Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-29 to 1.1_6 · 898db4939a
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined — that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (6) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
300264	maintainer-feedback? security/vuxml: correct double-encoded UTF-8 in Spotipy entry c3fb48cc	In Progress	2026-10-29
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08

Show all 6

PR	Summary	Status	Changed
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,355)

2012-01-12 22:56Xin LI (delphij) · 1.1_1

Document PowerDNS DoS vulnerability.

PR:		ports/164066
Submitted by:	Ralf van der Enden <tremere cainites.net>

564fd51978

2012-01-11 19:32Xin LI (delphij) · 1.1_1

Document PHP multiple vulnerabilities.

1cf3ed6c3e

2012-01-09 19:13Rene Ladan (rene) · 1.1_1

Document a untrusted local library exploit in games/torcs.

Security:	CVE-2010-3384

3083a4d5cc

2012-01-09 03:26Wesley Shields (wxs) · 1.1_1

Document spamdyke STARTTLS plaintext injection vulnerability.

b02ccddb06

2012-01-08 00:44Simon L. B. Nielsen (simon) · 1.1_1

Remove HTML entity from a VuXML entry as they are not allowed in VuXML, only Unicode charecter entities are allowed.

This should fix the portaudit build.

If anyone care enough to insert the correct umlaut, feel free to fix.

d46da3e743

2012-01-06 19:35Rene Ladan (rene) · 1.1_1

Add new vulnerabilities for www/chromium.

Security:	CVE-2011-[3919,3921-3922]

a0644d692e

2012-01-05 19:52Xin LI (delphij) · 1.1_1

Fix build.

cd7e8992f2

2012-01-05 18:29Olli Hauer (ohauer) · 1.1_1

- document bugzilla and bugzilla3 security issues

3734f83371

2012-01-04 00:50Xin LI (delphij) · 1.1_1

Document wordpress xss vulnerability.

Feature safe:	yes

9dcc8f1621

2011-12-30 02:05Cy Schubert (cy) · 1.1_1

Add additional MITKRB5 reference.

Security:	MITKRB5-SA-2011-008
Feature safe:	yes

c69a6cb118

2011-12-29 15:26Remko Lodder (remko) · 1.1_1

Fix build by adding a reference to the original URL.

9e6e548e9f

2011-12-29 14:04Chris Rees (crees) · 1.1_1

Document XSS vulnerability in net-mgmt/zabbix-frontend

PR:		ports/163691
Obtained from:	https://support.zabbix.com/browse/ZBX-4015
Security:	ZBX-4015

0f1ab7dfed

2011-12-28 13:24Martin Matuska (mm) · 1.1_1

Document remote DoS vulnerability in lighttpd HTTP authentication

Security:	CVS-2011-4362

75ed491e45

2011-12-27 05:00Eitan Adler (eadler) · 1.1_1

- Fix most of the duplicate words in vuxml, a few affect 'blockquotes' but that should be okay as no information is lost.

91c2998a3d

2011-12-27 00:23Wesley Shields (wxs) · 1.1_1

Don't wrap a couple of lines. No other entries wrap these lines, so when in Rome...

7ee4cdd7a5

2011-12-27 00:00Wesley Shields (wxs) · 1.1_1

Whitespace cleanup in a BIND topic.

0e8197912e

2011-12-26 23:42Wesley Shields (wxs) · 1.1_1

Fix the build. Missing a quote on the blockquote citation and a missing </p>.

24f6ed61e1

2011-12-26 22:51Cy Schubert (cy) · 1.1_1

Document CVE-2011-4862 (FreeBSD-SA-11:08.telnetd) as it affects krb5-appl too.

Security:	CVE-2011-4862, FreeBSD-SA-11:08.telnetd
Feature safe:	yes

d6f8fffb99

2011-12-23 21:37Xin LI (delphij) · 1.1_1

Add vuxml entry for proftpd chroot vulnerability.

