Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-29 to 1.1_6 · 898db4939a
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined — that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,355)

2017-02-04 18:31Mark Felder (feld) · 1.1_3

Document libebml vulnerabilities

PR:		216659
Security:	CVE-2015-8789
Security:	CVE-2015-8790
Security:	CVE-2015-8791

691c40d247

2017-02-04 18:21Mark Felder (feld) · 1.1_3

Document freeimage vulnerability

PR:		216657
Security:	CVE-2016-5684

a2a40c8989

2017-02-02 23:48Ben Woods (woodsb02) · 1.1_3

Add additional vulnerability for wordpress 4.7.1 that was initially kept quiet by the wordpress team [1].

[1] https://make.wordpress.org/core/2017/02/01/disclosure-of-additional-security-fix-in-wordpress-4-7-2/

Security:	https://vuxml.FreeBSD.org/freebsd/54e50cd9-c1a8-11e6-ae1b-002590263bf5.html

509007bbe9

2017-02-01 18:05Christoph Moench-Tegeder (cmt) · 1.1_3

document shotwell vulnerability

4f7dba4925

2017-02-01 17:54Li-Wen Hsu (lwhsu) · 1.1_3

Document Jenkins Security Advisory 2017-02-01

585a3dcc3d

2017-01-30 15:27Mark Felder (feld) · 1.1_3

Fix openssl vuxml entry

PR:		216524

dfb67e36ca

2017-01-29 04:13Ben Woods (woodsb02) · 1.1_3

Document Wordpress security issues in 4.7.1.

PR:		216540
PR:		216515
Reported by:	Jochen Neumeister <joneum@bsdproject.de>
Reported by:	Mikhail Timofeev <9267096@gmail.com>
Security:	CVE-2017-5610
Security:	CVE-2017-5611
Security:	CVE-2017-5612
Security:	https://vuxml.FreeBSD.org/freebsd/14ea4458-e5cd-11e6-b56d-38d547003487.html

518559d928

2017-01-27 23:58Mark Felder (feld) · 1.1_3

Document vulnerability in net-mgmt/nfsen

86aff17c19

2017-01-26 18:44Carlos J. Puga Medina (cpm) · 1.1_3

Document new vulnerabilities in www/chromium < 56.0.2924.76

Obtained from:	https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html

59b3207189

2017-01-26 15:44Bernard Spil (brnrd) · 1.1_3

security/vuxml: Document new OpenSSL vulnerabilities

4b14de66e7

2017-01-24 23:50Jan Beich (jbeich) · 1.1_3

security/vuxml: mark Gecko < 51.0/45.7esr as vulnerable

9e90fe8cbb

2017-01-24 09:28Matthew Seaman (matthew) · 1.1_3

Document security vulnerabilities fixed in phpMyAdmin 4.6.6

a89256410d

2017-01-23 18:53Steve Wills (swills) · 1.1_3

Document nvmupdate security issue

Submitted by:	kozlov.sergey.404@gmail.com (maintainer)
Reviewed by:	sbruno
Sponsored by:	Intel
Differential Revision:	https://reviews.freebsd.org/D9121

96ab3f595e

2017-01-23 03:36Jason Unovitch (junovitch) · 1.1_3

Update OpenSSL impacted version

The reference cites 1.0.1u and prior as impacted. security/openssl would
have resolved in r381789. security/openssl-devel would have not have been
impacted as that port had been the newer 1.1.x branch since inception.

Reported by:	Thomas Schemme (via email)
Security:	CVE-2016-7056
Security:	https://vuxml.FreeBSD.org/freebsd/7caebe30-d7f1-11e6-a9a5-b499baebfeaf.html

9c45a4bb82

2017-01-20 03:41Jason Unovitch (junovitch) · 1.1_3

Include php56 in today's PHP vulnerability

Security:	https://vuxml.FreeBSD.org/freebsd/709e025a-de8b-11e6-a9a5-b499baebfeaf.html

97a687b517

2017-01-19 22:14Bernard Spil (brnrd) · 1.1_3

security/vuxml: Document PHP vulnerabilities

eb1efbe039

2017-01-19 05:08Jason E. Hale (jhale) · 1.1_3

Document graphics/icoutils vulnerabilities

878af3e1a0

2017-01-18 21:04Bernard Spil (brnrd) · 1.1_3

security/vuxml: Document mysql vulnerabilities

- Documented in Oracle Critical Patch Update
  - MariaDB ChangeLogs refer to the same CVE IDs

c9c7fbef89

2017-01-18 12:22Jason Unovitch (junovitch) · 1.1_3

Document mulitiple PowerDNS vulnerabilities

PR:		216135
PR:		216136
Reported by:	Dani <i.dani@outlook.com>
Security:	CVE-2016-2120
Security:	CVE-2016-7068
Security:	CVE-2016-7072
Security:	CVE-2016-7073
Security:	CVE-2016-7074
Security:	https://vuxml.FreeBSD.org/freebsd/e3200958-dd6c-11e6-ae1b-002590263bf5.html

