CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 31d6cbe4eb
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
Depends on
lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,338)

Jochen Neumeister (joneum) · 1.1_6
security/vuxml: Document ImageMagick vulnerabilities

PR:		300074
Sponsored by:	Netzkommune GmbH
31d6cbe4eb
Dima Panov (fluffy) · 1.1_6
security/vuxml: adjust linux-rl9-libxslt package for b0a3466f-5efc-11f0-ae84-99047d0a6bcc (+)

Rerolled linux-rl9-libxslt-1.1.34_5 now includes fixes for mentioned CVEs
c943f0b840
Dima Panov (fluffy) · 1.1_6
security/vuxml: add www/linux-chrome package for f4f0bb8d-ce20-11f1-9bfa-a8a1599412c6 cromium security issue
e5818099d4
Thomas Zander (riggs) · 1.1_6
security/vuxml: Document ForwardAuth vulnerability in traefik
eea7a30e4d
Dave Cottlehuber (dch) · 1.1_6
security/vuxml: Document Node.js October 2026 vulnerabilities

- node, node22, node24 and node26, 10 CVEs
- from the October 21 2026 Node.js security release

Sponsored by:	SkunkWerks, GmbHi
a85184e79e
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: remove a duplicate

Fixes:	bc41aac255cff6c6e0258a1fe273af46c1cba5a6

Sponsored by:	tipi.work
eee4f3abf9
Ryan Steinmetz (zi) · 1.1_6
security/vuxml: Document archivers/brotli vulnerability
bc41aac255
Jochen Neumeister (joneum) · 1.1_6
security/vuxml: Document ca_root_nss vulnerability

Sponsored by:	Netzkommune GmbH
8bcce67cf0
Nicola Vitale (nivit) · 1.1_6
security/vuxml: Add misc/vifm <= 0.14.4
631e96cb1c
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: fix the archivers/brotli package version

Reported by:	smyru

Sponsored by:	tipi.work
d8af2415d9
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document Gitlab vulnerabilities
034aac1e69
Guido Falsi (madpilot) · 1.1_6
security/vuxml: Report new mail/maipit vulnerability
f28ecd9785
Yusuf Yaman (nxjoseph) · 1.1_6
security/vuxml: Document net/keycloak vulnerabilities

PR:		299738
Approved by:	osa, vvd (Mentors, implicit)
4df6b05e08
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 156.0.8078.47

Obtained from:	https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html
3e364365a0
Jochen Neumeister (joneum) · 1.1_6
security/vuxml: Document multiple vulnerabilities in jackson

Sponsored by:	Netzkommune GmbH
122e0798cf
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: document brotli vulnerability
f3611d9208
Rodrigo Osorio (rodrigo) · 1.1_6
security/vuxml: Document p5-DBI vulnerability
e23efff6b5
Jochen Neumeister (joneum) · 1.1_6
security/vuxml: Fix PHP entry d8e16d08-cd2f-11f1-8135-8447094a420f

- php85: the fixed version is 8.5.12, not 8.5.13
- Quote the security advisory instead of the pre-announcement
- Add references to the advisory and both GHSAs

Reported by:	Dan Langille <dan@langille.org>
Sponsored by:	Netzkommune GmbH
fdbbc5f67a
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document PowerDNS recursor vulnerabilities
5fda80f56a
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document critical PHP vulnerabilities
22d99be8a8
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document Unbound vulnerabilities
c6cde725be
Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SA issued on 2026-10-21

FreeBSD-SA-26:73.caroot affects all supported releases
fae4ea3d61
Joseph Mingrone (jrm) · 1.1_6
security/vuxml: Document Emacs TRAMP vulnerabilities

Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D60929
4dcbae5caf
Christos Longros (longros) · 1.1_6
security/vuxml: Document games/anki vulnerability

* Prevent external links in deck descriptions rendered in the
  overview/congrats screen from manipulating the page.

