Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-29 to 1.1_6 · 898db4939a
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined — that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (6) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
300264	maintainer-feedback? security/vuxml: correct double-encoded UTF-8 in Spotipy entry c3fb48cc	In Progress	2026-10-29
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08

Show all 6

PR	Summary	Status	Changed
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,355)

2016-01-19 00:50Jason Unovitch (junovitch) · 1.1_2

Document several vulnerabilities in libarchive

PR:		200176
Reported by:	Sevan Janiyan <venture37@geeklan.co.uk>
Security:	CVE-2013-0211
Security:	CVE-2015-2304
Security:	https://vuxml.FreeBSD.org/freebsd/7c63775e-be31-11e5-b5fe-002590263bf5.html

2052d573ff

2016-01-18 15:04Jason Unovitch (junovitch) · 1.1_2

Document go information disclosure vulnerability

Security:	CVE-2015-8618
Security:	https://vuxml.FreeBSD.org/freebsd/6809c6db-bdeb-11e5-b5fe-002590263bf5.html

5b4a8a8cdf

2016-01-18 07:16Thomas Zander (riggs) · 1.1_2

Correct vulerable package version entries for ffmpeg entry in r406293

eaa5eccff1

2016-01-17 19:06Mark Felder (feld) · 1.1_2

Document isc-dhcpd CVE

Security:	CVE-2015-8605

3436c4e8cb

2016-01-17 12:33Raphael Kubo da Costa (rakuco) · 1.1_2

Document CVE-2012-4504 in net/libproxy and its slave ports.

Security:	CVE-2012-4504

79fc75907a

2016-01-17 11:27Thomas Zander (riggs) · 1.1_2

Document usage of vulnerable ffmpeg prior to 2.8.5 in mplayer/mencoder

8384fca481

2016-01-17 11:12Thomas Zander (riggs) · 1.1_2

Document zero day remote vulnerability in ffmpeg 2.0.0 - 2.8.4

PR:		206282

d1dc0236ef

2016-01-15 18:47Bryan Drewery (bdrewery) · 1.1_2

Fix OpenSSH version ranges.

Reported by:	sunpoet

cbfcda773c

2016-01-15 16:22Martin Wilke (miwi) · 1.1_2

- Document h2o -- directory traversal vulnerability

PR:		206193

f3c23a7592

2016-01-14 20:34Bryan Drewery (bdrewery) · 1.1_2

Document OpenSSH CVE-2016-0777 and CVE-2016-0778.

Submitted by:	brnrd

9b574510ec

2016-01-14 01:25Jason Unovitch (junovitch) · 1.1_2

Document two vulnerabilities in Prosody

PR:		206150
Reported by:	Anton Shestakov <av6@dwimlabs.net>
Security:	CVE-2016-1232
Security:	CVE-2016-1231
Security:	https://vuxml.FreeBSD.org/freebsd/842cd117-ba54-11e5-9728-002590263bf5.html

cc7b62e0d8

2016-01-14 00:57Jason Unovitch (junovitch) · 1.1_2

Document Kibana 4.x XSS vulnerabilty

PR:		205961
PR:		205962
PR:		205963
Security:	https://vuxml.FreeBSD.org/freebsd/a7a4e96c-ba50-11e5-9728-002590263bf5.html

cfc7d0898d

2016-01-12 15:50Raphael Kubo da Costa (rakuco) · 1.1_2

Add entry for CVE-2015-8607 in devel/p5-PathTools.

Security:	CVE-2015-8607

accc712833

2016-01-11 12:07Martin Wilke (miwi) · 1.1_2

- php -- multiple vulnerabilities

9ff46d6e36

2016-01-09 14:42Raphael Kubo da Costa (rakuco) · 1.1_2

Add entry for CVE-2015-8557 in textproc/py-pygments.

