Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: ports-secteam@FreeBSD.org
Packages: latest: 1.1_6
Upstream: up to date
Last update: 2026-10-30 to 1.1_6 · d30441ad3d
Quarterly: 2026Q4: 1.1_6
WWW: https://vuxml.freebsd.org/
CPE: not set in the port, and none could be determined, and that does not mean none exists
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install vuxml

installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6

Port

# cd /usr/ports/security/vuxml && make install clean

Size

9.7 KiB download · 40 KiB installed

License

BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.1_6	1.1_6	–
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.1_6	1.1_6	–
FreeBSD 14	1.1_6	1.1_6	1.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

lang/python312 3.12.15 25 unaddressed
textproc/libxslt 1.1.45
textproc/xhtml-basic 1.0.20001219_2
textproc/xhtml-modularization 1.0.20010410_1
textproc/xmlcatmgr 2.2_4

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
295797	maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256	In Progress	2026-07-17
295836	maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django	New	2026-06-04
291717	security/vuxml: add entry for uriparser < 1.0.0	New	2025-12-16
288090	maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2	New	2025-07-08
270795	security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries	In Progress	2025-07-01

Commits (8,359)

2014-10-09 15:09Mark Felder (feld) · 1.1_2

Add entry for foreman-proxy

Obtained from:	mmoll

cee4eb51b0

2014-10-08 10:32Rene Ladan (rene) · 1.1_2

Document new vulnerabilities in www/chromium < 38.0.2125.101

Obtained from:	http://googlechromereleases.blogspot.nl/2014/10/stable-channel-update.html
MFH:		2014Q4

92e654eadb

2014-10-06 21:09Olli Hauer (ohauer) · 1.1_2

- document bugzilla security issues

4f19d92e37

2014-10-02 23:14Bryan Drewery (bdrewery) · 1.1_2

Fix rsyslog entry for pkgname matching

a1d0d79986

2014-10-02 21:59Matthew Seaman (matthew) · 1.1_2

www/rt42 < 4.2.8 is vulnerable to shellshock related exploits through its SMIME integration.

Security:	81e2b308-4a6c-11e4-b711-6805ca0b3d42

c042b3ff7e

2014-10-02 21:30Brad Davis (brd) · 1.1_2

- Update the rsyslog entry to reflect the new versions

Reviewed by:	bdrewery

fb3f37589e

2014-10-02 03:06Bryan Drewery (bdrewery) · 1.1_2

Update Jenkins entry 549a2771-49cc-11e4-ae2c-c80aa9043978 to be readable.

ddc9d6d9b4

2014-10-02 02:54Bryan Drewery (bdrewery) · 1.1_2

Update grammar of DoS in Jenkins entry

25485f86c6

2014-10-02 02:53Bryan Drewery (bdrewery) · 1.1_2

Fix Jenkins entry to note that XSS is an issue, not as compiler

c2c59333ab

2014-10-02 02:46Bryan Drewery (bdrewery) · 1.1_2

Document Jenkins vulnerabilities

Security:		CVE-2014-3661
Security:		CVE-2014-3662
Security:		CVE-2014-3663
Security:		CVE-2014-3664
Security:		CVE-2014-3680
Security:		CVE-2014-3681
Security:		CVE-2014-3666
Security:		CVE-2014-3667
Security:		CVE-2013-2186
Security:		CVE-2014-1869
Security:		CVE-2014-3678
Security:		CVE-2014-3679

59834325c3

2014-10-02 00:57Bryan Drewery (bdrewery) · 1.1_2

Fix bash entries to also mark bash-static vulnerable

33e5a12d5b

2014-10-02 00:30Bryan Drewery (bdrewery) · 1.1_2

Document CVE-2014-6277 and CVE-2014-6278 for bash.

15015e6b02

2014-10-02 00:12Bryan Drewery (bdrewery) · 1.1_2

- Document CVE-2014-7187 fixed in bash-4.3.27_1

ca11fc5279

2014-10-01 23:25Matthew Seaman (matthew) · 1.1_2

Document the latest phpMyAdmin vulnerability.

- while here fix the '>' breakage in the rsyslogd entry.

Security:	3e8b7f8a-49b0-11e4-b711-6805ca0b3d42

a763414630

2014-10-01 05:40Bryan Drewery (bdrewery) · 1.1_2

Document CVE-2014-7186 for bash

a703832b9e

2014-09-30 22:09Brad Davis (brd) · 1.1_2

- Document sysutils/rsyslog vulnerabilities CVE-2014-3634

Reviewed by:	bdrewery@

b210b76fd9

2014-09-30 01:34Bryan Drewery (bdrewery) · 1.1_2

Document shells/fish vulnerabilities

e7ca3763f8

2014-09-26 19:34Johannes Jost Meixner (xmj) · 1.1_2

Add linux-c6-nss-3.15.1 package to the NSS vulnerability report.

Approved by:	swills (mentor)

af93a5d189

2014-09-26 19:05Johannes Jost Meixner (xmj) · 1.1_2

Add linux_base-c6-6.5 package to the bash vulnerability report.

