Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-27 to 1.1_6 · 7b95a2eac4
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

Depends on

lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,339)

2004-10-12 04:08Jacques Vidrine (nectar) · 1.1_1

The documented xv vulnerabilities were fixed by dinoex@

Approved by:	portmgr

8cc9af6661

2004-10-12 03:07Jacques Vidrine (nectar) · 1.1_1

Note that the image decoding vulnerabilities in gdk-pixbuf have been fixed.

Reported by:	marcus
Approved by:	portmgr

f2e5f2c600

2004-10-12 02:58Jacques Vidrine (nectar) · 1.1_1

Document older cyrus-sasl bug affecting DIGEST-MD5.

Submitted by:	simon
Approved by:	portmgr

542e28fc48

2004-10-12 02:57Jacques Vidrine (nectar) · 1.1_1

Update the description of and list of packages affected by the PHP file upload processing bug.

Submitted by:	Jon Passki <cykyc@yahoo.com>
Approved by:	portmgr

ae3bbce876

2004-10-08 18:50Jacques Vidrine (nectar) · 1.1_1

Document unsafe use of environmental variable SASL_PATH in cyrus-sasl.

Approved by:	portmgr

5fc8e49951

2004-10-05 21:28Tom Rhodes (trhodes) · 1.1_1

Add some more apache ports. Fix two errors found by nectar.

Approved by:	portmgr

c57347a069

2004-10-05 19:41Tom Rhodes (trhodes) · 1.1_1

Add imp3 issue, add apache13-ssl issue, correct a tag.

Approved by:	portmgr

046685db30

2004-10-05 16:54Jacques Vidrine (nectar) · 1.1_1

Note that older packages of bmon were dangerously installed set-user-ID.

Approved by:	portmgr

ca9a79470c

2004-10-05 16:33Jacques Vidrine (nectar) · 1.1_1

Document GnuTLS denial-of-service (already mentioned in portaudit's database).

Approved by:	portmgr

9ae4693f5b

2004-10-05 16:06Jacques Vidrine (nectar) · 1.1_1

Record another PHP vulnerability.

Approved by:	portmgr

da3ca12960

2004-10-05 15:52Jacques Vidrine (nectar) · 1.1_1

Record another PHP security issue.

Approved by:	portmgr

3a866ed50b

2004-10-05 14:52Jacques Vidrine (nectar) · 1.1_1

Note that xv should not be used.

Approved by:	portmgr

196a8b7039

2004-10-04 21:59Jacques Vidrine (nectar) · 1.1_1

Note a symlink vulnerability in getmail.

Submitted by:	Shane Kinney <mod6@freebsdhackers.net>
Approved by:	portmgr

7f5388e9d6

2004-10-04 19:30Jacques Vidrine (nectar) · 1.1_1

Fill in empty topic from previous commit.

Noticed by:	Shane Kinney <mod6@freebsdhackers.net>
Approved by:	portmgr

a0e0b140b1

2004-10-04 19:09Jacques Vidrine (nectar) · 1.1_1

Record FreeBSD-SA-04:15.syscons.

Approved by:	portmgr

75a8348c4c

2004-10-04 16:01Jacques Vidrine (nectar) · 1.1_1

Add missing PORTEPOCH for samba.

Noticed by:	dinoex
Approved by:	portmgr

1ea5847470

2004-10-04 00:49Jacques Vidrine (nectar) · 1.1_1

Note racoon certificate verification bug.

Submitted by:	Jon Passki <cykyc@yahoo.com>
Approved by:	portmgr

796de6c0ad

2004-10-03 17:51Jacques Vidrine (nectar) · 1.1_1

Note distcc IP address ACL bug.

Submitted by:	Jon Passi <cykyc@yahoo.com>
Approved by:	portmgr

b3829c3922

2004-10-03 17:38Jacques Vidrine (nectar) · 1.1_1

Remove a duplicate entry.

Submitted by:	Jon Passki <cykyc@yahoo.com>
Approved by:	portmgr

0a516d0900

2004-10-01 03:40Jacques Vidrine (nectar) · 1.1_1

Correct the version number for latest Mozilla entry. (cut-n-paste damage)

Approved by:	portmgr

17fd0dac46

2004-10-01 03:37Jacques Vidrine (nectar) · 1.1_1

Document the last few of the relatively recent Mozilla vulnerabilities.