Feature safe:	yes

d203068125

2011-12-22 13:11Ryan Steinmetz (zi) · 1.1_1

- Document recent vulnerabilities in databases/phpmyadmin (PMASA-2011-19 and PMASA-2011-20)

c0e6f29158

2011-12-21 13:40Beat Gaetzi (beat) · 1.1_1

- Also fix SeaMonkey version range

02b26392e0

2011-12-21 12:28Beat Gaetzi (beat) · 1.1_1

- Fix cvename in latest mozilla vulnerability

3f104f9eef

2011-12-21 08:48Beat Gaetzi (beat) · 1.1_1

- Document mozilla -- multiple vulnerabilities

0533572d51

2011-12-19 14:15Sergey Matveychuk (sem) · 1.1_1

unbound DoS vulnerability

5a5fcfe6d8

2011-12-18 15:24Martin Wilke (miwi) · 1.1_1

- Cleanup 	* correct line limit 	* sort cvename

270475ef65

2011-12-18 14:30Ryan Steinmetz (zi) · 1.1_1

- Correct package name in previous commit

Reported by:	crees@

99c467dc89

2011-12-18 14:07Ryan Steinmetz (zi) · 1.1_1

- Document vulnerabilities in www/typo3 and www/typo345

8acc3ea912

2011-12-14 05:07Ryan Steinmetz (zi) · 1.1_1

- Document security/krb5 vulnerability as described in MITKRB5-SA-2011-007

a33e3e7600

2011-12-14 04:52Ryan Steinmetz (zi) · 1.1_1

- Add CVE for recent asterisk vulnerabilities

Feature safe:	yes

d002d8a42b

2011-12-13 21:35Xin LI (delphij) · 1.1_1

Document Opera multiple vulnerabilities.

Requested by:	tabthorpe
Feature safe:	yes

b5aed2f09a

2011-12-13 21:17Rene Ladan (rene) · 1.1_1

Document vulnerabilities fixed in Chromium 16.0.912.63

Security:	CVE-2011-[3903-3917]

219c318d39

2011-12-13 18:45Matthias Andree (mandree) · 1.1_1

Add cvename tag with content CVE-2011-4607 for PuTTY password 'vulnerability'.

Feature safe: yes
Submitted by: eadler

1dd1de759f

2011-12-13 18:34Ryan Steinmetz (zi) · 1.1_1

- Correct package name for asterisk18

Feature safe:	yes

ff1d3e109e

2011-12-12 20:57Matthias Andree (mandree) · 1.1_1

Update PuTTY to new upstream security and bug fix release 0.62, and add a new VuXML entry.

Changelog:      http://lists.tartarus.org/pipermail/putty-announce/2011/000017.html
Security:       bbd5f486-24f1-11e1-95bc-080027ef73ec
Feature safe:   yes

1450d5bdf8

2011-12-09 02:52Ryan Steinmetz (zi) · 1.1_1

- Document asterisk vulnerabilities

Feature safe:	yes

8107e23200

2011-12-08 00:49Ryan Steinmetz (zi) · 1.1_1

- Document vulnerabilities in isc-dhcp: CVE-2011-4539

Feature safe:	yes

a6d2af5582

2011-12-01 22:03Doug Barton (dougb) · 1.1_1

Update to version 3.4.8

This is the formal release of the fix to CVE-2011-4634, but there are
no code differences from the preliminary fixes released in 3.4.8-rc1
except for the updated version number.

PMSA-2011-18 has now been published; vuxml entry attached.

PR:		ports/163001
Submitted by:	Matthew Seaman <m.seaman@infracaninophile.co.uk> (maintainer)

Feature safe:	yes

3f91066eab

2011-11-30 10:31Pav Lucistnik (pav) · 1.1_1

- Add a link to a nice documentation in PH

Suggested by:	dougb
Feature safe:	yes

7bf2963adf

2011-11-30 09:45Pav Lucistnik (pav) · 1.1_1

- Add a quick guide to adding a new entry to this unfriendly file

Feature safe:	yes

eae29d1b13

2011-11-19 16:13Dirk Meyer (dinoex) · 1.1_1

- mark 1.3.41+2.8.31_4 as not vulnerable Feature safe:	yes

36fda50c26

2011-11-18 23:38Carlo Strub (cs) · 1.1_1

hiawatha -- memory leak in PreventSQLi routine

Approved by:	glarkin@ (mentor)
Feature safe:	yes

2f7e9bb901

2011-11-18 21:20Xin LI (delphij) · 1.1_1

Bump modified date for previous commit.