Approved by:	swills (mentor)

6a6123d47e

2014-09-25 18:22Bryan Drewery (bdrewery) · 1.1_2

The 2nd bash issue was reassigned to CVE-2014-7169:   http://seclists.org/oss-sec/2014/q3/685

Reported by:	jkim

a7b1fd362d

2014-09-25 17:44Bryan Drewery (bdrewery) · 1.1_2

Update bash entry for CVE-2014-3659

Security:	CVE-2014-3659
Security:	ca44b64c-4453-11e4-9ea1-c485083ca99c

f0256b1c19

2014-09-25 15:29Eygene Ryabinkin (rea) · 1.1_2

VuXML entry 48108fb0-751c-4cbb-8f33-09239ead4b55: expanded details Reviewed by:	des@

7d75c62abd

2014-09-25 14:48Johannes Jost Meixner (xmj) · 1.1_2

www/linux-*-flashplugin11: Fix multiple security vulnerabilities

Adobe has discovered multiple security vulnerabilities in Flash
linux-*-flashplugin-11.2r202.400. Ugrade the two Linux ports to
version .406, which fixes these.

While there, assign www/linux-c6-flashplugin11 to emulation@
in order to match r369160.

PR:		193904
Differential Revision:	https://reviews.freebsd.org/D831
Submitted by:	Jung-uk Kim
Approved by:	koobs (mentor)
MFH:		2014Q3
Security:	ca44b64c-4453-11e4-9ea1-c485083ca99c

e1e8f53b39

2014-09-25 09:45Dag-Erling Smørgrav (des) · 1.1_2

fix

f884047cb4

2014-09-25 09:43Dag-Erling Smørgrav (des) · 1.1_2

Add entry for the NSS signature forgery bug.

PR:		193906
MFH:		2014Q3
Security:	CVE-2014-1568

46f042b4d0

2014-09-25 09:34Rene Ladan (rene) · 1.1_2

Document new vulnerability in www/chromium < 37.0.2062.124

Obtained from:	http://googlechromereleases.blogspot.nl/
MFH:		2014Q3

9e4133005f

2014-09-24 23:22Raphael Kubo da Costa (rakuco) · 1.1_2

Add entry for net/krfb (CVE-2014-6055).

2c2f3a2f60

2014-09-24 20:07Xin LI (delphij) · 1.1_2

Document bash remote code execution vulnerability.

60ee221669

2014-09-18 21:53Guido Falsi (madpilot) · 1.1_2

Document new asterisk11 vulnerability.

MFH:		2014Q3

2814daf170

2014-09-18 15:20Guido Falsi (madpilot) · 1.1_2

Document new squid vulnerability.

PR:		193737
Submitted by:	timp87 at gmail.com
MFH:		2014Q3

33e5dc1889

2014-09-17 13:04Koop Mast (kwm) · 1.1_2

Document new dbus vulnabilities.

MFH:		2014Q3

3a4a25974f

2014-09-16 19:35Sergey A. Osokin (osa) · 1.1_2

Document nginx security advisory (CVE-2014-3616).

dc7dfebbe6

2014-09-13 23:18Matthew Seaman (matthew) · 1.1_2

Document the latest phpMyAdmin vulnerability

Security:	cc627e6c-3b89-11e4-b629-6805ca0b3d42

0b57820092

2014-09-11 16:09Brad Davis (brd) · 1.1_2

Document CVE-2014-5284 affecting security/ossec-hids-* < 2.8.1.

Reviewed by:	zi@

d159ee42c7

2014-09-09 23:27Rene Ladan (rene) · 1.1_2

Document new vulnerabilities in www/chromium < 37.0.2062.120

Obtained from:	http://googlechromereleases.blogspot.nl/
MFH:		2014Q3

934764e569

2014-09-05 16:45Tijl Coosemans (tijl) · 1.1_2

Document trafficserver vulnerability

MFH:		2014Q3

218ef4e8d4

2014-09-03 22:16Olli Hauer (ohauer) · 1.1_2

- update vid f927e06c-1109-11e4-b090-20cf30e32f6d   (httpd-2.2.29 was released today)

MFH:		2014Q3

2e538bbbe7

2014-08-26 18:36Rene Ladan (rene) · 1.1_2

Document new vulnerabilities in www/chromium < 37.0.2062.94

Obtained from:	http://googlechromereleases.blogspot.nl
MFH:		2014Q3

772a313bc5

2014-08-21 21:46Ryan Steinmetz (zi) · 1.1_2

- Document buffer overrun in sysutils/file

b91a107bb8

2014-08-21 19:13Li-Wen Hsu (lwhsu) · 1.1_2

Add missing <package> tag

61faa6c3bc

2014-08-21 19:09Li-Wen Hsu (lwhsu) · 1.1_2

Document Django 2014-08-20 vulnerabilty

Reviewed by:	koobs

b4c5d1d593

2014-08-18 23:11Florian Smeets (flo) · 1.1_2

Record PHP 5.3 vulnerabilities

df03bac70c

2014-08-17 21:48Matthew Seaman (matthew) · 1.1_2

Document the latest phpMyAdmin security advisories.

