Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-29 to 1.1_6 · 898db4939a
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined — that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (6) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
300264	maintainer-feedback? security/vuxml: correct double-encoded UTF-8 in Spotipy entry c3fb48cc	In Progress	2026-10-29
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08

Show all 6

PR	Summary	Status	Changed
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,355)

2016-07-04 01:13Jason Unovitch (junovitch) · 1.1_3

Update earlier openvswitch entry with version fixed in ports

PR:		208404
Reported by:	ohauer
Security:	CVE-2016-2074
Security:	https://vuxml.FreeBSD.org/freebsd/b53bbf58-257f-11e6-9f4d-20cf30e32f6d.html

75b6ff6fda

2016-07-04 00:57Jason Unovitch (junovitch) · 1.1_3

Document multiple security advisories for Moodle

Security:	CVE-2016-3729
Security:	CVE-2016-3731
Security:	CVE-2016-3732
Security:	CVE-2016-3733
Security:	CVE-2016-3734
Security:	https://vuxml.FreeBSD.org/freebsd/8656cf5f-4170-11e6-8dfe-002590263bf5.html

5c119d3294

2016-07-03 23:21Mark Felder (feld) · 1.1_3

Document icingaweb2 vulnerability

8b1a6e9148

2016-07-03 21:31Jason Unovitch (junovitch) · 1.1_3

Fix date from r417994 (2016 not 2015)

20c6e84e1e

2016-07-03 21:30Jason Unovitch (junovitch) · 1.1_3

Document authorization logic vulnerability in Apache Hive

PR:		207173
Security:	CVE-2015-7521
Security:	https://vuxml.FreeBSD.org/freebsd/a5c204b5-4153-11e6-8dfe-002590263bf5.html

fe1f30ddde

2016-07-03 20:44Jason Unovitch (junovitch) · 1.1_3

Document SQLite3 tempdir selection vulnerability

PR:		210751
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>
Security:	CVE-2016-6153
Security:	https://vuxml.FreeBSD.org/freebsd/546deeea-3fc6-11e6-a671-60a44ce6887b.html

8010633c9f

2016-07-03 11:28Bernard Spil (brnrd) · 1.1_3

security/vuxml: Add Python smtplib TLS stripping vuln

PR:		210685
Submitted by:	brnrd
Security:	CVE-2016-0772
Security:	8d5368ef-40fe-11e6-b2ec-b499baebfeaf

a3eacffbcd

2016-07-01 17:22Matthew Seaman (matthew) · 1.1_3

Belatedly document 12 security advisories about phpMyAdmin. Severities range from 'non-critical' to 'severe'

d10110c31a

2016-07-01 14:23Mathieu Arnold (mat) · 1.1_3

Add a test target, testing that what the port is supposed to do works.

Sponsored by:	Absolight

b4155d6003

2016-07-01 14:15Mathieu Arnold (mat) · 1.1_3

Add missing dependency.

Sponsored by:	Absolight

59e91aabfd

2016-07-01 00:55Mark Felder (feld) · 1.1_2

Document haproxy vulnerability

Security:	CVE-2016-5360

8f5c70cd7a

2016-07-01 00:47Mark Felder (feld) · 1.1_2

Document libtorrent-rasterbar vulnerability

Security:	CVE-2016-5301

f763f5b10b

2016-07-01 00:42Mark Felder (feld) · 1.1_2

Modify dnsmasq vuxml entry

The vulnerable version range was not matching correctly for the devel
port.

42828f0eac

2016-07-01 00:32Mark Felder (feld) · 1.1_2

Document expat2 vulnerability

Security:	CVE-2016-4472

2f37ea54e1

2016-07-01 00:10Mark Felder (feld) · 1.1_2

Document dnsmasq vulnerability

Security:	CVE-2015-8899

613f0365fa

2016-06-30 23:08Mark Felder (feld) · 1.1_2

Document python vulnerability

PR:		210541
Security:	CVE-2016-5699

140f139903

2016-06-30 22:52Mark Felder (feld) · 1.1_2

Document openssl vulnerability

PR:		210550
Security:	CVE-2016-2177

0a819de777

2016-06-26 20:13Jason Unovitch (junovitch) · 1.1_2

Document remote denial of service via FileUpload component in Tomcat

PR:		209669 [1]
Reported by:	Geoffroy Desvernay <dgeo@centrale-marseille.fr> [1]
Reported by:	Roger Marquis <marquis@roble.com>
Security:	CVE-2016-3092
Security:	https://vuxml.FreeBSD.org/freebsd/cbceeb49-3bc7-11e6-8e82-002590263bf5.html

