Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-29 to 1.1_6 · 898db4939a
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined — that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,355)

2018-01-23 12:33Kirill Ponomarev (krion) · 1.1_3

Fix typo.

85cbe6f098

2018-01-23 12:23Kirill Ponomarev (krion) · 1.1_3

Document new vulnerability in dns/powerdns-recursor < 4.1.1

Obtained from:	https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-01.html
Security:	CVE-2018-1000003

47292a7ddb

2018-01-23 03:05Carlos J. Puga Medina (cpm) · 1.1_3

Document new vulnerabilities in www/chromium < 63.0.3239.108

Obtained from:	https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop_14.html
Security:	CVE-2017-15429

d96fdd0c24

2018-01-23 02:53Carlos J. Puga Medina (cpm) · 1.1_3

Document new vulnerabilities in www/chromium < 63.0.3239.84

Obtained from:	https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html

cf34e36d51

2018-01-23 01:39Carlos J. Puga Medina (cpm) · 1.1_3

Document new vulnerability in www/chromium < 62.0.3202.94

Obtained from:	https://chromereleases.googleblog.com/2017/11/stable-channel-update-for-desktop_13.html
Security:	CVE-2017-15428

9a949d9d27

2018-01-23 00:47Carlos J. Puga Medina (cpm) · 1.1_3

Add missing entry for www/chromium

Security:	CVE-2017-15406

b6ad8bebc8

2018-01-19 17:43Palle Girgensohn (girgen) · 1.1_3

Add more information about the recents security notice for shibboleth2-sp

15cd466ef8

2018-01-19 16:12Danilo G. Baio (dbaio) · 1.1_3

security/vuxml: Document vulnerability in dns/unbound

Security:	CVE-2017-15105

PR:		225313
Reported by:	jaap@NLnetLabs.nl

7b133373d0

2018-01-19 14:01Jochen Neumeister (joneum) · 1.1_3

Document phpbb3 issues

Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D13983

5ecacaa721

2018-01-19 13:45Bernard Spil (brnrd) · 1.1_3

security/vuxml: Fix tabs and spaces settings

1cca52d81d

2018-01-19 13:44Bernard Spil (brnrd) · 1.1_3

security/vuxml: Document 2018Q1 Oracle MySQL vulns

739a99e963

2018-01-19 07:15Jochen Neumeister (joneum) · 1.1_3

Document wordpress issues

Approved by:	tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D13954

88ada844d2

2018-01-17 21:50Steve Wills (swills) · 1.1_3

Document GitLab issue

1e4acf7f24

2018-01-14 03:19Ben Woods (woodsb02) · 1.1_3

Document DNS rebinding vulnerabilities in net-p2p/transmission-daemon

PR:		225150
Security:	https://www.vuxml.org/freebsd/3e5b8bd3-0c32-452f-a60e-beab7b762351.html

3c069bcbb8

2018-01-12 18:23Palle Girgensohn (girgen) · 1.1_3

Document vulnerability of devel/xmltooling

security/shibboleth2-sp depends on the xmltooling port

Security:	CVE-2018-0486

80b6c8e6ec

2018-01-11 22:18Adam Weinberger (adamw) · 1.1_3

Add vim-console instead of replacing vim-list.

Reported by:	ohauer

408baf5221

2018-01-11 21:36Adam Weinberger (adamw) · 1.1_3

Chase the vim-lite -> vim-console rename

e29f1402a5

2018-01-09 22:25Jung-uk Kim (jkim) · 1.1_3

Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb18-01.html

ddbb074f9a

2018-01-09 00:03Danilo G. Baio (dbaio) · 1.1_3

security/vuxml: Document vulnerability in www/awstats

Security:	CVE-2017-1000501

PR:		225007
Reported by:	Vidar Karlsen <vidar@karlsen.tech>

625cafb5d0

2018-01-06 21:43Danilo G. Baio (dbaio) · 1.1_3

security/vuxml: Document multiple vulnerabilities in irc/irssi

Security:	CVE-2018-5205
Security:	CVE-2018-5206
Security:	CVE-2018-5207
Security:	CVE-2018-5208

PR:		224954
Reported by:	tj@mrsk.me (email)
Reported by:	David O'Rourke <dor.bsd@xm0.uk>

062af1d130

2018-01-05 18:17Jan Beich (jbeich) · 1.1_3

security/vuxml: mark firefox < 57.0.4 as vulnerable

cfa075c4fa

2018-01-05 01:40Richard Gallamore (ultima) · 1.1_3

* Add modified date to for libevhtp vulnerable Thank you dbaio for catching this.

