Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-29 to 1.1_6 · 898db4939a
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined — that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,355)

2008-12-30 10:29Martin Wilke (miwi) · 1.1_1

- Document mplayer -- twinvq processing buffer overflow vulnerability

Reported by:	Thomas Zander <riggs@rrr.de> (mplayer maintainer)

6a99051daf

2008-12-26 10:22Philippe Audeoud (jadawin) · 1.1_1

- ampache -- insecure temporary file usage

dfc1c6e15b

2008-12-25 17:41Martin Wilke (miwi) · 1.1_1

- Small cleanup for the last cups-base entry   * CVE-2008-5184 was fixed in 1.3.8.   * CVE-2008-1722 does not related to anything in this entry;   * PNG buffer overflow is really CVE-2008-5286.

Reported by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>
No Cookies for: miwi

211f2c38f8

2008-12-19 22:07Martin Wilke (miwi) · 1.1_1

- Document opera -- multiple vulnerabilities

c6066a2ee6

2008-12-19 21:59Martin Wilke (miwi) · 1.1_1

- Document mediawiki -- multiple vulnerabilities

9027a5b6e8

2008-12-19 21:36Martin Wilke (miwi) · 1.1_1

- Fix make validate

9581e681f0

2008-12-19 21:29Martin Wilke (miwi) · 1.1_1

- document drupal -- Multiple vulnerabilities

be03f0c48e

2008-12-19 21:01Martin Wilke (miwi) · 1.1_1

- Document mozilla -- multiple vulnerabilities

4e1254924f

2008-12-11 20:39Martin Wilke (miwi) · 1.1_1

- Fix a small typo

6b609129fc

2008-12-11 20:37Martin Wilke (miwi) · 1.1_1

- Document phpmyadmin -- cross-site request forgery vulnerability

7ea4bc00a7

2008-12-08 15:15Thomas Abthorpe (tabthorpe) · 1.1_1

- Document php5 -- potential magic_quotes_gpc vulnerability

Reviewed by:	miwi

886ef222c2

2008-12-07 20:13Martin Wilke (miwi) · 1.1_1

- Fix a typo

Reported by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

7ae5ddd50e

2008-12-07 19:11Martin Wilke (miwi) · 1.1_1

- Document wireshark --  SMTP Processing Denial of Service Vulnerability

167bc49559

2008-12-07 13:13Martin Wilke (miwi) · 1.1_1

- Document php -- multiple vulnerabilities

e9d6eff634

2008-12-07 12:41Martin Wilke (miwi) · 1.1_1

- Document mgetty+sendfax -- symlink attack via insecure temporary files

PR:		based on 129471
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

e01f75dd7d

2008-12-07 12:32Martin Wilke (miwi) · 1.1_1

- Document dovecot-managesieve -- Script Name Directory Traversal Vulnerability

PR:		based on 129303
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

0d89877671

2008-12-07 12:20Martin Wilke (miwi) · 1.1_1

Document habari -- Cross-Site Scripting Vulnerability

PR:		129475
Submitted by:	Ayumi M <ayu@dahlia.commun.jp>

3e9cd5b4d5

2008-12-07 10:09Martin Wilke (miwi) · 1.1_1

- Add 32545 to the latest vlc entry.

146eb4c81b

2008-12-07 00:47Martin Wilke (miwi) · 1.1_1

- Document vlc -- arbitrary code execution in the RealMedia processor

89008f1e7d

2008-12-07 00:18Martin Wilke (miwi) · 1.1_1

- S/secunia/Secunia

d01626c5c2

2008-12-06 23:00Martin Wilke (miwi) · 1.1_1

- Document mantis - PHP Code Execution Vulnerability

PR:		based on 129438
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

cf6e091a74

2008-12-06 22:55Martin Wilke (miwi) · 1.1_1

Document mantis -- multiple vulnerabilities

PR:		based on 129438

a06b63d720

2008-12-04 21:10Martin Wilke (miwi) · 1.1_1

- Fix previous entry

eb1f04011d

2008-12-04 20:37Thomas Abthorpe (tabthorpe) · 1.1_1

- Document squirrelmail -- Cross site scripting vulnerability

e7f45de9af

2008-11-29 17:24Martin Wilke (miwi) · 1.1_1

- Fix discovery from previous entry

7296ff0c79

2008-11-29 17:16Martin Wilke (miwi) · 1.1_1

- Document openoffice -- arbitrary code execution vulnerabilities

PR:		based on 129192
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

21f546011e

2008-11-29 16:15Martin Wilke (miwi) · 1.1_1

- Document wordpress -- Header RSS Feed Script Insertion Vulnerability

d0a46d18ec

2008-11-29 15:31Martin Wilke (miwi) · 1.1_1

- Document samba -- potential leakage of arbitrary memory contents - Fix my previous entry

1c54bc3bc1

2008-11-29 14:48Martin Wilke (miwi) · 1.1_1

- Document hplip -- hpssd Denial of Service

PR:		based on 129097
Submitted by:	Eygene Ryabinkin

8c548377ad

2008-11-29 14:04Martin Wilke (miwi) · 1.1_1

- Document cups -- multiple vulnerabilities

be1edfb785

2008-11-24 18:47Stanislav Sedov (stas) · 1.1_1

- Document a buffer overflow vulnerability in imlib2.

