Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-28 to 1.1_6 · fa646dcabe
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,349)

2020-02-27 11:23Dima Panov (fluffy) · 1.1_4

security/vuxml: fix vuxml entries for OpenSMTPd, remove duplicates with wrong version and missed description

Approved by:	ports-secteam (miwi)

6a8fbb6d10

2020-02-25 04:07Dima Panov (fluffy) · 1.1_4

Document OpenSMTPd vulnerability

LPE and RCE in OpenSMTPD's default install

Security:	CVE-2020-8793, CVE-2020-8794

a803ccb03c

2020-02-24 22:15Carlo Strub (cs) · 1.1_4

CVE-2020-8794

Security:	CVE-2020-8794

e432c69ff6

2020-02-24 22:11Carlo Strub (cs) · 1.1_4

CVE-2020-8793

Security:	CVE-2020-8793

ed68846697

2020-02-24 18:21Tijl Coosemans (tijl) · 1.1_4

Document Mbed TLS vulnerabilities 2019-12 and 2020-02.

Security:	https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2019-12
Security:	https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-02

f9fbed9e94

2020-02-23 09:58Tobias C. Berner (tcberner) · 1.1_4

vuxml: correct range for avidemux2

- avidemux2 version 2.6.12 switched to ffmpeg 2.7.6

136906c10f

2020-02-23 06:02Cy Schubert (cy) · 1.1_4

Post 93v ksh is only affected by the code injection vulnerability.

324d543795

2020-02-21 19:46Bernard Spil (brnrd) · 1.1_4

security/vuxml: Document latest WeeChat vulns

185fa765bf

2020-02-19 19:06Koop Mast (kwm) · 1.1_4

Document webkit2-gtk3 vulnabilities

80b1bda957

2020-02-14 02:16Philip Paeps (philip) · 1.1_4

security/vuxml: Add January FreeBSD SAs

SA-20:01.libfetch
SA-20:02.ipsec
SA-20:03.thrmisc

PR:		243702
Submitted by:	Miroslav Lachman <000.fbsd@quip.cz>

a4d170b41e

2020-02-13 22:41Matthias Fechner (mfechner) · 1.1_4

Document gitlab vulnerability.

855fed421a

2020-02-13 01:18Larry Rosenman (ler) · 1.1_4

security/vuxml: dovecot vulnerabilities

94a9dc4a91

2020-02-12 17:18Conrad Meyer (cem) · 1.1_4

security/vuxml: Document sysutils/grub2-bhyve escalations

Mitigated in r525916.

admbugs:	948
Reported by:	Reno Robert <renorobert AT gmail.com>
Approved by:	bapt
MFH:		2020Q1 (bapt)

132ee4ab41

2020-02-12 01:19Danilo G. Baio (dbaio) · 1.1_4

security/vuxml: Document graphics/libexif issue

PR:		244060
Reported by:	tj@mrsk.me (email)
Security:	CVE-2019-9278

e01eab17d7

2020-02-11 16:13Jung-uk Kim (jkim) · 1.1_4

Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb20-06.html

8c08d1d1ff

2020-02-11 09:53Jochen Neumeister (joneum) · 1.1_4

Fix entry for NGINX

Sponsored by:	Netzkommune GmbH

b073d2059f

2020-02-10 18:42Jochen Neumeister (joneum) · 1.1_4

Fix NGINX entry

Sponsored by:	Netzkommune GmbH

8f76fbc33a

2020-02-09 12:10Jochen Neumeister (joneum) · 1.1_4

Add entry for nginx

PR:		243952
Sponsored by:	Netzkommune GmbH

c2111afcf7

2020-02-07 20:38Cy Schubert (cy) · 1.1_4

Document ksh93 CVE-2019-14868: certain environment variables interpreted as arithmetic expressions on startup, leading to code injection.