5a330cba29

2018-01-04 20:08Richard Gallamore (ultima) · 1.1_3

* Add libevhtp to list of vulnerable ports.

Libevhtp prior to 1.2.14 uses oniguruma 5.9.2 and is
vulnerable if using the REGEX option, which is the
default.

5235b5b994

2017-12-31 15:48Danilo G. Baio (dbaio) · 1.1_3

security/vuxml: Fix FreeBSD PR bugs references

e074dce170

2017-12-30 17:41Danilo G. Baio (dbaio) · 1.1_3

security/vuxml: Document vulnerabilities in www/otrs

Security:	CVE-2017-16664
Security:	CVE-2017-16854
Security:	CVE-2017-16921

PR:		224729
Reported by:	Vidar Karlsen <vidar@karlsen.tech>

1a41c9b05f

2017-12-29 10:28Eugene Grosbein (eugen) · 1.1_3

Fix cut-n-paste error in the previous addition for bouncycastle15 (6a131fbf-ec76-11e7-aa65-001b216d295b).

6e4023b93b

2017-12-29 10:23Eugene Grosbein (eugen) · 1.1_3

Document security defect in the Bouncy Castle Crypto APIs: CVE-2017-13098 ("ROBOT")

Obtained from:  https://www.bouncycastle.org/releasenotes.html
Security:       https://vuxml.FreeBSD.org/freebsd/6a131fbf-ec76-11e7-aa65-001b216d295b

04536f1959

2017-12-25 12:31Jan Beich (jbeich) · 1.1_3

security/vuxml: mark thunderbird < 52.5.2 as vulnerable

773beabfe8

2017-12-23 18:03Matthew Seaman (matthew) · 1.1_3

Document phpMyAdmin PMSA-2017-9: Critical XSRF/CSRF vulnerability.

09b6812547

2017-12-23 11:24Bernard Spil (brnrd) · 1.1_3

security/vuxml: Fix typo in CVE number of latest Oracle CPU entry

370377ca42

2017-12-23 10:55Guido Falsi (madpilot) · 1.1_3

Document new asterisk vulnerability.

e9893af029

2017-12-23 10:16Bernard Spil (brnrd) · 1.1_3

security/vuxml: Document new MariaDB vuln

- This is likely to also affect MySQL and other versions
   see https://security-tracker.debian.org/tracker/CVE-2017-15365

60fed23c73

2017-12-20 15:10Emanuel Haupt (ehaupt) · 1.1_3

Document multiple vulnerabilities in rsync.

PR:		224478
Submitted by:	yasu@utahime.org

750cf4b2fd

2017-12-19 03:15Steve Wills (swills) · 1.1_3

Document ruby issue

0454336b49

2017-12-18 22:48Alan Somers (asomers) · 1.1_3

Add vuxml entry for CVE-2017-16355 to rubygem-passenger

The vulnerable version was already replaced by r452356

Reviewed by:	brd
Approved by:	brd (ports)
Sponsored by:	Spectra Logic Corp
Differential Revision:	https://reviews.freebsd.org/D13482

19c7d8817f

2017-12-17 19:50Niclas Zeising (zeising) · 1.1_3

Document multiple vulnerabilities in libXfont and libXfont2.

The first two vulnerabilities are memory leaks when reading past valid
memory.

The last vulnerability is the possibility for an unprivileged X client to
read privileged files through symlinks

CVE-2017-13720
CVE-2017-13722
CVE-2017-16611

3a8e9defdc

2017-12-17 16:27Niclas Zeising (zeising) · 1.1_3

Add CVE to references.

