Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-29 to 1.1_6 · 898db4939a
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined — that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (6) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
300264	maintainer-feedback? security/vuxml: correct double-encoded UTF-8 in Spotipy entry c3fb48cc	In Progress	2026-10-29
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08

Show all 6

PR	Summary	Status	Changed
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,355)

2016-03-07 16:37Guido Falsi (madpilot) · 1.1_2

Add CVE Names for old asterisk vulnerabilities.

f654b4da14

2016-03-07 13:53Matthias Andree (mandree) · 1.1_2

New: remote buffer overflow in PuTTY < 0.67's scp documented

Security:	CVE-2016-2563

1da2e3f583

2016-03-06 14:22Raphael Kubo da Costa (rakuco) · 1.1_2

Add entries for CVE-2013-6892 and CVE-2016-2511 in devel/websvn.

Security:	CVE-2013-6892
Security:	CVE-2016-2511

6af337e474

2016-03-06 07:37Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_2

- Document Ruby on Rails multiple vulnerabilities

633ffbae19

2016-03-05 21:39Christoph Moench-Tegeder (cmt) · 1.1_2

Document recent chromium vulnerabilities

Approved by:	miwi (mentor), rene (mentor)
Obtained from:	http://googlechromereleases.blogspot.de/2016/03/stable-channel-update.html

2add4d6e9f

2016-03-05 14:10Raphael Kubo da Costa (rakuco) · 1.1_2

Make 7d09b9ee-e0ba-11e5-abc4-6fb07af136d2 pass `make validate'.

a4bbce2615

2016-03-05 14:09Raphael Kubo da Costa (rakuco) · 1.1_2

Add entry for security/libssh's CVE-2016-0739.

This was fixed in r409932, but the 2016Q1 branch is still vulnerable.

9519a382db

2016-03-02 22:17Vsevolod Stakhov (vsevolod) · 1.1_2

Document the latest exim vulnerability - local privilleges escalation via insecure environment when using `perl_startup` option and setuid exim.

4380106b01

2016-03-02 14:53Mark Felder (feld) · 1.1_2

Update graphite vuxml entry to add another relevant URL

PR:		207574

627a208d19

2016-03-02 03:28Jason Unovitch (junovitch) · 1.1_2

Document SQL injection and authentication bypass in Cacti

Note CVE-2015-8369/upstream bug 0002646: SQL injection in graph.php
was also fixed in this release but that was backported to 0.8.8f and is
covered in a prior entry.

PR:		207444
Security:	CVE-2015-8377
Security:	CVE-2015-8604
Security:	CVE-2016-2313
Security:	https://vuxml.FreeBSD.org/freebsd/db3301be-e01c-11e5-b2bd-002590263bf5.html

92232aa47b

2016-03-01 08:30Matthew Seaman (matthew) · 1.1_2

Document the latest round of phpMyAdmin vulnerabilities.  Lots of XSS problems, and a man-in-the-middle attack on API calls to GitHub.

5868371f68

2016-03-01 04:00Jason Unovitch (junovitch) · 1.1_2

Document wireshark multiple vulnerabilities

Security:	CVE-2016-2522
Security:	CVE-2016-2523
Security:	CVE-2016-2524
Security:	CVE-2016-2525
Security:	CVE-2016-2526
Security:	CVE-2016-2527
Security:	CVE-2016-2528
Security:	CVE-2016-2529
Security:	CVE-2016-2530
Security:	CVE-2016-2531
Security:	CVE-2016-2532
Security:	https://vuxml.FreeBSD.org/freebsd/45117749-df55-11e5-b2bd-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/42c2c422-df55-11e5-b2bd-002590263bf5.html

7f1d8e21bf

2016-02-28 23:50Sergey A. Osokin (osa) · 1.1_2

Update www/tomcat7 version.

d2953d7885

2016-02-28 23:10Mark Felder (feld) · 1.1_2

Update tomcat vuxml entry

CVE-2015-5346 does not affect Tomcat 6.

