- Add drupal[78] entrya5af2c49c8
Port details
security/vuxml 1.1_6
Vulnerability and eXposure Markup Language DTD
Port info
- Maintainer
- ports-secteam@FreeBSD.org
- Packages
- latest: 1.1_6
- Upstream
- up to date
- Last update
- to 1.1_6 · fa646dcabe
- Quarterly
- 2026Q4: 1.1_6
- WWW
- https://vuxml.freebsd.org/
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install vuxmlinstalls 1.1_6 fromlatest; fromquarterly(2026Q4) 1.1_6- Port
# cd /usr/ports/security/vuxml && make install clean- Size
- 9.7 KiB download · 40 KiB installed
- License
- BSD2CLAUSE
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.1_6 | 1.1_6 | – |
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Dependencies
Depends on 5
- lang/python312 3.12.15 25 unaddressed
- textproc/libxslt 1.1.45
- textproc/xhtml-basic 1.0.20001219_2
- textproc/xhtml-modularization 1.0.20010410_1
- textproc/xmlcatmgr 2.2_4
Run and library dependencies of the package on latest. Build dependencies are not in the package index.
Required by 0
No package on latest depends on it.
Packages on latest that depend on it directly.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 1.1_6.Fixed (0)
No VuXML entries for this package.
Problem reports (5) · open in Bugzilla, most recently changed first
| PR | Summary | Status | Changed |
|---|---|---|---|
| 295797 | maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256 | In Progress | 2026-07-17 |
| 295836 | maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django | New | 2026-06-04 |
| 291717 | security/vuxml: add entry for uriparser < 1.0.0 | New | 2025-12-16 |
| 288090 | maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2 | New | 2025-07-08 |
| 270795 | security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries | In Progress | 2025-07-01 |
Commits (8,349)
Document py-matrix-synapse vulnerabilities PR: 242702 Submitted by: Sascha Biberhofer <ports@skyforge.at>54254290a6
security/vuxml: Document OpenSSL 1.0.2 vulne3f65488fc
Fix typo PR: 242627 Submitted by: lightside <lightside@gmx.com>f8265d01b1
Document two new spamassassin 3.4.2 vulnerabilities.
CVE-2019-12420 for Multipart Denial of Service Vulnerability
CVE-2018-11805 for nefarious CF files can be configured to run system
commands without any output or errors.65616c803eAdd entry for Samba4 CVE-2019-14861 and CVE-2019-14870 Security: CVE-2019-14861 CVE-2019-14870c8c970fb29
security/vuxml: dovecot vulnerability2a47f35183
Document gitlab vulnerabilities.bdb76a4cbd
Update libidn2 vulnerability Reported by: Stephen Wall <stephen.wall@redcom.com>, jkimd4aa09f716
Document Ghostscript vulnerabilities. Security: CVE-2019-14811, CVE-2019-14812, CVE-2019-14813, CVE-2019-14817090f30cce8
Add entry for phpmyadmin Sponsored by: Netzkommune GmbH69ceced024
vuxml: Add drm-fbsd11.2-kmod to drm vulnerability Add drm-fbsd11.2-kmod to the list of packages vulnerable to the drm graphics drivers -- Local privilege escalation and denial of serivce entry.512ada5323
- Document Django multiple vulnerabilities88245af53c
Document net-im/py-matrix-synapse vulnerabilities PR: 241574 Submitted by: Sascha Biberhofer <ports@skyforge.at>4477671a38
Document gitlab-ce vulnerability.ac63a03b82
Document www/gitlab-ce vulnerabilities.e65c546c1e
Document webkit2-gtk3 vulnabilities31d8c460e9
security/vuxml: Document net/py-urllib3 issues PR: 229322 Security: CVE-2018-20060 CVE-2019-11236 CVE-2019-11324a3096331a8
