Document jdk - jar directory traversal vulnerability. Approved by: simon7ce5f5f5eb
Port details
security/vuxml 1.1_6
Vulnerability and eXposure Markup Language DTD
Port info
- Maintainer
- ports-secteam@FreeBSD.org
- Packages
- latest: 1.1_6
- Upstream
- up to date
- Last update
- to 1.1_6 · 7b95a2eac4
- Quarterly
- 2026Q4: 1.1_6
- WWW
- https://vuxml.freebsd.org/
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install vuxmlinstalls 1.1_6 fromlatest; fromquarterly(2026Q4) 1.1_6- Port
# cd /usr/ports/security/vuxml && make install clean- Size
- 9.7 KiB download · 40 KiB installed
- Depends on
- lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
- License
- BSD2CLAUSE
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.1_6 | 1.1_6 | – |
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 1.1_6.Fixed (0)
No VuXML entries for this package.
Problem reports (5) · open in Bugzilla, most recently changed first
| PR | Summary | Status | Changed |
|---|---|---|---|
| 295797 | maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256 | In Progress | 2026-07-17 |
| 295836 | maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django | New | 2026-06-04 |
| 291717 | security/vuxml: add entry for uriparser < 1.0.0 | New | 2025-12-16 |
| 288090 | maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2 | New | 2025-07-08 |
| 270795 | security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries | In Progress | 2025-07-01 |
Commits (8,339)
Document several mozilla/firefox issues.c6463c5ae8
Mark wget >= 1.10.a1 safe from the "wget -- multiple vulnerabilities" entry. Info provided by: sfb8e8bd4784
Document openoffice -- DOC document heap overflow vulnerability.c666625667
Fix and document insecure temporary file handling in portupgrade. Security: CAN-2005-0610 Security: http://vuxml.FreeBSD.org/22f00553-a09d-11d9-a788-0001020eed82.html Approved by: erwin (mentor), maintainer timeout OK'ed by: portmgr Reviewed by: nectar2a6230f941
Document three GAIM vulnerabilities.c5a9b3a376
Document an old PHP issue.4ac987a82c
Document squid -- DoS on failed PUT/POST requests vulnerability. Submitted by: Devon H. O'Dell <dodell@offmyserver.com> (original version)63de08eab1
- Fix closing tag on the entry I just touched. Pointed out by: still Chimera Blaming: too much bear earlier tonightb1c64c078b
- Add <modified> to the entry I just touched Prodded by: Chimeraecf039676f
- CAN-2005-0133 is fixed in clamav-devel-20050408 PR: ports/79688 Submitted by: Renato Botelho <freebsd@galle.com.br>e22567b87a
Bump modified date for entry modified last commit.3325b65493
add CVE name to latest vuln of Cyrus IMAPd.f17f51ad0e
Add an entry for a XSS vulnerabilty fixed in horde-3.0.4.24b5ab2bb9
Document wu-ftpd -- remote globbing DoS vulnerability.7e369a9d2b
Add CVE name to hashash entry.08a1fddf90
Document hashcash format string vulnerability.7ce77e7525
Document clamav -- zip handling DoS vulnerability. Approved by: portmgr (blanket, VuXML)3ea2a15c21
Document Wine information disclosure. Based on an entry that was Submitted by: Devon H. O'Dell <dodell@offmyserver.com> Approved by: portmgr (blanket, VuXML)8fdf391a72
Document the most serious of the recently disclosed Mozilla/Firefox/Thunderbird vulnerabilities. Based on entries that were Submitted by: Devon H. O'Dell <dodell@offmyserver.com> Approved by: portmgr (blanket, VuXML)ad6be0e3c8
Document Sylpheed buffer overflow. Reminded by: netchild Approved by: portmgr (blanket, VuXML)540824d2e8
Document xv -- filename handling format string vulnerability. Approved by: portmgr (implicit, VuXML)5b82e7ed54
Document kdelibs -- local DCOP denial of service vulnerability. Approved by: portmgr (implicit, VuXML)e551c99e0a
Mark grip port as fixed for recent vulnerability. Requested by: ahze4b8ba5ca05
Document phpmyadmin -- increased privilege vulnerability.9c13358c08
Note that recent Quake2-LNX is fixed.15f66ab5b1
Recent mysql snapshot import fixed several vulnerabilities.2e4290eeb0
Document ethereal -- multiple protocol dissectors vulnerabilities.566e20849d
Document "grip -- CDDB response multiple matches buffer overflow vulnerability".29d805dd40
Update references for latest MySQL entry: - Use bid tag for Bugtraq ID reference. - Add CVE names.f1996dbbb7
Document multiple mysql remote vulnerabilities.09faa83406
Add an entry about rxvt-unicode bufer overflow.c3c8132fc3
Document two phpMyAdmin issues.2f4093a8ae
Document libexif -- buffer overflow vulnerability.098596aedb
Fix invalid date. Noticed by: Kang Liu <liukang@bjut.edu.cn>3b0cb09a6a
Add <modified> date for recent commit to phpbb vulnerability. Forgotten by: delphij While here, add msgids for recent phpbb addition.6cec90d8a0
Document a low risk HTML injection (configuration bypass) vulnerability [1] of phpBB. (maintainer contacted and is preparing a fix) [1] http://marc.theaimsgroup.com/?l=bugtraq&m=1109872315022745092eea0da
Add bugtraq bug ID for phpbb vulnerability. Submitted by: Kang LIU <liukang bjut edu cn>852b94cbf0
Document two phpnuke vulnerabilities, and a Linux RealPlayer vulnerability. Based on entries that were Submitted by: Devon H. O'Dell <dodell@sitetronics.com>3fbc94976e
- Document ImageMagick -- format string vulnerability. - Fix typo on older tiff entry.27b0023153
Document the privilege escalation vulnerability in uim.8a81c46428
Fix typo in linux-tiff version number for http://vuxml.freebsd.org/8f86d8b5-6025-11d9-a9e7-0001020eed82.html Reported by: Ian Moore <no-spam@swiftdsl.com.au>1f1453269f
Document lighttpd information disclosure bug. This entry is based on one that was Submitted by: Devon H. O'Dell <dodell@offmyserver.com>8ec244ef06
Fix typo in linux-tiff version number for http://vuxml..freebsd.org/fc7e6a42-6012-11d9-a9e7-0001020eed82.html Reported by: Ian Moore <no-spam@swiftdsl.com.au>b511a32842
Document latest phpBB critical security vulnerabilities. Submitted by: Kang LIU <liukang bjut edu cn>ab9ba5a88f
Correct the linux-tiff version number for several entries. Reported by: netchild24627424e6
Document curl -- authentication buffer overflow vulnerability.3ab3a3220e
- Document cyrus-imapd -- multiple buffer overflow vulnerabilities. [1] - Use bid tag for a reference in sup entry. Advice from: ume [1]3ba6fcbd61
Document format string vulnerabilities in net/sup.fbb0c798ac
- Just use mozilla in title for last entry for consistency. - Document mozilla -- insecure temporary directory vulnerability.ce31baa966