Document mediawiki -- cross site scripting vulnerability.eeb9bc7a2f
Port details
security/vuxml 1.1_6
Vulnerability and eXposure Markup Language DTD
Port info
- Maintainer
- ports-secteam@FreeBSD.org
- Packages
- latest: 1.1_6
- Upstream
- up to date
- Last update
- to 1.1_6 · fa646dcabe
- Quarterly
- 2026Q4: 1.1_6
- WWW
- https://vuxml.freebsd.org/
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install vuxmlinstalls 1.1_6 fromlatest; fromquarterly(2026Q4) 1.1_6- Port
# cd /usr/ports/security/vuxml && make install clean- Size
- 9.7 KiB download · 40 KiB installed
- License
- BSD2CLAUSE
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.1_6 | 1.1_6 | – |
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Dependencies
Depends on 5
- lang/python312 3.12.15 12 unaddressed
- textproc/libxslt 1.1.45
- textproc/xhtml-basic 1.0.20001219_2
- textproc/xhtml-modularization 1.0.20010410_1
- textproc/xmlcatmgr 2.2_4
Run and library dependencies of the package on latest. Build dependencies are not in the package index.
Required by 0
No package on latest depends on it.
Packages on latest that depend on it directly.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 1.1_6.Fixed (0)
No VuXML entries for this package.
Problem reports (5) · open in Bugzilla, most recently changed first
| PR | Summary | Status | Changed |
|---|---|---|---|
| 295797 | maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256 | In Progress | 2026-07-17 |
| 295836 | maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django | New | 2026-06-04 |
| 291717 | security/vuxml: add entry for uriparser < 1.0.0 | New | 2025-12-16 |
| 288090 | maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2 | New | 2025-07-08 |
| 270795 | security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries | In Progress | 2025-07-01 |
Commits (8,349)
dia -- XFig Import Plugin Buffer Overflowe532bbaa7d
openvpn -- LD_PRELOAD code execution on client through malicious or compromised server PR: 95343 Submitted by: Matthias Andree <matthias.andree__gmx.de>043a17fd5f
samba -- Exposure of machine account credentials in winbind log filesd9ff0f6565
Upgrade pubcookie from 3.3.0-beta2 to 3.3.0a fixing serious XSS vulnerabilities.77e1e58771
Fill in the version numbers for the vids 6e3b12e2-6ce3-11da-b90c-000e0c2e438a and 82a41084-6ce7-11da-b90c-000e0c2e438a to show which Mantis versions are vulnerable. Submitted by: In cooperation with dvlbaee87aba2
For horde -- remote code execution vulnerability in the help viewer entry: - Add more references. - Reformat description to follow normal formatting style better. - Remove a redundant line in the description to make the meaning more clear.16fb63b929
freeradius -- EAP-MSCHAPv2 Authentication Bypass0354370716
Add an entry about Horde's remote code execution vulnerability in the help viewer.92a2d1b920
linux-realplayer -- buffer overrun linux-realplayer -- heap overflow Reviewed by: simone841881f4b
s/8 spaces/tab/ in the sendmail entry. Noticed by: simonac7f108ff9
Record that our sendmail port was also vulnerable. Bump modification date.6767097f01
Update the 'Evolution - remote format string vulnerabilities' entry.d81923c6b4
Document the latest three FreeBSD Security Advisories: SA-06:13 SA-06:12 SA-06:11f9cee5162f
xorg-server -- privilege escalation Reviewed by: simon461e2908dc
- heimdal -- Multiple vulnerabilities Reviewed by: simon48b19385b0
Document ftp/curl's TFTP packet buffer overflow vulnerability Reworked by: simon Approved by: security-officer (simon)4ff24336d9
Add drupal <= 4.6.5 vulns.f9aea91fed
Add an entry for Horde < 3.1 (SA19246). Noticed by: mnagbfbd4b55b2
Document linux-flashplugin -- arbitrary code execution vulnerability.4fcab4c05c
Document nfs -- remote denial of service (FreeBSD: SA-06:10) Approved by: portmgr (blanket VuXML)1d8c141834
Add OpenSSH Remote Denial of Service (FreeBSD SA-06:09.openssh) to the vuxml list. Approved by: portmgr (Blanket VuXML)bd046df41f
Correct the gpg entry wrt. style. Approved by: portmgr (Blanket VuXML)70a8938a87
Update to 1.4.2.2. Security: GnuPG does not detect injection of unsigned data References: http://lists.gnupg.org/pipermail/gnupg-announce/2006q1/000216.html Probbed by: simon Approved by: portmgr (erwin)b73fb62f12
Document multimedia/mplayer's heap overflow in the ASF demuxer Reviewed by: simon Approved by: portmgr (implicit), security-officer (simon)991064231d
Add the ssh2-nox11 slave port to the list of ports affected by VID 594ad3c5-a39b-11da-926c-0800209adf0e. Prodded by: Dmitry Pryanishnikov <dmitry@atlantis.dp.ua> Approved by: portmgr (erwin)861c04f5ea
Document a SSH.COM SFTP server format string vulnerability affecting the security/ssh2 port. Approved by: portmgr (erwin)888793f6ac
Document GNU tar invalid headers buffer overflow. Approved by: portmgr (erwin)d3926c182d
Remove the pinentry entry. It was gentoo specific and I overlooked that. Noticed by: Dejan Lesjak <dejan dot lesjak at ijs dot si> Pointyhat: remko Approved by: portmgr (implicit VuXML)52dcfc0417
Document Bugzilla [2.*, 2.20.1) vulnerabilities. Approved by: security-officer (simon) Approved by: portmgr (implicit)bb655e6ade
Document squirrelmail (< 1.4.6) vulnerabilities: CVE-2006-0377 (IMAP injection) CVE-2006-0195 (XSS) CVE-2006-0188 (XSS) Approved by: security-officer (simon) Approved by: portmgr (implicit)978c80a462
Remove the latest squid entry, it already existed. Noticed by: Thomas-Martin Seck <tmseck at netcologne dot de>a57877665c
Document gedit -- format string vulnerability.193f489b68
Add koffice to the RTF import issue.5b65a6dfe1
Documenet WebCalendar -- unauthorized access vulnerability.e110989d25
Document abiword -- stack based buffer overflow vulnerabilities.3073642d70
Document pinentry -- local privilege escalation. Correct previous entry (the entry time was invalid).424cfcab59
Document squid -- dns lookup spoofing.3c6a572716
Document postgresql81-server -- SET ROLE privilege escalation.a211d0431d
Document gnupg -- false positive signature verification.51909aa65e
Document rssh -- privilege escalation vulnerability. The port will be marked forbidden due to possible root access.f42ea1d7c5
Document tor -- malicious tor server can locate a hidden service.5803e4d25e
Document sudo -- arbitrary command execution.7d56bb9418
Document libtomcrypt -- weak signature scheme with ECC keys.96d8b28256
Document mantis -- "view_filters_page.php" cross site scripting vulnerability.b1b350edad
Document phpbb -- multiple vulnerabilities. Reviewed by: simon357c6d5847
Document postgresql -- character conversion and tsearch2 vulnerabilities.e7e1028351
Document heartbeat -- insecure temporary file creation vulnerability.16ea24ccb4
Document kpdf -- heap based buffer overflowf5972ea28f
Document perl, webmin, usermin -- perl format string integer wrap vulnerability PR: ports/91202 Submitted by: KOMATSU Shinichiro <koma2 at lovepeers dot org> (slightly modified).0be8d00ea7