Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-28 to 1.1_6 · 4fa1ce71cd
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined — that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,350)

2008-11-02 23:47Juergen Lock (nox) · 1.1_1

Document qemu -- Heap overflow in Cirrus emulation

f512263469

2008-11-01 01:21Xin LI (delphij) · 1.1_1

Fix BugTraq ID :(

Pointy hat to:	delphij

e93a8a6c41

2008-11-01 00:58Xin LI (delphij) · 1.1_1

Add more reference with last commit

a95ad0c4d4

2008-11-01 00:52Xin LI (delphij) · 1.1_1

Document phpmyadmin XSS issue

3d9c507cab

2008-10-29 07:16Jeremy Messenger (mezz) · 1.1_1

Add linux-opera with opera entries. Remove the YYYYMMDD in the version (ie: 9.61.YYYYMMDD -> 9.61) as linux-opera does not do it anymore. It should not affect anything on opera.

600b1b99f3

2008-10-28 22:04Martin Wilke (miwi) · 1.1_1

- Fix formating

1829ed7be9

2008-10-28 21:05Thomas Abthorpe (tabthorpe) · 1.1_1

- Document opera -- multiple vulnerabilities

PR:		ports/128264
Submitted by:	Arjan van Leeuwen <freebsd-maintainer opera.com>

e18a636604

2008-10-27 19:47Thomas Abthorpe (tabthorpe) · 1.1_1

- Document libspf2 -- Buffer overflow

38c1620add

2008-10-25 22:13Martin Wilke (miwi) · 1.1_1

- Document openx -- sql injection vulnerability

78b7370a6a

2008-10-25 21:09Martin Wilke (miwi) · 1.1_1

- Fix duplicate wording

1085424bf5

2008-10-25 20:51Martin Wilke (miwi) · 1.1_1

- Document flyspray -- multiple vulnerabilities

Submitted by:	Nick Hilliard (nick@foobar.org) (based on)

f066f6dd2e

2008-10-24 21:13Xin LI (delphij) · 1.1_1

Document wordpress snoopy shell command execution vulnerability

509706c196

2008-10-24 18:56Martin Wilke (miwi) · 1.1_1

- Fix libxine entry

7aa1b688c9

2008-10-22 23:02Stanislav Sedov (stas) · 1.1_1

- Whitespace fix in last entry.

b5e3a4a0f6

2008-10-22 22:55Xin LI (delphij) · 1.1_1

Document drupal multiple vulnerabilities.

Submitted by:	Nick Hilliard <nick foobar org>

9327df8509

2008-10-22 22:02Xin LI (delphij) · 1.1_1

Newer version of wordpress-mu has resolved the security vulnerability, I have verified the code with respect to older release and to wordpress changeset.

Reviewed by:	stas

2b2619052e

2008-10-20 18:19Jeremy Messenger (mezz) · 1.1_1

The libxml2-2.6.32_1 now have two security fixed. If I edit it incorrect, please fix it for me.

0fefcf6b39

2008-10-19 15:21MANTANI Nobutaka (nobutaka) · 1.1_1

Document libxine denial of service vulnerability.

9d5b818851

2008-10-18 14:52Martin Wilke (miwi) · 1.1_1

- Fix formating from previous entry

7f8aada91b

2008-10-18 04:15Thomas Abthorpe (tabthorpe) · 1.1_1

- Fix previous commit

58521b7292

2008-10-18 00:31Thomas Abthorpe (tabthorpe) · 1.1_1

- Document linux-flashplugin -- multiple vulnerabilities

Reviewed by:	stas

c6f8bdd6f0

2008-10-15 11:19Xin LI (delphij) · 1.1_1

Document libxml2 vulnerabilities.

48d90f8ac3

2008-10-12 18:49Martin Wilke (miwi) · 1.1_1

- Fix a small typo

790a88b36a

2008-10-12 18:37Martin Wilke (miwi) · 1.1_1

- Document drupal -- multiple vulnerabilities

5d6565d8ae

2008-10-11 00:40Xin LI (delphij) · 1.1_1

Document cups multiple vulnerabilities.

c08864ce38

2008-10-10 20:58Alex Dupre (ale) · 1.1_1

Update mysql entries.

445b1db5c9

2008-10-10 12:00Martin Wilke (miwi) · 1.1_1

- Fix formating and remove whitespaces from previous commit.

fc9e7e3d0b

2008-10-10 11:41Ion-Mihai Tetcu (itetcu) · 1.1_1

Add two www/opera vulnarabilities which affect versions <9.60.20081004

PR:		ports/127941
Submitted by:	Arjan van Leeuwen (opera maintainer)

5eae56f9fe

2008-10-03 00:37Stanislav Sedov (stas) · 1.1_1

- Capitalize "Secunia" word in all entries.

Reviewed by:	tabthorpe

afd4019405

2008-10-01 23:31Stanislav Sedov (stas) · 1.1_1

- Mplayer vulnerability has been fixed in 0.99.11_7.

e865c296d5

2008-09-30 22:46Stanislav Sedov (stas) · 1.1_1

- Document mysql-client input validation vulnerability.