security/vuxml: add FreeBSD kernel entries for recent Intel CVEs PR: 241931 Submitted by: Miroslav Lachman <000.fbsd@quip.cz> Reviewed by: dch Approved by: joneum (ports-secteam) Security: CVE-2019-11135 Security: CVE-2019-11139 Security: CVE-2018-12126 Security: CVE-2018-12127 Security: CVE-2018-12130 Security: CVE-2018-11091 Security: CVE-2017-5715 Security: CVE-2018-12207 Sponsored by: SkunkWerks, GmbH9544524acf
Add entry for security/clamav PR: 242118 Sponsored by: Netzkommune GmbH38d998cd68
Add entry for dns/unbound PR: 242075 Sponsored by: Netzkommune GmbHb0fe6c86c1
security/vuxml: Document www/gitea issues PR: 241981 Submitted by: Nils Johannsen <nilsjohannsen@gmx.de> (based on) Approved by: stb@lassitu.de (maintainer)755123defe
Document asterisk vulnerabilities.a973d826cc
Remove extra whitespace.262ed615fa
Document intel drm driver vulnerabilities Document intel drm driver vulnerabilities related to Intel 2019.2 IPU [1]. [1] https://blogs.intel.com/technology/2019/11/ipas-november-2019-intel-platform-update-ipu1590d2c329
Add entry for www/squid PR: 241976 Sponsored by: Netzkommune GmbHc3e1797667
Document libidn2 vulnerabilityfb17797493
Document vulnerabilities in GNU cpio < 2.13.e7ea6c1e1b
Document libmad vulnerability582506a11a
Fix build. Sponsored by: Rubicon Communications, LLC (netgate.com)2bdddd6b05
Document new vulnerability in www/chromium < 78.0.3904.975a8742ffb1
fix typo Sponsored by: Netzkommune GmbH5726dd7cb6
Add entry for wordpress Sponsored by: Netzkommune GmbH3f701e9ab9
security/vuxml: Document nexus2-oss vulnerabilities PR: 241308 Approved by: tz (mentor, implicit)fff28f8780
Adjust affected GNU patch package version after r516964.231efba085
security/vuxml: Document PHP RCE issues0c587eb29c
- Document mediawiki's multiple vulnerabilities58543a225d
security/vuxml: Document MySQL quarterly vulnsf5387ff86c
Adjust entry 381deebb-f5c9-11e9-9c4f-74d435e60b7c for sysutils/file. Upstream version 5.37 is vulnerable, but the update to 5.37 in the ports tree was landed with a fix for the CVE entry. PR: 24142439bd2a9341
Add entry for heap buffer overflow in sysutils/file. PR: 241424 Submitted by: Nathan Owens <ndowens04@gmail.com> Approved by: jharris@widomaker.com (maintainer)0657fb4b72
Document webkit-gtk3 vulnerabilities.be7856f5a2
Document www/gitea information disclosure vulnerability PR: 241599 Submitted by: stb@lassitu.de (maintainer) Approved by: tz (mentor, implicit)8e994622a3
Fix build. Sponsored by: Rubicon Communications, LLC (Netgate)45b4b7d50f
Add entry about Samba vulnerabilities o CVE-2019-10218: Malicious servers can cause Samba client code to return filenames containing path separators to calling code. o CVE-2019-14833: When the password contains multi-byte (non-ASCII) characters, the check password script does not receive the full password string. o CVE-2019-14847: Users with the "get changes" extended access right can crash the AD DC LDAP server by requesting an attribute using the range= syntax. Security: CVE-2019-10218 CVE-2019-14833 CVE-2019-14847 Sponsored by: my wife76aa49480c
Document gitlab vulnerabilities.9e986d1a19
Add missing FreeBSD SAs Security: FreeBSD-SA-19:24.mqueuefs Security: FreeBSD-SA-19:23.midi Security: FreeBSD-SA-19:22.mbuf Security: FreeBSD-SA-19:21.bhyve Security: FreeBSD-SA-19:20.bsnmp Security: FreeBSD-SA-19:19.mldv2 Security: FreeBSD-SA-19:18.bzip2a50265163c
Document Varnish VSV00004 Workspace information leak9e7c0564ee
Document potential bypass of Runas user restrictions in sudo PR: 241244 Submitted by: Yasuhiro KIMURA <yasu@utahime.org>161943b0b6
Document rubygem-loofah vulnerability44bb9a92bf
- Document python37 multiple vulnerabilities.db1dd6d8da