61d4dc226a

2016-02-28 22:44Mark Felder (feld) · 1.1_2

Document additional tomcat vulnerabilities

Security:	CVE-2015-5346
Security:	CVE-2015-5351
Security:	CVE-2016-0763

23c34078e9

2016-02-28 22:37Mark Felder (feld) · 1.1_2

Update documented tomcat vulnerabiltiies

528172af9b

2016-02-28 21:50Mark Felder (feld) · 1.1_2

Document tomcat vulnerabilities

Security:	CVE-2016-0714

79705af288

2016-02-28 19:15Palle Girgensohn (girgen) · 1.1_2

Document vulnerability i xerces-c3

Security:	CVE-2016-0729

c2db06e6ae

2016-02-28 01:50Jason Unovitch (junovitch) · 1.1_2

Revise Squid entry with CVE assignment and SQUID-2016:2 advisory reference

PR:		207454
Reported by:	Pavel Timofeev <timp87@gmail.com>
Security:	CVE-2016-2569
Security:	CVE-2016-2570
Security:	CVE-2016-2571
Security:	https://vuxml.FreeBSD.org/freebsd/660ebbf5-daeb-11e5-b2bd-002590263bf5.html

a9d78963ca

2016-02-28 01:48Mark Felder (feld) · 1.1_2

Document django vulnerability

Security:	CVE-2016-2048

13b83ba4dd

2016-02-28 01:29Jason Unovitch (junovitch) · 1.1_2

Document Xen Security Advisories (XSAs 167, 168, 170)

Security:	CVE-2016-1570
Security:	CVE-2016-1571
Security:	CVE-2016-2271
Security:	https://vuxml.FreeBSD.org/freebsd/7ed7c36f-ddaf-11e5-b2bd-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/80adc394-ddaf-11e5-b2bd-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/81f9d6a4-ddaf-11e5-b2bd-002590263bf5.html

79c6d5f9f4

2016-02-28 01:25Mark Felder (feld) · 1.1_2

Document moodle vulnerabilities

Security:	CVE-2016-0724
Security:	CVE-2016-0725

1e90f8e2c2

2016-02-26 17:16Mark Felder (feld) · 1.1_2

Document multimedia/pitivi vulnerability

Security:	CVE-2015-0855

fe86f9e06b

2016-02-26 16:50Mark Felder (feld) · 1.1_2

Document graphics/giflib vulnerability

Security:	CVE-2015-7555

de92a33931

2016-02-25 16:36Mark Felder (feld) · 1.1_2

Document drupal vulnerabilities

PR:		207467
Security:	https://www.drupal.org/SA-CORE-2016-001

f5e88e1857

2016-02-25 06:25Li-Wen Hsu (lwhsu) · 1.1_2

Document Jenkins Security Advisory 2016-02-24

79918e1a85

2016-02-24 21:27Mark Felder (feld) · 1.1_2

vuxml: Update entry for graphics/jasper

These vulnerabilities are resolved in 1.900.1_16

Security:	http://www.vuxml.org/freebsd/006e3b7c-d7d7-11e5-b85f-0018fe623f2b.html
Security:	http://www.vuxml.org/freebsd/f1692469-45ce-11e5-adde-14dae9d210b8.html

4e551fb530

2016-02-24 12:46Jason Unovitch (junovitch) · 1.1_2

Document squid remote DoS in HTTP response processing

PR:		207454
Reported by:	Pavel Timofeev <timp87@gmail.com>
Security:	https://vuxml.FreeBSD.org/freebsd/660ebbf5-daeb-11e5-b2bd-002590263bf5.html

90bc9b39d5

2016-02-21 16:25Jason Unovitch (junovitch) · 1.1_2

Document bsh remote code execution vulnerability

PR:		207334
Submitted by:	pfg (maintainer)
Security:	CVE-2016-2510
Security:	https://vuxml.FreeBSD.org/freebsd/9e5bbffc-d8ac-11e5-b2bd-002590263bf5.html