5e0dbaa1b3

2017-01-16 20:09Thierry Thomas (thierry) · 1.1_3

Adding www/tt-rss to the phpmailer 5.2.22 vulnerability.

a5c2efa69a

2017-01-15 16:08Jason Unovitch (junovitch) · 1.1_3

Document groovy remote execution of untrusted code/DoS vulnerability

Security:	CVE-2016-6814
Security:	https://vuxml.FreeBSD.org/freebsd/4af92a40-db33-11e6-ae1b-002590263bf5.html

41263e0c1d

2017-01-15 04:03Jason Unovitch (junovitch) · 1.1_3

Document RabbitMQ Authentication vulnerability

PR:		216026
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>
Security:	CVE-2016-9877
Security:	https://vuxml.FreeBSD.org/freebsd/6aa956fb-d97f-11e6-a071-001e67f15f5a.html

ff07ef6570

2017-01-15 03:48Jason Unovitch (junovitch) · 1.1_3

Amend Irssi 0.8.21 entry. Another CVE was assigned.

PR:		216020
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>
Security:       CVE-2017-5356
Security:       https://vuxml.FreeBSD.org/freebsd/3d6be69b-d365-11e6-a071-001e67f15f5a.html

939ac5f992

2017-01-15 03:39Jason Unovitch (junovitch) · 1.1_3

Follow up on r431476's MySQL documentation; cite a source

de0b4eff1c

2017-01-15 03:23Jason Unovitch (junovitch) · 1.1_3

Mention later OpenSSH VuXML entry supercedes the duplicate

ca16863e77

2017-01-15 03:16Jason Unovitch (junovitch) · 1.1_3

Document Wordpress security issues in 4.7.1.

Note per upstream PHPMailer was updated but "No specific issue appears
to affect WordPress or any of the major plugins we investigated". As such
leave the PHPMailer entry as is at this time.

PR:		216059
Reported by:	Jochen Neumeister <joneum@bsdproject.de>
Security:	CVE-2017-5487
Security:	CVE-2017-5488
Security:	CVE-2017-5489
Security:	CVE-2017-5490
Security:	CVE-2017-5491
Security:	CVE-2017-5492
Security:	CVE-2017-5493
Security:	https://vuxml.FreeBSD.org/freebsd/b180d1fb-dac6-11e6-ae1b-002590263bf5.html

ef3cbd05fb

2017-01-14 18:10Bernard Spil (brnrd) · 1.1_3

security/vuxml: Document multiple MySQL vulnerabilities

20eba74eb2

2017-01-14 00:47Bryan Drewery (bdrewery) · 1.1_3

OpenSSH 7.3.p1_4,1 had SCTP on by default by accident. Suggest fixed rev 5.

bda6625bd6

2017-01-14 00:40Bryan Drewery (bdrewery) · 1.1_3

Fix OpenSSH entry as a patch was missed.

9df567d1aa

2017-01-14 00:25Bryan Drewery (bdrewery) · 1.1_3

OpenSSH 7.3_2 covers CVE-2016-10009 and CVE-2016-10010

c8fce53433

2017-01-13 17:49Mark Felder (feld) · 1.1_3

Consolidate duplicate openssh vuxml entries

7dab44519c

2017-01-13 16:02Nikolai Lifanov (lifanov) · 1.1_3

replace wildcard in range with a specific version

Reported by:	matthew
Reviewed by:	matthew
Approved by:	matthew (mentor)
Differential Revision:	https://reviews.freebsd.org/D9158

444f48a7b2

2017-01-13 00:09Nikolai Lifanov (lifanov) · 1.1_3

document ansible vulnerabilities

Reviewed by:	matthew
Approved by:	matthew (mentor)
Security:	CVE-2016-9587
Security:	https://vuxml.FreeBSD.org/freebsd/a93c3287-d8fd-11e6-be5c-001fbc0f280f.html
Differential Revision:	https://reviews.freebsd.org/D9158

c003da2d2c

2017-01-12 12:49Torsten Zuehlsdorff (tz) · 1.1_3

Document phpmailer vulnerabilities.

Security: CVE-2017-5223
Security: https://vuxml.FreeBSD.org/freebsd/7ae0be99-d8bb-11e6-9b7f-d43d7e971a1b.html

35c9f96233

2017-01-12 09:15Mathieu Arnold (mat) · 1.1_3

Fixup bind9-devel's version for last vuln.

Sponsored by:	Absolight

9652f96422

2017-01-12 08:27Xin LI (delphij) · 1.1_3

Document BIND multiple vulnerabilities.