Approved by:	portmgr

444816916c

2004-10-01 01:32Jacques Vidrine (nectar) · 1.1_1

Correct mangled CVE name: s/8983/0903/

Approved by:	portmgr

f3cbac7e5e

2004-10-01 01:29Jacques Vidrine (nectar) · 1.1_1

Add another two older vulnerabilities affecting Mozilla & co. Continue to try hard to cover past package names:   - I missed el-linux-mozillafirebird previously.   - Move all the `obsolete' package names into one place     for clarity.

Approved by:	portmgr

890f7d6ec7

2004-10-01 00:30Jacques Vidrine (nectar) · 1.1_1

Don't forget `ja-samba' also.

Approved by:	portmgr

75afc26d33

2004-10-01 00:26Jacques Vidrine (nectar) · 1.1_1

Note samba file disclosure vulnerability.

Approved by:	portmgr

1ecf1ca2c8

2004-09-29 18:48Tom Rhodes (trhodes) · 1.1_1

Fix apache version number entry, bump modified date for apache as well.

Approved by:	portmgr

42aca1ba75

2004-09-28 20:02Jacques Vidrine (nectar) · 1.1_1

Make an initial attempt at covering all Mozilla/Firefox/Thunderbird package names that we've had.  Similar changes need to be made to many other entries, but let's use this one as a test subject first.

Approved by:	portmgr

87c8e299b9

2004-09-28 17:06Jacques Vidrine (nectar) · 1.1_1

Correct spelling of phpnuke package name.

Reported by:	Dan Langille
Approved by:	portmgr

d1c098e865

2004-09-28 16:31Jacques Vidrine (nectar) · 1.1_1

Note BMP decoder flaws in Mozilla/Firefox/Thunderbird.

Approved by:	portmgr

28bec85248

2004-09-28 16:28Jacques Vidrine (nectar) · 1.1_1

Note stack buffer overflow in Mozilla mail.

Approved by:	portmgr

216d6ce8d1

2004-09-28 16:22Jacques Vidrine (nectar) · 1.1_1

Document Mozilla/Firefox/Thunderbird heap buffer overflows.

Approved by:	portmgr

311d5d5ef7

2004-09-28 15:36Jacques Vidrine (nectar) · 1.1_1

Correct the package name for phpMyAdmin.

Reported by:	Matthew Seaman <m.seaman@infracaninophile.co.uk>
Approved by:	portmgr

4a5c4d0cdb

2004-09-27 17:15Jacques Vidrine (nectar) · 1.1_1

Add CERT Vulnerability Note references to xpm entry.

Approved by:	portmgr

64a5200854

2004-09-27 04:57Jacques Vidrine (nectar) · 1.1_1

Note two older vulnerabilities in PHP.

Submitted by:	Jon Passki <cykyc@yahoo.com>
Approved by:	portmgr

49af9c28f0

2004-09-26 20:17Jacques Vidrine (nectar) · 1.1_1

Note subversion information disclosure vulnerability.

Submitted by:	lev
Approved by:	portmgr

32bd453eb6

2004-09-26 20:04Jacques Vidrine (nectar) · 1.1_1

Add missing PORTEPOCH in a mozilla entry. Correct package name in an apache entry.

Reported by:	Dan Langille <dan@langille.org>
Approved by:	portmgr

d2894c398c

2004-09-25 02:59Jacques Vidrine (nectar) · 1.1_1

Forgot to add <modified> element for last commit.

Approved by:	portmgr

c41b8c1e2b

2004-09-25 02:58Jacques Vidrine (nectar) · 1.1_1

Add missing PORTEPOCH on one of the mozilla entries.

Noticed by:	Dan Langille <dan@langille.org>
Approved by:	portmgr

9f43a46e43

2004-09-23 17:07Jacques Vidrine (nectar) · 1.1_1

Document vulnerabilities in lha.

