Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-30 to 1.1_6 · ee92e78ad7
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined, and that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (6) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
300264	maintainer-feedback? security/vuxml: correct double-encoded UTF-8 in Spotipy entry c3fb48cc	In Progress	2026-10-29
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08

Show all 6

PR	Summary	Status	Changed
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,356)

2013-03-10 01:12Joe Marcus Clarke (marcus) · 1.1_1

Belatedly add an entry for libpurple's recent vulnerabilities.

b4fc3feb8f

2013-03-08 23:27Florian Smeets (flo) · 1.1_1

- update thunderbird, firefox-esr, linux-thunderbird and linux-firefox to   17.0.4 - update firefox to 19.0.2 - add vuln.xml entry

Security:	630c8c08-880f-11e2-807f-d43d7e0c7c02

5f18ea47e3

2013-03-08 10:06Rene Ladan (rene) · 1.1_1

Document a vulnerability in chromium < 25.0.1364.160

Obtained from:	http://googlechromereleases.blogspot.nl/search/Stable%20Updates

c775bc3c07

2013-03-06 16:56Frederic Culot (culot) · 1.1_1

- Document vulnerabilities in typo3.

Security:       b9a347ac-8671-11e2-b73c-0019d18c446a
Obtained from:  http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-001/

564cfec669

2013-03-06 01:19Rene Ladan (rene) · 1.1_1

Document vulnerabilities in www/chromium < 25.0.1364.152

Obtained from:	http://googlechromereleases.blogspot.nl/search/Stable%20Updates

0a75a27f0f

2013-03-03 21:17Ryan Steinmetz (zi) · 1.1_1

- Document recent vulerability in security/stunnel (CVE-2013-1762) Security:	c97219b6-843d-11e2-b131-000c299b62e1

d450ab3a4a

2013-03-02 21:07Olli Hauer (ohauer) · 1.1_1

- document apache22 issues - tim trailing tabs

3411e90377

2013-03-01 03:08Wesley Shields (wxs) · 1.1_1

Document two sudo problems.

bc9a82dd2b

2013-02-28 02:46Steve Wills (swills) · 1.1_1

- Update to 0.9.14 to fix CVE-2013-1756

Security:	aa7764af-0b5e-4ddc-bc65-38ad697a484f

ea9f3c8d6f

2013-02-27 14:40Eitan Adler (eadler) · 1.1_1

Update to 11.2r202.273

Security:	http://www.vuxml.org/freebsd/dbdac023-80e1-11e2-9a29-001060e06fd4.html

bfe92b3914

2013-02-26 18:27Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_1

- Update affected ettercap versions: CVE-2012-0722 was fixed in 0.7.5.2-Assimilation

05731af3f5

2013-02-26 02:38Bryan Drewery (bdrewery) · 1.1_1

- Document 3 OTRS vulnerabilities from 2012  - CVE-2012-4751  - CVE-2012-4600  - CVE-2012-2582

8644e31f6a

2013-02-24 19:21Steve Wills (swills) · 1.1_1

- Document Ruby REXML DoS

19b9b04511

2013-02-24 18:51Steve Wills (swills) · 1.1_1

- Document rubygem-ruby_parser issue

4ebcd6044d

2013-02-24 15:23Po-Chien Lin (pclin) · 1.1_1

- Document Django 2013-02-21 vulnerabilty

Approved by:	araujo (mentor)

92ebf424d6

2013-02-23 00:49Rene Ladan (rene) · 1.1_1

Document vulnerabilities in www/chromium < 25.0.1364.97

Obtained from:	http://googlechromereleases.blogspot.nl/search/Stable%20Updates

8800a2b6fd

2013-02-22 21:28Cy Schubert (cy) · 1.1_1

Document security/krb5 1.11 and prior null pointer dereference in the KDC PKINIT code [CVE-2013-1415].

Security:	CVE-2013-1415

7833a0f195

2013-02-22 09:07Remko Lodder (remko) · 1.1_1

Convert the ! back into a 1.

Noticed by:	crees

1be2aa0120

2013-02-21 22:38Remko Lodder (remko) · 1.1_1

Add the latest two FreeBSD Security Advisories.

