Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-28 to 1.1_6 · 4fa1ce71cd
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,350)

2019-10-19 11:52Wen Heping (wen) · 1.1_4

- Document python37 multiple vulnerabilities.

db1dd6d8da

2019-10-15 16:43Kai Knoblich (kai) · 1.1_4

security/vuxml: Document graphics/py-pillow issue

PR:		241268
Security:	CVE-2019-16865

f8123be2d7

2019-10-11 19:36Kurt Jaeger (pi) · 1.1_4

security/vuxml: mongodb vulnerabilities

- CVE-2019-2386, CVE-2019-2389, CVE-2019-2390

PR:		239717
Submitted by:	Ronald Klop <ronald-lists@klop.ws>

d2f70543be

2019-10-09 14:31Vinícius Zavam (egypcio) · 1.1_4

security/vuxml: add CVE-2011-2767 [www/mod_perl2]

https://nvd.nist.gov/vuln/detail/CVE-2011-2767

a5393b578b

2019-10-06 07:52Cy Schubert (cy) · 1.1_4

Take PORTEPOCH into account.

PR:		241066
Reported by:	tobik

89756135c3

2019-10-06 03:48Cy Schubert (cy) · 1.1_4

Document two new Xpdf vulnerabilities: CVE-2019-16927 and CVE-2019-9877.

PR:		241066
Security:	https://nvd.nist.gov/vuln/detail/CVE-2019-16927
Security:	https://nvd.nist.gov/vuln/detail/CVE-2019-9877
Security:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9877
Security:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16927

f83872158c

2019-10-03 21:28Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4

Document unbound vulnerability

202f2ee62f

2019-10-02 21:24Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4

Document ruby vulnerability

b2161235de

2019-10-02 18:20Matthias Fechner (mfechner) · 1.1_4

Document gitlab vulnerabilities.

c9e48d5c4b

2019-10-02 18:16Matthias Fechner (mfechner) · 1.1_4

Document gitlab vulnerabilities.

15b1732c52

2019-10-02 18:06Matthias Fechner (mfechner) · 1.1_4

Documented gitlab vulnerabilities.

32d0dbb7ab

2019-10-02 11:43Kai Knoblich (kai) · 1.1_4

security/vuxml: Document net-mgmt/cacti issue

PR:		240999
Reported by:	Michael Muenz <m.muenz@gmail.com>
Security:	CVE-2019-16723

92b8880414

2019-09-29 15:09Vsevolod Stakhov (vsevolod) · 1.1_4

Fix misprint

4a0577120c

2019-09-29 10:26Vsevolod Stakhov (vsevolod) · 1.1_4

Document RCE in Exim: CVE-2019-16928

61454ad8a4

2019-09-28 13:51Dmitri Goutnik (dmgk) · 1.1_4

security/vuxml: Add entry for lang/go and lang/go-devel CVE-2019-16276

Approved by:	araujo (mentor)
Differential Revision:	https://reviews.freebsd.org/D21802

21e0993aaa

2019-09-27 21:30Tobias Kortkamp (tobik) · 1.1_4

Document databases/mantis vulnerabilities

7bc1258e28

2019-09-26 01:07Li-Wen Hsu (lwhsu) · 1.1_4

Document Jenkins Security Advisory 2019-09-25

Sponsored by:	The FreeBSD Foundation

46e2305ac6

2019-09-23 11:01Tijl Coosemans (tijl) · 1.1_4

Add linux-c6-openssl to CVE-2019-1559 entry.

Security:	https://access.redhat.com/errata/RHSA-2019:2471

8ab7f05f3f

2019-09-20 17:56Kurt Jaeger (pi) · 1.1_4

security/vuxml: add CVEs for net/kea

PR:		240399
Submitted by:	Andrey Pevnev <apevnev@me.com>

27178fbe07

2019-09-19 14:43Kurt Jaeger (pi) · 1.1_4

security/vuxml: add entry for CVE-2019-15903 in expat < 2.2.8

PR:		240613
Submitted by:	Sergei Vyshenski <svysh.fbsd@gmail.com> (maintainer)

8b44a1cbcf

2019-09-19 11:40Tijl Coosemans (tijl) · 1.1_4

Document Mbed TLS side channel attack on deterministic ECDSA.

