Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-30 to 1.1_6 · b1ef337e1f
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined, and that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,358)

2015-07-06 15:08Koop Mast (kwm) · 1.1_2

Use correct end tag.

Submitted by:	dvl@

c1ee75e499

2015-07-06 14:54Mark Felder (feld) · 1.1_2

Add iojs as affected package

Security:	864e6f75-2372-11e5-86ff-14dae9d210b8

cf9bfadd6b

2015-07-06 05:39Mark Felder (feld) · 1.1_2

Correct bitcoin range for CVE-2015-3641

b64285b0b2

2015-07-06 05:30Mark Felder (feld) · 1.1_2

Document ansible vulnerabilities

PR:		201359

164f54cc71

2015-07-06 05:21Mark Felder (feld) · 1.1_2

Document bitcoin CVE-2015-3641

33c44e58c6

2015-07-06 02:23Mark Felder (feld) · 1.1_2

add node-devel as affected package confirmed source code of node 0.11.16 is also vulnerable

ea0e8b1878

2015-07-06 02:09Mark Felder (feld) · 1.1_2

add www/node denial of service vulnerability no known CVE has been assigned

84a5cb54a7

2015-07-03 21:17Mark Felder (feld) · 1.1_2

cups-filters CVE-2015-3279

fd19f2d98a

2015-07-03 16:43Tijl Coosemans (tijl) · 1.1_2

Fix range for linux-c6-openssl

e996157403

2015-07-01 15:56Koop Mast (kwm) · 1.1_2

Record libxml2 vulnability

Security:	CVE-2015-1819

2f570e198d

2015-07-01 15:22Mark Felder (feld) · 1.1_2

Correct version range for netpbm CVE-2015-3885

d78556fb69

2015-07-01 02:09Xin LI (delphij) · 1.1_2

Document games/wesnoth authentication information disclosure vulnerability.

PR:		201105
Submitted by:	Jason Unovitch

755c037595

2015-07-01 01:56Dmitry Marakasov (amdmi3) · 1.1_2

- Document CVE-2015-3258 (cups-filters buffer overflow vulnerability)

PR:		201134
Submitted by:	cyberbotx@cyberbotx.com
Differential Revision:

c58a8fa1f4

2015-06-30 22:56Xin LI (delphij) · 1.1_2

Document ntp remote control message DoS vulnerability.

ae2318a842

2015-06-26 21:13Juergen Lock (nox) · 1.1_2

Document qemu pcnet guest to host escape vulnerability - CVE-2015-3209

PR:		201064
Submitted by:	koobs
Security:	https://vuxml.FreeBSD.org/freebsd/acd5d037-1c33-11e5-be9c-6805ca1d3bb1.html

4bf59b9fdf

2015-06-26 06:35Xin LI (delphij) · 1.1_2

Document CVE-2014-3120, CVE-2014-6439, CVE-2015-1427, CVE-2015-3337, and CVE-2015-4165 (various Elasticsearch vulnerabilities).

PR:		ports/201008
Submitted by:	Jason Unovitch

98c0e54a89

2015-06-24 22:35Xin LI (delphij) · 1.1_2

Split CVE-2015-4152 to its own entry as the affected port is logstash only.

While there also document CVE-2014-4326 (already fixed) for logstash.

PR:		ports/201001
Submitted by:	Jason Unovitch

72fb5fd16e

2015-06-24 22:17Xin LI (delphij) · 1.1_2

Add entry for logstash-forwarder/logstash.

PR:		ports/201065
Submitted by:	Jason Unovitch

1a71a0432f

2015-06-24 20:54Jan Beich (jbeich) · 1.1_2

Aggressively mark more consumers of bundled dcraw as vulnerable

ljpeg_start() originates from dcraw, no need to list every package with
copy of it at the expense of readability.

ea5d1656ea

2015-06-24 11:01Johannes Jost Meixner (xmj) · 1.1_2

Document linux-*-flashplugin11 CVE.

Reported by:	kwm
Reviewed by:	kwm
Security:	d02f6b01-1a3f-11e5-8bd6-c485083ca99c
Security:	CVE-2015-3113
Sponsored by:	Perceivon Hosting Inc.

d709b0fc86

2015-06-23 02:15Xin LI (delphij) · 1.1_2

Fix entry date.

2aa9f59daf

2015-06-23 02:13Xin LI (delphij) · 1.1_2

Document rubygem-bson DoS and possible injection vulnerability.