XSS in view operations page

and

Multiple XSS vulnerabilities in browse table, ENUM editor, monitor, query charts and table relations pages

Security:	fbb01289-2645-11e4-bc44-6805ca0b3d42

e9714da8d4

2014-08-13 08:43Rene Ladan (rene) · 1.1_2

Document new vulnerabilities in www/chromium < 36.0.1985.143

Submitted by:	Carlos Jacobo Puga Media <cpm@fbsd.es>
Obtained from:	http://googlechromereleases.blogspot.nl/
MFH:		2014Q3

bd5028c8d0

2014-08-11 22:19Olli Hauer (ohauer) · 1.1_2

- fix package name s/subversion18/subversion/

Thanks to jkim@ for the notice!

4d6d20cd7a

2014-08-11 21:06Ryan Steinmetz (zi) · 1.1_2

- INSERT URL HERE

4221067e37

2014-08-11 20:52Olli Hauer (ohauer) · 1.1_2

- document serf CVE-2014-3504

MFH:		2014Q3

67688b393f

2014-08-11 20:42Olli Hauer (ohauer) · 1.1_2

- document subversion CVE-2014-3522, CVE-2014-3528

MFH:		2014Q3

809ba9c35b

2014-08-10 05:07Sergey A. Osokin (osa) · 1.1_2

Fix typo.

Found by:	rene

7b41a1a84d

2014-08-09 20:26Sergey A. Osokin (osa) · 1.1_2

Document nginx vulnerability.

03b0bc919d

devel/qt6 10 unaddressed · 4.5	Oct 30
net/traefik 29 CVEs · 9.3 fixed 3.7.16	Oct 30
www/p5-Starlet 4 unaddressed · –	Oct 30
www/p5-HTTP-Parser-XS 1 unaddressed · –	Oct 30
devel/qt5 12 unaddressed · 8.7	Oct 30
databases/sqlite2 +2 related 11 unaddressed · 8.5	Oct 30
net-mgmt/prometheus1 +2 related 1 unaddressed · 6.3	Oct 30
databases/phpmyadmin +1 related 7 unaddressed · 7.7	Oct 30
www/opencart 3 unaddressed · 5.1	Oct 30
www/moodle45 4 unaddressed · 7.1	Oct 30
www/moodle50 4 unaddressed · 7.1	Oct 30
www/moodle51 +1 related 4 unaddressed · 7.1	Oct 30
www/moodle53 4 unaddressed · 7.1	Oct 30
net-mgmt/uptime-kuma 1 unaddressed · 6.3	Oct 30
www/forgejo15 4 unaddressed · 6.9	Oct 30

CVE-2026-111487 4.3 devel/qt6	Oct 30
CVE-2026-119574 fixed 8.2 net/traefik	Oct 30
CVE-2026-119573 fixed 2.1 net/traefik	Oct 30
CVE-2026-119572 fixed 7.0 net/traefik	Oct 30
CVE-2026-116128 – www/p5-Starlet	Oct 30
CVE-2026-116127 – www/p5-Starlet	Oct 30
CVE-2026-115866 – www/p5-Starlet	Oct 30
CVE-2026-115865 – www/p5-Starlet	Oct 30
CVE-2026-116130 – www/p5-HTTP-Parser-XS	Oct 30
CVE-2026-105924 4.3 devel/qt5 +1 more	Oct 30
CVE-2026-119591 6.8 databases/sqlite2 +2 more	Oct 30
CVE-2026-119586 8.5 databases/sqlite2 +2 more	Oct 30
CVE-2026-119566 6.3 net-mgmt/prometheus1 +2 more	Oct 30
CVE-2026-119563 5.1 databases/phpmyadmin +1 more	Oct 30
CVE-2026-119562 2.3 databases/phpmyadmin +1 more	Oct 30

metasploit	Oct 30
openresty	Oct 30
py311-dj61-djangorestframework	Oct 30
py311-djangorestframework	Oct 30
py312-dj60-djangorestframework	Oct 30
py312-dj61-djangorestframework	Oct 30
py312-djangorestframework	Oct 30
py313-dj60-djangorestframework	Oct 30
py313-dj61-djangorestframework	Oct 30
py313-djangorestframework	Oct 30
py313t-dj60-djangorestframework	Oct 30
py313t-dj61-djangorestframework	Oct 30
py313t-djangorestframework	Oct 30
py314-dj60-djangorestframework	Oct 30
py314-dj61-djangorestframework	Oct 30
py314-djangorestframework	Oct 30
py314t-dj60-djangorestframework	Oct 30
py314t-dj61-djangorestframework	Oct 30
py314t-djangorestframework	Oct 30
py315-dj60-djangorestframework	Oct 30
py315-dj61-djangorestframework	Oct 30
py315-djangorestframework	Oct 30
git-lfs	Oct 28
jenkins	Oct 28
jenkins-lts	Oct 28