6add66db19

2016-02-21 15:55Jason Unovitch (junovitch) · 1.1_2

Document libsrtp DoS via crafted RTP header vulnerability

PR:		207003
Reported by:	pi
Security:	CVE-2015-6360
Security:	https://vuxml.FreeBSD.org/freebsd/6171eb07-d8a9-11e5-b2bd-002590263bf5.html

8c080fd580

2016-02-21 15:54Jason Unovitch (junovitch) · 1.1_2

Respace entry so `make validate' passes

42785e7bfc

2016-02-20 15:01Dirk Meyer (dinoex) · 1.1_2

- add jasper -- multiple vulnerabilities - fix version for CVE-2015-5221

bc45e02be0

2016-02-19 00:08Mark Felder (feld) · 1.1_2

Document that graphics/silgraphite is also vulnerable

Security:	http://www.vuxml.org/freebsd/8f10fa04-cf6a-11e5-96d6-14dae9d210b8.html

3d9bd39ed6

2016-02-18 22:23Rene Ladan (rene) · 1.1_2

Document new vulnerability in www/chromium < 48.0.2564.116

Obtained from:	http://googlechromereleases.blogspot.nl/2016/02/stable-channel-update_18.html

c6919a4dd4

2016-02-18 04:04Jason Unovitch (junovitch) · 1.1_2

Document Linux glibc crash/code execution via crafted DNS responses

PR:		207272
Submitted by:	Johannes Jost Meixner <johannes@meixner.dk>
Security:	CVE-2015-7547
Security:	https://vuxml.FreeBSD.org/freebsd/2dd7e97e-d5e8-11e5-bcbd-bc5ff45d0f28.html

5c2bcb3929

2016-02-18 03:20Jason Unovitch (junovitch) · 1.1_2

Revise earlier Squid entry with official Squid SA as a reference

PR:		203186
Security:	https://vuxml.FreeBSD.org/freebsd/d3a98c2d-5da1-11e5-9909-002590263bf5.html

1d91359d70

2016-02-18 03:16Jason Unovitch (junovitch) · 1.1_2

Document Squid SSL/TLS processing remote DoS

PR:		207294
Security:	CVE-2016-2390
Security:	https://vuxml.FreeBSD.org/freebsd/56562efb-d5e4-11e5-b2bd-002590263bf5.html

6f4e84f84d

2016-02-17 18:23Mark Felder (feld) · 1.1_2

Document databases/adminer vulnerabilities

2c0d4e29a8

2016-02-16 23:48Jung-uk Kim (jkim) · 1.1_2

Correct CVE numbers for recent Flash vulnerabilities.

8fee180476

2016-02-16 03:40Carlos J. Puga Medina (cpm) · 1.1_2

Document libgcrypt side-channel attack on ECDH

PR:		207107
Security:	CVE-2015-7511
Security:	https://vuxml.FreeBSD.org/freebsd/95b92e3b-d451-11e5-9794-e8e0b747a45a.html

874cf54aae

2016-02-16 02:00Jason Unovitch (junovitch) · 1.1_2

Document xdelta3 buffer overflow vulnerability

PR:		207174
Security:	CVE-2014-9765
Security:	https://vuxml.FreeBSD.org/freebsd/f1bf28c5-d447-11e5-b2bd-002590263bf5.html

ef7d4b4805

2016-02-15 16:31Martin Wilke (miwi) · 1.1_2

- Update Description from previous commit.