90ef3b1301

2016-01-08 19:49Mark Felder (feld) · 1.1_2

Add openjdk7 to the existing java vuxml entry

PR:		204268

49094dce65

2016-01-08 19:44Mark Felder (feld) · 1.1_2

Document polkit vulnerabilities

PR:		204235
Security:	CVE-2015-4625
Security:	CVE-2015-3218
Security:	CVE-2015-3255
Security:	CVE-2015-3256

699c6ccdfe

2016-01-08 19:23Mark Felder (feld) · 1.1_2

Document net/librsync collision vulnerability

PR:		204237
Security:	CVE-2014-8242

9aad573076

2016-01-08 18:55Mark Felder (feld) · 1.1_2

Document fixed version of graphics/exact-image

Security:	CVE-2015-3885

5391a9d16c

2016-01-08 18:25Mark Felder (feld) · 1.1_2

Document devel/m6811-binutils is also vuln to older CVEs

PR:		198815
Security:	CVE-2014-8501
Security:	CVE-2014-8502
Security:	CVE-2014-8503

ca3251c374

2016-01-08 07:16Xin LI (delphij) · 1.1_2

Document ntp remote denial of service vulnerability.

3776166533

2016-01-08 02:31Jason Unovitch (junovitch) · 1.1_2

Document two dhcpcd vulnerabilities

PR:		206015
Security:	CVE-2016-1504
Security:	CVE-2016-1503
Security:	https://vuxml.FreeBSD.org/freebsd/df587aa2-b5a5-11e5-9728-002590263bf5.html

f8f6b1917b

2016-01-07 12:53Tijl Coosemans (tijl) · 1.1_2

Fix Polar SSL version in r405428

dcede75e12

2016-01-07 12:45Tijl Coosemans (tijl) · 1.1_2

Document mbedTLS/PolarSSL SLOTH vulnerability

Security:	https://tls.mbed.org/tech-updates/releases/mbedtls-2.2.1-2.1.4-1.3.16-and-polarssl.1.2.19-released

eb7dcd8aec

2016-01-06 08:30Xin LI (delphij) · 1.1_2

Correct version range in kea entry.

Submitted by:	Brian Martin <bmartin tenable.com>

9d0b9278e2

2016-01-06 01:49Jason Unovitch (junovitch) · 1.1_2

Document Xen Security Advisories (XSAs 159, 160, 162, 165, 166)

PR:		205841
Security:	CVE-2015-8555
Security:	CVE-2015-8341
Security:	CVE-2015-8339
Security:	CVE-2015-8340
Security:	https://vuxml.FreeBSD.org/freebsd/6aa2d135-b40e-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/e839ca04-b40d-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/5d1d4473-b40d-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/bcad3faa-b40c-11e5-9728-002590263bf5.html

aefe33f9d1

2016-01-05 16:00Raphael Kubo da Costa (rakuco) · 1.1_2

Document CVE-2015-8665 and CVE-2015-8683 in graphics/tiff.

de2c36a9d4

2016-01-05 15:27Martin Wilke (miwi) · 1.1_2

- Cleanup empty lines

b5c3c699dd

2016-01-05 14:46Emanuel Haupt (ehaupt) · 1.1_2

Another fix caused by r405285. Use package name in topic instead of origin.

68e4dcb580

2016-01-05 14:30Emanuel Haupt (ehaupt) · 1.1_2

Fix package name.

Notified by:	gjb

54f5cff640

2016-01-05 14:06Emanuel Haupt (ehaupt) · 1.1_2

Document CVE-2015-7696, CVE-2015-7697

PR:		165091
Submitted by:   brnrd

9aee8d04a2

2016-01-05 13:58Raphael Kubo da Costa (rakuco) · 1.1_2

Document CVE-2015-8369 in net-mgmt/cacti.

9489c4612e

2016-01-04 19:13Hiroki Sato (hrs) · 1.1_2

Document CVE-2015-8373.