0eb7b70dde

2008-09-30 22:13Stanislav Sedov (stas) · 1.1_1

- Document mplayer integer overflows.

ed2e206938

2008-09-30 00:56Simon L. B. Nielsen (simon) · 1.1_1

Bump copyright year.

ed642c9ffb

2008-09-30 00:45Simon L. B. Nielsen (simon) · 1.1_1

Really fix firefox 3 part of the latest mozilla entry.  Now it doesn't match fixed firefox 2 versions.

Cluebat:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>
Pointyhat:	simon (for too quick review of last update)

6e7cfa53d6

2008-09-29 13:46Martin Wilke (miwi) · 1.1_1

- Fix bad firefox3 specification

PR:		127712
Reported by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>
Reviewed by:	simon

c4a794660b

2008-09-28 01:48Marcus Alves Grando (mnag) · 1.1_1

lighttpd -- multiple vulnerabilities

c570926974

2008-09-27 01:07Martin Wilke (miwi) · 1.1_1

- Fix last thunderbird entrys - Bump modified date

6ca9866321

2008-09-26 23:43Martin Wilke (miwi) · 1.1_1

- Cleanup previous entry.

454998b922

2008-09-26 23:38Henrik Brix Andersen (brix) · 1.1_1

Add irc/bitlbee entry.

da6154d9ef

2008-09-26 23:10Simon L. B. Nielsen (simon) · 1.1_1

- Update samba entries so they don't match upcomming Samba 3.2 which   doesn't have PORTEPOCH in the version number. - Bump modified date for all updated entries.

Requested by:	timur

ad300692f0

2008-09-24 16:59Martin Wilke (miwi) · 1.1_1

- Fix firefox version

Reported by:	bsam@

1e4f98ac78

2008-09-24 14:39Martin Wilke (miwi) · 1.1_1

- Fix a typo (s/reportss/reports)

Submitted by:	tabthorpe/remko

432b081364

2008-09-24 14:09Martin Wilke (miwi) · 1.1_1

- Document mozilla --  multiple vulnerabilities

b6fbc3d224

2008-09-23 23:51Martin Wilke (miwi) · 1.1_1

- Mark ftp/proftpd as safe - Add more references to the last phpMyAdmin entry

9e80f6244f

2008-09-23 21:13Thomas Abthorpe (tabthorpe) · 1.1_1

- Document squirrelmail -- Session hijacking vulnerability

90f1ea84e3

2008-09-23 12:07Martin Wilke (miwi) · 1.1_1

- Fix discovery from my previous commit

eeb21d012d

2008-09-23 12:06Martin Wilke (miwi) · 1.1_1

- Document proftpd -- Long Command Processing Vulnerability

aefe80fcaa

2008-09-23 11:21Martin Wilke (miwi) · 1.1_1

- Document phpmyadmin -- cross-site scripting vulnerability

3774a178ca

2008-09-19 22:44Martin Wilke (miwi) · 1.1_1

- Document gallery -- multiple vulnerabilities

Approved by:	portmgr (secteam blanked)

1bccda18cf

2008-09-17 19:10Martin Wilke (miwi) · 1.1_1

- Replace phpmyadmin with phpMyAdmin to fix portaudit

Note:
	portaudit does not flag phpmyadmin as vulnerable,
	so we need to change it to the pkgname (phpMyAdmin).

Reported by:	glarkin@
Reviewed by:	simon
Discussion on:	ports-security@
Approved by:	portmgr (secteam blanked)

0a371162cd

www/dolibarr 17 unaddressed · 8.8	Oct 28
www/dolibarr19 +1 related 18 unaddressed · 8.8	Oct 28
www/dolibarr21 +1 related 19 unaddressed · 8.8	Oct 28
net/samba425 1 CVE · 8.1 fixed 4.25.1	Oct 28
devel/libwasmtime 3 unaddressed · 9.9	Oct 28
mail/p5-MIME-Tools 10 CVEs · – fixed 5.519 VuXML	Oct 28
www/grafana 19 unaddressed · 8.8	Oct 28
net/kafka 10 unaddressed · –	Oct 28
security/libressl +1 related 4 unaddressed · 8.2	Oct 28
multimedia/assimp 4 unaddressed · 6.9	Oct 28
devel/jackson-databind 6 CVEs · 9.8 fixed 2.22.4 VuXML	Oct 28
www/chromium 45 unaddressed · 9.6 VuXML	Oct 27
www/linux-chrome 45 unaddressed · 9.6 VuXML	Oct 27
www/rubygem-crass 1 unaddressed · 5.3	Oct 27
lang/python27 2 unaddressed · 6.3	Oct 27

CVE-2026-118754 6.9 www/dolibarr +4 more	Oct 28
CVE-2026-109411 fixed 8.1 net/samba425	Oct 28
CVE-2026-118688 8.8 devel/libwasmtime	Oct 28
CVE-2026-116273 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116272 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116271 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116270 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116269 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116268 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116267 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116266 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116265 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116264 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-79656 6.0 www/grafana	Oct 28
CVE-2026-88858 6.5 www/grafana	Oct 28

git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27
ImageMagick6	Oct 26