Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-28 to 1.1_6 · daf6d105b8
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 12 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,343)

2021-01-20 20:11Matthias Andree (mandree) · 1.1_5

dns/dnsmasq < 2.83 vulnerabilities (buffer overflow, DNS cache poisoning)

Security:	5b5cf6e5-5b51-11eb-95ac-7f9491278677
Security:	CVE-2020-25684
Security:	CVE-2020-25685
Security:	CVE-2020-25686
Security:	CVE-2020-25681
Security:	CVE-2020-25682
Security:	CVE-2020-25683
Security:	CVE-2020-25687

6eb9a51598

2021-01-20 01:25Dmitri Goutnik (dmgk) · 1.1_5

security/vuxml: Document lang/go vulnerabilities

60b9e119fb

2021-01-19 22:12Joseph Mingrone (jrm) · 1.1_5

security/vuxml: Fix range of affected cloud-init versions

1f749781ef

2021-01-19 21:47Joseph Mingrone (jrm) · 1.1_5

security/vuxml: Document vulnerability in cloud-init version 20.4

https://bugs.launchpad.net/cloud-init/+bug/1911680

Reported by:	Mina Galić <me@igalic.co>

4f11306fcd

2021-01-18 09:21Li-Wen Hsu (lwhsu) · 1.1_5

Document CVE-2020-25074 and CVE-2020-15275 for www/moinmoin

93bf623e72

2021-01-17 23:23Mateusz Piotrowski (0mp) · 1.1_5

Document ghostscript9-agpl-base vulnerability committed in r544907

PR:		248580
Requested by:	joneum (ports-secteam)
Reported by:	VVD <vvd@unislabs.com>
MFH:		2021Q1
Security:	CVE-2020-15900

a01b4e0b2f

2021-01-14 21:37Bradley T. Hughes (bhughes) · 1.1_5

security/vuxml: document Node.js January 2021 Security Releases

https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/

Sponsored by:	Miles AS

5980a700d4

2021-01-14 13:03Matthias Fechner (mfechner) · 1.1_5

Document gitlab vulnerability.

e86437da30

2021-01-14 08:30Thomas Zander (riggs) · 1.1_5

Document integer overflow in wavpack (CVE-2020-35738).

736e76b934

2021-01-13 18:31Li-Wen Hsu (lwhsu) · 1.1_5

Document Jenkins Security Advisory 2021-01-13

Sponsored by:	The FreeBSD Foundation

76e4f567ea

2021-01-12 22:20Florian Smeets (flo) · 1.1_5

Document phpmyfaq vulnerability

198cb26d63

2021-01-12 05:27Cy Schubert (cy) · 1.1_5

Document sudo CVE-2021-23239.

bb7030802e

2021-01-10 09:26Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_5

Document cairosvg vulnerability

e0c627447b

2021-01-09 21:06Matthias Fechner (mfechner) · 1.1_5

Document gitlab vulnerabilities.

5058a0d582

2021-01-07 16:09Rene Ladan (rene) · 1.1_5

Document new vulnerabilities in www/chromium < 87.0.4280.141

Obtained from:	https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html

6a5ec16e3f

2021-01-06 15:11Kurt Jaeger (pi) · 1.1_5

security/vuxml: add dovecot CVE-2020-24386

PR:		252415
Submitted by:	Evilham <contact@evilham.com>
Relnotes:	https://dovecot.org/pipermail/dovecot-news/2021-January/000448.html

92fc0b155f

2021-01-01 17:05Adam Weinberger (adamw) · 1.1_5

security/vuxml: Add entry for gitea < 1.13.1

PR:		252310
Submitted by:	maintainer

9d4f3646ae

2021-01-01 05:31Joseph Mingrone (jrm) · 1.1_5

Document inspircd vulnerabilitiy

PR:		252291
Reported by:	Sadie Powell <sadie@witchery.services>

6ebff72b31

2020-12-28 14:15Thomas Zander (riggs) · 1.1_5

Document CVE-2020-0543 for Intel CPUs.

PR:		247197
Submitted by:	spam123@bitbert.com

3f530ef977

2020-12-22 23:44Guido Falsi (madpilot) · 1.1_5

Document new asterisk vulnerabilities.

