Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-29 to 1.1_6 · 898db4939a
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined — that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,355)

2011-04-12 19:52Sergey Skvortsov (skv) · 1.1_1

Document "otrs" - several XSS attacks possible.

01fd403fd8

2011-04-12 17:36Erwin Lansing (erwin) · 1.1_1

Fix typo

Submitted by:	 Dan Langille <dan@langille.org>

1ecbc9c1d8

2011-04-10 23:39Wesley Shields (wxs) · 1.1_1

Document isc-dhcp41-client and isc-dhcp31-client vulnerabilities.

PR:		ports/156246
Submitted by:	Douglas Thrift <douglas@douglasthrift.net>

0656087b77

2011-04-09 03:41Wesley Shields (wxs) · 1.1_1

Add CVE entry for recent tinyproxy vulnerability.

6c47c60af7

2011-04-08 09:39Pav Lucistnik (pav) · 1.1_1

- tinyproxy

d4e0330864

2011-04-01 20:03Sergey Matveychuk (sem) · 1.1_1

Document two quagga DoS vulnerabilities

c291d919cd

2011-03-29 15:50Koop Mast (kwm) · 1.1_1

Add a missing </p>.

Pointed out by:	jadawin@

4111673781

2011-03-29 15:38Koop Mast (kwm) · 1.1_1

Document gdm privilege escalation vulnerability

25852b8521

2011-03-26 21:13Rene Ladan (rene) · 1.1_1

Document vulnerabilities before Chromium 10.0.648.204

Obtained from:	http://googlechromereleases.blogspot.com/search/label/Stable%20updates

97046873dd

2011-03-25 12:09Alex Dupre (ale) · 1.1_1

Add entries for php5-exif and php5-zip before 5.3.6 release.

PR:		ports/155922
Submitted by:	Chris Tandiono <christandiono@tbp.berkeley.edu>

546e00cdd3

2011-03-24 19:40Juergen Lock (nox) · 1.1_1

Update to 10.2r153.

Security:	http://www.freebsd.org/ports/portaudit/501ee07a-5640-11e0-985a-001b2134ef46.html
PR:		ports/155874
Submitted by:	Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>

ad7527a2b1

2011-03-24 01:56Beat Gaetzi (beat) · 1.1_1

- Document mozilla -- update to HTTPS certificate blacklist

6e65ecac42

2011-03-19 07:10Sahil Tandon (sahil) · 1.1_1

Document CVE-2011-0411: Postfix "STARTTLS" Plaintext Injection Vulnerability.

Reviewed by:	miwi (secteam)

25f1b246af

2011-03-17 18:42Greg Larkin (glarkin) · 1.1_1

- Documented integer overflow in hiawatha web server

Submitted by:	C-S <c-s@c-s.li>

7dd7d929e6

2011-03-17 01:03Xin LI (delphij) · 1.1_1

Document asterisk multiple vulnerabilities.

56055169f1

2011-03-14 19:34Rene Ladan (rene) · 1.1_1

Mark chromium-9.0.597.107 and chromium-10.0.648.127 as vulnerable.

7d089acb8c

2011-03-14 17:46Martin Wilke (miwi) · 1.1_1

- Cleanup a bit

ff2ed82f06

2011-03-14 17:25Martin Wilke (miwi) · 1.1_1

- Add correct infos to the avahi issus - Add url to original advisory

e727e91d3e

2011-03-14 17:14Koop Mast (kwm) · 1.1_1

Fix date in avahi entry.

8ee91da8f9

2011-03-14 17:04Koop Mast (kwm) · 1.1_1

Add avahi denial of services attack.

0b8f12f57d

2011-03-10 16:01Wesley Shields (wxs) · 1.1_1

Fix discovery for mailman XSS vulnerabilities.

Noticed by:	erwin@
Pointyhat to:	wxs@

e628ae9238

2011-03-10 15:31Wesley Shields (wxs) · 1.1_1

Document mail/mailman XSS vulnerabilities.

