- Document phpmyadmin -- Code execution vulnerability Approved by: portmgr (secteam blanked)73b5662391
Port details
security/vuxml 1.1_6
Vulnerability and eXposure Markup Language DTD
Port info
- Maintainer
- ports-secteam@FreeBSD.org
- Packages
- latest: 1.1_6
- Upstream
- up to date
- Last update
- to 1.1_6 · 4fa1ce71cd
- Quarterly
- 2026Q4: 1.1_6
- WWW
- https://vuxml.freebsd.org/
- CPE
- not set in the port, and none could be determined — that does not mean none exists
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install vuxmlinstalls 1.1_6 fromlatest; fromquarterly(2026Q4) 1.1_6- Port
# cd /usr/ports/security/vuxml && make install clean- Size
- 9.7 KiB download · 40 KiB installed
- License
- BSD2CLAUSE
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.1_6 | 1.1_6 | – |
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Dependencies
Depends on 5
- lang/python312 3.12.15 25 unaddressed
- textproc/libxslt 1.1.45
- textproc/xhtml-basic 1.0.20001219_2
- textproc/xhtml-modularization 1.0.20010410_1
- textproc/xmlcatmgr 2.2_4
Run and library dependencies of the package on latest. Build dependencies are not in the package index.
Required by 0
No package on latest depends on it.
Packages on latest that depend on it directly.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 1.1_6.Fixed (0)
No VuXML entries for this package.
Problem reports (5) · open in Bugzilla, most recently changed first
| PR | Summary | Status | Changed |
|---|---|---|---|
| 295797 | maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256 | In Progress | 2026-07-17 |
| 295836 | maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django | New | 2026-06-04 |
| 291717 | security/vuxml: add entry for uriparser < 1.0.0 | New | 2025-12-16 |
| 288090 | maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2 | New | 2025-07-08 |
| 270795 | security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries | In Progress | 2025-07-01 |
Commits (8,350)
- Fix previous commit Approved by: portmgr (secteam blanked)79f27418cc
- Mark www/twiki FORBIDDEN due to security exploit Approved by: beech (mentor, implicit) Approved by: portmgr (pav) Security: http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-3195903bc40e2f
- corrects the bid number from me previous commit Approved by: portmgr (secteam blanked)af55c84b56
- Document neon -- NULL pointer dereference in Digest domain support Approved by: portmgr (secteam blanked)6e39f69a6f
Document clamav CHM parser DoS issue. Approved by: portmgr (vuxml blanket)80b5f0be4e
- Document horde -- multiple vulnerabilities Approved by: portmgr (secteam blanked)6fe8f381c0
- Document python -- multiple vulnerabilities Reviewed by: remko/tabthorpe Approved by: portmgr (secteam blanked)f3cdc317d3
- Mark www/wordpress and german/wordpress as safe Approved by: portmgr (secteam approved: remko, blanket vuxml)5f948e478e
- Document wordpress, rails and mysql vulnerabilties. Reviewed by: remko Approved by: portmgr (secteam approved: remko, blanket vuxml)2ddefc97cd
Extend the Nagios entry to cover Nagios 3.x < 3.0.2. This covers the edge case of `portupgrade -o net-mgmt/nagios-devel nagios'. Approved by: portmgr (simon@ using secteam blanket)7a1bb458a8
Add FreeBSD-SA-08:09.icmp657b2a4922e
Add FreeBSD-SA-08:08.nmount18f3496772
Add FreeBSD-SA-08:07.amd64. Hat: secteam1098a74bda
Update for php5 safe_mode fix.a0d9ed6a84
Fix XML in openvpn-devel entry: – was used but as vuln.xml does not import HTML named entities this is not allowed - use – instead which produces the same end result.df60069c82
- Document opera -- multiple vulnerabilities4e4e174b8d
gnutls -- "gnutls_handshake()" Denial of Service4ddf4a9977
Use joomla15 as name for the vulnerabilitya2d52247bf
Document joomla flaw in the reset token validation58a535e7f9
Register a Buffer Overflow Vulnerability in CDF 3.2.eebb128e5d
- Clean up whitespace a bit - Wrap long lines where appropriate - Fix previous commitd2c17f67f5
- Fix drupal5 version5798dcee89
- Document drupal - multiple vulnerabilities25ffb89ba7
- Document recent ruby vulnerabilities.a3a2994647
- fix make validate Pointy hat to: skv308c310ee9
- Fix previous commit.76feecab0d
Document bugzilla directory traversal vulnerability.e5d68d78ab
- Document openvpn-devel -- arbitrary code execution PR: 126352 (based on) Submitted by: Matthias Andree <matthias.andree@gmx.de>3393ef0fec
- Fix kdewebdev conflict with upcommig kdewebdev4 Reviewed by: simonf5be21a894
Fix vuxml-entries for 'devel/bugzilla*'.cf1d963f86
- Fix portversion90ab954772
- Document phpmyadmin -- cross site request forgery vulnerabilites97e568cf10
- Document drupal - multiple vulnerabilities9ebe00ef3f
Add the latest security advisory to vuxml. Hat: secteam5a92f290b8
Document poppler -- uninitialized pointer.fe8aa0c0f3
- Document py-pylons -- Path traversal bug6bbeedc174
- Document FreeType 2 -- Multiple Vulnerabilities PR: ports/124917 Submitted by: Nick Barkas <snb threerings.net>011fa5e5d4
Document revised patch for CVE-2008-2711.781cb19f44
- Document phpmyadmin - Cross Site Scripting Vulnerability PR: 124900ede2a8483b
Update squid SNMP DoS vulnerability to cover squid 3.0STABLE6 as well. Submitted by: Thomas-Martin Seck <tmseck web de>361a9e0ff2
- Document apache -- multiple vulnerabilities Reviewed by: delphij184b3631bd
- Add missing <code></code> block around safe_mode. Pointy hat to: mec1187dd103
- Add a note to php-posix entry, that safe_mode is considred to be insecure by FreeBSD Security Team. - Add <code> blocks around function names. Suggested by: simonaafe20bfda
- Document php5-posix directory traversal vulnerability.8dba476dda
Fix the Firefox 3 part, it has no multiple vulnerabilities. Reviewed by: remko195f98320d
- Document vim -- Vim Shell Command Injection Vulnerabilities Reviewed by: remko, miwi10c0f9c43d
- Document recent ruby vulnerabilities.9b9c2f302b
- Clean up whitespace a bit - Wrap long lines where appropriate Reviewed by: remko76f29b272e
Document potiential crash in fetchmail < 6.3.8_6 (in -v -v verbose mode).704c17a34c