Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-29 to 1.1_6 · 898db4939a
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined — that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (6) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
300264	maintainer-feedback? security/vuxml: correct double-encoded UTF-8 in Spotipy entry c3fb48cc	In Progress	2026-10-29
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08

Show all 6

PR	Summary	Status	Changed
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,355)

2016-04-17 22:07Jason Unovitch (junovitch) · 1.1_2

Document earlier dhcpcd security issue that has been fixed in an earlier version before the security implications were reported.

PR:		208840
Submitted by:	Ben Woods <woodsb02@gmail.com>
Submitted by:	Roy Marples <roy@marples.name>
Security:	CVE-2014-7912
Security:	https://vuxml.FreeBSD.org/freebsd/092156c9-04d7-11e6-b1ce-002590263bf5.html

1c77f25690

2016-04-17 03:16Jason Unovitch (junovitch) · 1.1_2

Document dhcpcd security remote execution/denial of service

PR:		208840
Submitted by:	Ben Woods <woodsb02@gmail.com>
Security:	CVE-2014-7913
Security:	https://vuxml.FreeBSD.org/freebsd/6ec9f210-0404-11e6-9aee-bc5ff4fb5ea1.html

47ba8e2915

2016-04-15 17:12Guido Falsi (madpilot) · 1.1_2

Document Asterisk and PJsip vulnerabilities.

2272af58cb

2016-04-14 04:07Jason Unovitch (junovitch) · 1.1_2

Document go remote denial of service

Security:	CVE-2016-3959
Security:	https://vuxml.FreeBSD.org/freebsd/f2217cdf-01e4-11e6-b1ce-002590263bf5.html

719e1101ec

2016-04-13 20:59Mark Felder (feld) · 1.1_2

Document linux-c6-nspr which was overlooked in previous vuxml entry

af7844bdd3

2016-04-12 20:49Timur I. Bakeyev (timur) · 1.1_2

Multiple vulnerabilities in Samba. [CVE-2015-5370] Errors in Samba DCE-RPC code can lead to denial of service (crashes and high cpu consumption) and man in the middle attacks. [CVE-2016-2110] The feature negotiation of NTLMSSP is not downgrade protected. A man in the middle is able to clear even required flags,     especially NTLMSSP_NEGOTIATE_SIGN and NTLMSSP_NEGOTIATE_SEAL. [CVE-2016-2111] When

258dae53f0

2016-04-03 16:19Jason Unovitch (junovitch) · 1.1_2

Document multiple vulnerabilities from the 31 Mar 16 PHP releases

PR:		208465
Reported by	Christian Schwarz <me@cschwarz.com>
Security:	https://vuxml.FreeBSD.org/freebsd/482d40cb-f9a3-11e5-92ce-002590263bf5.html

927f94f3eb

2016-04-03 15:43Jason Unovitch (junovitch) · 1.1_2

Document PCRE heap overflow vulnerability

PR:		208260
Reported by:	Sevan Janiyan <venture37@geeklan.co.uk>
Security:	CVE-2016-1283
Security:	https://vuxml.FreeBSD.org/freebsd/497b82e0-f9a0-11e5-92ce-002590263bf5.html

ccb5f4c71a

2016-04-03 04:27Jason Unovitch (junovitch) · 1.1_2

Document djblets vulnerability from the 0.9.2 release notes

Security:	https://vuxml.FreeBSD.org/freebsd/df328fac-f942-11e5-92ce-002590263bf5.html

65283680a9

2016-04-03 04:11Jason Unovitch (junovitch) · 1.1_2

Document multiple security advisories for Moodle

Security:	CVE-2016-2151
Security:	CVE-2016-2152
Security:	CVE-2016-2153
Security:	CVE-2016-2154
Security:	CVE-2016-2155
Security:	CVE-2016-2156
Security:	CVE-2016-2157
Security:	CVE-2016-2158
Security:	CVE-2016-2159
Security:	CVE-2016-2190
Security:	https://vuxml.FreeBSD.org/freebsd/a430e15d-f93f-11e5-92ce-002590263bf5.html

dffec6cc8d

2016-04-03 02:48Jason Unovitch (junovitch) · 1.1_2

Add additional reference URL for Kamailio entry from r411376

Security:	CVE-2016-2385
Security:	https://vuxml.FreeBSD.org/freebsd/c428de09-ed69-11e5-92ce-002590263bf5.html