17051e7049

2020-12-22 15:16Juraj Lutter (otis) · 1.1_5

Document vulns for powerdns and postsrsd

Reviewed by:	osa (mentor)
Approved by:	osa (mentor)
Differential Revision:	https://reviews.freebsd.org/D27706

a9e429438f

2020-12-19 14:16Thomas Zander (riggs) · 1.1_5

Correct entries for mantis and libX11 (missing PORTEPOCH in package string).

PR:		251168
Submitted by:	zab@zltech.eu

0462615af4

2020-12-17 22:09Steve Wills (swills) · 1.1_5

Document vault issue

a759b05bfb

2020-12-15 02:32Philip Paeps (philip) · 1.1_5

security/vuxml: Note FreeBSD 11.4 fix for CVE-2020-1971

01c7fb8e31

2020-12-13 15:49Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_5

Document jasper vulnerability

e6aa81409f

2020-12-13 01:28Danilo G. Baio (dbaio) · 1.1_5

security/vuxml: Document net-im/py-matrix-synapse issue

PR:		251768
Submitted by:	contact@evilham.com
Security:	CVE-2020-26257

546f2335bb

2020-12-12 19:37Bernard Spil (brnrd) · 1.1_5

security/vuxml: Document p11-kit vulnerabilities

6b20d8e8a6

2020-12-12 17:23Bernard Spil (brnrd) · 1.1_5

security/vuxml: Document Unbound/NSD vuln

957cae45cc

2020-12-12 16:38Bernard Spil (brnrd) · 1.1_5

security/vuxml: Update LibreSSL vuln

* for 2020Q4 branch which is on 3.1

c7342561fc

2020-12-11 11:38Bernard Spil (brnrd) · 1.1_5

security/vuxml: Document LibreSSL vulnerability

ec16fd7f75

2020-12-11 11:32Dima Panov (fluffy) · 1.1_5

security/vuxml: add 19 CVE entries related to www/glpi

PR:		251754
Submitted by:	Mathias Monnerville

6fdeda4e86

2020-12-10 10:58Philip Paeps (philip) · 1.1_5

security/vuxml: FreeBSD 11.4 is vulnerable to CVE-2020-1971

As noted in FreeBSD-SA-20:33.openssl, this vulnerability is also known
to affect OpenSSL versions included in FreeBSD 11.4.  However, the
OpenSSL project is only giving patches for that version to premium
support contract holders.  The FreeBSD project does not have access to
these patches and recommends FreeBSD 11.4 users to either upgrade to
FreeBSD 12.x or leverage up to date versions of OpenSSL in the ports/pkg
system. The FreeBSD Project may update this advisory to include FreeBSD
11.4 should patches become publicly available.

17044cbd7a

2020-12-10 07:02Philip Paeps (philip) · 1.1_5

security/vuxml: add FreeBSD SA to OpenSSL entry

Reference FreeBSD-SA-20:33.openssl and note the fixed patch releases in
the recent OpenSSL entry.

558a77cf7f

2020-12-09 11:36Bernard Spil (brnrd) · 1.1_5

security/vuxml: cURL vulnerabilities

d80aec156c

2020-12-08 17:21Bernard Spil (brnrd) · 1.1_5

security/vuxml: Document OpenSSL NULL pointer dereference

953c065309

2020-12-08 00:53Matthias Fechner (mfechner) · 1.1_5

Document gitlab-ce vulnerabilities.

99b8a28eb7

2020-12-06 23:01Steve Wills (swills) · 1.1_5

Document consul issue

PR:		251418
Submitted by:	brd

2f3eff6b1f

2020-12-05 12:43Rene Ladan (rene) · 1.1_5

Document new vulnerabilities in www/chromium < 87.0.4280.88

09cc31553d

2020-12-04 18:26Ryan Steinmetz (zi) · 1.1_5

- Unbreak build after previous commit

08dc2a15fd

2020-12-04 17:56Adam Weinberger (adamw) · 1.1_5

security/vuxml: Add entry for gitea < 1.13.0

PR:		251577
Submitted by:	maintainer

1f3278c422

2020-12-02 11:03Philip Paeps (philip) · 1.1_5

security/vuxml: add FreeBSD SA-20:32.rtsold

cb3ac81e10

2020-12-02 11:03Philip Paeps (philip) · 1.1_5

security/vuxml: add FreeBSD SA-20:31.icmp6

c0dc157724

2020-12-01 20:37Niclas Zeising (zeising) · 1.1_5

vuxml: document xorg-server vulnerabilities

Document new vulnerabilities in xorg-server and sub ports:
CVE-2020-14360 and CVE-2020-25712

These issues can lead to privileges elevations for authorized clients
on systems where the X server is running privileged.