1a2f0c90a9

2016-06-26 01:17Jason Unovitch (junovitch) · 1.1_2

Document Wordpress vulnerabilities fixed in 4.5.3

PR:             210480 [1]
PR:             210581
Reported by:	Mihail Timofeev <9267096@gmail.com> [1]
Security:	CVE-2016-5832
Security:	CVE-2016-5833
Security:	CVE-2016-5834
Security:	CVE-2016-5835
Security:	CVE-2016-5836
Security:	CVE-2016-5837
Security:	CVE-2016-5838
Security:	CVE-2016-5839
Security:	https://vuxml.FreeBSD.org/freebsd/bfcc23b6-3b27-11e6-8e82-002590263bf5.html

1561ed7189

2016-06-26 00:18Jason Unovitch (junovitch) · 1.1_2

Docment security issues fixed in PHP 7.0.8, 5.6.23, and 5.5.37

PR:		210491
PR:		210502
Reported by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>
Reported by:	Philip Jocks <freebsdbugs@filis.org>
Security:	CVE-2015-8874
Security:	CVE-2016-5766
Security:	CVE-2016-5767
Security:	CVE-2016-5768
Security:	CVE-2016-5769
Security:	CVE-2016-5770
Security:	CVE-2016-5771
Security:	CVE-2016-5772
Security:	CVE-2016-5773
Security:	https://vuxml.FreeBSD.org/freebsd/66d77c58-3b1d-11e6-8e82-002590263bf5.html

777e8f5f5c

2016-06-23 18:55Mark Felder (feld) · 1.1_2

Fix vuxml

I didn't validate after updating "foo reports:" line

Pointyhat:	me

9a1238559a

2016-06-23 18:25Mark Felder (feld) · 1.1_2

Document libarchive vulnerabilities

PR:		210493
Security:	CVE-2015-8934
Security:	CVE-2016-4300
Security:	CVE-2016-4301
Security:	CVE-2016-4302

ba1a8bd8c2

2016-06-23 17:52Mark Felder (feld) · 1.1_2

Add piwik XSS to vuxml

No further information is available. No CVE has been assigned.

PR:		210458

5439f8dea9

2016-06-21 10:34Vasil Dimov (vd) · 1.1_2

Followup to r417190 - all versions of wget<1.18 are affected

98a80a35b5

2016-06-21 10:16Vasil Dimov (vd) · 1.1_2

Document ftp/wget's HTTP to FTP redirection file name confusion vulnerability

PR:		210420
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>
Security:	CVE-2016-4971

ed08cac60a

2016-06-20 21:08Mark Felder (feld) · 1.1_2

Update vuxml for libxslt vulnerabilities

These vulnerabilities were previously reported by Google as they bundle
libxslt with Chrome. When we patched Chromium to address these
vulnerabilites it was overlooked that we do not bundle libxslt library
with Chromium, but instead use textproc/libxslt. Chromium users have
continued to be vulnerable to these CVEs as a result. This update fixes
the Chromium CVE entry and adds a separate one for libxslt.

PR:		210298
Security:	CVE-2016-1683
Security:	CVE-2016-1684

aade2eccbb

2016-06-19 11:03Bernard Spil (brnrd) · 1.1_2

Update security/libressl vulnerability for quarterly branch

- Mark vulnerable from 2.3.0 up to 2.3.6
  - Mark vulnerable below 2.2.9

83cd5adde3

2016-06-19 04:57Jason Unovitch (junovitch) · 1.1_2

Document Flash vulnerabilities in Adobe Security Bulletins APSB16-10, APSB16-15, APSB16-18