3324d4936d

2016-04-03 02:00Jason Unovitch (junovitch) · 1.1_2

Document squid multiple vulnerabilities

PR:		208463
Security:	CVE-2016-3947
Security:	CVE-2016-3948
Security:	https://vuxml.FreeBSD.org/freebsd/297117ba-f92d-11e5-92ce-002590263bf5.html

249e429010

2016-04-01 16:25Mathieu Arnold (mat) · 1.1_2

Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight

597afc47ba

2016-03-31 16:52Palle Girgensohn (girgen) · 1.1_2

This CVE is actually for the -contrib module:

Security: CVE-2016-3065

ae80c36049

2016-03-31 16:43Palle Girgensohn (girgen) · 1.1_2

Add vuxml entries for "Security Fixes for RLS, BRIN" in PostgreSQL 9.5

Security:	CVE-2016-2193
Security:	CVE-2016-3065

4326713408

2016-03-31 14:25Tijl Coosemans (tijl) · 1.1_2

Document latest batch of flash plugin vulnerabilities.

978a3b1624

2016-03-31 10:01Guido Falsi (madpilot) · 1.1_2

Document mutiple Botan vulnerabilities.

PR:		208393
Submitted by:	Lapo Luchini <lapo at lapo.it>
Security:	CVE-2015-5726
Security:	CVE-2015-5727
Security:	CVE-2016-2194
Security:	CVE-2016-2195

e7123f753d

2016-03-30 00:15Olivier Duchateau (olivierd) · 1.1_2

Document multiple Mercurial vulnerabilities

Security:	CVE-2016-3630
Security:	CVE-2016-3068
Security:	CVE-2016-3069

b96386c28a

2016-03-29 22:08Christoph Moench-Tegeder (cmt) · 1.1_2

Document chromium vulnerabilities

Approved by:	miwi (mentor), rene (mentor)

ea48ee6cc6

2016-03-28 03:51Jason Unovitch (junovitch) · 1.1_2

Document BIND security advisories

PR:		208034
Reported by:	martin@lispworks.com
Security:	CVE-2016-1285
Security:	CVE-2016-1286
Security:	CVE-2016-2088
Security:	https://vuxml.FreeBSD.org/freebsd/c9075321-f483-11e5-92ce-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/cba246d2-f483-11e5-92ce-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/cd409df7-f483-11e5-92ce-002590263bf5.html

e8860ac41d

2016-03-28 03:50Jason Unovitch (junovitch) · 1.1_2

Syntax fix, drop leading FreeBSD- in <freebsdsa> tags as it caused links with a FreeBSD-FreeBSD-SA starting the URL.

5421f1f694

2016-03-27 03:42Jason Unovitch (junovitch) · 1.1_2

Document Salt Insecure configuration of PAM external authentication service

PR:		208244
Security:	CVE-2016-3176
Security:	https://vuxml.FreeBSD.org/freebsd/6d25c306-f3bb-11e5-92ce-002590263bf5.html

8294e9e470

2016-03-25 18:04Tom Judge (tj) · 1.1_2

Document multipule activemq vulnerabilities: 	CVE-2016-0782 - ActiveMQ Web Console - Cross-Site Scripting 	CVE-2016-0734 - ActiveMQ Web Console - Clickjacking 	CVE-2015-5254 - Unsafe deserialization in ActiveMQ

PR:		208163
PR:		208193
Security:	CVE-2015-5254
Security:	http://activemq.apache.org/security-advisories.data/CVE-2015-5254-announcement.txt
Security:	CVE-2016-0782
Security:	http://activemq.apache.org/security-advisories.data/CVE-2016-0782-announcement.txt
Security:	CVE-2016-0734
Security:	http://activemq.apache.org/security-advisories.data/CVE-2016-0734-announcement.txt

