Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-29 to 1.1_6 · 898db4939a
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined — that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (6) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
300264	maintainer-feedback? security/vuxml: correct double-encoded UTF-8 in Spotipy entry c3fb48cc	In Progress	2026-10-29
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08

Show all 6

PR	Summary	Status	Changed
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,355)

2015-11-15 18:28Bernard Spil (brnrd) · 1.1_2

Document vulnerability of libpng

Differential Revision:	https://reviews.freebsd.org/D4164
Reviewed By:	koobs (mentor)
Approved By:	koobs
Security:	CVE-2015-8126

3f4b66cc4d

2015-11-14 23:44Koop Mast (kwm) · 1.1_2

Document latest flash vulnabilities.

Security:	CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654
Security: 	CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658
Security:	CVE-2015-7659, CVE-2015-7660, CVE-2015-7661, CVE-2015-7662
Security:	CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044
Security:	CVE-2015-8046

a0fb2fceb7

2015-11-11 23:43Rene Ladan (rene) · 1.1_2

Document new vulnerabilities in www/chromium < 46.0.2490.86

Obtained from:	http://googlechromereleases.blogspot.nl/2015/11/stable-channel-update.html

b08bc93a51

2015-11-11 21:39Bernard Spil (brnrd) · 1.1_2

Document CVE's in MySQL/MariaDB/Percona

PR:		204410
Submitted by:	Sevan Janiyan <venture37@geeklan.co.uk>
Reviewed by:	feld
Approved by:	feld
Security:	CVE-2015-4802
Security:	CVE-2015-4807
Security:	CVE-2015-4815
Security:	CVE-2015-4826
Security:	CVE-2015-4830
Security:	CVE-2015-4836
Security:	CVE-2015-4858
Security:	CVE-2015-4861
Security:	CVE-2015-4870
Security:	CVE-2015-4913
Security:	CVE-2015-4792

a45c2247bc

2015-11-11 17:26Steve Wills (swills) · 1.1_2

Document RCE in jenkins

70a10de92f

2015-11-11 12:19Guido Falsi (madpilot) · 1.1_2

Document owncloudclient vulnerability

PR:		204407
Submitted by:	Sevan Janiyan <venture37 at geeklan.co.uk>
Security:	CVE-2015-7298

1df9f4df9c

2015-11-11 04:22Jason Unovitch (junovitch) · 1.1_2

Document Xen XSAs-{142,148,149,150,151,152,153}

Security:	CVE-2015-7311
Security:	CVE-2015-7835
Security:	CVE-2015-7969
Security:	CVE-2015-7970
Security:	CVE-2015-7971
Security:	CVE-2015-7972
Security:	https://vuxml.FreeBSD.org/freebsd/301b04d7-881c-11e5-ab94-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/3d9f6260-881d-11e5-ab94-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/83350009-881e-11e5-ab94-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/c0e76d33-8821-11e5-ab94-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/e3792855-881f-11e5-ab94-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/e4848ca4-8820-11e5-ab94-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/fc1f8795-881d-11e5-ab94-002590263bf5.html

8ff9fb91a4

2015-11-11 03:16Jason Unovitch (junovitch) · 1.1_2

Document p5-HTML-Scrubber XSS vulnerability

PR:		204416
Reported by:	Sevan Janiyan <venture37@geeklan.co.uk>
Security:	CVE-2015-5667
Security:	https://vuxml.FreeBSD.org/freebsd/2f7f4db2-8819-11e5-ab94-002590263bf5.html

5d91b7a259

2015-11-10 23:26Jan Beich (jbeich) · 1.1_2

Document MFSA 2015-101 affects multimedia/libvpx as well

PR:		203410

252ac7fdab

2015-11-10 04:25Jason Unovitch (junovitch) · 1.1_2

Document CVE assignment on wpa_supplicant 2015-5 advisory

PR:		201432
Security:	CVE-2015-8041
Security:	https://vuxml.FreeBSD.org/freebsd/c93c9395-25e1-11e5-a4a5-002590263bf5.html

ff9a094d22

2015-11-10 04:18Jason Unovitch (junovitch) · 1.1_2

Revise lldpd entry to cover denial of service CVE and add references.