71be45ba2c

2013-02-21 08:11Florian Smeets (flo) · 1.1_1

Document drupal7 Denial of service

719a920981

2013-02-20 14:58Ruslan Makhmatkhanov (rm) · 1.1_1

- add an entry for net/nss-pam-ldapd stack-based buffer overflow

According to advisory, vulnerability exists in nss-pam-ldapd < 0.8.11,
but since we never had this version in the ports tree, mark everything
< 0.8.12 as vulnerable.

PR:		176293
Submitted by:	pluknet

a3f2f050cc

2013-02-20 08:16Florian Smeets (flo) · 1.1_1

Fix up the latest gecko update by: - reapplying the workaround for svn:eol-style and svn:keywords - fixing version matching in vuln.xml, 17.0.3 is NOT vulnerable

b452328822

2013-02-20 07:16Olli Hauer (ohauer) · 1.1_1

- update bugzilla ports to latest version

Bugzilla 4.0.10 and 3.6.13 are security updates for the 4.0
  branch and the 3.6 branch, respectively. 4.0.10 contains several
  useful bug fixes and 3.6.13 contains only security fixes.

Security:	CVE-2013-0785
		CVE-2013-0786

c6abd552ea

2013-02-20 00:53Florian Smeets (flo) · 1.1_1

- update firefox to 19.0 - update firefox-esr, thunderbird, linux-firefox, linux-thunderbird to 17.0.3 - update linux-seamonkey to 2.16 - update nspr to 4.9.5 - update nss to 3.14.3 - add DuckDuckGo search plugin to firefox [1] - mark kompozer deprecated - clang fixes for www/libxul19 [2]

Security:	http://www.vuxml.org/freebsd/e3f0374a-7ad6-11e2-84cd-d43d7e0c7c02.html
Submitted by:	DuckDuckGo [1], dim [2]
In collaboration with:	Jan Beich <jbeich@tormail.org>

d39d92427c

2013-02-19 01:19Ryan Steinmetz (zi) · 1.1_1

- Fix version range for recent ruby vulnerabilities (d3e96508-056b-4259-88ad-50dc8d1978a6 and c79eb109-a754-45d7-b552-a42099eb2265) due to missing port epoch in package range

Submitted by:	Matthias Andree <mandree@FreeBSD.org>

41a95c5e37

2013-02-17 20:58Eitan Adler (eadler) · 1.1_1

Combine ranges into one entry to prevent false positives

83689ac33a

2013-02-17 17:47Steve Wills (swills) · 1.1_1

- Document rubygem-rack issue

c1a7765ec7

2013-02-17 17:33Steve Wills (swills) · 1.1_1

- Document activemodel issue

9a9878ba94

2013-02-17 11:28Li-Wen Hsu (lwhsu) · 1.1_1

Document Jenkins Security Advisory 2013-02-16

e43326a3a9

2013-02-16 18:03Ruslan Makhmatkhanov (rm) · 1.1_1

- add entry for dns/poweradmin

PR:		175704
Submitted by:	Edmondas Girkantas <eg@fbsd.lt> (maintainer of dns/poweradmin)

ee0adc4530

2013-02-16 15:41Steve Wills (swills) · 1.1_1

- Document ruby json issue

99ee3b7426

2013-02-16 05:29Steve Wills (swills) · 1.1_1

- Document vulnerability in rdoc

63eb704749

2013-02-08 20:18Eitan Adler (eadler) · 1.1_1

Update flash to the latest version

PR:		ports/175159
Submitted by:	Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>

d8ce37738d

2013-02-08 09:44Martin Wilke (miwi) · 1.1_1

- Fix whitespaces

1da0c559b8

2013-02-07 03:10Eitan Adler (eadler) · 1.1_1

Fix vuxml build

4bdcfb44da

2013-02-06 21:06Dirk Meyer (dinoex) · 1.1_1

- report openssl vulnerabilities

4f9c01bde1

2013-02-01 23:42Florian Smeets (flo) · 1.1_1

- update databases/mariadb-server to 5.3.12 [1] - update databases/mariadb55-server 5.5.29 [2]

PR:		ports/175764 [1]
PR:		ports/175767 [2]
Submitted by:	Geoffroy Desvernay <dgeo@centrale-marseille.fr> (maintainer) [1]
Submitted by:	Alexandr Kovalenko <never@nevermind.kiev.ua> (maintainer) [2]
Security:	8c773d7f-6cbb-11e2-b242-c8600054b392

c7fd019365

2013-02-01 09:50Dirk Meyer (dinoex) · 1.1_1

- report opera 12.12 vulnerabilities

95e92c6086

2013-01-30 19:34Pawel Pekala (pawel) · 1.1_1

Document devel/upnp vulnerabilities

379f5be841

2013-01-29 21:02Xin LI (delphij) · 1.1_1

Document wordpress multiple vulnerabilities.