8d1b61feef

2016-01-03 23:34Rene Ladan (rene) · 1.1_2

Document a buffer overflow in www/mini_httpd < 1.23

Obtained from:	http://acme.com/updates/archive/192.html

dbd4be73ac

2016-01-03 16:21Jason Unovitch (junovitch) · 1.1_2

Extend VuXML entry for QEMU DoS in AMD PC-Net II NIC support to cover Xen

PR:		205841
Security:	CVE-2015-7504
Security:	https://vuxml.FreeBSD.org/freebsd/405446f4-b1b3-11e5-9728-002590263bf5.html

b0008804b2

2016-01-03 03:25Jason Unovitch (junovitch) · 1.1_2

Document recent QEMU denial of service vulnerabilities

PR:		205813
PR:		205814
Security:	CVE-2015-8701
Security:	CVE-2015-8666
Security:	CVE-2015-8619
Security:	CVE-2015-8613
Security:	CVE-2015-8567
Security:	CVE-2015-8568
Security:	CVE-2015-8558
Security:	CVE-2015-7549
Security:	CVE-2015-8504
Security:	CVE-2015-7504
Security:	CVE-2015-7512
Security:	CVE-2015-8345
Security:	https://vuxml.FreeBSD.org/freebsd/1384f2fd-b1be-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/152acff3-b1bd-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/62ab8707-b1bc-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/b3f9f8ef-b1bb-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/9ad8993e-b1ba-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/60cb2055-b1b8-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/3fb06284-b1b7-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/67feba97-b1b5-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/405446f4-b1b3-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/b56fe6bb-b1b1-11e5-9728-002590263bf5.html

68b523e349

2016-01-02 14:23Jason Unovitch (junovitch) · 1.1_2

Document several older QEMU vulnerabilities

Security:	CVE-2015-7295
Security:	CVE-2015-5278
Security:	CVE-2015-5279
Security:	CVE-2015-6855
Security:	CVE-2015-6815
Security:	CVE-2015-5239
Security:	https://vuxml.FreeBSD.org/freebsd/42cbd1e8-b152-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/6aa3322f-b150-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/bbc97005-b14e-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/10bf8eed-b14d-11e5-9728-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/8a560bcf-b14b-11e5-9728-002590263bf5.html

a0c1127285

2016-01-01 21:50Jason Unovitch (junovitch) · 1.1_2

Document several older QEMU vulnerabilities

Security:	CVE-2015-3214
Security:	CVE-2015-5158
Security:	CVE-2015-5225
Security:	CVE-2015-5745
Security:	https://vuxml.FreeBSD.org/freebsd/2b3b4c27-b0c7-11e5-8d13-bc5ff45d0f28.html
Security:	https://vuxml.FreeBSD.org/freebsd/21e5abe3-b0c6-11e5-8d13-bc5ff45d0f28.html
Security:	https://vuxml.FreeBSD.org/freebsd/a267cd6c-b0c4-11e5-8d13-bc5ff45d0f28.html
Security:	https://vuxml.FreeBSD.org/freebsd/aea8d90e-b0c1-11e5-8d13-bc5ff45d0f28.html

66167af6aa

2015-12-31 15:57Mark Felder (feld) · 1.1_2

Document lang/mono vulnerability

Security:	CVE-2009-0689

1418ad6a65

2015-12-29 19:55Koop Mast (kwm) · 1.1_2

Document latest flash vulnabilities.

Security:	CVE-2015-8459, CVE-2015-8460, CVE-2015-8634,
		CVE-2015-8635, CVE-2015-8636, CVE-2015-8638,
		CVE-2015-8639, CVE-2015-8640, CVE-2015-8641,
		CVE-2015-8642, CVE-2015-8643, CVE-2015-8644,
		CVE-2015-8645, CVE-2015-8646, CVE-2015-8647,
		CVE-2015-8648, CVE-2015-8649, CVE-2015-8650,
		CVE-2015-8651

8d99556d0b

2015-12-29 18:02Mark Felder (feld) · 1.1_2

Document assigned CVE to irc/inspircd

Security:	CVE-2015-8702

cd06c861be

2015-12-29 14:36Mark Felder (feld) · 1.1_2

Document irc/inspircd DoS

No CVE assigned yet

b4539265b9

2015-12-28 19:21Jan Beich (jbeich) · 1.1_2

Document recent ffmpeg vulnerabilities

ecefeb2a17

2015-12-28 19:18Jan Beich (jbeich) · 1.1_2

Document NSS vulnerability fixed by ports r404007

PR:		205652
Reported by:	Christoph Moench-Tegeder <cmt@burggraben.net>

09d32d986f

2015-12-26 13:59Matthew Seaman (matthew) · 1.1_2

Document the latest phpMyAdmin security advisory.