579785c327

2017-01-11 18:28Mark Felder (feld) · 1.1_3

Document FreeBSD-SA-17:01.openssh

09b2eb97af

2017-01-11 12:50Bernard Spil (brnrd) · 1.1_3

security/vuxml: Fix version number of libressl-devel

dfab468980

2017-01-11 12:41Bernard Spil (brnrd) · 1.1_3

security/vuxml: Document OpenSSL ECDSA P-256 vulnerability

- Affects libressl as well

Security:	CVE-2016-7056

a879ebfb54

2017-01-11 03:21Jason Unovitch (junovitch) · 1.1_3

Document Flash vulnerabilities in Adobe Security Bulletin APSB17-02

Security:	CVE-2017-2925
Security:	CVE-2017-2926
Security:	CVE-2017-2927
Security:	CVE-2017-2928
Security:	CVE-2017-2930
Security:	CVE-2017-2931
Security:	CVE-2017-2932
Security:	CVE-2017-2933
Security:	CVE-2017-2934
Security:	CVE-2017-2935
Security:	CVE-2017-2936
Security:	CVE-2017-2937
Security:	CVE-2017-2938
Security:	https://vuxml.FreeBSD.org/freebsd/2a7bdc56-d7a3-11e6-ae1b-002590263bf5.html

2223584cfb

2017-01-10 04:13Jason Unovitch (junovitch) · 1.1_3

Mention pcsc-lite CVE (it was in next message in cited URL)

While here, fix spacing

PR:		215834

bda9a4d2e9

2017-01-09 19:21Mark Felder (feld) · 1.1_3

Document moinmoin vulnerabilities

PR:		214937
Security:	CVE-2016-7146 CVE-2016-7148 CVE-2016-9119

d5453d2132

2017-01-09 19:12Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_3

Fix openssh-portable version

78500a4d6f

2017-01-09 18:37Mark Felder (feld) · 1.1_3

Document libvncserver vulnerabilities

PR:		215805
Security:	CVE-2016-9941 CVE-2016-9942

880af35570

2017-01-09 18:32Mark Felder (feld) · 1.1_3

Document libdwarf vulnerabilities

Security:	CVE-2016-5027 CVE-2016-5028 CVE-2016-5029 CVE-2016-5030
Security:	CVE-2016-5031 CVE-2016-5032 CVE-2016-5033 CVE-2016-5035
Security:	CVE-2016-5037 CVE-2016-5040 CVE-2016-5041 CVE-2016-5043
Security:	CVE-2016-5044 CVE-2016-7510 CVE-2016-7511 CVE-2016-8679
Security:	CVE-2016-8680 CVE-2016-8681 CVE-2016-9275 CVE-2016-9276
Security:	CVE-2016-9480 CVE-2016-9558

PR:		215085

91b087f759

2017-01-09 18:14Mark Felder (feld) · 1.1_3

Document lynx vulnerabilities

PR:		215464
Security:	CVE-2014-3566
Security:	CVE-2016-9179

4aa95d7ef8

2017-01-09 17:49Mark Felder (feld) · 1.1_3

Document hdf5 CVEs

PR:		214938
Security:	CVE-2016-4330
SecuritY:	CVE-2016-4331
Security:	CVE-2016-4332
Security:	CVE-2016-4333

1c11fe6a1b

2017-01-09 17:25Mark Felder (feld) · 1.1_3

Add additional EoL ports to vuxml

PR:		211975

4d76d4228d

2017-01-09 17:07Mark Felder (feld) · 1.1_3

Fix vuxml

CWE cannot be used in <cvename>

2819e17dea

2017-01-09 15:24Nikolai Lifanov (lifanov) · 1.1_3

security/vuxml: document pcsc-lite vulnerabilities

PR:		215834
Submitted by:	Mahdi Mokhtari <mokhi64@gmail.com> (maintainer)
Reviewed by:	matthew
Approved by:	matthew (mentor)
MFH:		2017Q1

bed5cf1841

www/openemr 11 unaddressed · 9.4	Oct 29
www/dolibarr 17 unaddressed · 8.8	Oct 28
www/dolibarr19 +1 related 18 unaddressed · 8.8	Oct 28
www/dolibarr21 +1 related 19 unaddressed · 8.8	Oct 28
net/samba425 1 CVE · 8.1 fixed 4.25.1	Oct 28
devel/libwasmtime 3 unaddressed · 9.9	Oct 28
mail/p5-MIME-Tools 10 CVEs · – fixed 5.519 VuXML	Oct 28
www/grafana 19 unaddressed · 8.8	Oct 28
net/kafka 10 unaddressed · –	Oct 28
security/libressl +1 related 4 unaddressed · 8.2	Oct 28
multimedia/assimp 4 unaddressed · 6.9	Oct 28
devel/jackson-databind 6 CVEs · 9.8 fixed 2.22.4 VuXML	Oct 28
www/chromium 45 unaddressed · 9.6 VuXML	Oct 27
www/linux-chrome 45 unaddressed · 9.6 VuXML	Oct 27
www/rubygem-crass 1 unaddressed · 5.3	Oct 27

CVE-2026-49142 8.7 www/openemr	Oct 29
CVE-2026-118754 6.9 www/dolibarr +4 more	Oct 28
CVE-2026-109411 fixed 8.1 net/samba425	Oct 28
CVE-2026-118688 8.8 devel/libwasmtime	Oct 28
CVE-2026-116273 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116272 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116271 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116270 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116269 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116268 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116267 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116266 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116265 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-116264 fixed VuXML – mail/p5-MIME-Tools	Oct 28
CVE-2026-79656 6.0 www/grafana	Oct 28

git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27
ImageMagick6	Oct 26