PR:		204044
Security:	CVE-2015-8012
Security:	CVE-2015-8011
Security:	https://vuxml.FreeBSD.org/freebsd/2a4a112a-7c1b-11e5-bd77-0800275369e2.html

3c8503c967

2015-11-09 21:57Mark Felder (feld) · 1.1_2

Document dns/powerdns denial of service vulnerability

Security:	CVE-2015-5311

a5573f5fb3

2015-11-09 09:06Matthias Andree (mandree) · 1.1_2

Record PuTTY vuln' CVE-2015-5309 (Erase char handling).

73e069adbd

2015-11-05 23:26Don Lewis (truckman) · 1.1_2

Add openoffice-devel version information to entry 18b3c61b-83de-11e5-905b-ac9e174be3af Apache OpenOffice 4.1.1 -- multiple vulnerabilities.

79d59d9010

2015-11-05 18:03Don Lewis (truckman) · 1.1_2

Apache OpenOffice 4.1.1 -- multiple vulnerabilities.

5983dc2090

2015-11-04 20:36Niclas Zeising (zeising) · 1.1_2

Add CVE for xscreensaver lock bypass.

b224fe5d39

2015-11-01 03:10Jason Unovitch (junovitch) · 1.1_2

Document multiple vulnerabilities fixed in CodeIgniter

PR:		203403
Security:	https://vuxml.FreeBSD.org/freebsd/bdd57272-803c-11e5-ab94-002590263bf5.html

7f715d5501

2015-10-29 02:51Jason Unovitch (junovitch) · 1.1_2

Document additional CVE assigned for the last Wordpress update

Security:	CVE-2015-7989
Security:	https://vuxml.FreeBSD.org/freebsd/f4ce64c2-5bd4-11e5-9040-3c970e169bc2.html

23503a93fa

2015-10-28 21:59Mark Felder (feld) · 1.1_2

Document information disclosure in net/openafs

Security:	CVE-2015-7762
Security:	CVE-2015-7763

d5bb164515

2015-10-27 21:53Niclas Zeising (zeising) · 1.1_2

Add entry for x11/xscreensaver for a lock bypass vulnerability

8bcc103ea0

2015-10-27 14:44Mathieu Arnold (mat) · 1.1_2

Document lldpd security vunlnerability.

PR:		204044
Submitted by:	maintainer
Sponsored by:	Absolight

91f933b2cb

2015-10-26 14:45Mark Felder (feld) · 1.1_2

Update range for libressl vulnerability

Range was entered incorrectly as <2.2.3

Security:	e75a96df-73ca-11e5-9b45-b499baebfeaf

320c35ac14

2015-10-25 18:37Joe Marcus Clarke (marcus) · 1.1_2

Add an entry for wireshark-1.12.8 for CVE-2015-7830.

99d9c2bd22

2015-10-25 04:26Jason Unovitch (junovitch) · 1.1_2

Document the recent remote site takeover via SQL injection vuln in Joomla

While here, document all missing Joomla security vulnerabilities since the
last entry in March 2014

Security:	CVE-2014-6631
Security:	CVE-2014-6632
Security:	CVE-2014-7228
Security:	CVE-2014-7229
Security:	CVE-2015-5397
Security:	CVE-2015-5608
Security:	CVE-2015-6939
Security:	CVE-2015-7297
Security:	CVE-2015-7857
Security:	CVE-2015-7858
Security:	CVE-2015-7859
Security:	CVE-2015-7899
Security:	https://vuxml.FreeBSD.org/freebsd/0ebc6e78-7ac6-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/03e54e42-7ac6-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/f8c37915-7ac5-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/ec2d1cfd-7ac5-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/deaba148-7ac5-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/cec4d01a-7ac5-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/beb3d5fc-7ac5-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/adbb32d9-7ac5-11e5-b35a-002590263bf5.html

76779cc5bd

2015-10-24 05:55Jason Unovitch (junovitch) · 1.1_2

Document redirect vulnerability in the drupal7 overlay module

PR:		203977
Security:	CVE-2015-7943
Security:	https://vuxml.FreeBSD.org/freebsd/75f39413-7a00-11e5-a2a1-002590263bf5.html

f919e6acd7

2015-10-23 22:39Matthew Seaman (matthew) · 1.1_2

Record phpMyAdmin -- content spoofing vulnerability.

