CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

textproc/minixmlto 0.1.0

Minimalistic alternative to xmlto

Port info

Maintainer
bapt@FreeBSD.org
Packages
latest: 0.1.0
Upstream
up to date
Last update
to 0.1.0 · d6247ff1bb
Quarterly
2026Q4: 0.1.0
WWW
https://codeberg.org/bapt/minixmlto
Links
cgit · VuXML

Install

Package
# pkg install minixmlto
installs 0.1.0 from latest; from quarterly (2026Q4) 0.1.0
Port
# cd /usr/ports/textproc/minixmlto && make install clean
Size
2.2 KiB download · 1.9 KiB installed
Depends on
textproc/docbook-xsl 1.79.1_1,1, textproc/docbook2mdoc 1.1.0_2, textproc/html2text 2.2.3,1, textproc/libxslt 1.1.45
License
BSD2CLAUSE
pkg-message
Shown always
===>   NOTICE:

This port is deprecated; you may wish to reconsider installing it:

Depends on vulnerable unmaintained libxslt.

It is scheduled to be removed on or after 2025-09-12.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 160.1.00.1.0–
FreeBSD 150.1.00.1.0–
FreeBSD 140.1.00.1.00.1.0

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 150.1.00.1.0–
FreeBSD 140.1.00.1.00.1.0

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 0.1.0.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (17)

Po-Chuan Hsieh (sunpoet) · 0.1.0
textproc/minixmlto: Update WWW

Approved by:	portmgr (blanket)
d6247ff1bb
Matthias Andree (mandree) · 0.1.0
textproc/libxml2, textproc/libxslt: vulnerable

Note that libxslt is vulnerable, unfixed, and without maintainer.
Two of four vulnerabilities have been fixed.

Note that libxml2 in our ports is vulnerable and there is no upstream
release fixing these bugs, they need cherry-picks.

Deprecate textproc/xmlto and textproc/minixmlto,
which both depend on the unmaintained and vulnerable libxslt.
I have filed https://pagure.io/xmlto/issue/15 to ask the xmlto
upstream to switch to different XML/XSLT libraries.

Two issues are undisclosed and do not seem to have a CVE assigned yet.

Security:	CVE-2025-6021
Security:	CVE-2025-6170
Security:	CVE-2025-7424
Security:	CVE-2025-7425
Security:	CVE-2025-49794
Security:	CVE-2025-49795
Security:	CVE-2025-49795
Security:	https://gitlab.gnome.org/GNOME/libxml2/-/issues/913
Security:	https://gitlab.gnome.org/GNOME/libxml2/-/issues/926
Security:	https://gitlab.gnome.org/GNOME/libxml2/-/issues/931
Security:	https://gitlab.gnome.org/GNOME/libxml2/-/issues/932
Security:	https://gitlab.gnome.org/GNOME/libxml2/-/issues/933
Security:	https://gitlab.gnome.org/GNOME/libxml2/-/issues/935
Security:	https://gitlab.gnome.org/GNOME/libxml2/-/issues/941
Security:	https://gitlab.gnome.org/GNOME/libxslt/-/issues/139
Security:	https://gitlab.gnome.org/GNOME/libxslt/-/issues/140
Security:	https://gitlab.gnome.org/GNOME/libxslt/-/issues/144
Security:	https://gitlab.gnome.org/GNOME/libxslt/-/issues/148
Security:	https://gitlab.gnome.org/Teams/Releng/security/-/wikis/2025#libxml2-and-libxslt
Security:	https://www.openwall.com/lists/oss-security/2025/06/16/6
dceb46fc8a
Baptiste Daroussin (bapt) · 0.1.0
textproc/minixmlto: fix the name of the distfile

PR:		277532
Reported by:	Ale <discipline@tiscali.it>
aba00d8a08
Baptiste Daroussin (bapt) · 0.1.0
textproc/minixmlto: update to 0.1.0
66b8c9ab3b
Baptiste Daroussin (bapt) · 0.0.7
textproc/minixmlto: update to 0.0.7

minixmlto gained the ability to use docbook2mdoc when possible instead
of using xsl toolchain.

In this version this is off by default and activable vis
PREFER_DOCBOOK2MDOC env var
ebbef5bab9
Stefan Eßer (se) · 0.0.6
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 0.0.6
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Baptiste Daroussin (bapt) · 0.0.6
textproc/minixmlto: update to 0.0.6

Unbreak by not using GNU getop by accident
2b68c7d073
Baptiste Daroussin (bapt) · 0.0.5
textproc/minixmlto: update to 0.0.5

Add support for --stringparam. This is necessary to be usable by dbus
c838be5121
Po-Chuan Hsieh (sunpoet) · 0.0.3
textproc/minixmlto: Add NO_ARCH

Approved by:	portmgr (blanket)
4a551134cc
Mathieu Arnold (mat) · 0.0.3
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 0.0.3
Remove # $FreeBSD$ from Makefiles.
305f148f48
Baptiste Daroussin (bapt) · 0.0.3
Update to 0.0.3

- Add support for -o option which is used in shared-mime-info
25eaf7f9f9
Baptiste Daroussin (bapt) · 0.0.2_1
Fix when PREFIX != LOCALBASE

PR:		216889
Submitted by:	John Hein <z7dr6ut7gs@snkmail.com>
2a02ae7214
Mikhail Teterin (mi) · 0.0.2
Explicitly state the desired PREFIX to avoid breakage, where it is anything other than /usr/local.

Approved by:	maintainer
ee8eb473b7
Baptiste Daroussin (bapt) · 0.0.2
Update to 0.0.2
9597bd45ad
Baptiste Daroussin (bapt) · 0.0.1
Add minixmlto which is a very tiny script that is a minimalistic alternative to xmlto

The goal is not to support every features of xmlto, but just the strict minimum
in order to prevent potential circular dependencies, and have a possibility to
greatly reduce the number of dependencies
3e86e8d096