ports/179167
Submitted by:	ohauer@
Security:	9dfb63b8-8f36-11e2-b34d-000c2957946c

4aed171d28

2013-06-01 21:22Raphael Kubo da Costa (rakuco) · 1.1_1

Remove duplicate optipng vulnerability.

It was separately committed in r315254, so remove the version I added
in r318453.

Reported by:	Alexander Milanov <a@amilanov.com>

02cc67a03f

2013-06-01 18:49Matthias Andree (mandree) · 1.1_1

Add two more URLs to openvpn's vulnerability from March 2013 (CVE-2013-2061)

Security: 92f30415-9935-11e2-ad4c-080027ef73ec

1e43de2e91

2013-06-01 18:47Matthias Andree (mandree) · 1.1_1

- Backport fix for CVE-2013-2061 to openvpn22 and openvpn20;   while it is unclear whether it affects OpenSSL-builds at all.   Let's play it safe. - Reference CVE-2013-2061 name in OpenVPN's VuXML entry - Mark 2.0.9_4 <= openvpn < 2.1.0 and 2.2.2_2 < openvpn < 2.3.0 not vulnerable - Mark openvpn22 deprecated and to expire 2013-09-01.   (openvpn20 is already marked to expire 2013-07-11.)

Security:	CVE-2013-2061
Security:	92f30415-9935-11e2-ad4c-080027ef73ec

2165191209

2013-06-01 10:08Sergey A. Osokin (osa) · 1.1_1

Document passenger vulnerability.

51baf2cb66

2013-05-31 23:41Lev A. Serebryakov (lev) · 1.1_1

Update subversion ports to 1.7.10 and 1.6.23.   It fixes 3 security issues:

CVE-2013-1968: fsfs repository corruption caused by newline characters in filenames
    CVE-2013-2088: contrib hook-scripts can allow arbitrary code execution
    CVE-2013-2112: svnserve remotely triggerable DoS.

Security:	CVE-2013-1968
Security:	CVE-2013-2088
Security:	CVE-2013-2112

976ab3f623

2013-05-31 13:33Chris Rees (crees) · 1.1_1

Actually remove bitchx-devel and add a VuXML entry.

Security:	CVE-2007-4584
Security:	CVE-2007-5839
Security:	CVE-2007-5922

9aa023d98b

2013-05-28 16:23Jase Thew (jase) · 1.1_1

- Document znc null pointer dereference vulnerability.

2b8774d2ca

2013-05-27 02:41Emanuel Haupt (ehaupt) · 1.1_1

Adjust range for socat entry.

eb7bd354ae

2013-05-27 00:01Emanuel Haupt (ehaupt) · 1.1_1

Document socat FD leak vulnerability.

Security:	CVE-2013-3571

4a3aabf8d2

2013-05-26 22:34Steve Wills (swills) · 1.1_1

- Add entry for ruby 1.9.3p429

0cb9be9c5b

2013-05-26 10:38Xin LI (delphij) · 1.1_1

Document couchdb XSS vulnerability.

PR:		ports/178985
Submitted by:	wollman

182f4c58cd

2013-05-23 17:30Florian Smeets (flo) · 1.1_1

Update to 2.17.1 as the 2.18 release was postponed / cancelled

b645bdcbbf

2013-05-23 10:20Carlo Strub (cs) · 1.1_1

Fix entry date, wrongly entered in revision 318453

30ee8e1d18

2013-05-23 10:02Carlo Strub (cs) · 1.1_1

fix typo in recent otrs vulnerability

261b3bc55f

2013-05-23 09:58Carlo Strub (cs) · 1.1_1

Add vulnerabilities

Security:	CVE-2013-2637
		CVE-2013-3551

20adf54dfa

2013-05-23 09:24Matthew Seaman (matthew) · 1.1_1

Security Updates

- www/rt40 to 4.0.13
   - www/rt38 to 3.8.17 [1]

This is a security fix addressing a number of CVEs:

    CVE-2012-4733
    CVE-2013-3368
    CVE-2013-3369
    CVE-2013-3370
    CVE-2013-3371
    CVE-2013-3372
    CVE-2013-3373
    CVE-2013-3374

Users will need to update their database schemas as described in
pkg-message

Approved by:	flo [1]
Security:	3a429192-c36a-11e2-97a9-6805ca0b3d42

6306a2c58c

2013-05-22 11:14Rene Ladan (rene) · 1.1_1

Fix vuxml by using the correct format for CVE names.

Prodded by:	bz on IRC

a729270e30

2013-05-22 10:45Rene Ladan (rene) · 1.1_1

List vulnerabilities fixed in www/chromium 27.0.1453.93 (which is the current version in the Ports Collection).

