Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-29 to 1.1_6 · 898db4939a
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined — that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,355)

2009-05-19 19:20Wesley Shields (wxs) · 1.1_1

- Document dns/nsd and dns/nsd2 one-byte overflow (both are already fixed   in ports). Still need a CVE entry but there is not one assigned yet.

220669d25e

2009-05-17 17:05MANTANI Nobutaka (nobutaka) · 1.1_1

Add entries of libxine vulnerabilities fixed in version 1.1.16.2 and 1.1.16.3.

PR:		ports/132593
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

d493a6f1ed

2009-05-16 22:36Martin Wilke (miwi) · 1.1_1

- Document php -- ini database truncation inside dba_replace() function

PR:		129459 (based on)
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

097bafc1e7

2009-05-16 22:09Martin Wilke (miwi) · 1.1_1

- Document libwmf -- embedded GD library Use-After-Free vulnerability

PR:		based on 134246

01f42e27a8

2009-05-16 21:59Martin Wilke (miwi) · 1.1_1

- Document libwmf -- Integer Overflow Vulnerability

PR:		based on 134246

f6dd9cbc9b

2009-05-16 15:01Martin Wilke (miwi) · 1.1_1

- Document moinmoin -- cross-site scripting vulnerabilities

acebb5d2e2

2009-05-16 14:51Martin Wilke (miwi) · 1.1_1

- Rework previus entry

c4be440ddc

2009-05-16 03:32Philip M. Gollucci (pgollucci) · 1.1_1

- Document mod_perl -- cross site scripting in Apache::Status

0106bcc5ac

2009-05-16 02:44Martin Wilke (miwi) · 1.1_1

- Small cleanup   * fix spelling   * fix tabs/whitespaces   * add more references to the latest drual entry

3a14205924

2009-05-16 02:36Martin Wilke (miwi) · 1.1_1

- Fix formating

287ce42454

2009-05-16 00:26Xin LI (delphij) · 1.1_1

Document drupal -- cross-site scripting vulnerability.

Submitted by:	Nick Hilliard <nick foobar org>

5143530f2e

2009-05-15 03:49Hajimu UMEMOTO (ume) · 1.1_1

- Document cyrus-sasl -- buffer overflow vulnerability

956298969f

2009-05-13 12:07Martin Wilke (miwi) · 1.1_1

- Document moinmoin -- multiple cross site scripting vulnerabilities

PR:		based on 134467

897d75214d

2009-05-13 10:23Martin Wilke (miwi) · 1.1_1

- Document ghostscript8 -- Buffer Overflow Vulnerability

PR:		133331 (baesed on)

e75704a207

2009-05-13 10:10Martin Wilke (miwi) · 1.1_1

- Cleanup

d541eba306

2009-05-13 09:55Martin Wilke (miwi) · 1.1_1

- Added a referece to the latest pango entry (4b172278-3f46-11de-becb-001cc0377035)

05b732f972

2009-05-13 01:03Stanislav Sedov (stas) · 1.1_1

- Document pango buffer overflow vulnerability.

43dad81daf

2009-05-09 22:13Joe Marcus Clarke (marcus) · 1.1_1

Document the recent Wireshark vulnerabilities.

PR:		134245
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

d6aede112e

2009-05-07 16:46Wesley Shields (wxs) · 1.1_1

- Add CVE entry for quagga vulnerability.

Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru> (private mail)

6abbdfb25a

2009-05-07 09:57Dirk Meyer (dinoex) · 1.1_1

- add CUPS 1.3.10 PR:		134247

c7e8ef1b8f

2009-05-07 09:40Dirk Meyer (dinoex) · 1.1_1

- add SA-09:08.openssl PR:		133156

195cfe2cb4

2009-05-06 15:14Wesley Shields (wxs) · 1.1_1

- Document quagga DoS.

PR:		ports/134248
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>
Reviewed by:	miwi

6485e1234b

2009-05-05 10:04Beat Gaetzi (beat) · 1.1_1

- Mark flock 2.0 as safe

Approved by:	miwi (mentor)

f908f84af0

2009-05-04 22:10Martin Wilke (miwi) · 1.1_1

- Cleanup previous entry

c73baf7623

2009-05-04 16:35Pietro Cerutti (gahr) · 1.1_1

- Document openfire -- Password Changes Security Bypass

PR:		134207
Submitted by:	Mark Foster <mark@foster.cc>

b5881d60fd

2009-04-30 22:09Martin Wilke (miwi) · 1.1_1

- Document drupal -- cross site scripting

360b8bc44a

2009-04-28 23:32Stanislav Sedov (stas) · 1.1_1

- CVE-2007-3387 has been fixed in pdftohtml 0.39_3.

17f85a7bb1

2009-04-22 10:38Martin Wilke (miwi) · 1.1_1

- Document mozilla  -- multiple vulnerabilities

a7a0db324f

2009-04-18 20:26Joe Marcus Clarke (marcus) · 1.1_1

Document the recent poppler vulnerabilities fixed in 0.10.6.

PR:		133838
Submitted by:	Mark Foster <mark@foster.cc>
Approved by:	portmgr (implicit)

64d1edd4b4

2009-04-18 19:55Martin Wilke (miwi) · 1.1_1

- Rework previus entry (xpdf -- multiple vulnerabilities) 	* fix typos 	* added more information about security issues 	* added more reference sites

Approved by:	portmgr (secteam blanked)

66c77fe3d6

2009-04-18 19:20Marcelo Araujo (araujo) · 1.1_1

- Document xpdf -- multiple vulnerabilities

Approved by:	portmgr (erwin)

8a731c69a4

2009-04-18 11:41Martin Wilke (miwi) · 1.1_1

- Document freetype2 -- multiple vulnerabilities

Approved by:	portmgr (secteam blanked)

00b3381597

2009-04-17 18:51Wesley Shields (wxs) · 1.1_1

- Document ejabberd cross-site scripting vulnerability.