Security:	https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2019-10

51ad43c238

2019-09-18 00:50Craig Leres (leres) · 1.1_4

security/vuxml: Mark bro < 2.6.4 as vulnerable as per:

https://raw.githubusercontent.com/zeek/zeek/3b5a9f88ece1d274edee897837e280ef751bde94/NEWS

The issue is inproper data handling of data that is either either
empty or unterminated, resulting in invalid memory access or heap
buffer over-read.

Approved by:	matthew (mentor, implicit)

548c0111a1

2019-09-16 13:45Kurt Jaeger (pi) · 1.1_4

security/vuxml: fix vuln.xml entry for expat

PR:		238864
Submitted by:	tobik

65300880b1

2019-09-16 13:19Kurt Jaeger (pi) · 1.1_4

security/vuxml: document expat2 pre-2.2.7 vulnerability

PR:		238864
Submitted by:	Sergei Vyshenski <svysh.fbsd@gmail.com>

b57de64886

2019-09-16 08:05Bernard Spil (brnrd) · 1.1_4

security/vuxml: Fix latest openssl entry

Reported by:	tobik

f9956548b9

2019-09-14 23:17Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4

Document curl vulnerability

d48d8b4f72

2019-09-11 10:30Bernard Spil (brnrd) · 1.1_4

security/vuxml: Document OpenSSL vulnerabilities

9e4b4569e4

2019-09-11 02:33Jung-uk Kim (jkim) · 1.1_4

Document the latest Flash Player vulnerabilities.

https://helpx.adobe.com/security/products/flash-player/apsb19-46.html

2564b65b59

2019-09-07 23:07Matthias Andree (mandree) · 1.1_4

Document devel/oniguruma < 6.9.3 vulnerabilities.

PR:		240368
Reported by:	Pascal Christen
Obtained from:	MITRE
Security:	a8d87c7a-d1b1-11e9-a616-0992a4564e7c
Security:	CVE-2019-13224
Security:	CVE-2019-13225

ba776cba6b

2019-09-07 15:43Mark Felder (feld) · 1.1_4

Document recent xymon-server CVEs

4fdb5434b3

2019-09-06 14:46Jochen Neumeister (joneum) · 1.1_4

Add entry for wordpress

Sponsored by:	Netzkommune GmbH

65fb479d45

2019-09-06 12:37Vsevolod Stakhov (vsevolod) · 1.1_4

Document Exim vulnerability

26eff7f6fc

2019-09-06 09:53Guido Falsi (madpilot) · 1.1_4

Document asterisk vulnerabilities.

8d342ba562

2019-09-04 01:32Timur I. Bakeyev (timur) · 1.1_4

Add entry about CVE-2019-10197

On a Samba SMB server for all versions of Samba from 4.9.0 clients are
able to escape outside the share root directory if certain
configuration parameters set in the smb.conf file.

Security:	CVE-2019-10197

40d0c206a7

2019-09-03 23:32Jan Beich (jbeich) · 1.1_4

security/vuxml: mark firefox < 69 as vulnerable

0ad56d0193

2019-09-03 16:33Ryan Steinmetz (zi) · 1.1_4

- Document www/varnish6 vulnerability

bf64057171

2019-09-02 10:13Carlos J. Puga Medina (cpm) · 1.1_4

Document libgcrypt ECDSA side-channel attack vulnerability

Security:	CVE-2019-13627

819812de4b

2019-08-31 11:04Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4

Update ruby version

PR:		240227
Reported by:	Trond Endrestol <Trond.Endrestol@ximalas.info>

0478e9e98b

2019-08-30 09:01Tobias Kortkamp (tobik) · 1.1_4

Document www/webkit2-gtk3 vulnerabilities

PR:		240196

38b65fb97a

2019-08-30 07:45Matthias Fechner (mfechner) · 1.1_4

Document www/gitlab-ce vulnerabilities.

