Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-29 to 1.1_6 · 898db4939a
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined — that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (6) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
300264	maintainer-feedback? security/vuxml: correct double-encoded UTF-8 in Spotipy entry c3fb48cc	In Progress	2026-10-29
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08

Show all 6

PR	Summary	Status	Changed
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,355)

2012-03-24 08:20Li-Wen Hsu (lwhsu) · 1.1_1

Document Apache Traffic Server -- heap overflow vulnerability

Feature safe:	yes

c472f24298

2012-03-22 11:57Rene Ladan (rene) · 1.1_1

Document vulnerabilities for www/chromium < 17.0.963.83

Obtained from:	http://googlechromereleases.blogspot.com/search/label/Stable%20updates
Security:	CVE-2011-[3045,3049-3057]
Feature safe:	yes

311ce4106f

2012-03-21 22:58Xin LI (delphij) · 1.1_1

Document GNUtls and libtasn1 security vulnerabilities.

Feature safe:	yes

20e1af42d5

2012-03-18 05:39Martin Wilke (miwi) · 1.1_1

- Cleanup

Feature safe:	yes

f69dac0bd9

2012-03-18 05:30Martin Wilke (miwi) · 1.1_1

- Correct the last 3 firefox 3.6 entrys

PR:		166207
Submitted by:	Sergey Kandaurov <pluknet@gmail.com>
Feature safe:	yes

35868f7c66

2012-03-16 00:11Florian Smeets (flo) · 1.1_1

Document recent asterisk vulnerabilities.

Feature safe:	yes

8194ad4b2e

2012-03-15 16:21Wesley Shields (wxs) · 1.1_1

Document CVE-2012-0884.

Feature safe:	yes

855e9dac05

2012-03-15 14:45Sergey A. Osokin (osa) · 1.1_1

Document nginx -- potential information leak.

Feature safe:	yes

78f6cb626c

2012-03-14 10:16Beat Gaetzi (beat) · 1.1_1

- Document mozilla -- multiple vulnerabilities

Feature safe:	yes

883dfe1e89

2012-03-13 10:37Koop Mast (kwm) · 1.1_1

Do proper input validation for libXfont. This is for CVE-2011-2895.

Feature safe:	yes

e4ba89db1d

2012-03-12 03:23Wesley Shields (wxs) · 1.1_1

Typo fix.

Feature safe:	yes

5bc12cbf97

2012-03-11 22:37Simon L. B. Nielsen (simon) · 1.1_1

- Document portaudit -- auditfile remote code execution. - Update (c) year.

Feature safe:	yes

8659bcc60f

2012-03-11 17:07Wesley Shields (wxs) · 1.1_1

Appease the tidy target. ;)

Feature safe:	yes

00071a3c04

2012-03-11 12:16Rene Ladan (rene) · 1.1_1

Document vulnerabilities in www/chromium < 17.0.963.79

Security:	CVE-2011-3047
Feature safe:	yes

6f56c36e73

2012-03-10 02:47Eitan Adler (eadler) · 1.1_1

Fix formatting so that "make tidy" passes

Feature safe:	yes

de4af32152

2012-03-10 02:45Eitan Adler (eadler) · 1.1_1

Document the latest flash player vulnerabilities

Reviewed by:	nox
Feature safe:	yes

c5ec397d35

2012-03-09 11:03Rene Ladan (rene) · 1.1_1

Mark chromium < 17.0.963.78 as vulnerable.

Security:	CVE-2011-3046
Feature safe:	yes

ff109a4a44

2012-03-07 19:44Li-Wen Hsu (lwhsu) · 1.1_1

Document jenkins XSS vulnerability.

Submitted by:	Gersom van de Bunt <gersom.vandebunt@pine.nl>

ff7e1deed2

2012-03-05 19:16Rene Ladan (rene) · 1.1_1

Add new vulnerabilities for www/chromium < 17.0.963.65

Obtained from:	http://googlechromereleases.blogspot.com/search/label/Stable%20updates
Security:	CVE-2011-[3031-3044]

aa212da18b

2012-03-05 00:07Alex Kozlov (ak) · 1.1_1

Document dropbear security issue

Approved by:	eadler (mentor)

334afe85b0

2012-03-04 02:00Wesley Shields (wxs) · 1.1_1

Whitespace cleanup and stick to ASCII in recent openx entry.