PR:		209592
Reported by:	Sevan Janiyan <venture37@geeklan.co.uk>
Security:	CVE-2016-1006, CVE-2016-1011, CVE-2016-1012, CVE-2016-1013,
		CVE-2016-1014, CVE-2016-1015, CVE-2016-1016, CVE-2016-1017,
		CVE-2016-1018, CVE-2016-1019, CVE-2016-1020, CVE-2016-1021,
		CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025,
		CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029,
		CVE-2016-1030, CVE-2016-1031, CVE-2016-1032, CVE-2016-1033,
		CVE-2016-1096, CVE-2016-1097, CVE-2016-1098, CVE-2016-1099,
		CVE-2016-1100, CVE-2016-1101, CVE-2016-1102, CVE-2016-1103,
		CVE-2016-1104, CVE-2016-1105, CVE-2016-1106, CVE-2016-1107,
		CVE-2016-1108, CVE-2016-1109, CVE-2016-1110, CVE-2016-4108,
		CVE-2016-4109, CVE-2016-4110, CVE-2016-4111, CVE-2016-4112,
		CVE-2016-4113, CVE-2016-4114, CVE-2016-4115, CVE-2016-4116,
		CVE-2016-4117, CVE-2016-4120, CVE-2016-4121, CVE-2016-4160,
		CVE-2016-4161, CVE-2016-4162, CVE-2016-4163, CVE-2016-4122,
		CVE-2016-4123, CVE-2016-4124, CVE-2016-4125, CVE-2016-4127,
		CVE-2016-4128, CVE-2016-4129, CVE-2016-4130, CVE-2016-4131,
		CVE-2016-4132, CVE-2016-4133, CVE-2016-4134, CVE-2016-4135,
		CVE-2016-4136, CVE-2016-4137, CVE-2016-4138, CVE-2016-4139,
		CVE-2016-4140, CVE-2016-4141, CVE-2016-4142, CVE-2016-4143,
		CVE-2016-4144, CVE-2016-4145, CVE-2016-4146, CVE-2016-4147,
		CVE-2016-4148, CVE-2016-4149, CVE-2016-4150, CVE-2016-4151,
		CVE-2016-4152, CVE-2016-4153, CVE-2016-4154, CVE-2016-4155,
		CVE-2016-4156, CVE-2016-4166, CVE-2016-4171
Security:	https://vuxml.FreeBSD.org/freebsd/0e3dfdde-35c4-11e6-8e82-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/07888b49-35c4-11e6-8e82-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/0c6b008d-35c4-11e6-8e82-002590263bf5.html

1ed74a507a

2016-06-17 21:44Mark Felder (feld) · 1.1_2

Fix vuxml <cvename> syntax for recent Chrome entry

d1395f6040

2016-06-17 21:14Rene Ladan (rene) · 1.1_2

Document new vulnerabilities in www/chromium < 51.0.2704.103

Obtained from:	https://googlechromereleases.blogspot.nl/2016/06/stable-channel-update_16.html

6aa8f02d69

2016-06-17 19:03Ruslan Makhmatkhanov (rm) · 1.1_2

Document integer overflow in python's zipimport module

PR:		210324
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>
Security:	CVE-2016-5636

b7700753f9

2016-06-17 03:12Jason Unovitch (junovitch) · 1.1_2

Document Drupal vulnerabilities

PR:		210317
Reported by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>
Security:	https://www.drupal.org/SA-CORE-2016-002
Security:	https://vuxml.FreeBSD.org/freebsd/7932548e-3427-11e6-8e82-002590263bf5.html

cd3b46b79e

2016-06-14 03:48Jason Unovitch (junovitch) · 1.1_2

Document multiple issues in Botan

PR:		209595
Reported by:	Sevan Janiyan <venture37@geeklan.co.uk>
Security:	CVE-2015-7827
Security:	CVE-2016-2849
Security:	https://vuxml.FreeBSD.org/freebsd/ac0900df-31d0-11e6-8e82-002590263bf5.html
Security:	CVE-2014-9742
Security:	https://vuxml.FreeBSD.org/freebsd/f771880c-31cf-11e6-8e82-002590263bf5.html

004ce24be3

2016-06-13 21:21Mark Felder (feld) · 1.1_2

Update vuxml

A backported fix was added to security/openssl

380f055ed6

2016-06-11 12:10Thomas Zander (riggs) · 1.1_2

Document remote code execution vulnerability in multimedia vlc before 2.2.4

1d35949e30

2016-06-10 03:57Jan Beich (jbeich) · 1.1_2

Chase MFSA typo fix

e8113ba57c

2016-06-10 03:15Jason Unovitch (junovitch) · 1.1_2

Document cross-site scripting CVE in Roundcube

PR:		209841
Reported by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>
Security:	CVE-2016-5103
Security:	https://vuxml.FreeBSD.org/freebsd/97e86d10-2ea7-11e6-ae88-002590263bf5.html

df40ec0db7

2016-06-09 23:03Bernard Spil (brnrd) · 1.1_2

Add entry for CVE-2016-2178 OpenSSL vulnerability

Security:	CVE-2016-2178

52ca0edfb3

2016-06-09 05:39Jason Unovitch (junovitch) · 1.1_2

Fill in <freebsdpr> tag on last entry; I staged it prior to opening the PR for tracking and forgot to fill it in pre-commit.

PR:		210155

4f5b798a95

2016-06-09 05:28Jason Unovitch (junovitch) · 1.1_2

Document two expat CVEs reported by upstream

PR:		210155
Reported by:	Sebastian Pipping <sebastian@pipping.org>
Security:	CVE-2012-6702
Security:	CVE-2016-5300
Security:	https://vuxml.FreeBSD.org/freebsd/c9c252f5-2def-11e6-ae88-002590263bf5.html

607a6c5895

2016-06-08 22:32Bruce A. Mah (bmah) · 1.1_2

Add entry for recent iperf3 vulnerability.

