Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-29 to 1.1_6 · 898db4939a
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined — that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,355)

2009-02-04 14:53Martin Wilke (miwi) · 1.1_1

- Cleanup

90ab7d09a8

2009-02-04 14:47Martin Wilke (miwi) · 1.1_1

- Document drupal -- multible vulnerabilities

788051a5bf

2009-02-04 07:47Alex Dupre (ale) · 1.1_1

Update php5-gd entry.

5b3afb6eb8

2009-02-03 22:42Martin Wilke (miwi) · 1.1_1

- Document perl -- Directory Permissions Race Condition

PR:		based on 129317

bb7ac554a0

2009-01-30 10:55Martin Wilke (miwi) · 1.1_1

- Rework ganglia entry   * Fix topic   * Fix discovery and entry day

ec37c276d9

2009-01-30 10:13Martin Wilke (miwi) · 1.1_1

- Set modified for b9077cc4-6d04-4bcb-a37a-9ceaebfdcc9e entry - more cleanup

eb52091dd6

2009-01-30 09:59Martin Wilke (miwi) · 1.1_1

- Document moinmoin -- multiple cross site scripting vulnerabilities

7ec1c9e83f

2009-01-30 09:51Martin Wilke (miwi) · 1.1_1

- Cleanup previous entry 	* remove whitespaces 	* sort bid/cvename/url

c294be32da

2009-01-30 04:56Brooks Davis (brooks) · 1.1_1

Upgrade Ganglia to 3.1.1 plus a fix for CVE-2009-0241.

PR:		ports/129822, ports/131067
Submitted by:	Mark Foster <mark at foster dot cc> (vuxml)
Security:	vid:b9077cc4-6d04-4bcb-a37a-9ceaebfdcc9e

47e24183d5

2009-01-29 23:49Martin Wilke (miwi) · 1.1_1

- Document Tor -- Unspecified Memory Corruption Vulnerability

dbf6acc620

2009-01-28 14:11Martin Wilke (miwi) · 1.1_1

- Cleanup 	* Fix whitespaces/ Tabs 	* Sort <bid>/<cvename>/<url>

b532357cb1

2009-01-28 14:05Martin Wilke (miwi) · 1.1_1

- Rewording 2ffb1b0d-ecf5-11dd-abae-00219b0fc4d (glpi -- SQL Injection) - Add more reference sites

b8b9fc65a6

2009-01-28 06:07Philip M. Gollucci (pgollucci) · 1.1_1

Document glpi -- SQL Injection vulnerabilty

PR:             ports/131011
Submitted by:   Mathias Monnerville <mathias@monnerville.com>

92069b4fb5

2009-01-25 01:56Thomas Abthorpe (tabthorpe) · 1.1_1

- Document openfire -- multiple vulnerabilities

PR:		ports/130606
Submitted by:	Mark Foster <mark foster.cc>

d6723ec5fc

2009-01-24 03:31Xin LI (delphij) · 1.1_1

Update information about 9fff8dc8-7aa7-11da-bf72-00123f589060 and 651996e0-fe07-11d9-8329-000e0c2e438a, newer versions of apache+ipv6 has the problems fixed.

Submitted by:	sumikawa

7a2e3cd4d8

2009-01-21 20:44Wesley Shields (wxs) · 1.1_1

- Document two old ipsec-tools DoS

PR:		ports/129468
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

f27c4d117f

2009-01-20 16:20Wesley Shields (wxs) · 1.1_1

- Document directory traversal bug in teamspeak server

PR:		ports/130608
Submitted by:	Mark Foster <mark@foster.cc>

0c4df6fc1f

2009-01-19 21:21Wesley Shields (wxs) · 1.1_1

- Document graphics/optipng buffer overflow

PR:		ports/129072
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

dba6f35472

2009-01-19 21:04Wesley Shields (wxs) · 1.1_1

- Document old gitweb privilege escalation vulnerability.

PR:		ports/130600
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

ebe2a809df

2009-01-16 17:11Christian Weisgerber (naddy) · 1.1_1

Document vulnerability in older versions of GNU tar.

PR:		130602
Submitted by:	Mark Foster <mark@foster.cc>

637b6be877

2009-01-16 01:02Martin Wilke (miwi) · 1.1_1

- Mark net-mgmt/nagios2 as secure

74192b0e82

2009-01-16 00:00Martin Wilke (miwi) · 1.1_1

- Document mplayer -- vulnerability in STR files processor

PR:		based on 130573

fb1db58464

2009-01-13 13:22Martin Wilke (miwi) · 1.1_1

- Cleanup previous entry - Add more references

5616bcd898

2009-01-13 04:30Wesley Shields (wxs) · 1.1_1

- Add missing blockquote and linewrap properly

3c02ff951e

2009-01-13 04:19Wesley Shields (wxs) · 1.1_1

- Document cgiwrap XSS vulnerability

PR:		ports/130277
Submitted by:	Eric W. Bates <ericx@vineyard.net>

914d59516e

2009-01-12 13:27Martin Wilke (miwi) · 1.1_1

- Document nagios -- web interface privilege escalation vulnerability

cbfb20634d

2009-01-11 20:58Martin Wilke (miwi) · 1.1_1

- Document pdfjam -- insecure temporary files

PR:		based on 130028

ea09970eab

2009-01-11 20:35Martin Wilke (miwi) · 1.1_1

- Document verlihub -- insecure temporary file usage and arbitrary command execution