Reviewed by:	dinoex
Approved by:	portmgr

0fb3c87dfe

2004-09-23 16:16Jacques Vidrine (nectar) · 1.1_1

Lately it seems I like to use dashes in topics... but I should at least be consistent with how many.  s/---/--/

Approved by:	portmgr

8ed099096a

2004-09-23 16:10Jacques Vidrine (nectar) · 1.1_1

Document mysql buffer overflow.

Reported by:	ale
Approved by:	portmgr

e7c6d5e304

2004-09-22 18:39Jacques Vidrine (nectar) · 1.1_1

Document Mozilla security icon spoofing vulnerability.

Approved by:	portmgr

458849a587

2004-09-22 18:16Jacques Vidrine (nectar) · 1.1_1

Document Mozilla vulnerability involving NULL bytes in FTP URLs.

Also, correct s/firebird/firefox/ in a previously documented issue.

Approved by:	portmgr

d1b0ba75fb

2004-09-22 17:59Jacques Vidrine (nectar) · 1.1_1

Document Mozilla automatic file upload vulnerability.

Approved by:	portmgr

dfaa8e2391

2004-09-22 17:44Jacques Vidrine (nectar) · 1.1_1

Document mozilla certificate import denial-of-service vulnerability.

Approved by:	portmgr

03eeeb2a99

2004-09-22 00:04Jacques Vidrine (nectar) · 1.1_1

Note a file name disclosure issue in rssh.

Reported by:	leeym
Approved by:	portmgr

3fbdc7e460

2004-09-20 22:13Jacques Vidrine (nectar) · 1.1_1

Add entry describe GNU Radius denial-of-service vulnerability.

Approved by:	portmgr

14a4d02444

2004-09-20 22:06Jacques Vidrine (nectar) · 1.1_1

Add sudoedit vulnerability.

Approved by:	portmgr

424b8857eb

2004-09-20 01:36Jacques Vidrine (nectar) · 1.1_1

In latest CVS entry, remove the reference to the exploit.  It does not apply to any of these vulnerabilities, but to the previous CVS vulnerability (CAN-2004-0396).

Approved by:	portmgr

8dba5f120c

2004-09-20 01:32Jacques Vidrine (nectar) · 1.1_1

Oh yeah, add affected FreeBSD versions for CVS issues.

Approved by:	portmgr

9d5b3878ff

devel/libmsiecf 1 unaddressed · 6.8	Oct 26
net/ndpi 1 unaddressed · 6.9	Oct 26
audio/speex 1 unaddressed · 8.3	Oct 26
devel/libphdi 1 unaddressed · 6.9	Oct 26
audio/furnace 2 unaddressed · 6.9	Oct 26
sysutils/libfvde 2 unaddressed · 6.8	Oct 26
audio/gbsplay 3 unaddressed · 6.8	Oct 26
archivers/snappy-java 4 unaddressed · 8.7	Oct 26
www/py-tornado 3 unaddressed · 5.3	Oct 26
sysutils/consul 4 CVEs · 8.8 fixed 2.1.0	Oct 26
comms/libimobiledevice +1 related 5 unaddressed · 6.9	Oct 26
devel/libgsf 1 unaddressed · 5.3	Oct 26
www/p5-Plack 1 unaddressed · –	Oct 25
www/p5-Starman 4 unaddressed · –	Oct 25
www/p5-Web-Simple 1 unaddressed · –	Oct 24

ImageMagick6	Oct 26
ImageMagick6-nox11	Oct 26
ImageMagick7	Oct 26
ImageMagick7-nox11	Oct 26
node	Oct 24
node22	Oct 24
node24	Oct 24
node26	Oct 24
traefik	Oct 24
ca_root_nss	Oct 23
gitlab-ce	Oct 23
gitlab-ee	Oct 23
mailpit	Oct 23
vifm	Oct 23
brotli	Oct 22
chromium	Oct 22
jackson-core	Oct 22
jackson-databind	Oct 22
jackson-databind	Oct 22
keycloak	Oct 22
linux-chrome	Oct 22
ungoogled-chromium	Oct 22
FreeBSD	Oct 21
p5-DBI	Oct 21
php82	Oct 21