8948e41bad

2019-08-30 02:07Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_4

Document RDoc vulnerability

054e9a59ad

2019-08-28 17:58Larry Rosenman (ler) · 1.1_4

security/vuxml: document dovecot,dovecot-pigeonhole vulns

45bb6e18eb

2019-08-28 17:36Li-Wen Hsu (lwhsu) · 1.1_4

Document Jenkins Security Advisory 2019-08-28

Sponsored by:	The FreeBSD Foundation

62645eebc1

2019-08-28 16:29Jan Beich (jbeich) · 1.1_4

security/vuxml: mark cliqz < 1.28.2 as vulnerable

PR:		239994
Submitted by:	Santhosh Raju

81b219df82

2019-08-25 20:34Dave Cottlehuber (dch) · 1.1_4

security/vuxml: Document multiple vulnerabilities in www/h2o*

http://blog.kazuhooku.com/2019/08/h2o-version-226-230-beta2-released.html

PR: 239843
Reported by:	Kazuho Oku
Approved by:	jrm (mentor, implicit)
Security:	CVE-2019-9512
Security:	CVE-2019-9514
Security:	CVE-2019-9515
Sponsored by:	SkunkWerks, GmbH

3176b85a46

2019-08-23 23:16Kai Knoblich (kai) · 1.1_4

security/vuxml: Document www/gitea issues

PR:		240046
Submitted by:	stb@lassitu.de (maintainer)

81f1d59511

2019-08-23 08:33Kurt Jaeger (pi) · 1.1_4

security/vuxml: Document multiple vulnerabilities in ClamAV

PR:		240020
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org> (clamav maintainer)

18b3ebdcf2

2019-08-21 00:22Bradley T. Hughes (bhughes) · 1.1_4

security/vuxml: document recent Node.js vulnerabilities

https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/

Sponsored by:	Miles AS

96c5555873

2019-08-20 16:26Thomas Zander (riggs) · 1.1_4

Document vlc vulnerabilities prior to release 3.0.8

4235a4cdbb

2019-08-19 19:08Jochen Neumeister (joneum) · 1.1_4

Add dns/nsd

PR:		239964
Reported by:	Jaap Akkerhuis <jaap@NLnetLabs.nl>
Sponsored by:	Netzkommune GmbH

ae1786003a

www/grafana 18 unaddressed · 8.8	Oct 28
net/kafka 10 unaddressed · –	Oct 28
security/libressl +1 related 4 unaddressed · 8.2	Oct 28
multimedia/assimp 4 unaddressed · 6.9	Oct 28
devel/jackson-databind 6 CVEs · 9.8 fixed 2.22.4 VuXML	Oct 28
www/chromium 45 unaddressed · 8.8 VuXML	Oct 27
www/linux-chrome 45 unaddressed · 8.8 VuXML	Oct 27
www/rubygem-crass 1 unaddressed · 5.3	Oct 27
lang/python27 2 unaddressed · 6.3	Oct 27
lang/python311 +5 related 12 unaddressed · 9.4	Oct 27
lang/python315 5 unaddressed · 9.4	Oct 27
security/vaultwarden 2 CVEs · 8.6 fixed 1.37.4	Oct 27
devel/atlantis 3 unaddressed · 8.8	Oct 27
www/tinymce 1 unaddressed · 8.5	Oct 27
x11/libXi 9 CVEs · 7.5 fixed 1.8.4 VuXML	Oct 27

CVE-2026-88858 6.5 www/grafana	Oct 28
CVE-2026-88967 7.7 www/grafana	Oct 28
CVE-2026-100105 7.7 www/grafana	Oct 28
CVE-2026-114349 – net/kafka	Oct 28
CVE-2026-112375 – net/kafka	Oct 28
CVE-2026-116593 – net/kafka	Oct 28
CVE-2026-115644 – net/kafka	Oct 28
CVE-2026-111551 – net/kafka	Oct 28
CVE-2026-111496 – net/kafka	Oct 28
CVE-2026-111115 – net/kafka	Oct 28
CVE-2026-111108 – net/kafka	Oct 28
CVE-2026-110952 – net/kafka	Oct 28
CVE-2026-83525 – net/kafka	Oct 28
CVE-2026-118374 8.2 security/libressl +1 more	Oct 28
CVE-2026-118373 6.3 security/libressl +1 more	Oct 28

git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27
ImageMagick6	Oct 26