7b9afed56e

2015-12-25 16:57Raphael Kubo da Costa (rakuco) · 1.1_2

Add an entry for CVE-2015-0860 in archivers/dpkg.

01bc556cb3

2015-12-24 18:09Martin Wilke (miwi) · 1.1_2

- Adjust latest py*-django entry

Discussed with: feld

d7945e3244

2015-12-24 15:57Jason Unovitch (junovitch) · 1.1_2

Document information disclosure vulnerability in the Mantis Bug Tracker

PR:		201106
Security:	CVE-2015-5059
Security:	https://vuxml.FreeBSD.org/freebsd/e1b5318c-aa4d-11e5-8f5c-002590263bf5.html

a8ec954225

2015-12-24 15:08Jason Unovitch (junovitch) · 1.1_2

Update earlier MediaWiki entry (r394240) with CVE assignment information

PR:		202328
Security:	CVE-2013-7444
Security:	CVE-2015-6727
Security:	CVE-2015-6728
Security:	CVE-2015-6729
Security:	CVE-2015-6730
Security:	CVE-2015-6731
Security:	CVE-2015-6733
Security:	CVE-2015-6734
Security:	CVE-2015-6735
Security:	CVE-2015-6736
Security:	CVE-2015-6737
Security:       https://vuxml.FreeBSD.org/freebsd/6241b5df-42a1-11e5-93ad-002590263bf5.html

f602a86a7d

2015-12-24 15:02Jason Unovitch (junovitch) · 1.1_2

Update earlier MediaWiki entry (r400007) with CVE assignment information

Security:	CVE-2015-8001
Security:	CVE-2015-8002
Security:	CVE-2015-8003
Security:	CVE-2015-8004
Security:	CVE-2015-8005
Security:	CVE-2015-8006
Security:	CVE-2015-8007
Security:	CVE-2015-8008
Security:	CVE-2015-8009
Security:	https://vuxml.FreeBSD.org/freebsd/b973a763-7936-11e5-a2a1-002590263bf5.html

438d4532e9

www/drupal10 6 unaddressed · 5.4 VuXML	Oct 30
www/drupal11 3 unaddressed · – VuXML	Oct 30
textproc/p5-Spreadsheet-XLSX 1 unaddressed · –	Oct 29
print/py-pypdf 32 unaddressed · 8.7	Oct 29
devel/py-pyasn1 4 unaddressed · 7.5	Oct 29
sysutils/nomad 3 unaddressed · 8.8	Oct 29
lang/python27 3 unaddressed · 6.3	Oct 29
lang/python311 +5 related 13 unaddressed · 9.4	Oct 29
lang/python315 6 unaddressed · 9.4	Oct 29
security/botan3 5 CVEs · 9.2 fixed 3.13.0	Oct 29
devel/libwasmtime 17 unaddressed · 9.9	Oct 29
graphics/ImageMagick6 2 unaddressed · 6.3 VuXML	Oct 29
graphics/ImageMagick7 83 CVEs · 7.2 fixed 7.1.2.34 VuXML	Oct 29
textproc/py-markdown 1 unaddressed · 8.7	Oct 29
www/openemr 11 unaddressed · 9.4	Oct 29

CVE-2026-108097 VuXML – www/drupal10 +1 more	Oct 30
CVE-2026-108515 – www/drupal10 +1 more	Oct 30
CVE-2026-108514 – www/drupal10 +1 more	Oct 30
CVE-2026-115943 – textproc/p5-Spreadsheet-XLSX	Oct 29
CVE-2026-119209 7.1 print/py-pypdf	Oct 29
CVE-2026-119208 7.1 print/py-pypdf	Oct 29
CVE-2026-119207 7.1 print/py-pypdf	Oct 29
CVE-2026-119206 7.1 print/py-pypdf	Oct 29
CVE-2026-119205 7.1 print/py-pypdf	Oct 29
CVE-2026-119204 7.1 print/py-pypdf	Oct 29
CVE-2026-119203 7.1 print/py-pypdf	Oct 29
CVE-2026-119197 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119196 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119195 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119194 7.5 devel/py-pyasn1	Oct 29

git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27
ImageMagick6	Oct 26