Security:	d6bbf2d8-2cfc-11e6-800b-080027468580
Sponsored by:	ESnet

b703ba9f33

2016-06-07 18:37Tijl Coosemans (tijl) · 1.1_2

Document GNUTLS-SA-2016-1.

a5abef90af

2016-06-07 18:34Jan Beich (jbeich) · 1.1_2

Document recent Firefox vulnerabilities

2418486bdf

2016-06-07 00:32Mark Felder (feld) · 1.1_2

Fix cvename entries

0f7a6cc3eb

2016-06-06 23:08Rene Ladan (rene) · 1.1_2

Document new vulnerabilities in www/chromium < 51.0.2704.79

Obtained from:	http://googlechromereleases.blogspot.nl/2016/06/stable-channel-update.html

6f39846c83

2016-06-05 20:59Tijl Coosemans (tijl) · 1.1_2

The Expat vulnerability also affects linux-*-expat.

c9e5e50f66

2016-06-05 20:04Jason Unovitch (junovitch) · 1.1_2

Document OpenAFS vulnerabilities in 1.6.16 and 1.6.17

PR:		209534
Reported by:	Sevan Janiyan <venture37@geeklan.co.uk>
Security:	CVE-2015-8312
Security:	CVE-2016-2860
Security:	CVE-2016-4536
Security:	https://vuxml.FreeBSD.org/freebsd/2e8fe57e-2b46-11e6-ae88-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/bcbd3fe0-2b46-11e6-ae88-002590263bf5.html

1cbcee3b52

2016-06-05 19:44Jason Unovitch (junovitch) · 1.1_2

Fixup invalid nginx version from r416222; it needed a PORTEPOCH to be valid. Add version range valid for backported commit on 1.8 and 1.9 in quarterly.

Security:	CVE-2016-4450
Security:	https://vuxml.FreeBSD.org/freebsd/36cf7670-2774-11e6-af29-f0def16c5c1b.html

ea91e6c20b

2016-06-05 18:36Jason Unovitch (junovitch) · 1.1_2

Document ikiwiki XSS vulnerability

PR:		209593
Reported by:	Sevan Janiyan <venture37@geeklan.co.uk>
Security:	CVE-2016-4561
Security:	https://vuxml.FreeBSD.org/freebsd/0297b260-2b3b-11e6-ae88-002590263bf5.html

ee6c612e8e

2016-06-02 00:49Ryan Steinmetz (zi) · 1.1_2

- Document vulnerability in www/h2o

PR:		209926
Submitted by:	Dave Cottlehuber (maintainer)

a8386bc310

textproc/p5-Spreadsheet-XLSX 1 unaddressed · –	Oct 29
print/py-pypdf 32 unaddressed · 8.7	Oct 29
devel/py-pyasn1 4 unaddressed · 7.5	Oct 29
sysutils/nomad 3 unaddressed · 8.8	Oct 29
lang/python27 3 unaddressed · 6.3	Oct 29
lang/python311 +5 related 13 unaddressed · 9.4	Oct 29
lang/python315 6 unaddressed · 9.4	Oct 29
security/botan3 5 CVEs · 9.2 fixed 3.13.0	Oct 29
devel/libwasmtime 17 unaddressed · 9.9	Oct 29
graphics/ImageMagick6 2 unaddressed · 6.3 VuXML	Oct 29
graphics/ImageMagick7 83 CVEs · 7.2 fixed 7.1.2.34 VuXML	Oct 29
textproc/py-markdown 1 unaddressed · 8.7	Oct 29
www/openemr 11 unaddressed · 9.4	Oct 29
www/dolibarr 17 unaddressed · 8.8	Oct 28
www/dolibarr19 +1 related 18 unaddressed · 8.8	Oct 28

CVE-2026-115943 – textproc/p5-Spreadsheet-XLSX	Oct 29
CVE-2026-119209 7.1 print/py-pypdf	Oct 29
CVE-2026-119208 7.1 print/py-pypdf	Oct 29
CVE-2026-119207 7.1 print/py-pypdf	Oct 29
CVE-2026-119206 7.1 print/py-pypdf	Oct 29
CVE-2026-119205 7.1 print/py-pypdf	Oct 29
CVE-2026-119204 7.1 print/py-pypdf	Oct 29
CVE-2026-119203 7.1 print/py-pypdf	Oct 29
CVE-2026-119197 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119196 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119195 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119194 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119168 8.8 sysutils/nomad	Oct 29
CVE-2026-107347 8.4 sysutils/nomad	Oct 29
CVE-2026-102260 4.3 sysutils/nomad	Oct 29

git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27
ImageMagick6	Oct 26