492f10713d

2011-03-07 22:31Bernhard Froehlich (decke) · 1.1_1

- Document redmine -- XSS vulnerability

44b888f7e1

2011-03-05 13:21Lev A. Serebryakov (lev) · 1.1_1

Document subversion -- remote HTTP DoS vulnerability Obtained from http://subversion.apache.org/security/CVE-2011-0715-advisory.txt

194cba2143

2011-03-02 00:05Beat Gaetzi (beat) · 1.1_1

- Document mozilla -- multiple vulnerabilities

d1fa4f9888

2011-03-01 19:15Rene Ladan (rene) · 1.1_1

Document Chromium versions 9.0.597.[84,94,107]

Obtained from:	http://googlechromereleases.blogspot.com/search/label/Stable%20updates

d2bd854287

2011-02-25 19:39Xin LI (delphij) · 1.1_1

Add two OpenLDAP security by-pass vulnerabilities.

c0da877e99

2011-02-25 15:01Matthias Andree (mandree) · 1.1_1

Fix broken linux-sun-jdk vulndb entries.

VuXML:		18e5428f-ae7c-11d9-837d-000e0c2e438a
VuXML:		c93e4d41-75c5-11dc-b903-0016179b2dd5
PR:		ports/154918

81da014c29

2011-02-23 15:43Martin Wilke (miwi) · 1.1_1

- Cleanup previous entry

aaf8e0c47c

2011-02-22 22:30Florian Smeets (flo) · 1.1_1

- add asterisk -- Exploitable Stack and Heap Array Overflows

8b5a0e6344

2011-02-20 06:04Xin LI (delphij) · 1.1_1

Document PivotX administrator password reset vulnerability.

4443818f1f

2011-02-15 09:18Martin Wilke (miwi) · 1.1_1

- Update lastest tomcat entry (tomcat6/7 have the same problem)

Note: Please ask for review at ports-security@  THX!

9fb10a5d3e

2011-02-15 09:00Wen Heping (wen) · 1.1_1

- Document tomcat vulnerability

b6bcb75050

2011-02-11 23:23Xin LI (delphij) · 1.1_1

Document two phpMyAdmin vulnerabilities.

57763c8ea6

2011-02-11 22:39Juergen Lock (nox) · 1.1_1

Update to 10.2r152.

PR:		ports/154630
Submitted by:	Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>
Security:	http://www.freebsd.org/ports/portaudit/4a3482da-3624-11e0-b995-001b2134ef46.html
Feature safe:	yes

4edd8ea987

2011-02-11 20:59Xin LI (delphij) · 1.1_1

Document mupdf PDF handling remote code execution vulnerability.

Submitted by:	Tim Zingelman <tez netbsd.org>

802d02a1b7

2011-02-11 20:51Xin LI (delphij) · 1.1_1

Document rubygem-mail Remote Arbitrary Shell Command Injection Vulnerability.

Submitted by:	Tim Zingelman <tez netbsd.org>

7adbdc82a2

2011-02-11 20:48Xin LI (delphij) · 1.1_1

Document plone remote security bypass vulnerability.

Submitted by:	Tim Zingelman <tez netbsd.org>

7fb7de0219

2011-02-11 20:40Xin LI (delphij) · 1.1_1

Document exim local privilege escalasion vulnerability.

Submitted by:	Tim Zingelman <tez netbsd.org>

daf58256ad

2011-02-11 20:36Xin LI (delphij) · 1.1_1

Document OpenOffice multiple vulnerabilities.

Submitted by:	Tim Zingelman <tez netbsd.org>

5664bbedc9

2011-02-10 17:44Martin Wilke (miwi) · 1.1_1

- Cleanup previous commit

4f067e03ce

2011-02-10 11:41Koop Mast (kwm) · 1.1_1

Document multiple webkit-gtk2 security vulnabilities, fixed in 1.2.7.

f089b1925b

2011-02-10 01:44Xin LI (delphij) · 1.1_1

Document awstat multiple vulnerability.