Reported by:   Siteshwar Vashisht <svashisht@redhat.com>
MFH:		2020Q1
Security:	CVE-2019-14868
		https://bugzilla.redhat.com/show_bug.cgi?id=1757324
		https://access.redhat.com/security/cve/CVE-2019-14868

f90869f79e

2020-02-06 22:02Kurt Jaeger (pi) · 1.1_4

security/vuxml: Document Denial-of-Service vulnerability in ClamAV

- CVE-2020-3123

PR:		243913
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>

ef8766b7a7

2020-02-04 19:17Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4

Document Django vulnerability

a6318479d7

2020-02-02 21:14Bernard Spil (brnrd) · 1.1_4

security/vuxml: Properly document MariaDB vuln

PR:		243660
Reported by:	<ari ish com au>

6e86ec8b33

2020-02-02 08:20Ben Woods (woodsb02) · 1.1_4

Fix typo in SpamAssassin vuxml entry from 2020-01-31

df9f8fcb2b

2020-02-02 08:15Ben Woods (woodsb02) · 1.1_4

vuxml: Add entry for libssh CVE-2019-14889

Security:	CVE-2019-14889

03b40066ce

2020-01-31 21:22Cy Schubert (cy) · 1.1_4

Remove my older entry for CVE-2020-1931. The subequent entry by zeising@ is better.

Whitespace adjustment.

11d6938b9f

2020-01-31 17:02Niclas Zeising (zeising) · 1.1_4

vuxml: Add entries for spamassasin vulnerabilities.

9520d117ea

2020-01-31 15:00Cy Schubert (cy) · 1.1_4

Document sudo CVE-2019-18634:

Buffer overflow when pwfeedback is set in sudoers.

Security:	CVE-2019-18634

fcc09d8f36

2020-01-31 11:09Matthias Fechner (mfechner) · 1.1_4

Document gitlab vulnerabilities.

d1f34b13b9

2020-01-30 14:51Cy Schubert (cy) · 1.1_4

Document:

[CVE-2020-1931] Apache SpamAssassin Nefarious rule configuration
(.cf) files can be configured to run system commands with warnings

Security:	CVE-2020-1931
Security:	https://svn.apache.org/repos/asf/spamassassin/branches/3.4/\
			build/announcements/3.4.4.txt
Security:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-1931

c272497917

2020-01-30 07:25Dima Panov (fluffy) · 1.1_4

Document mail/opensmtpd LPE and RCE vulnerabilities

PR:		243686
Security:	CVE-2020-7247

ef951cf1f2

2020-01-29 16:29Li-Wen Hsu (lwhsu) · 1.1_4

Document Jenkins Security Advisory 2020-01-29

Sponsored by:	The FreeBSD Foundation

a98bf8af37

2020-01-29 14:23Baptiste Daroussin (bapt) · 1.1_4

Document libfetch vulnerability which affects pkg.

03d4521404

2020-01-27 02:38Timur I. Bakeyev (timur) · 1.1_4

Add an entry about CVE-2019-14902, CVE-2019-14907, CVE-2019-19344 vulnerabilities in the Samba 4.1[01] versions.

Security:	CVE-2019-14902
		CVE-2019-14907
		CVE-2019-19344

6e2c495e37

2020-01-26 18:51Koop Mast (kwm) · 1.1_4

Document webkit-gtk3 vulnabilities.

22bb132481

2020-01-24 23:20Kai Knoblich (kai) · 1.1_4

security/vuxml: Document graphics/py-pillow issues

PR:		243336
Security:	CVE-2019-19911
		CVE-2020-5310
		CVE-2020-5311
		CVE-2020-5312
		CVE-2020-5313

ad63d0e4b2

2020-01-20 12:07Jochen Neumeister (joneum) · 1.1_4

Add entry for www/gitea

PR:		243437
Reported by:	stb@lassitu.de
Sponsored by:	Netzkommune GmbH

5996da98c3

2020-01-15 21:23Bernard Spil (brnrd) · 1.1_4

security/vuxml: Document 2020Q1 Oracle MySQL Vulns

7b5587fba5

2020-01-15 14:54Niclas Zeising (zeising) · 1.1_4

vuxml: Document recent intel GPU vulnerability

982a9d5630

2020-01-14 14:57Adam Weinberger (adamw) · 1.1_4

VuXML: Add entry for p5-Template-Toolkit directory traversal bug

3998cc5349

2020-01-14 08:28Matthias Fechner (mfechner) · 1.1_4

Document gitlab vulnerability.