00edd6849b

2012-03-02 22:32Jason Helfman (jgh) · 1.1_1

document latest openx security issue

PR:	ports/165613

8539f60185

2012-02-28 20:19Chris Rees (crees) · 1.1_1

Document latest PostgreSQL vulnerabilities

Security:	http://www.postgresql.org/about/news/1377/

4b54b2253a

2012-02-28 01:09Eitan Adler (eadler) · 1.1_1

- Add information about make tidy checking now that it actually functions - use ' instead of ` - add a note about ports-security

425cc3d0e3

2012-02-28 01:04Eitan Adler (eadler) · 1.1_1

Document recent flash vulns

Reviewed by:	nox

aaee0aaa7f

2012-02-28 00:49Eitan Adler (eadler) · 1.1_1

Pacify 'make tidy' and use valid XML. While make diff against the tidy version a canconical test.

94cc4dbc5b

2012-02-28 00:10Koop Mast (kwm) · 1.1_1

Add libxml2 vulnability.

PR:		ports/164270
Submitted by:	kj <b4039413@nwldx.com>

20f0df8834

2012-02-27 04:04Wesley Shields (wxs) · 1.1_1

Fixup python entry. No need to have python metaport listed.

Reviewed by:	miwi@

ea5710fc9b

2012-02-20 05:28Eitan Adler (eadler) · 1.1_1

Minor whitespace fixup

d27e0f4dbb

2012-02-19 23:27Rene Ladan (rene) · 1.1_1

Include PORTREVISION in plib version number to fix previous commit.

d35ee799a8

2012-02-19 23:14Rene Ladan (rene) · 1.1_1

Document a remote code execution via a buffer overflow in PLIB.

Security:	CVE-2011-4620

69a050c522

2012-02-18 16:00Matthew Seaman (matthew) · 1.1_1

Security update to 3.4.10.1

XSS in replication setup

  ChangeLog:

    Welcome to phpMyAdmin 3.4.10.1, a minor security release.

3.4.10.1 (2012-02-18)
- [security] XSS in replication setup, see PMASA-2012-1

  Security Advisory:

    http://www.phpmyadmin.net/home_page/security/PMASA-2012-1.php

Approved by:	shaun (mentor)

37035a72be

2012-02-17 22:21Jason Helfman (jgh) · 1.1_1

- document latest piwik security vulnerability

PR:	ports/165217

bbac183004

2012-02-17 20:38Florian Smeets (flo) · 1.1_1

- document recent mozilla vulnerabilities - wrap a long line

26e461e4ec

2012-02-16 00:16Rene Ladan (rene) · 1.1_1

Document vulnerabilities in chromium < 17.0.963.56

Obtained from:	http://googlechromereleases.blogspot.com/search/label/Stable%20updates
Security:	CVE-2011-[3015-3027]

ff8224ca02

2012-02-15 20:58Greg Larkin (glarkin) · 1.1_1

- Updated the recent WebCalendar entry to match <= 1.2.4 instead of < 1.2.4,   since 1.2.4 (not yet in tree) is vulnerable, and 1.2.5 has not been   released by upstream yet - Fixed the URL in the recent WebCalendar entry - Canonicalized naming in other WebCalendar entries - Fixed various nits flagged by "make tidy"

b475cafb5d

2012-02-15 01:03Eitan Adler (eadler) · 1.1_1

This vuln also affects pypy

67b3c147de

2012-02-14 04:32Eitan Adler (eadler) · 1.1_1

typo

8eb253c8cb

2012-02-14 04:31Eitan Adler (eadler) · 1.1_1

Inform users of the DoS issue in the python SimpleXMLRPCServer function

c015f4eda7

2012-02-13 17:27Eitan Adler (eadler) · 1.1_1

Add the recently assigned cve number

37324fb0cc

2012-02-12 05:17Eitan Adler (eadler) · 1.1_1

Inform users of the XSS issue in the latest version of WebCalendar.