1cf82dbf08

2015-10-23 13:59Xin LI (delphij) · 1.1_2

Add CVE references to the NTP entry.

08f34c37a2

2015-10-23 05:43Jason Unovitch (junovitch) · 1.1_2

Document Mediawiki security vulnerabilities for 1.25.3, 1.24.4, and 1.23.11

Security:	https://vuxml.FreeBSD.org/freebsd/b973a763-7936-11e5-a2a1-002590263bf5.html

fc111cf1ce

2015-10-22 05:03Cy Schubert (cy) · 1.1_2

Document October 2015 NTP Security Vulnerability Announcement (Medium)

898655c0cb

2015-10-20 04:33Jason Unovitch (junovitch) · 1.1_2

Document multiple XSS vulnerabilities fixed in CodeIgniter

PR:		203403
Security:	https://vuxml.FreeBSD.org/freebsd/95602550-76cf-11e5-a2a1-002590263bf5.html

379ee526f4

2015-10-19 22:22Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_2

- Add NO_ARCH - While I'm here, use "yes" instead of "YES"

Approved by:	portmgr (blanket)

2743e8d9cf

2015-10-19 19:04Renato Botelho (garga) · 1.1_2

Add new VuXML entry for git arbitrary code execution bug on versions before 2.6.1

b5f8054f06

2015-10-17 20:16Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_2

- Document Salt multiple vulnerabilities

d791a4add6

2015-10-16 20:57Steve Wills (swills) · 1.1_2

Document CVE-2015-7184 in firefox

f880925a41

2015-10-16 18:11Koop Mast (kwm) · 1.1_2

Document flash 0-day, remove code execution.

Security:	CVE-2015-7645, CVE-2015-7647, CVE-2015-7648

82f203006a

2015-10-16 09:44Peter Wemm (peter) · 1.1_2

Fix the vuxml build caused by a multitude of errors in r399425 (libressl).

e4482bc1e2

2015-10-16 09:08Bernard Spil (brnrd) · 1.1_2

security/libressl: Fix memory leak and buffer overflow DoS vulnerability

* Update to 2.2.4 (fixing vulnerabilities)
  * Create vuxml entry

Differential revision: https://reviews.freebsd.org/D3916
Submitted by:	Bernard Spil <brnrd@freebsd.org>
Reviewed by:	delphij (secteam)
Approved by:	delphij
MFC after:	2015Q4
Security:	CVE-2015-5333, CVE-2015-533

eac75ec131

2015-10-15 16:48Mark Felder (feld) · 1.1_2

Document vulnerability in polarssl, polarssl13, and mbedtls

Security:	CVE-2015-5291

1fdbc58c42

2015-10-15 01:59Jason Unovitch (junovitch) · 1.1_2

Document multiple vulnerabilities in the Magento platform While here, update an older entry to reflect Magento was vulnerable

PR:		201709
Security:	https://vuxml.FreeBSD.org/freebsd/ea1d2530-72ce-11e5-a2a1-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/ec34d0c2-1799-11e2-b4ab-000c29033c32.html
Security:	CVE-2012-3363

086688b059

2015-10-14 21:02Jan Beich (jbeich) · 1.1_2

net/miniupnpc: improve TALOS-2015-0035 entry in VuXML

- Add "reserved" CVE link
- Adjust version range to include a few previous snapshots
  and different fix in /branches/2015Q4

PR:		203705

6286222db5

2015-10-14 19:05Jan Beich (jbeich) · 1.1_2

net/miniupnpc: reference TALOS-2015-0035 fix

It maybe easier to backport to the quaterly branch than the development
snapshot that caused fallout in most consumers.

PR:		203705

899edfd9f7

2015-10-14 18:53Mark Felder (feld) · 1.1_2

Document www/pear-twig remote code execution

Security:	CVE-2015-7809

7d0ce5c47b

2015-10-14 18:47Mark Felder (feld) · 1.1_2

Document assigned CVE for graphics/optipng

Security:	CVE-2015-7801

41d6fa567f

2015-10-14 18:21Mark Felder (feld) · 1.1_2

net/miniupnpc: Document buffer overflow

PR:		203705
Security:	TALOS-2015-0035

52ef750fc0

2015-10-14 14:21Koop Mast (kwm) · 1.1_2

Document latest flash vulnabilities.