PR:		201061
Submitted by:	Jason Unovitch

9d0b4cf5d6

2015-06-23 01:39Xin LI (delphij) · 1.1_2

Document 3 vulnerabilities with PHP that affected 4 extensions.

PR:		200926
Submitted by:	Jason Unovitch

f9f83a6deb

2015-06-23 01:22Xin LI (delphij) · 1.1_2

Reflect version range change after r390340.  While I'm there, also fix the CVE-2015-4556 entry because it's not yet fixed in the ports tree and add a reference to the PR while there.

PR:		200980
Submitted by:	Vitaly Magerya (with changes suggested by Jason Unovitch)

1814e54078

2015-06-23 00:28Jimmy Olgeni (olgeni) · 1.1_2

Document vulnerabilities in devel/ipython < 3.2.0.

cced5ca8fe

2015-06-22 21:23Rene Ladan (rene) · 1.1_2

Document new vulnerabilities in www/chromium < 43.0.2357.130

Obtained from:	http://googlechromereleases.blogspot.nl/2015/06/chrome-stable-update.html

5dcea86754

2015-06-22 09:13Xin LI (delphij) · 1.1_2

Document rubygem-paperclip validation bypass vulnerabilitiy.

PR:		200979
Submitted by:	Jason Unovitch

2931ed1db6

2015-06-22 09:02Xin LI (delphij) · 1.1_2

Document lang/chicken vulnerabilities CVE-2014-9651 and CVE-2015-4556.

PR:		200980
Submitted by:	Jason Unovitch

58c3a2a130

2015-06-22 08:44Xin LI (delphij) · 1.1_2

Document cacti multiple vulnerabilities (affects < 0.8.8c) and multiple XSS/SQL injection vulnerabilities (affects < 0.8.8d).

PR:		200963
Submitted by:	Jason Unovitch

3c6e62d8c9

2015-06-20 14:11Jun Kuriyama (kuriyama) · 1.1_2

Add p5-Dancer vuln.

149f9abe94

2015-06-19 02:13Xin LI (delphij) · 1.1_2

Document Drupal multiple vulnerabilities.

168e12be9b

2015-06-17 23:40Xin LI (delphij) · 1.1_2

Document two vulnerabilities of cURL.

d400423100

2015-06-17 19:35Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_2

- Make it compatible with Python 3.x

Approved by:	delphij

80f5b0357c

2015-06-17 19:24Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_2

- Document Ruby on Rails multiple vulnerabilities

d49f53be74

2015-06-17 19:18Xin LI (delphij) · 1.1_2

Modify a5f160fa-deee-11e4-99f8-080027ef73ec so it covers ja-mailman too.

Submitted by:	Yasuhito FUTATSUKI

1669c4980e

2015-06-17 02:24Xin LI (delphij) · 1.1_2

Document testdisk multiple vulnerabilities.

PR:		ports/200250
Submitted by:	Jason Unovitch

0d8dfa7ce4

2015-06-16 02:44Xin LI (delphij) · 1.1_2

Document Tomcat multiple vulnerabilities.

e1aed4b396

2015-06-12 16:10Brad Davis (brd) · 1.1_2

Add ossec-hids-* vulnerabilities.

PR:		200801
Submitted by:	Jason Unovitch <jason.unovitch@gmail.com>
Approved by:	swills (mentor)

7b047d168a

2015-06-12 04:12Ryan Steinmetz (zi) · 1.1_2

- Add vulnerability information for additional ports affected by openssl CVEs in 8305e215-1080-11e5-8ba2-000c2980a9f3

8f5fadbbf0

2015-06-11 23:35Ryan Steinmetz (zi) · 1.1_2

- Document recent vulnerabilities in security/openssl

ad01f5ea18

2015-06-11 17:53Johannes Jost Meixner (xmj) · 1.1_2

Document 13 Flash vulnerabilities. Affected: www/linux-*-flashplugin11.

353f452b19

2015-06-10 20:09Xin LI (delphij) · 1.1_2

Document libzmq4 V3 protocol handler protocol downgrade vulnerability.

PR:		200502
Submitted by:	Jason Unovitch

68d04a0b91

2015-06-10 19:34Xin LI (delphij) · 1.1_2

Document pgbouncer remote denial of service vulnerability.

