Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-29 to 1.1_6 · 898db4939a
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined — that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (6) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
300264	maintainer-feedback? security/vuxml: correct double-encoded UTF-8 in Spotipy entry c3fb48cc	In Progress	2026-10-29
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08

Show all 6

PR	Summary	Status	Changed
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,355)

2016-02-13 23:28Jason Unovitch (junovitch) · 1.1_2

Reflect QEMU DoS vulnerabilities now fixed in qemu-sbruno/qemu-user-static

PR:		205813
Security:	CVE-2015-8345
Security:	CVE-2015-8567
Security:	CVE-2015-8568
Security:	CVE-2015-8613
Security:	CVE-2015-8619
Security:	CVE-2015-8701
Security:	https://vuxml.FreeBSD.org/freebsd/1384f2fd-b1be-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/62ab8707-b1bc-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/9ad8993e-b1ba-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/b3f9f8ef-b1bb-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/b56fe6bb-b1b1-11e5-9728-002590263bf5.html

a41cc39564

2016-02-10 14:08Koop Mast (kwm) · 1.1_2

Document feb 8, 2016 flash vulnerabilities.

Security:	CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967,
		CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0971,
		CVE-2016-0972, CVE-2016-0973, CVE-2016-0974, CVE-2016-0975,
		CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979,
		CVE-2016-0980, CVE-2016-0981, CVE-2016-0982, CVE-2016-0983,
		CVE-2016-0984, CVE-2016-0985

67bdc6b065

2016-02-10 01:10Mark Felder (feld) · 1.1_2

Document dns/dnscrypt-proxy vulnerability

PR:		206938

f73c543b24

2016-02-10 01:07Mark Felder (feld) · 1.1_2

Fix vuxml to pass `make validate` An errant newline from the last entry caused "Error 1"

fd96ddd26b

2016-02-10 00:11Rene Ladan (rene) · 1.1_2

Document new vulnerabilities in www/chromium < 48.0.2564.109

Obtained from:	http://googlechromereleases.blogspot.nl/2016/02/stable-channel-update_9.html

944ad1c2ef

2016-02-09 21:30Mark Felder (feld) · 1.1_2

Update graphics/graphite2 vulnerability details

I found a more comprehensive blog entry by Talos

2c54e17926

2016-02-09 21:23Mark Felder (feld) · 1.1_2

Document graphics/graphite2 vulnerability

Security:	CVE-2016-1521

f0457c9544

2016-02-09 18:07Mark Felder (feld) · 1.1_2

Fix duplicate "reports" in last entry

1e3f8cda39

2016-02-09 18:01Mark Felder (feld) · 1.1_2

Document net-mgmt/xymon-server vulnerabilities

MFH:		2016Q1
Security:	CVE-2016-2054
Security:	CVE-2016-2055
Security:	CVE-2016-2056
Security:	CVE-2016-2057
Security:	CVE-2016-2058

9d048b8bdc

2016-02-09 11:55Martin Wilke (miwi) · 1.1_2

- Document php -- pcre vulnerability

0bab4d7094

2016-02-09 11:39Raphael Kubo da Costa (rakuco) · 1.1_2

Document multiple vulnerabilities in graphics/py-imaging and graphics/py-pillow.

Security:	CVE-2016-0740
Security:	CVE-2016-0775

2a699255ef

2016-02-06 12:23Thomas Zander (riggs) · 1.1_2

Document remote denial of service in ffmpeg before 2.8.6 and mencoder / mplayer before 1.2.r20151219_3

e9fed5f764

2016-02-05 21:04Jason Unovitch (junovitch) · 1.1_2

Update version of net/samba36 package to reflect it is still unpatched

PR:		206808
Reported by:	Marcin Gryszkalis <mg@fork.pl>
Security:	CVE-2015-5252
Security:	CVE-2015-5296
Security:	CVE-2015-5299
Security:	https://vuxml.FreeBSD.org/freebsd/ef434839-a6a4-11e5-8275-000c292e4fd8.html

7bc4044017

2016-02-05 17:32Koop Mast (kwm) · 1.1_2

Document shotwell failure to validate TLS certificates.

PR:		206807

05b82b292f

2016-02-04 12:03Koop Mast (kwm) · 1.1_2

Document webkit CVE-2014-1748.

If people look at the announcement, CVE-2014-3192 is already fixed. This
CVE was against chromium, and the same code in 2.4.9 is in webkit trunk
so I assume it already fixed.

CVE-2013-6663 is for webkit < 2.4.0, and the rest of the CVE's are for
apple products without any attached patches.

PR:		205683
Obtained from:	http://webkitgtk.org/security/WSA-2015-0002.html

298502fbcd

2016-02-04 11:35Kubilay Kocak (koobs) · 1.1_2

security/vuxml: Add CVE-2016-1494 for security/py-rsa

PR:		206746
Reported by:	 Sevan Janiyan <venture37 geeklan co.uk>

b3801075c3

2016-02-04 10:25Guido Falsi (madpilot) · 1.1_2

Document new asterisk ports vulnerabilities.

ecc9d91a49

2016-02-03 18:16Mark Felder (feld) · 1.1_2

Document py-salt vulnerability

Security:	CVE-2016-1866

655c2f5d11

2016-02-02 23:44Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_2

- Document Ruby on Rails multiple vulnerabilities

d4b96b4b51

2016-02-02 12:05Koop Mast (kwm) · 1.1_2

Document that the linux curl ports are still vulnerable.