Feature safe:	yes

174746a790

2011-11-18 21:13Doug Barton (dougb) · 1.1_1

The long-term URL for the latest BIND vulnerability is up at ISC, so adjust accordingly.

Feature safe:	yes

d611540f2d

2011-11-17 11:08Rene Ladan (rene) · 1.1_1

Mark chromium-15.0.874.120 vulnerable.

Obtained from:	http://googlechromereleases.blogspot.com/search/label/Stable%20updates
Security:	CVE-2011-3900
Feature safe:	yes

c90446394f

2011-11-17 00:59Doug Barton (dougb) · 1.1_1

Add an entry for the BIND DOS vulnerability announced today

Feature safe:	yes

1ade73c742

2011-11-15 00:27Olli Hauer (ohauer) · 1.1_1

- document apache13 CVE-2011-3368

Feature safe:	yes

b3a496bfcb

2011-11-14 04:25Martin Wilke (miwi) · 1.1_1

- Fix previous entry

Feature safe:	yes

5eeef2311f

2011-11-14 04:14Raphael Kubo da Costa (rakuco) · 1.1_1

Add note about CVE-2011-2725 for ark in kdeutils4.

Approved by:	avilla (mentor, implicit)
Feature safe:	yes

2cf3c9948f

2011-11-13 23:28Olli Hauer (ohauer) · 1.1_1

- document apache apr-0.9 reimplementation of apr_fnmatch()

Feature safe:	yes

662055b5fa

2011-11-13 03:20Doug Barton (dougb) · 1.1_1

Fix the recent flash entry:

1. Only one <package> container is needed
2. Use of <lt> has to be relative to the latest (unvulnerable) version
3. Improve the range for the 11.x version to not tag all 10.x versions
4. Use https for the cite in blockquote
5. Fix a CVE entry

Feature safe:	yes

0309390bb3

textproc/p5-Spreadsheet-XLSX 1 unaddressed · –	Oct 29
print/py-pypdf 32 unaddressed · 8.7	Oct 29
devel/py-pyasn1 4 unaddressed · 7.5	Oct 29
sysutils/nomad 3 unaddressed · 8.8	Oct 29
lang/python27 3 unaddressed · 6.3	Oct 29
lang/python311 +5 related 13 unaddressed · 9.4	Oct 29
lang/python315 6 unaddressed · 9.4	Oct 29
security/botan3 5 CVEs · 9.2 fixed 3.13.0	Oct 29
devel/libwasmtime 17 unaddressed · 9.9	Oct 29
graphics/ImageMagick6 2 unaddressed · 6.3 VuXML	Oct 29
graphics/ImageMagick7 83 CVEs · 7.2 fixed 7.1.2.34 VuXML	Oct 29
textproc/py-markdown 1 unaddressed · 8.7	Oct 29
www/openemr 11 unaddressed · 9.4	Oct 29
www/dolibarr 17 unaddressed · 8.8	Oct 28
www/dolibarr19 +1 related 18 unaddressed · 8.8	Oct 28

CVE-2026-115943 – textproc/p5-Spreadsheet-XLSX	Oct 29
CVE-2026-119209 7.1 print/py-pypdf	Oct 29
CVE-2026-119208 7.1 print/py-pypdf	Oct 29
CVE-2026-119207 7.1 print/py-pypdf	Oct 29
CVE-2026-119206 7.1 print/py-pypdf	Oct 29
CVE-2026-119205 7.1 print/py-pypdf	Oct 29
CVE-2026-119204 7.1 print/py-pypdf	Oct 29
CVE-2026-119203 7.1 print/py-pypdf	Oct 29
CVE-2026-119197 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119196 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119195 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119194 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119168 8.8 sysutils/nomad	Oct 29
CVE-2026-107347 8.4 sysutils/nomad	Oct 29
CVE-2026-102260 4.3 sysutils/nomad	Oct 29

git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27
ImageMagick6	Oct 26