3b313dc9e6

2013-05-19 16:06Raphael Kubo da Costa (rakuco) · 1.1_1

Patch multiple vulnerabilities in x11-toolkits/plib.

PR:		ports/178710
Submitted by:	Denny Lin <dennylin93@hs.ntnu.edu.tw>

00093d96e5

2013-05-18 22:35Raphael Kubo da Costa (rakuco) · 1.1_1

- Update to 0.7.4 - Add VuXML entry - Trim Makefile header - Add LICENSE

PR:		ports/177206
Submitted by:	Alexander Milanov <a@amilanov.com>
Approved by:	Thomas Hurst <tom@hur.st> (maintainer)
Security:	a8818f7f-9182-11e2-9bdf-d48564727302

b1b1116c67

2013-05-17 00:46Xin LI (delphij) · 1.1_1

Update the recent nginx entry to cover the exact version range and include information for CVE-2013-2070.

0a7fd89016

2013-05-16 06:14Eitan Adler (eadler) · 1.1_1

Update to the latest version of Adobe Flash

51f436b626

2013-05-16 04:00Florian Smeets (flo) · 1.1_1

- update firefox to 21.0 - update firefox-esr and thunderbird to 17.0.6 - WEBRTC now supports PULSEAUDIO - make linux-firefox work with plugins again (e.g. quakelive)

Security:		4a1ca8a4-bd82-11e2-b7a0-d43d7e0c7c02
In collaboration with:	Jan Beich <jbeich@tormail.org>

ba05efc063

2013-05-14 09:15Sergey A. Osokin (osa) · 1.1_1

Update ranges according latest available information.

Source:	http://mailman.nginx.org/pipermail/nginx-announce/2013/000114.html

8651adfa36

2013-05-13 02:08Ashish SHUKLA (ashish) · 1.1_1

- Update emacs entry to correct the version ranges for CVE-2012-3479

0e333ce13f

2013-05-07 20:58Xin LI (delphij) · 1.1_1

Update nginx entry to reflect the right version ranges for CVE-2013-2028.

Note that we don't really have nginx 1.3.9 in the ports collection, due
to the recent ports freeze.  The version 1.3.9 is used here just to
better match the original advisory.

8b9be7caab

2013-05-07 15:32Sergey A. Osokin (osa) · 1.1_1

Fix typo.

Found by:	ru

9d1a052933

databases/clickhouse +1 related 2 unaddressed · 9.5	Oct 30
www/drupal10 6 unaddressed · 5.4 VuXML	Oct 30
www/drupal11 3 unaddressed · – VuXML	Oct 30
textproc/p5-Spreadsheet-XLSX 1 unaddressed · –	Oct 29
print/py-pypdf 32 unaddressed · 8.7	Oct 29
devel/py-pyasn1 4 unaddressed · 7.5	Oct 29
sysutils/nomad 3 unaddressed · 8.8	Oct 29
lang/python27 3 unaddressed · 6.3	Oct 29
lang/python311 +5 related 13 unaddressed · 9.4	Oct 29
lang/python315 6 unaddressed · 9.4	Oct 29
security/botan3 5 CVEs · 9.2 fixed 3.13.0	Oct 29
devel/libwasmtime 17 unaddressed · 9.9	Oct 29
graphics/ImageMagick6 2 unaddressed · 6.3 VuXML	Oct 29
graphics/ImageMagick7 83 CVEs · 7.2 fixed 7.1.2.34 VuXML	Oct 29
textproc/py-markdown 1 unaddressed · 8.7	Oct 29

CVE-2026-116366 9.5 databases/clickhouse +1 more	Oct 30
CVE-2026-108097 VuXML – www/drupal10 +1 more	Oct 30
CVE-2026-108515 – www/drupal10 +1 more	Oct 30
CVE-2026-108514 – www/drupal10 +1 more	Oct 30
CVE-2026-115943 – textproc/p5-Spreadsheet-XLSX	Oct 29
CVE-2026-119209 7.1 print/py-pypdf	Oct 29
CVE-2026-119208 7.1 print/py-pypdf	Oct 29
CVE-2026-119207 7.1 print/py-pypdf	Oct 29
CVE-2026-119206 7.1 print/py-pypdf	Oct 29
CVE-2026-119205 7.1 print/py-pypdf	Oct 29
CVE-2026-119204 7.1 print/py-pypdf	Oct 29
CVE-2026-119203 7.1 print/py-pypdf	Oct 29
CVE-2026-119197 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119196 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119195 7.5 devel/py-pyasn1	Oct 29

openresty	Oct 30
git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27