2b8690f976

2016-03-21 03:43Mark Felder (feld) · 1.1_2

Fix version range for pcre2 vulnerability

PR:		208167
Security:	CVE-2016-3191

e25a9eace9

2016-03-21 03:32Mark Felder (feld) · 1.1_2

Document pcre vulnerability

PR:		208167
Security:	CVE-2016-3191

d004c05b0c

2016-03-19 02:22Jason Unovitch (junovitch) · 1.1_2

Document kamailio SEAS Module Heap overflow vulnerability

Security:	CVE-2016-2385
Security:	https://vuxml.FreeBSD.org/freebsd/c428de09-ed69-11e5-92ce-002590263bf5.html

434d941897

2016-03-19 01:24Jason Unovitch (junovitch) · 1.1_2

Document hadoop2 unauthorized disclosure of data vulnerability

Security:	CVE-2015-1776
Security:	https://vuxml.FreeBSD.org/freebsd/5dd39f26-ed68-11e5-92ce-002590263bf5.html

903a929f33

2016-03-18 12:22Renato Botelho (garga) · 1.1_2

Update git packages and versions affected by CVE-2016-2324

MFH:		2016Q1
Sponsored by:	Rubicon Communications (Netgate)

a622aa2cdb

2016-03-17 03:45Jason Unovitch (junovitch) · 1.1_2

Document possible code execution and integer overflow issue in git

PR:		208074
Reported by:	Sevan Janiyan <venture37@geeklan.co.uk> (via PR)
Reported by:	Tony Tung <tonytung@merly.org> (via email)
Security:	CVE-2016-2315
Security:	CVE-2016-2324
Security:	https://vuxml.FreeBSD.org/freebsd/93ee802e-ebde-11e5-92ce-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/d2a84feb-ebe0-11e5-92ce-002590263bf5.html

91463d0eb3

2016-03-14 17:46Mark Felder (feld) · 1.1_2

Document node vulnerabilities

PR:		207832
Security:	CVE-2016-0702
Security:	CVE-2016-0705
Security:	CVE-2016-0797

4b80d0bea2

2016-03-14 15:03Mark Felder (feld) · 1.1_2

Document dropbear security vulnerability

PR:		207903
Security:	CVE-2016-3116

67502df529

2016-03-14 14:56Mark Felder (feld) · 1.1_2

Document assigned CVE for recent ssh vulnerability

Security:	CVE-2016-3115

558c18ebf5

2016-03-14 13:10Jan Beich (jbeich) · 1.1_2

Document one more graphite2 vulnerability

7405623db7

2016-03-13 17:31Thomas Zander (riggs) · 1.1_2

Fix copy/paste error from previous commit

d209202150

2016-03-13 17:28Thomas Zander (riggs) · 1.1_2

Document XSS vulnerability in graphics/jpgraph2 before 3.0.7_1

PR:		207001
Security:	CVE-2009-4422

7b2ddc89e2

2016-03-13 15:43Jason Unovitch (junovitch) · 1.1_2

Document issues in recent PHP security release

Security:	https://vuxml.FreeBSD.org/freebsd/e991ef79-e920-11e5-92ce-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/5af511e5-e928-11e5-92ce-002590263bf5.html

5dbe2c5f6c

2016-03-13 15:39Jason Unovitch (junovitch) · 1.1_2

Expand February PHP entry with extra CVE and all security bugs on changelog

Security:	CVE-2016-2554
Security:	https://vuxml.FreeBSD.org/freebsd/85eb4e46-cf16-11e5-840f-485d605f4717.html

9c7743c915

2016-03-11 23:50Bryan Drewery (bdrewery) · 1.1_2

Document OpenSSH 7.2p2 fix for X11Forwarding command injection

6423a71442

2016-03-11 00:37Mark Felder (feld) · 1.1_2

Document net/quagga vulnerability

Security:	CVE-2016-2342

0bc718d0a0

2016-03-10 20:50Mark Felder (feld) · 1.1_2

net-im/ricochet: Document vulnerability

PR:		207536

e714095ac5

2016-03-10 16:03Mark Felder (feld) · 1.1_2

Document security/pidgin-otr vulnerability

Security:	CVE-2015-8833

515d586b1c

2016-03-09 23:58Mark Felder (feld) · 1.1_2

Update libotr vulnerability information

Correct description is "integer overflow"

libotr3 has also been added as vulnerable. It appears vulnerable as it
also has datalen defined as unsigned int and identical functions.