PR:		ports/132800
Submitted by:	Mark Foster <mark@foster.cc>
Reviewed by:	miwi
Approved by:	portmgr (secteam blanket, explicitly miwi)

3c69234054

2009-04-15 15:34Martin Wilke (miwi) · 1.1_1

- Document ziproxy -- Multiple HTTP Proxy HTTP Host Header Incorrect Relay Behavior Vulnerability

Approved by:	portmgr (secteam blanked)

9440f6135c

2009-04-15 15:17Martin Wilke (miwi) · 1.1_1

- Document phpmyadmin -- insufficient output sanitizing when generating configuration file

Approved by:	portmgr (secteam blanked)

18b036d438

2009-04-11 14:01Martin Wilke (miwi) · 1.1_1

- Document drupal6-cck -- cross-site scripting

PR:		133550
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

bba5f10f46

2009-03-27 22:49Martin Wilke (miwi) · 1.1_1

- Document pivot-weblog -- file deletion vulnerability

0efe214134

2009-03-26 15:13Mathieu Arnold (mat) · 1.1_1

Fix the roundcube version of CVE-2009-0413, should be 0.2.1,1 and not 0.2.1.

Pointy Hat To:	miwi

e0dcc02b64

2009-03-25 08:41Xin LI (delphij) · 1.1_1

Document phpmyadmin: insufficient output sanitizing when generating configuration file.

647cfb9fef

2009-03-23 16:43Martin Wilke (miwi) · 1.1_1

- Update 8e8b8b94-7f1d-11dd-a66a-0019666436c2 (www/rubygem-rails) now secure - Bump modified day

Reported by:	Mike Duchene

2b6fa4ce53

2009-03-23 16:28Martin Wilke (miwi) · 1.1_1

- Fix daf045d7-b211-11dd-a987-000c29ca8953 - Fix discovery date - Tell portaudit net-snmp is secure

Reported by:	Oliver Brandmueller <ob@e-Gitt.NET> (via private mail)
Reviewed by:	tabthorpe

b2a5391713

2009-03-23 16:08Martin Wilke (miwi) · 1.1_1

- Update zabbix entry is now secure

3c71d4f718

2009-03-23 15:22Martin Wilke (miwi) · 1.1_1

- Fix spelling

e056f1f57e

2009-03-23 15:17Martin Wilke (miwi) · 1.1_1

- Document amarok -- multiple vulnerabilitie

PR:		based on 132938

1989306a17

2009-03-23 15:09Martin Wilke (miwi) · 1.1_1

- Fix portaudit build - Rework latest wireshark entry - Bump modified

8c2ba7ce07

2009-03-22 20:26Martin Wilke (miwi) · 1.1_1

- Cleanup latest Wireshark entry

a487c53796

2009-03-22 20:24Martin Wilke (miwi) · 1.1_1

- Bump modified date for zope entry

6dea4b8457

2009-03-22 19:24Pav Lucistnik (pav) · 1.1_1

- zope-2.7.9_2 secure

dca2909bc8

2009-03-22 18:10Joe Marcus Clarke (marcus) · 1.1_1

Add an entry for Wireshark less than or equal to 1.0.5 pertaining to multiple DoS situations as described at http://www.wireshark.org/security/wnpa-sec-2009-01.html.

PR:		131688
Submitted by:	Mark Foster <mark@foster.cc>

71be066eed

2009-03-20 23:01Martin Wilke (miwi) · 1.1_1

- Mark *seamonkey as safe

f4ddd96771

www/dolibarr 17 unaddressed · 8.8	Oct 28
www/dolibarr19 +1 related 18 unaddressed · 8.8	Oct 28
www/dolibarr21 +1 related 19 unaddressed · 8.8	Oct 28
net/samba425 1 CVE · 8.1 fixed 4.25.1	Oct 28
devel/libwasmtime 3 unaddressed · 9.9	Oct 28
mail/p5-MIME-Tools 10 CVEs · – fixed 5.519 VuXML	Oct 28
www/grafana 19 unaddressed · 8.8	Oct 28
net/kafka 10 unaddressed · –	Oct 28
security/libressl +1 related 4 unaddressed · 8.2	Oct 28
multimedia/assimp 4 unaddressed · 6.9	Oct 28
devel/jackson-databind 6 CVEs · 9.8 fixed 2.22.4 VuXML	Oct 28
www/chromium 45 unaddressed · 9.6 VuXML	Oct 27
www/linux-chrome 45 unaddressed · 9.6 VuXML	Oct 27
www/rubygem-crass 1 unaddressed · 5.3	Oct 27
lang/python27 2 unaddressed · 6.3	Oct 27

CVE-2026-118754 6.9 www/dolibarr +4 more	Oct 28
CVE-2026-109411 fixed 8.1 net/samba425	Oct 28
CVE-2026-118688 8.8 devel/libwasmtime	Oct 28
CVE-2026-116273 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116272 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116271 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116270 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116269 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116268 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116267 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116266 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116265 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116264 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-79656 6.0 www/grafana	Oct 28
CVE-2026-88858 6.5 www/grafana	Oct 28

git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27
ImageMagick6	Oct 26