8d3aba5357

2020-01-11 19:32Matthias Andree (mandree) · 1.1_4

mark e2fsprogs vulnerable, CVE-2019-5188

Security:	8b61308b-322a-11ea-b34b-1de6fb24355d
Security:	CVE-2019-5188

ab8325aa83

2020-01-11 09:19Matthias Fechner (mfechner) · 1.1_4

Document phpMyAdmin vulnerability.

c79951a82d

2020-01-06 18:27Kai Knoblich (kai) · 1.1_4

security/vuxml: Document net-mgmt/cacti issues

PR:		242834
Submitted by:	Michael Muenz <m.muenz@gmail.com> (based on)
Security:	CVE-2019-17357
                CVE-2019-17358

47097b0194

2020-01-03 10:18Matthias Fechner (mfechner) · 1.1_4

Document gitlab vulnerabilities.

a1d42c6cff

2019-12-29 13:58Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4

Document rubygem-rack vulnerability

391d196238

2019-12-29 13:11Matthias Andree (mandree) · 1.1_4

Document graphics/ilmbase graphics/openexr vulnerabilities.

Security:	e4d9dffb-2a32-11ea-9693-e1b3f6feec79
Security:	CVE-2018-18443
Security:	CVE-2018-18444

4d15461f06

2019-12-26 11:03Jochen Neumeister (joneum) · 1.1_4

Add entry for wordpress

Sponsored by:	Netzkommune GmbH

37ff2c14db

2019-12-25 13:25Jochen Neumeister (joneum) · 1.1_4

Add entry for typo3

PR:		242707 242708
Sponsored by:	Netzkommune GmbH

af3b8d8911

2019-12-21 12:04Matthias Andree (mandree) · 1.1_4

Add vulnerability of e2fsprogs quota code < 1.45.4

Security:	ad3451b9-23e0-11ea-8b36-f1925a339a82
Security:	CVE-2019-5094

fd22ba63e8

2019-12-21 03:36Jose Alonso Cardenas Marquez (acm) · 1.1_4

- Re-add py-matrix-synapse entry

84fd6331de

security/libressl +1 related 4 unaddressed · 8.2	Oct 28
multimedia/assimp 4 unaddressed · 6.9	Oct 28
devel/jackson-databind 6 CVEs · 9.8 fixed 2.22.4 VuXML	Oct 28
www/chromium 45 unaddressed · 8.8 VuXML	Oct 27
www/linux-chrome 45 unaddressed · 8.8 VuXML	Oct 27
www/rubygem-crass 1 unaddressed · 5.3	Oct 27
lang/python27 2 unaddressed · 6.3	Oct 27
lang/python311 +5 related 12 unaddressed · 9.4	Oct 27
lang/python315 5 unaddressed · 9.4	Oct 27
security/vaultwarden 2 CVEs · 8.6 fixed 1.37.4	Oct 27
www/grafana 15 unaddressed · 8.8	Oct 27
devel/atlantis 3 unaddressed · 8.8	Oct 27
www/tinymce 1 unaddressed · 8.5	Oct 27
x11/libXi 9 CVEs · 7.5 fixed 1.8.4 VuXML	Oct 27
archivers/zchunk 1 unaddressed · 5.3	Oct 27

CVE-2026-118374 8.2 security/libressl +1 more	Oct 28
CVE-2026-118373 6.3 security/libressl +1 more	Oct 28
CVE-2026-118372 6.3 security/libressl +1 more	Oct 28
CVE-2026-118371 6.3 security/libressl +1 more	Oct 28
CVE-2026-117608 6.9 multimedia/assimp	Oct 28
CVE-2026-110879 fixed VuXML 9.8 devel/jackson-databind	Oct 28
CVE-2026-118338 8.8 www/chromium +1 more	Oct 27
CVE-2026-118356 8.8 www/chromium +1 more	Oct 27
CVE-2026-118319 – www/chromium +1 more	Oct 27
CVE-2026-118315 8.8 www/chromium +1 more	Oct 27
CVE-2026-118312 – www/chromium +1 more	Oct 27
CVE-2026-118347 8.8 www/chromium +1 more	Oct 27
CVE-2026-118341 8.8 www/chromium +1 more	Oct 27
CVE-2026-118342 – www/chromium +1 more	Oct 27
CVE-2026-118308 – www/chromium +1 more	Oct 27

git-lfs	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27
ImageMagick6	Oct 26
ImageMagick6-nox11	Oct 26
ImageMagick7	Oct 26