633df53255

2009-01-11 19:16Martin Wilke (miwi) · 1.1_1

- Document mysql -- empty bit-string literal denial of service

PR:		based on 129978
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

c945a46b23

2009-01-11 16:38Martin Wilke (miwi) · 1.1_1

- Fix discovery date

e6b03a8177

2009-01-11 16:27Martin Wilke (miwi) · 1.1_1

- Document mysql multiple vulnerabilities:

* mysql -- renaming of arbitrary tables by authenticated users
	* mysql -- remote Denial of Service via malformed password packet
	* mysql -- privilege escalation and overwrite of the system table information

PR:		based on 130025
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

280550654c

2009-01-11 15:49Martin Wilke (miwi) · 1.1_1

- Document imap-uw -- imap c-client buffer overflow

PR:		130013
Submitted by:	Mark Foster <mark@foster.cc>
Approved by:	maintainer timeout

567b1cca0d

2009-01-11 15:32Martin Wilke (miwi) · 1.1_1

- Fix a small typo

ebb3f3cc97

2009-01-11 15:29Martin Wilke (miwi) · 1.1_1

- Document imap-uw -- local buffer overflow vulnerabilities

PR:		128923
Submitted by:	Mark Foster <mark@foster.cc>
Approved by:	maintainer timeout

74e66cffb3

2009-01-11 14:15Martin Wilke (miwi) · 1.1_1

- Document libcdaudio -- remote buffer overflow and code execution

ca61f4353a

2009-01-06 05:31Thomas Abthorpe (tabthorpe) · 1.1_1

- Mark xterm 238 safe

47b4570f87

2009-01-05 11:09Remko Lodder (remko) · 1.1_1

Import latest FreeBSD-SA's so that we are up to date again.

4e34f82619

2009-01-05 10:40Stanislav Sedov (stas) · 1.1_1

- Document xterm vulnerability.

dc769dae8d

2009-01-05 10:06Stanislav Sedov (stas) · 1.1_1

- Document PHP gd library vulnerability.

d965e28c53

2009-01-04 10:13Martin Wilke (miwi) · 1.1_1

- Update awstats entry (also affect www/awstats-devel)

69689f20c0

2009-01-04 09:01Chin-San Huang (chinsan) · 1.1_1

- Fix the affected version of awstats

bd27d11ffa

2009-01-04 07:21Chin-San Huang (chinsan) · 1.1_1

- Document awstats -- multiple XSS vulnerabilities

PR:		ports/129957
Submitted by:	Eygene Ryabinkin <rea-fbsd _at\ codelabs.ru>
Approved by:	Alex Samorukov (maintainer)
Security:	http://secunia.com/advisories/31519

915242e775

2009-01-03 13:35Martin Wilke (miwi) · 1.1_1

- Cleanup (fix whitespaces, typos)

fb60b744cf

2009-01-03 13:06Chin-San Huang (chinsan) · 1.1_1

- Completely fix CVE-2005-0448

PR:		ports/129301
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

3d89865a95

2009-01-02 10:56Erwin Lansing (erwin) · 1.1_1

Bump copyright year.

5992cfefd4

2009-01-02 05:44Thomas Abthorpe (tabthorpe) · 1.1_1

- Document vim -- multiple vulnerabilities in the netrw module

PR:		ports/129137
Submitted by:	Eygene Ryabinkin <rea-fbsd codelabs.ru>

4a47213bfb

2008-12-31 22:23Jeremy Messenger (mezz) · 1.1_1

Add vinagre -- format string vulnerability entry.

PR:		ports/129959
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

f09fefbfe7

2008-12-30 20:16Greg Larkin (glarkin) · 1.1_1

Document twiki - multiple vulnerabilities

6691f735ab

2008-12-30 18:09Alex Dupre (ale) · 1.1_1

Add entry for roundcube.

Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

ddfc4e0b77

2008-12-30 12:12Martin Wilke (miwi) · 1.1_1

- Document mysql -- MyISAM table privileges security bypass vulnerability for symlinked paths

9583e35bdb

www/dolibarr 17 unaddressed · 8.8	Oct 28
www/dolibarr19 +1 related 18 unaddressed · 8.8	Oct 28
www/dolibarr21 +1 related 19 unaddressed · 8.8	Oct 28
net/samba425 1 CVE · 8.1 fixed 4.25.1	Oct 28
devel/libwasmtime 3 unaddressed · 9.9	Oct 28
mail/p5-MIME-Tools 10 CVEs · – fixed 5.519 VuXML	Oct 28
www/grafana 19 unaddressed · 8.8	Oct 28
net/kafka 10 unaddressed · –	Oct 28
security/libressl +1 related 4 unaddressed · 8.2	Oct 28
multimedia/assimp 4 unaddressed · 6.9	Oct 28
devel/jackson-databind 6 CVEs · 9.8 fixed 2.22.4 VuXML	Oct 28
www/chromium 45 unaddressed · 9.6 VuXML	Oct 27
www/linux-chrome 45 unaddressed · 9.6 VuXML	Oct 27
www/rubygem-crass 1 unaddressed · 5.3	Oct 27
lang/python27 2 unaddressed · 6.3	Oct 27

CVE-2026-118754 6.9 www/dolibarr +4 more	Oct 28
CVE-2026-109411 fixed 8.1 net/samba425	Oct 28
CVE-2026-118688 8.8 devel/libwasmtime	Oct 28
CVE-2026-116273 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116272 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116271 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116270 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116269 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116268 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116267 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116266 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116265 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116264 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-79656 6.0 www/grafana	Oct 28
CVE-2026-88858 6.5 www/grafana	Oct 28

git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27
ImageMagick6	Oct 26