Approved by:		jrm (mentor)
Differential Revision:	https://reviews.freebsd.org/D60853
0e30c80c1f
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document Roundcube vulnerabilities
908f46843b
Fernando Apesteguía (fernape) · 1.1_6
www/drupal1[01]: remote code execution

CVE-2026-108097

https://www.drupal.org/sa-core-2026-014

PR:		299559
Reported by:	ps.ports@smyrak.com
9e6953286e
Jimmy Olgeni (olgeni) · 1.1_6
security/vuxml: Document multiple Erlang/OTP vulnerabilities

OTP 29.1.2, 28.5.0.8 and 27.3.4.19 fix CVE-2026-105236 and
CVE-2026-94200 in ssl, and complete the earlier incomplete fixes for
CVE-2026-42789 (public_key), CVE-2026-48856 (inets) and
CVE-2026-70405 (snmp); upstream revised all three advisories on
2026-10-14 to name these releases as the first patched ones.

CVE-2026-96596 in erl_tar gets its own entry: it affects OTP 29 only
and is fixed in 29.1.2.
6188383cbc
Thomas Zander (riggs) · 1.1_6
security/vuxml: Document vulnerabilities in net/traefik
f0e0763bc1
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: document x11/libXtst vulnerabilities
aacf884587
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: document x11/libXrender vulnerability
9e27610c27
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: document x11/libXpm vulnerability
a3fb5533f4
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: document x11/libXi vulnerabilities
8d9fc6b262
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: document x11/libX11 vulnerabilities
7c00ab4d25
Michael Osipov (michaelo) · 1.1_6
security/vuxml: Document www/mod_wsgi vulnerability

PR:		299391
b99a08fa6d
Dima Panov (fluffy) · 1.1_6
security/vuxml: adjust linux-rl9-libxml2 package version for abbc8912-5efa-11f0-ae84-99047d0a6bcc (+)

Rerolled linux-rl9-libxml2-2.9.13_10 now includes fixes for mentioned CVEs
ec5bfc412d
R. Christian McDonald (rcm) · 1.1_6
security/vuxml: Add entry for miniupnpd CVE-2026-5720

PR:		298991
Sponsored by:	Rubicon Communications, LLC ("Netgate")
049cf2932b
Yusuf Yaman (nxjoseph) · 1.1_6
security/vuxml: Document textproc/p5-Text-CSV_XS vulnerabilities

PR:		299441
Approved by:	osa, vvd (Mentors, implicit)
040b9e1170
Yusuf Yaman (nxjoseph) · 1.1_6
security/vuxml: Document dns/nsd vulnerabilities

PR:		299412
Approved by:	osa, vvd (Mentors, implicit)
feef44a5e3
Jochen Neumeister (joneum) · 1.1_6
security/vuxml: Document ngx_cache_purge vulnerability

Sponsored by:	Netzkommune GmbH
4d9365ea13
Yusuf Yaman (nxjoseph) · 1.1_6
security/vuxml: Document www/newsboat vulnerabilities

PR:		299303
Approved by:	osa, vvd (Mentors, implicit)
5a80069cad
Jochen Neumeister (joneum) · 1.1_6
security/vuxml: Document multiple vulnerabilities in nginx

Sponsored by:	Netzkommune GmbH
587344d655
Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SAs issued on 2026-10-14

FreeBSD-SA-26:70.tcp affects 15.1R
FreeBSD-SA-26:71.sound affects all supported releases
FreeBSD-SA-26:72.bhyve affects all supported releases
093b3979a7
Philip Paeps (philip) · 1.1_6
security/vuxml: fix markup of recent p5-Plack vuln

This fixes "make validate".

Fixes:		7687e4aa45f5 ("security/vuxml: Document p5-Plack vulnerabilities")
Pointy hat to:	rodrigo
1bd68c20b5
Rodrigo Osorio (rodrigo) · 1.1_6
security/vuxml: Document p5-Plack vulnerabilities
7687e4aa45
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Fix validate errors in pycryptodome entry
d978569358
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document curl vulnerabilities
e24600f0ad
Christos Longros (longros) · 1.1_6
security/vuxml: Document libwasmtime vulnerabilities

PR:			299076
Approved by:		jrm (mentor)
Differential Revision:	https://reviews.freebsd.org/D60610
02a17bd8c6
Charlie Li (vishwin) · 1.1_6
security/vuxml: Document DSA sig vuln in pycryptodome(x) < 3.24.1

Sponsored by: Saltant Solutions LLC
440a62394d
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
fd30185db3
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Document GStreamer1 < 1.28.8
707a52ebcc
page 1 of 167older →oldest »