Security:	CVE-2015-5569, CVE-2015-7625, CVE-2015-7626, CVE-2015-7627,
		CVE-2015-7628, CVE-2015-7629, CVE-2015-7630, CVE-2015-7631,
		CVE-2015-7632, CVE-2015-7633, CVE-2015-7634, CVE-2015-7643,
		CVE-2015-7644

34794030bd

2015-10-13 21:31Rene Ladan (rene) · 1.1_2

Forgot two vulnerabilities in the previous commit.

46a3cede8a

2015-10-13 21:28Rene Ladan (rene) · 1.1_2

Document new vulnerabilities in www/chromium < 46.0.2490.71

Obtained from:	http://googlechromereleases.blogspot.nl/2015/10/stable-channel-update.html

5a62cc722a

2015-10-12 16:19Jason Unovitch (junovitch) · 1.1_2

Add CVE assignment to r398701 Zend Framework 1 entry

PR:		203462
Security:	CVE-2015-7695
Security:	https://vuxml.FreeBSD.org/freebsd/d3324fdb-6bf0-11e5-bc5e-00505699053e.html

b22b3543a4

2015-10-12 16:11Jason Unovitch (junovitch) · 1.1_2

Add CVE assignment to r398626 PHP entry

PR:		203541
Security:	CVE-2015-7804
Security: 	CVE-2015-7803
Security: 	https://vuxml.FreeBSD.org/freebsd/c1da8b75-6aef-11e5-9909-002590263bf5.html

f1813f99c1

2015-10-10 17:27Jason Unovitch (junovitch) · 1.1_2

Document shell command execution via improper escaping in p5-UI-Dialog

PR:		203667
Security:	CVE-2008-7315
Security:	https://vuxml.FreeBSD.org/freebsd/00dadbf0-6f61-11e5-a2a1-002590263bf5.html

4229f5003d

www/drupal10 6 unaddressed · 5.4 VuXML	Oct 30
www/drupal11 3 unaddressed · – VuXML	Oct 30
textproc/p5-Spreadsheet-XLSX 1 unaddressed · –	Oct 29
print/py-pypdf 32 unaddressed · 8.7	Oct 29
devel/py-pyasn1 4 unaddressed · 7.5	Oct 29
sysutils/nomad 3 unaddressed · 8.8	Oct 29
lang/python27 3 unaddressed · 6.3	Oct 29
lang/python311 +5 related 13 unaddressed · 9.4	Oct 29
lang/python315 6 unaddressed · 9.4	Oct 29
security/botan3 5 CVEs · 9.2 fixed 3.13.0	Oct 29
devel/libwasmtime 17 unaddressed · 9.9	Oct 29
graphics/ImageMagick6 2 unaddressed · 6.3 VuXML	Oct 29
graphics/ImageMagick7 83 CVEs · 7.2 fixed 7.1.2.34 VuXML	Oct 29
textproc/py-markdown 1 unaddressed · 8.7	Oct 29
www/openemr 11 unaddressed · 9.4	Oct 29

CVE-2026-108097 VuXML – www/drupal10 +1 more	Oct 30
CVE-2026-108515 – www/drupal10 +1 more	Oct 30
CVE-2026-108514 – www/drupal10 +1 more	Oct 30
CVE-2026-115943 – textproc/p5-Spreadsheet-XLSX	Oct 29
CVE-2026-119209 7.1 print/py-pypdf	Oct 29
CVE-2026-119208 7.1 print/py-pypdf	Oct 29
CVE-2026-119207 7.1 print/py-pypdf	Oct 29
CVE-2026-119206 7.1 print/py-pypdf	Oct 29
CVE-2026-119205 7.1 print/py-pypdf	Oct 29
CVE-2026-119204 7.1 print/py-pypdf	Oct 29
CVE-2026-119203 7.1 print/py-pypdf	Oct 29
CVE-2026-119197 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119196 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119195 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119194 7.5 devel/py-pyasn1	Oct 29

git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27
ImageMagick6	Oct 26