031e3583d9

2017-12-17 16:23Niclas Zeising (zeising) · 1.1_3

Document x11/libXcursor -- integer overflow that can lead to heap buffer overflow.

CVE-2017-16612

c475853c94

2017-12-16 21:54Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3

Document global vulnerability

026f1dba41

2017-12-15 17:33Brad Davis (brd) · 1.1_3

Document Jenkins vulnerabilities.

993b644f19

2017-12-14 20:44Bradley T. Hughes (bhughes) · 1.1_3

security/vuxml: document Node.js vulnerabilities, December 2017

Approved by:	mat (co-mentor)
Differential Revision:	https://reviews.freebsd.org/D13489

32c24be8ba

2017-12-14 11:58Torsten Zuehlsdorff (tz) · 1.1_3

Document GitLab Vulnerability

Security: https://vuxml.FreeBSD.org/freebsd/e72a8864-e0bc-11e7-b627-d43d7e971a1b.html

80412434ed

2017-12-14 07:41Remko Lodder (remko) · 1.1_3

Add entry for CVE-2017-8819.

Requested by:	Roger Marquis
Hat:		FreeBSD Security Team

333b2d8d54

2017-12-13 21:45Guido Falsi (madpilot) · 1.1_3

- Add CVE names for old asterisk13 vulnerabilities - Fix typo

268e40d0b6

2017-12-13 21:37Guido Falsi (madpilot) · 1.1_3

Document asterisk13 vulnerability.

6af60eb47f

2017-12-13 15:44Steve Wills (swills) · 1.1_3

Document libxml2 issue

a1799de23c

2017-12-11 15:53Tijl Coosemans (tijl) · 1.1_3

Fix version range in latest curl entry.

5888f410cb

2017-12-11 15:45Tijl Coosemans (tijl) · 1.1_3

Add linux-c7-curl to latest curl entry.

Security:	301a01b7-d50e-11e7-ac58-b499baebfeaf

5bdc6f2e65

2017-12-10 16:41Mark Felder (feld) · 1.1_3

Document FreeBSD-SA-17:12.openssl

9d5ff4a4ee

2017-12-10 12:37Christoph Moench-Tegeder (cmt) · 1.1_3

document latest wireshark vulnerabilities

5528adb373

www/dolibarr 17 unaddressed · 8.8	Oct 28
www/dolibarr19 +1 related 18 unaddressed · 8.8	Oct 28
www/dolibarr21 +1 related 19 unaddressed · 8.8	Oct 28
net/samba425 1 CVE · 8.1 fixed 4.25.1	Oct 28
devel/libwasmtime 3 unaddressed · 9.9	Oct 28
mail/p5-MIME-Tools 10 CVEs · – fixed 5.519 VuXML	Oct 28
www/grafana 19 unaddressed · 8.8	Oct 28
net/kafka 10 unaddressed · –	Oct 28
security/libressl +1 related 4 unaddressed · 8.2	Oct 28
multimedia/assimp 4 unaddressed · 6.9	Oct 28
devel/jackson-databind 6 CVEs · 9.8 fixed 2.22.4 VuXML	Oct 28
www/chromium 45 unaddressed · 9.6 VuXML	Oct 27
www/linux-chrome 45 unaddressed · 9.6 VuXML	Oct 27
www/rubygem-crass 1 unaddressed · 5.3	Oct 27
lang/python27 2 unaddressed · 6.3	Oct 27

CVE-2026-118754 6.9 www/dolibarr +4 more	Oct 28
CVE-2026-109411 fixed 8.1 net/samba425	Oct 28
CVE-2026-118688 8.8 devel/libwasmtime	Oct 28
CVE-2026-116273 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116272 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116271 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116270 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116269 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116268 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116267 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116266 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116265 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116264 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-79656 6.0 www/grafana	Oct 28
CVE-2026-88858 6.5 www/grafana	Oct 28

git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27
ImageMagick6	Oct 26