0288a02253

2020-11-27 01:34Brad Davis (brd) · 1.1_5

vuxml: Add entry for nomad < 0.12.6

180b14a900

2020-11-22 16:48Adam Weinberger (adamw) · 1.1_5

vuxml: Add entry for gitea < 1.12.6

5a6c403e6d

2020-11-21 23:14Bradley T. Hughes (bhughes) · 1.1_5

security/vuxml: document Node.js November 2020 Security Releases

https://nodejs.org/en/blog/vulnerability/november-2020-security-releases/

Sponsored by:	Miles AS

d05c7ce8f3

2020-11-21 15:41Thomas Zander (riggs) · 1.1_5

Document CVE-2020-28896 for mutt 2.0.2.

PR:		251278
Submitted by:	dereks@lifeofadishwasher.com
Security:	CVE-2020-28896

35fb3834f0

2020-11-16 12:13Dima Panov (fluffy) · 1.1_5

VuXML: document mozjpeg and libjpeg-turbo recent vulnerabilities

PR:		250190
Submitted by:	daniel.engberg.lists@pyret.net

d99a0c551f

2020-11-14 22:02Kurt Jaeger (pi) · 1.1_5

security/vuxml: add entries for databases/mantis

PR:		251141
Submitted by:	Zoltan Alexanderson Besse <zab@zltech.eu>

2126289e89

2020-11-12 22:26Dmitri Goutnik (dmgk) · 1.1_5

security/vuxml: Document lang/go vulnerabilities

36559cab3c

security/libressl +1 related 4 unaddressed · 8.2	Oct 28
multimedia/assimp 4 unaddressed · 6.9	Oct 28
www/rubygem-crass 1 unaddressed · 5.3	Oct 27
lang/python27 2 unaddressed · 6.3	Oct 27
lang/python311 4 unaddressed · 9.4	Oct 27
lang/python312 4 unaddressed · 9.4	Oct 27
lang/python313 +1 related 5 unaddressed · 9.4	Oct 27
lang/python314 +1 related 6 unaddressed · 9.4	Oct 27
lang/python315 4 unaddressed · 9.4	Oct 27
security/vaultwarden 2 CVEs · 8.6 fixed 1.37.4	Oct 27
www/grafana 15 unaddressed · 8.8	Oct 27
devel/atlantis 3 unaddressed · 8.8	Oct 27
www/tinymce 1 unaddressed · 8.5	Oct 27
x11/libXi 9 CVEs · 7.5 fixed 1.8.4 VuXML	Oct 27
archivers/zchunk 1 unaddressed · 5.3	Oct 27

CVE-2026-118374 8.2 security/libressl +1 more	Oct 28
CVE-2026-118373 6.3 security/libressl +1 more	Oct 28
CVE-2026-118372 6.3 security/libressl +1 more	Oct 28
CVE-2026-118371 6.3 security/libressl +1 more	Oct 28
CVE-2026-117608 6.9 multimedia/assimp	Oct 28
CVE-2026-116695 5.3 www/rubygem-crass	Oct 27
CVE-2026-103995 2.0 lang/python27 +7 more	Oct 27
CVE-2026-116678 fixed 5.8 security/vaultwarden	Oct 27
CVE-2026-16491 6.5 www/grafana	Oct 27
CVE-2026-116676 8.8 devel/atlantis	Oct 27
CVE-2026-116675 8.5 www/tinymce	Oct 27
CVE-2026-109090 fixed VuXML 7.5 x11/libXi	Oct 27
CVE-2026-109089 fixed VuXML 7.5 x11/libXi	Oct 27
CVE-2026-117556 5.3 archivers/zchunk	Oct 27
CVE-2026-105946 fixed 5.3 graphics/qt6-3d +29 more	Oct 27

py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27
ImageMagick6	Oct 26
ImageMagick6-nox11	Oct 26
ImageMagick7	Oct 26
ImageMagick7-nox11	Oct 26
node	Oct 24
node22	Oct 24
node24	Oct 24
node26	Oct 24
traefik	Oct 24