Notified by:    Tim Zingelman <tez netbsd.org>

1683ca14df

2011-02-10 01:28Xin LI (delphij) · 1.1_1

Document Opera multiple vulnerabilities.

Notified by:	Tim Zingelman <tez netbsd.org>

8df64b351b

2011-02-09 22:37Xin LI (delphij) · 1.1_1

Document multiple vulnerabilities in Django.

Notified by:	Jesco Freund <jesco.freund my-universe.com>

6054a2050b

2011-02-09 06:36Martin Wilke (miwi) · 1.1_1

- S/seriuos/serious

1f309f19b4

2011-02-09 06:23Martin Wilke (miwi) · 1.1_1

- Document mediawiki - multiple vulnerabilites

1b8421c704

2011-02-09 05:53Martin Wilke (miwi) · 1.1_1

- Add chinese/wordpress-zh_CN and  chinese/wordpress-zh_TW to the previous wordpress entry

9295de19b6

2011-02-05 05:37Martin Wilke (miwi) · 1.1_1

- While here drop MD5 Support

Feature safe:	yes

b7e4515267

2011-02-05 05:36Martin Wilke (miwi) · 1.1_1

- Add entry for wordpress - SQL injection vulnerability

PR:		153526
Submitted by:	Mark Foster <mark@foster.cc>
Feature safe:	yes

3fdaa0b9fa

sysutils/nomad 3 unaddressed · 8.8	Oct 29
lang/python27 3 unaddressed · 6.3	Oct 29
lang/python311 +5 related 13 unaddressed · 9.4	Oct 29
lang/python315 6 unaddressed · 9.4	Oct 29
security/botan3 5 CVEs · 9.2 fixed 3.13.0	Oct 29
devel/libwasmtime 17 unaddressed · 9.9	Oct 29
graphics/ImageMagick6 2 unaddressed · 6.3 VuXML	Oct 29
graphics/ImageMagick7 83 CVEs · 7.2 fixed 7.1.2.34 VuXML	Oct 29
textproc/py-markdown 1 unaddressed · 8.7	Oct 29
www/openemr 11 unaddressed · 9.4	Oct 29
www/dolibarr 17 unaddressed · 8.8	Oct 28
www/dolibarr19 +1 related 18 unaddressed · 8.8	Oct 28
www/dolibarr21 +1 related 19 unaddressed · 8.8	Oct 28
net/samba425 1 CVE · 8.1 fixed 4.25.1	Oct 28
mail/p5-MIME-Tools 10 CVEs · – fixed 5.519 VuXML	Oct 28

CVE-2026-119168 8.8 sysutils/nomad	Oct 29
CVE-2026-107347 8.4 sysutils/nomad	Oct 29
CVE-2026-102260 4.3 sysutils/nomad	Oct 29
CVE-2026-116566 5.3 lang/python27 +7 more	Oct 29
CVE-2026-118769 fixed 9.2 security/botan3	Oct 29
CVE-2026-118768 fixed 5.9 security/botan3	Oct 29
CVE-2026-118767 fixed 4.8 security/botan3	Oct 29
CVE-2026-118766 fixed 6.1 security/botan3	Oct 29
CVE-2026-118765 fixed 7.3 security/botan3	Oct 29
CVE-2026-119143 5.9 devel/libwasmtime	Oct 29
CVE-2026-119142 5.9 devel/libwasmtime	Oct 29
CVE-2026-119141 6.9 devel/libwasmtime	Oct 29
CVE-2026-119140 5.9 devel/libwasmtime	Oct 29
CVE-2026-119139 5.9 devel/libwasmtime	Oct 29
CVE-2026-119138 5.9 devel/libwasmtime	Oct 29

git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27
ImageMagick6	Oct 26