PR:		200537
Submitted by:	Jason Unovitch

aec2eea161

2015-06-10 01:17Xin LI (delphij) · 1.1_2

Document cups multiple vulnerabilities.

c79d94ea8a

2015-06-09 10:23Xin LI (delphij) · 1.1_2

Document two strongswan vulnerabilities.

PR:		200721
Submitted by:	Jason Unovitch (with changes: wrapped long line and changed
		CVE-2015-3991's coverage to cover only < 5.3.1 to reflect
		the reality).

b882d8e5f7

2015-06-09 00:33Xin LI (delphij) · 1.1_2

Document redis EVAL Lua sandbox escape vulnerability.

28dc96b72b

2015-06-08 19:30Thierry Thomas (thierry) · 1.1_2

Add an entry for www/tidy-* heap-buffer-overflow.

PR:		ports/200631
Submitted by:	Walter Hop

767875cfe8

2015-06-07 23:07Xin LI (delphij) · 1.1_2

Fix typo and remove PHP from pcre vulnerabilities, as the bundled pcre is not used.

b3b0de6332

2015-06-07 22:53Xin LI (delphij) · 1.1_2

Document fixed version of pcre in e69af246-0ae2-11e5-90e4-d050996490d0.

1e55242432

2015-06-06 20:21Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1_2

- Update VuXML

PR:		200196
Submitted by:	Jason Unovitch <jason.unovitch@gmail.com>

4e60fe4607

databases/clickhouse +1 related 2 unaddressed · 9.5	Oct 30
www/drupal10 6 unaddressed · 5.4 VuXML	Oct 30
www/drupal11 3 unaddressed · – VuXML	Oct 30
textproc/p5-Spreadsheet-XLSX 1 unaddressed · –	Oct 29
print/py-pypdf 32 unaddressed · 8.7	Oct 29
devel/py-pyasn1 4 unaddressed · 7.5	Oct 29
sysutils/nomad 3 unaddressed · 8.8	Oct 29
lang/python27 3 unaddressed · 6.3	Oct 29
lang/python311 +5 related 13 unaddressed · 9.4	Oct 29
lang/python315 6 unaddressed · 9.4	Oct 29
security/botan3 5 CVEs · 9.2 fixed 3.13.0	Oct 29
devel/libwasmtime 17 unaddressed · 9.9	Oct 29
graphics/ImageMagick6 2 unaddressed · 6.3 VuXML	Oct 29
graphics/ImageMagick7 83 CVEs · 7.2 fixed 7.1.2.34 VuXML	Oct 29
textproc/py-markdown 1 unaddressed · 8.7	Oct 29

CVE-2026-116366 9.5 databases/clickhouse +1 more	Oct 30
CVE-2026-108097 VuXML – www/drupal10 +1 more	Oct 30
CVE-2026-108515 – www/drupal10 +1 more	Oct 30
CVE-2026-108514 – www/drupal10 +1 more	Oct 30
CVE-2026-115943 – textproc/p5-Spreadsheet-XLSX	Oct 29
CVE-2026-119209 7.1 print/py-pypdf	Oct 29
CVE-2026-119208 7.1 print/py-pypdf	Oct 29
CVE-2026-119207 7.1 print/py-pypdf	Oct 29
CVE-2026-119206 7.1 print/py-pypdf	Oct 29
CVE-2026-119205 7.1 print/py-pypdf	Oct 29
CVE-2026-119204 7.1 print/py-pypdf	Oct 29
CVE-2026-119203 7.1 print/py-pypdf	Oct 29
CVE-2026-119197 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119196 7.5 devel/py-pyasn1	Oct 29
CVE-2026-119195 7.5 devel/py-pyasn1	Oct 29

openresty	Oct 30
git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28
p5-GD	Oct 28
p5-HTTP-Body	Oct 28
p5-MIME-Tools	Oct 28
p5-Plack	Oct 28
p5-Starman	Oct 28
py311-pillow	Oct 28
py312-pillow	Oct 28
py313-pillow	Oct 28
py313t-pillow	Oct 28
py314-pillow	Oct 28
py314t-pillow	Oct 28
py315-pillow	Oct 28
trafficserver	Oct 28
py311-svglib	Oct 27
py312-svglib	Oct 27
py313-svglib	Oct 27
py313t-svglib	Oct 27
py314-svglib	Oct 27
py314t-svglib	Oct 27
py315-svglib	Oct 27
rustls-ffi	Oct 27