Security:	http://www.vuxml.org/freebsd/c2b1652c-e647-11e5-85be-14dae9d210b8.html

2cb1dfe780

2016-03-09 23:42Mark Felder (feld) · 1.1_2

Document security/libotr vulnerability

It is not clear at this time if security/libotr3 is also affected.

Security:	CVE-2016-2851

c54823e66a

2016-03-09 02:47Jan Beich (jbeich) · 1.1_2

Adjust brotli vulnerability after MFH in r410670

0d8f020d6f

2016-03-08 22:16Jan Beich (jbeich) · 1.1_2

Adjust brotli vulnerability after r410664

f10ee991c9

2016-03-08 21:41Jan Beich (jbeich) · 1.1_2

Move brotli to its own entry

b169d2913c

2016-03-08 20:45Jan Beich (jbeich) · 1.1_2

Document recent Firefox vulnerabilities

666352f240

2016-03-08 02:45Jason Unovitch (junovitch) · 1.1_2

Document Django multiple vulnerabilities

Security:	CVE-2016-2512
Security:	CVE-2016-2513
Security:	https://vuxml.FreeBSD.org/freebsd/f9e6c0d1-e4cc-11e5-b2bd-002590263bf5.html

8d10903695

2016-03-08 02:09Jason Unovitch (junovitch) · 1.1_2

Wrap long lines.  No content change.

6ed4f1b94a

2016-03-08 02:00Jason Unovitch (junovitch) · 1.1_2

Document Wordpress multiple vulnerabilities

While here, fix URL reference in last Wordpress entry

Security:	CVE-2016-2221
Security:	CVE-2016-2222
Security:	https://vuxml.FreeBSD.org/freebsd/fef03980-e4c6-11e5-b2bd-002590263bf5.html

02139382dd

textproc/p5-Spreadsheet-XLSX 1 unaddressed · –	Oct 29
print/py-pypdf 32 unaddressed · 8.7	Oct 29
devel/py-pyasn1 4 unaddressed · 7.5	Oct 29
sysutils/nomad 3 unaddressed · 8.8	Oct 29
lang/python27 3 unaddressed · 6.3	Oct 29
lang/python311 +5 related 13 unaddressed · 9.4	Oct 29
lang/python315 6 unaddressed · 9.4	Oct 29
security/botan3 5 CVEs · 9.2 fixed 3.13.0	Oct 29
devel/libwasmtime 17 unaddressed · 9.9	Oct 29
graphics/ImageMagick6 2 unaddressed · 6.3 VuXML	Oct 29
graphics/ImageMagick7 83 CVEs · 7.2 fixed 7.1.2.34 VuXML	Oct 29
textproc/py-markdown 1 unaddressed · 8.7	Oct 29
www/openemr 11 unaddressed · 9.4	Oct 29
www/dolibarr 17 unaddressed · 8.8	Oct 28
www/dolibarr19 +1 related 18 unaddressed · 8.8	Oct 28

CVE-2026-115943 – textproc/p5-Spreadsheet-XLSX	Oct 29
CVE-2026-119209 7.1 print/py-pypdf	Oct 29
CVE-2026-119208 7.1 print/py-pypdf	Oct 29
CVE-2026-119207 7.1 print/py-pypdf	Oct 29
CVE-2026-119206 7.1 print/py-pypdf	Oct 29
CVE-2026-119205 7.1 print/py-pypdf	Oct 29
CVE-2026-119204 7.1 print/py-pypdf	Oct 29
CVE-2026-119203 7.1 print/py-pypdf	Oct 29
CVE-2026-119197 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119196 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119195 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119194 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119168 8.8 sysutils/nomad	Oct 29
CVE-2026-107347 8.4 sysutils/nomad	Oct 29
CVE-2026-102260 4.3 sysutils/nomad	Oct 29

git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27
ImageMagick6	Oct 26