Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-29 to 1.1_6 · 898db4939a
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined — that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,355)

2009-08-04 20:20Wesley Shields (wxs) · 1.1_1

- Add bind9-sdb-ldap and bind9-sdb-postgresql to recent BIND DoS.

Reviewed by:	miwi

43938ae30f

2009-08-04 20:06Wesley Shields (wxs) · 1.1_1

- Document silc-client and silc-irssi-plugin format string vulnerability.

Reviewed by:	miwi

7ef95f2d74

2009-08-02 16:11Thierry Thomas (thierry) · 1.1_1

Mark mail/squirrelmail-multilogin-plugin as FORBIDDEN and add the corresponding entry in VuXML.

Security:	VuXML: 0d0237d0-7f68-11de-984d-0011098ad87f

9bd4a28be3

2009-08-01 16:25Wesley Shields (wxs) · 1.1_1

- White space fixes and correct the entry date in   vid 83725c91-7c7e-11de-9672-00e0815b8da8

bad56ae20d

2009-08-01 16:17Wesley Shields (wxs) · 1.1_1

s/package/system/ for vid fbc8413f-2f7a-11de-9a3f-001b77d09812.

Reviewed by:	remko
Approved by:	secteam (remko)

3409d821d2

2009-08-01 16:13Wesley Shields (wxs) · 1.1_1

- Document BIND DoS in base and ports.

Reviewed by:	remko
Approved by:	secteam (remko)

2094b16c21

2009-07-29 18:17Martin Wilke (miwi) · 1.1_1

- Close tag

d947ead030

2009-07-29 18:00Martin Wilke (miwi) · 1.1_1

- Document Mono XML Signature HMAC Truncation Spoofing

e86908df1b

2009-07-27 21:39Xin LI (delphij) · 1.1_1

Document squid remote denial of service vulnerabilities.

Submitted by:	Thomas-Martin Seck <tmseck@web.de>
PR:		ports/137184

72af14bbb5

2009-07-22 02:11Josh Paetzel (jpaetzel) · 1.1_1

Fix security advsory with patches from Ubuntu project. http://vuxml.FreeBSD.org/c444c8b7-7169-11de-9ab7-000c29a67389.html

PR:	ports/136891
Submitted by:	wxs@
Reviewed by:	simon@
Approved by:	itetcu@ (mentor)

63813e06f2

2009-07-17 12:18Martin Wilke (miwi) · 1.1_1

- Fix a typo

f734ecf8f7

2009-07-17 09:58Martin Wilke (miwi) · 1.1_1

- Document firefox35 -- corrupt JIT state after deep return from native function

33a8225a03

2009-07-15 20:34Wesley Shields (wxs) · 1.1_1

- Document isc-dhcp*-client stack overflow.

cbf1427e69

2009-07-14 05:17Wesley Shields (wxs) · 1.1_1

- Tweak nagios version information a bit for the command injection   vulnerability. Patches for net-mgmt/nagios and net-mgmt/nagios2 coming   shortly.

c06a91a738

2009-07-13 21:01Martin Wilke (miwi) · 1.1_1

- Document drupal -- multiple vulnerabilities

Submitted by:	Nick Hilliard (based on)

9df985b5c9

2009-07-12 15:51Beat Gaetzi (beat) · 1.1_1

- Mark linux-firefox 3.0.11 and higher as safe

Approved by:	secteam (miwi)

533fe41217

2009-07-03 03:35Wesley Shields (wxs) · 1.1_1

- Document remote command execution in net-mgmt/nfsen

PR:		ports/136070
Submitted by:	Bjoern Engels <engels@openit.de>

8356984ff1

2009-07-02 22:38Wesley Shields (wxs) · 1.1_1

- Add syslog-ng package to the list of vulnerable versions for the chroot   vulnerability.

fac77905ea

2009-07-01 15:01Wesley Shields (wxs) · 1.1_1

- Add newly created CVE for nagios command injection vulnerability. - Add the other two nagios packages to the list. - Add modified entry accordingly.

a8865f66e7

2009-06-30 21:10Xin LI (delphij) · 1.1_1

Document phpMyAdmin XSS vulnerability

e9af760f31

2009-06-30 16:13Wesley Shields (wxs) · 1.1_1

- Document nagios command injection vulnerability.

3067ed90db

2009-06-24 18:54Wesley Shields (wxs) · 1.1_1

- s/secunia reports/Secnuia reports/ - Fix whitespace

Approved by:	secteam (miwi)

b6b9a5d686

2009-06-23 15:03Wesley Shields (wxs) · 1.1_1

- Document tor-devel DNS resolution issue.

PR:		ports/135925
Submitted by:	bf <bf1783@gmail.com>

e7283ad40f

2009-06-16 22:59Martin Wilke (miwi) · 1.1_1

- Document cscope -- multiple buffer overflows

PR:		135097
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

92126df09b

2009-06-16 22:52Martin Wilke (miwi) · 1.1_1

- Document cscope -- buffer overflow

PR:		based on 135097
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

f68da5472d

2009-06-16 22:45Martin Wilke (miwi) · 1.1_1

- Fix a typo from previous commit

68392d80b3

2009-06-16 22:10Steven Kreuzer (skreuzer) · 1.1_1

Document joomla -- multiple vulnerabilities

Approved by:	wxs (mentor)

39085497d6

2009-06-16 22:04Martin Wilke (miwi) · 1.1_1

- Document pidgin -- multiple vulnerabilities

PR:		135239 (based on)
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

4be3fc9402

2009-06-15 15:57Wesley Shields (wxs) · 1.1_1

- Document git-daemon DoS.

c3bcf48e3c

2009-06-13 00:46Stanislav Sedov (stas) · 1.1_1

- Fix the latest ruby entry: 1.9 branch is not vulnerable.