PR:		207207
Suggested by:   Jan Beich

34b7e601d3

2016-02-15 16:18Martin Wilke (miwi) · 1.1_2

- Document firefox -- Same-origin-policy violation using Service Workers with plugins

PR:		20720
Submitted by:	Christoph Moench-Tegeder

d25d6f42dc

2016-02-14 22:18Jason Unovitch (junovitch) · 1.1_2

Add CVE to the OpenSSH 7.0.p1 entry and also mention CVE-2015-6565

Security:	CVE-2015-6563
Security:	CVE-2015-6564
Security:	CVE-2015-6565
Security:	https://vuxml.FreeBSD.org/freebsd/2920c449-4850-11e5-825f-c80aa9043978.html

8b78c7a2c4

2016-02-14 20:11Palle Girgensohn (girgen) · 1.1_2

Correct URL.

04917a1bbd

2016-02-14 15:46Martin Wilke (miwi) · 1.1_2

- Fix formating

4855a7aade

2016-02-14 15:39Bernard Spil (brnrd) · 1.1_2

security/vuxml: Add entry for www/nghttp2 < 1.7.1

- Out of memory error in nghttpd, nghttp, and libnghttp2_asio
    applications

Reviewed by:	feld (secteam, mentor)
Approved by:	feld (secteam, mentor)
Depends on:	D5218
Differential Revision:	D5271

2baf23e640

2016-02-14 03:59Jason Unovitch (junovitch) · 1.1_2

Document cross-site scripting vulnerabilities in Horde Groupware

Security:	CVE-2015-8807
Security:	CVE-2016-2228
Security:	https://vuxml.FreeBSD.org/freebsd/3aa8b781-d2c4-11e5-b2bd-002590263bf5.html

d5cb36ef78

2016-02-14 02:55Jason Unovitch (junovitch) · 1.1_2

Fix dnscrypt-proxy reference URL (ihttps -> https)

0a341f8d35

2016-02-13 23:35Palle Girgensohn (girgen) · 1.1_2

Document security problems in PostgreSQL

Security:	CVE-2016-0773, CVE-2016-0766

5e11290bff

textproc/p5-Spreadsheet-XLSX 1 unaddressed · –	Oct 29
print/py-pypdf 32 unaddressed · 8.7	Oct 29
devel/py-pyasn1 4 unaddressed · 7.5	Oct 29
sysutils/nomad 3 unaddressed · 8.8	Oct 29
lang/python27 3 unaddressed · 6.3	Oct 29
lang/python311 +5 related 13 unaddressed · 9.4	Oct 29
lang/python315 6 unaddressed · 9.4	Oct 29
security/botan3 5 CVEs · 9.2 fixed 3.13.0	Oct 29
devel/libwasmtime 17 unaddressed · 9.9	Oct 29
graphics/ImageMagick6 2 unaddressed · 6.3 VuXML	Oct 29
graphics/ImageMagick7 83 CVEs · 7.2 fixed 7.1.2.34 VuXML	Oct 29
textproc/py-markdown 1 unaddressed · 8.7	Oct 29
www/openemr 11 unaddressed · 9.4	Oct 29
www/dolibarr 17 unaddressed · 8.8	Oct 28
www/dolibarr19 +1 related 18 unaddressed · 8.8	Oct 28

CVE-2026-115943 – textproc/p5-Spreadsheet-XLSX	Oct 29
CVE-2026-119209 7.1 print/py-pypdf	Oct 29
CVE-2026-119208 7.1 print/py-pypdf	Oct 29
CVE-2026-119207 7.1 print/py-pypdf	Oct 29
CVE-2026-119206 7.1 print/py-pypdf	Oct 29
CVE-2026-119205 7.1 print/py-pypdf	Oct 29
CVE-2026-119204 7.1 print/py-pypdf	Oct 29
CVE-2026-119203 7.1 print/py-pypdf	Oct 29
CVE-2026-119197 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119196 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119195 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119194 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119168 8.8 sysutils/nomad	Oct 29
CVE-2026-107347 8.4 sysutils/nomad	Oct 29
CVE-2026-102260 4.3 sysutils/nomad	Oct 29

git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27
ImageMagick6	Oct 26