Submitted by:	xmj@

47f7bfb1ab

2016-02-01 23:05Mark Felder (feld) · 1.1_2

Document net/socat vulnerability

d3c4b41ff3

2016-02-01 08:37Jan Beich (jbeich) · 1.1_2

Document recent Mozilla vulnerabilities

PR:		206637
Submitted by:	Christoph Moench-Tegeder <cmt@burggraben.net>

33f8830af4

2016-02-01 03:42Jason Unovitch (junovitch) · 1.1_2

Document multiple vulnerabilities in gdcm

PR:		206590
Reported by:	Sevan Janiyan <venture37@geeklan.co.uk>
Security:	CVE-2015-8396
Security:	CVE-2015-8397
Security:	https://vuxml.FreeBSD.org/freebsd/e00d8b94-c88a-11e5-b5fe-002590263bf5.html

7ea9a2a315

2016-01-31 11:00Martin Wilke (miwi) · 1.1_2

- Fix x11/linux-c6-xorg-libs entry as fixed - Also fix modify date

Reported by: Terry Kennedy <TERRY@glaver.org>

74c871d192

2016-01-30 19:42Martin Wilke (miwi) · 1.1_2

- Mark linux-c6* entys as fixed

7fba849953

2016-01-30 17:53Bernard Spil (brnrd) · 1.1_2

ftp/curl: Fix vuxml version check

Reviewed by:	Erandir, miwi (ports-secteam)
Approved by:	miwi (ports-secteam)

3f6d62331d

2016-01-30 06:37Mark Felder (feld) · 1.1_2

vuxml: fix version range for nginx which has a PORTEPOCH

f2ef35906c

2016-01-30 06:29Mark Felder (feld) · 1.1_2

Document www/nginx vulnerabilities

Security:	CVE-2016-0742
Security:	CVE-2016-0746
Security:	CVE-2016-0747

c5067ba715

2016-01-29 17:53Mark Felder (feld) · 1.1_2

Document www/typo3 and www/typo3-lts vulnerabilities

PR:		206723

27a5824106

2016-01-29 17:44Mark Felder (feld) · 1.1_2

vuxml: Fix owncloud discovery date

e0cb37b0bf

2016-01-29 17:43Mark Felder (feld) · 1.1_2

Document www/nghttp2 vulnerability

PR:		206727
Security:	CVE-2015-8659

8dd7b0b099

2016-01-29 17:36Mark Felder (feld) · 1.1_2

vuxml: Fix openssl entry so `make validate` doesn't throw errors

40cdeef1cf

2016-01-29 17:35Mark Felder (feld) · 1.1_2

Document www/owncloud vulnerabilities

PR:		206724
Security:	CVE-2016-1498
Security:	CVE-2016-1499
Security:	CVE-2016-1500

c5f0c8952f

2016-01-29 16:38Mark Felder (feld) · 1.1_2

vuxml: radicale entry needs python prefixes for packagename

PR:		206717

a85bbd824a

2016-01-29 16:33Mark Felder (feld) · 1.1_2

Document www/radicale vulnerabilities

Security:	CVE-2015-8747
Security:	CVE-2015-8748

b3d9d6ce68

2016-01-28 23:45Matthew Seaman (matthew) · 1.1_2

Add 9 security advisories for phpMyAdmin:

[Security] Multiple full path disclosure vulnerabilities, see PMASA-2016-1
 [Security] Unsafe generation of CSRF token, see PMASA-2016-2
 [Security] Multiple XSS vulnerabilities, see PMASA-2016-3
 [Security] Insecure password generation in JavaScript, see PMASA-2016-4
 [Security] Unsafe comparison of CSRF token, see PMASA-2016-5
 [Security] Multiple full path disclosure vulnerabilities, see PMASA-2016-6
 [Security] XSS vulnerability in normalization page, see PMASA-2016-7
 [Security] Full path disclosure vulnerability in SQL parser, see PMASA-2016-8
 [Security] XSS vulnerability in SQL editor, see PMASA-2016-9

82df3af0e1

2016-01-28 22:00David Thiel (lx) · 1.1_2

vuxml for prosody CVE-2016-0756.