7621bd7fa7

2013-01-25 10:37Carlo Strub (cs) · 1.1_1

Fix last entry: version 2.3.4 is also affected

e52f472555

2013-01-25 03:08Wesley Shields (wxs) · 1.1_1

Fix whitespace in previous commit.

4fd3100bcf

2013-01-25 02:26Carlo Strub (cs) · 1.1_1

XSS vulnerability in py-django-cms

dcbeef410e

2013-01-23 13:52Rene Ladan (rene) · 1.1_1

Document vulnerabilities in www/chromium < 24.0.1312.56

Obtained from:	http://googlechromereleases.blogspot.nl/search/label/Stable%20updates

4ef577e990

2013-01-20 21:58Florian Smeets (flo) · 1.1_1

- update www/drupal6 to 6.28 - update www/drupal7 to 7.19

Security:	http://www.vuxml.org/freebsd/1827f213-633e-11e2-8d93-c8600054b392.html
Approved by:	portmgr (beat)

8693d9fc6c

2013-01-16 20:16Eygene Ryabinkin (rea) · 1.1_1

VuXML: add newly-allocated CVE for SQUID-2012:1

New CVE was allocated for the underfixed DoS and added possible
infinite loop in Squid 3.2 and 3.1.

398d37e270

2013-01-16 20:13Eygene Ryabinkin (rea) · 1.1_1

VuXML: document buffer overflow in ettercap (CVE-2013-0722) Reviewed by:	simon@

ef77f594fb

2013-01-16 20:11Eygene Ryabinkin (rea) · 1.1_1

VuXML: document recent security manager bypass in Java 7.x Reviewed by:	glewis@, simon@

9353bf58bf

2013-01-16 08:39Xin LI (delphij) · 1.1_1

Properly limit the match for PHP 5.3.x and 5.2.x versions.

Noticed by:	remko

15f1217b86

2013-01-15 23:06Xin LI (delphij) · 1.1_1

Apply version ranges of php53 and php52 to php5 as well.

29ec9c184b

www/drupal10 6 unaddressed · 5.4 VuXML	Oct 30
www/drupal11 3 unaddressed · – VuXML	Oct 30
textproc/p5-Spreadsheet-XLSX 1 unaddressed · –	Oct 29
print/py-pypdf 32 unaddressed · 8.7	Oct 29
devel/py-pyasn1 4 unaddressed · 7.5	Oct 29
sysutils/nomad 3 unaddressed · 8.8	Oct 29
lang/python27 3 unaddressed · 6.3	Oct 29
lang/python311 +5 related 13 unaddressed · 9.4	Oct 29
lang/python315 6 unaddressed · 9.4	Oct 29
security/botan3 5 CVEs · 9.2 fixed 3.13.0	Oct 29
devel/libwasmtime 17 unaddressed · 9.9	Oct 29
graphics/ImageMagick6 2 unaddressed · 6.3 VuXML	Oct 29
graphics/ImageMagick7 83 CVEs · 7.2 fixed 7.1.2.34 VuXML	Oct 29
textproc/py-markdown 1 unaddressed · 8.7	Oct 29
www/openemr 11 unaddressed · 9.4	Oct 29

CVE-2026-108097 VuXML – www/drupal10 +1 more	Oct 30
CVE-2026-108515 – www/drupal10 +1 more	Oct 30
CVE-2026-108514 – www/drupal10 +1 more	Oct 30
CVE-2026-115943 – textproc/p5-Spreadsheet-XLSX	Oct 29
CVE-2026-119209 7.1 print/py-pypdf	Oct 29
CVE-2026-119208 7.1 print/py-pypdf	Oct 29
CVE-2026-119207 7.1 print/py-pypdf	Oct 29
CVE-2026-119206 7.1 print/py-pypdf	Oct 29
CVE-2026-119205 7.1 print/py-pypdf	Oct 29
CVE-2026-119204 7.1 print/py-pypdf	Oct 29
CVE-2026-119203 7.1 print/py-pypdf	Oct 29
CVE-2026-119197 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119196 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119195 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119194 7.5 devel/py-pyasn1	Oct 29

openresty	Oct 30
git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27