It seems that there has been no response from the vendor
and users may want to switch to an alternate product that fits their needs.

8e4bedc729

2012-02-11 19:17Wesley Shields (wxs) · 1.1_1

Whitespace fixes.

592fea18ef

2012-02-11 11:50Beat Gaetzi (beat) · 1.1_1

- Document mozilla -- use after free in nsXBLDocumentInfo::ReadPrototypeBindings

b1d5b7e254

2012-02-11 05:55Eitan Adler (eadler) · 1.1_1

Inform bip users of buffer overflow (CVE-2012-0806)

6a71ed2fcb

2012-02-11 02:27Eitan Adler (eadler) · 1.1_1

Inform users of the private information disclosure bug in surf (CVE-2012-0842)

Reviewed by:	dougb

86c1a8911c

2012-02-10 11:26Philippe Audeoud (jadawin) · 1.1_1

Fix style

Reported by:	flo@ via irc

0a5e1e9a97

2012-02-10 11:11Philippe Audeoud (jadawin) · 1.1_1

Document last glpi vulnerabilities

Submitted by:	Mathias Monnerville <mathias@monnerville.com> via email

4a3c9d4507

2012-02-09 13:48Rene Ladan (rene) · 1.1_1

Document new Chromium < 17.0.963.46 vulnerabilities.

Obtained from:	http://googlechromereleases.blogspot.com/search/label/Stable%20updates
Security:	fe1976c2-5317-11e1-9e99-00262d5ed8ee

b6bea61efb

2012-02-08 00:11Xin LI (delphij) · 1.1_1

Document Drupal core multiple vulnerabilities.

8a348172a0

2012-02-07 05:13Wesley Shields (wxs) · 1.1_1

Fix up 3fd040be-4f0b-11e1-9e32-0025900931f by giving a better description.

38c74bf27c

textproc/p5-Spreadsheet-XLSX 1 unaddressed · –	Oct 29
print/py-pypdf 32 unaddressed · 8.7	Oct 29
devel/py-pyasn1 4 unaddressed · 7.5	Oct 29
sysutils/nomad 3 unaddressed · 8.8	Oct 29
lang/python27 3 unaddressed · 6.3	Oct 29
lang/python311 +5 related 13 unaddressed · 9.4	Oct 29
lang/python315 6 unaddressed · 9.4	Oct 29
security/botan3 5 CVEs · 9.2 fixed 3.13.0	Oct 29
devel/libwasmtime 17 unaddressed · 9.9	Oct 29
graphics/ImageMagick6 2 unaddressed · 6.3 VuXML	Oct 29
graphics/ImageMagick7 83 CVEs · 7.2 fixed 7.1.2.34 VuXML	Oct 29
textproc/py-markdown 1 unaddressed · 8.7	Oct 29
www/openemr 11 unaddressed · 9.4	Oct 29
www/dolibarr 17 unaddressed · 8.8	Oct 28
www/dolibarr19 +1 related 18 unaddressed · 8.8	Oct 28

CVE-2026-115943 – textproc/p5-Spreadsheet-XLSX	Oct 29
CVE-2026-119209 7.1 print/py-pypdf	Oct 29
CVE-2026-119208 7.1 print/py-pypdf	Oct 29
CVE-2026-119207 7.1 print/py-pypdf	Oct 29
CVE-2026-119206 7.1 print/py-pypdf	Oct 29
CVE-2026-119205 7.1 print/py-pypdf	Oct 29
CVE-2026-119204 7.1 print/py-pypdf	Oct 29
CVE-2026-119203 7.1 print/py-pypdf	Oct 29
CVE-2026-119197 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119196 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119195 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119194 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119168 8.8 sysutils/nomad	Oct 29
CVE-2026-107347 8.4 sysutils/nomad	Oct 29
CVE-2026-102260 4.3 sysutils/nomad	Oct 29

git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27
ImageMagick6	Oct 26