PR:		ports/129037
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

79d7cbd775

2008-11-23 17:04Martin Wilke (miwi) · 1.1_1

- Fix latest mozilla entry

Note:
	mail/thunderbird and mail/linux-thunderbird versions are wrong.
	All problems are fixed in 2.0.0.18 and not in 2.0.0.17.

Pointy hat to:	tabthorpe

5ac5f7cf8b

2008-11-23 09:38Martin Wilke (miwi) · 1.1_1

- Document streamripper -- multiple buffer overflows

PR:		based on 128999

ed6a0fdedb

2008-11-22 23:01Martin Wilke (miwi) · 1.1_1

- Dokument -- Mantis: Session hijacking vulnerability

e1baec3e5a

2008-11-22 22:46Martin Wilke (miwi) · 1.1_1

- Cleanup - Fix a lot whitespaces

547c1dffa6

2008-11-19 23:37Xin LI (delphij) · 1.1_1

Document two ACL bypassing vulnerabilities of dovecot.

Submitted by:	Eygene Ryabinkin <rea-fbsd codelabs.ru> (with changes)
PR:		ports/129000

301edfdf6c

2008-11-19 22:07Thomas Abthorpe (tabthorpe) · 1.1_1

- Document libxml2 -- multiple vulnerabilities

592e12bfdd

2008-11-19 16:24Thomas Abthorpe (tabthorpe) · 1.1_1

- Document openfire -- multiple vulnerabilities

6a1535676c

2008-11-19 00:07Wesley Shields (wxs) · 1.1_1

Document syslog-ng2 chroot vulnerability.

PR:		ports/128960
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>
Reviewed by:	tabthorpe

f83ede5241

2008-11-18 16:34Rong-En Fan (rafan) · 1.1_1

- Add a missing new line between entries

18fc6a624e

2008-11-18 16:33Rong-En Fan (rafan) · 1.1_1

- Add an entry for print/enscript and its slave ports

PR:		ports/128958
Submitted by:	Eygene Ryabinkin <rea-fbsd at codelabs.ru> (based on)
Reviewed by:	stas@

f3cf253f4f

2008-11-17 20:02Wesley Shields (wxs) · 1.1_1

Add CVE identifier for clamav off-by-one error.

PR:		ports/128924
Submitted by:	Mark Foster <mark@foster.cc>

7d45ea9f2a

2008-11-16 11:01Stanislav Sedov (stas) · 1.1_1

- Fix an indentation in the latest net-snmp entry.

f47931fa24

2008-11-16 10:59Stanislav Sedov (stas) · 1.1_1

- Document the recent chain validation vulnerability in gnutls.

PR:		ports/128868
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru> (based on)

4a689e2dfb

2008-11-15 18:04Martin Wilke (miwi) · 1.1_1

- Fix formating

408ae4ba05

2008-11-14 07:16Jun Kuriyama (kuriyama) · 1.1_1

Add entry for net-snmp (fix will be followed).

PR:		ports128772, ports/128837
Submitted by:	"Mark D. Foster" <mark@foster.cc>,
		Eygene Ryabinkin <rea-fbsd@codelabs.ru>

135e82be29

2008-11-13 21:43Martin Wilke (miwi) · 1.1_1

- Cleanup   * Add some more references to the faad2 entry   * Fix formating for the last emacs and trac entry

f6e1886141

2008-11-13 19:24Thomas Abthorpe (tabthorpe) · 1.1_1

- Document mozilla -- multiple vulnerabilities

Reviewed by:	simon

a8bfb89430

2008-11-12 18:06Thomas Abthorpe (tabthorpe) · 1.1_1

- Document faad2 -- heap overflow vulnerability

ff55b7f331

2008-11-11 23:22Martin Wilke (miwi) · 1.1_1

- Fix multimedia/vlc entry

9bf178e200

www/dolibarr 17 unaddressed · 8.8	Oct 28
www/dolibarr19 +1 related 18 unaddressed · 8.8	Oct 28
www/dolibarr21 +1 related 19 unaddressed · 8.8	Oct 28
net/samba425 1 CVE · 8.1 fixed 4.25.1	Oct 28
devel/libwasmtime 3 unaddressed · 9.9	Oct 28
mail/p5-MIME-Tools 10 CVEs · – fixed 5.519 VuXML	Oct 28
www/grafana 19 unaddressed · 8.8	Oct 28
net/kafka 10 unaddressed · –	Oct 28
security/libressl +1 related 4 unaddressed · 8.2	Oct 28
multimedia/assimp 4 unaddressed · 6.9	Oct 28
devel/jackson-databind 6 CVEs · 9.8 fixed 2.22.4 VuXML	Oct 28
www/chromium 45 unaddressed · 9.6 VuXML	Oct 27
www/linux-chrome 45 unaddressed · 9.6 VuXML	Oct 27
www/rubygem-crass 1 unaddressed · 5.3	Oct 27
lang/python27 2 unaddressed · 6.3	Oct 27

CVE-2026-118754 6.9 www/dolibarr +4 more	Oct 28
CVE-2026-109411 fixed 8.1 net/samba425	Oct 28
CVE-2026-118688 8.8 devel/libwasmtime	Oct 28
CVE-2026-116273 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116272 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116271 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116270 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116269 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116268 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116267 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116266 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116265 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116264 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-79656 6.0 www/grafana	Oct 28
CVE-2026-88858 6.5 www/grafana	Oct 28

git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27
ImageMagick6	Oct 26