PR:		206707
Submitted by: Anton Shestakov

669580ca87

2016-01-28 16:20Dirk Meyer (dinoex) · 1.1_2

- report OpenSSL 1.0.2e vulnerability MFH:		2016Q1

6a256e8bb1

2016-01-27 17:01Bernard Spil (brnrd) · 1.1_2

security/vuxml: Document cURL vulnerability

Reviewed by:	feld (ports-secteam, mentor), koobs (mentor)
Approved by:	feld (ports-secteam, mentor)
Security:	CVE-2016-0755
Security:	https://vuxml.FreeBSD.org/freebsd/8b27f1bc-c509-11e5-a95f-b499baebfeaf.html
Differential Revision:	D5091

80d5cd1ff5

2016-01-26 05:18Jason Unovitch (junovitch) · 1.1_2

Document Wordpress cross site scripting vulnerability

Security:	CVE-2016-1564
Security:	https://vuxml.FreeBSD.org/freebsd/fb754341-c3e2-11e5-b5fe-002590263bf5.html

a12511e942

2016-01-26 04:13Jason Unovitch (junovitch) · 1.1_2

Document recent privoxy security vulnerabilities

While here, catch up on the prior release's advisories for completeness

PR:		206504
Security:	CVE-2016-1982
Security:	CVE-2016-1983
Security:	https://vuxml.FreeBSD.org/freebsd/a763a0e7-c3d9-11e5-b5fe-002590263bf5.html

a26a5ffbc4

2016-01-26 02:36Jason Unovitch (junovitch) · 1.1_2

Document potential privilege escalation via symlink misconfiguration in sudo

PR:		206592
Reported by:	Sevan Janiyan <venture37@geeklan.co.uk>
Security:	CVE-2015-5602
Security:	https://vuxml.FreeBSD.org/freebsd/2e8cdd36-c3cc-11e5-b5fe-002590263bf5.html

520d892ade

2016-01-22 20:21Mark Felder (feld) · 1.1_2

Document graphics/imlib2 vulnerabilities

PR:		206372
Security:	CVE-2014-9762
Security:	CVE-2014-9763
Security:	CVE-2014-9764

d4241bca55

2016-01-22 18:20Mark Felder (feld) · 1.1_2

Recent BIND vulnerabilities are supposed to be in separate entries

cae7b3b74e

2016-01-21 22:49Rene Ladan (rene) · 1.1_2

Document new vulnerabilities in www/chromium < 48.0.2564.82

PR:		206474
Submitted by:	Christoph Moench-Tegeder
Obtained from:	http://googlechromereleases.blogspot.de/2016/01/stable-channel-update_20.html

c6597376e4

2016-01-21 10:30Xin LI (delphij) · 1.1_2

Document NTP multiple vulnerabilities.

cdd8ef6e93

2016-01-21 00:41Jason Unovitch (junovitch) · 1.1_2

Document cgit -- multiple vulnerabilities

PR:		206417
Security:	CVE-2016-1899
Security:	CVE-2016-1900
Security:	CVE-2016-1901
Security:	https://vuxml.FreeBSD.org/freebsd/62c0dbbd-bfce-11e5-b5fe-002590263bf5.html

ab7d874d8d

2016-01-20 17:32Mark Felder (feld) · 1.1_2

Document bind vulnerabilities

Security:	CVE-2015-8704
Security:	CVE-2015-8705

ff9d70ba49

2016-01-19 17:52Pawel Pekala (pawel) · 1.1_2

Document claws-mail CVE

Security:	CVE-2015-8614

2beacc9140

2016-01-19 09:35Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_2

- Fix libproxy range

ecf2b0544d

textproc/p5-Spreadsheet-XLSX 1 unaddressed · –	Oct 29
print/py-pypdf 32 unaddressed · 8.7	Oct 29
devel/py-pyasn1 4 unaddressed · 7.5	Oct 29
sysutils/nomad 3 unaddressed · 8.8	Oct 29
lang/python27 3 unaddressed · 6.3	Oct 29
lang/python311 +5 related 13 unaddressed · 9.4	Oct 29
lang/python315 6 unaddressed · 9.4	Oct 29
security/botan3 5 CVEs · 9.2 fixed 3.13.0	Oct 29
devel/libwasmtime 17 unaddressed · 9.9	Oct 29
graphics/ImageMagick6 2 unaddressed · 6.3 VuXML	Oct 29
graphics/ImageMagick7 83 CVEs · 7.2 fixed 7.1.2.34 VuXML	Oct 29
textproc/py-markdown 1 unaddressed · 8.7	Oct 29
www/openemr 11 unaddressed · 9.4	Oct 29
www/dolibarr 17 unaddressed · 8.8	Oct 28
www/dolibarr19 +1 related 18 unaddressed · 8.8	Oct 28

CVE-2026-115943 – textproc/p5-Spreadsheet-XLSX	Oct 29
CVE-2026-119209 7.1 print/py-pypdf	Oct 29
CVE-2026-119208 7.1 print/py-pypdf	Oct 29
CVE-2026-119207 7.1 print/py-pypdf	Oct 29
CVE-2026-119206 7.1 print/py-pypdf	Oct 29
CVE-2026-119205 7.1 print/py-pypdf	Oct 29
CVE-2026-119204 7.1 print/py-pypdf	Oct 29
CVE-2026-119203 7.1 print/py-pypdf	Oct 29
CVE-2026-119197 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119196 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119195 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119194 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119168 8.8 sysutils/nomad	Oct 29
CVE-2026-107347 8.4 sysutils/nomad	Oct 29
CVE-2026-102260 4.3 sysutils/nomad	Oct 29

git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27
ImageMagick6	Oct 26