8b9c58bfeb

2009-06-13 00:07Stanislav Sedov (stas) · 1.1_1

- Document ruby denial of sevice vulnerability in BigDecimal.

e1015ae668

2009-06-12 17:40Beat Gaetzi (beat) · 1.1_1

- Fix firefox3 version in da185955-5738-11de-b857-000f20797ede

Approved by:	miwi (secteam)

eddbffdde0

2009-06-12 16:55Beat Gaetzi (beat) · 1.1_1

- Document mozilla  -- multiple vulnerabilities

Approved by:	miwi (secteam)

2f56593a56

2009-06-08 08:19Martin Wilke (miwi) · 1.1_1

- Add some more cve to the previous entry

3f3a90192e

2009-06-08 08:17Martin Wilke (miwi) · 1.1_1

- Fix previous entry

0dfef0dc96

2009-06-08 04:21Philip M. Gollucci (pgollucci) · 1.1_1

Document DOS in apr-util xml(expat) processing

Submitted by:       Eygene Ryabinkin <rea-fbsd@codelabs.ru>

f2cbf700f5

2009-06-04 23:52Xin LI (delphij) · 1.1_1

Document dokuwiki local File Inclusion with register_globals on vulnerability.

ae85238100

2009-05-30 22:53Martin Wilke (miwi) · 1.1_1

- Document openssl -- denial of service in DTLS implementation

PR:		based on 134653
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

d96e81e99d

2009-05-30 22:39Martin Wilke (miwi) · 1.1_1

- Document eggdrop -- denial of service vulnerability

a44c7621be

2009-05-30 22:07Martin Wilke (miwi) · 1.1_1

- Document wireshark -- Denial of Service in the PCNFSD dissector

PR:		135061 (based on)
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

814f13077d

2009-05-30 21:23Martin Wilke (miwi) · 1.1_1

- Add more infos for libsndfile entry

5c8cac806f

2009-05-30 21:16Martin Wilke (miwi) · 1.1_1

- Document libsndfile -- multiple vulnerabilities

41dc7a6077

2009-05-30 21:07Martin Wilke (miwi) · 1.1_1

- Document slim -- local disclosure of X authority magic cookie

308ba07507

2009-05-23 12:50Martin Wilke (miwi) · 1.1_1

- Cleanup previous entry

f329d18870

2009-05-23 11:15Simon L. B. Nielsen (simon) · 1.1_1

Unbreak file by removing double <vuxml> tag.

5e1557a319

2009-05-23 06:37Cy Schubert (cy) · 1.1_1

Add CVE information for NTP stack overflow.

PR:		134755
Submitted by:	Mark Foster <mark@foster.cc>
Security:	CVE-2009-0159 and CVE-2009-1252

bd920c0ac1

2009-05-22 18:34Martin Wilke (miwi) · 1.1_1

- Fix 5ed2f96b-33b7-4863-8c6b-540d22344424    * Remove duplicte url    * Fix safe version    * Bump modified date

c2608ac5f0

2009-05-22 18:08Martin Wilke (miwi) · 1.1_1

- Bump modified date for previous commit.

f467ce55e3

2009-05-22 15:15Wesley Shields (wxs) · 1.1_1

- Add CVE information for nsd overflow. - s/over flow/overflow/ for the same entry.

Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru> (private mail)

5e68f8ae80

2009-05-21 17:30Pav Lucistnik (pav) · 1.1_1

- Document imap-uw -- University of Washington IMAP c-client Remote Format   String Vulnerability (submitted back in Feb 2009)

PR:		ports/131939
Submitted by:	Mark Foster <mark@foster.cc>

9899774e29

www/dolibarr 17 unaddressed · 8.8	Oct 28
www/dolibarr19 +1 related 18 unaddressed · 8.8	Oct 28
www/dolibarr21 +1 related 19 unaddressed · 8.8	Oct 28
net/samba425 1 CVE · 8.1 fixed 4.25.1	Oct 28
devel/libwasmtime 3 unaddressed · 9.9	Oct 28
mail/p5-MIME-Tools 10 CVEs · – fixed 5.519 VuXML	Oct 28
www/grafana 19 unaddressed · 8.8	Oct 28
net/kafka 10 unaddressed · –	Oct 28
security/libressl +1 related 4 unaddressed · 8.2	Oct 28
multimedia/assimp 4 unaddressed · 6.9	Oct 28
devel/jackson-databind 6 CVEs · 9.8 fixed 2.22.4 VuXML	Oct 28
www/chromium 45 unaddressed · 9.6 VuXML	Oct 27
www/linux-chrome 45 unaddressed · 9.6 VuXML	Oct 27
www/rubygem-crass 1 unaddressed · 5.3	Oct 27
lang/python27 2 unaddressed · 6.3	Oct 27

CVE-2026-118754 6.9 www/dolibarr +4 more	Oct 28
CVE-2026-109411 fixed 8.1 net/samba425	Oct 28
CVE-2026-118688 8.8 devel/libwasmtime	Oct 28
CVE-2026-116273 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116272 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116271 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116270 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116269 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116268 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116267 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116266 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116265 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116264 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-79656 6.0 www/grafana	Oct 28
CVE-2026-88858 6.5 www/grafana	Oct 28

git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27
ImageMagick6	Oct 26