CVE and update status of the FreeBSD ports tree3,312 unaddressed CVEs in 679 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 7b95a2eac4
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
Depends on
lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,339)

Bernard Spil (brnrd) · 1.1_6
security/vuxml: Update recent OpenSSL vulns

Was missing 2 CVEs.
5115c5b22e
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add firefox vulnerabilities

* CVE-2026-24868
 * CVE-2026-24869
a8cce21664
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 144.0.7559.109

Obtained from:	https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_27.html
87d3023e31
Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SA issued on 2026-01-27

FreeBSD-SA-26:02.jail affects 13.5R and 14.3R
01bdc2841a
Philip Paeps (philip) · 1.1_6
security/vuxml: reference FreeBSD-SA-26:01.openssl

Add a reference to FreeBSD-SA-26:01.openssl (issued 2026-01-27) to the
vuxml entry for OpenSSL CVE-2025-11187, CVE-2025-15467, CVE-2025-15468,
CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418,
CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795 and
CVE-2026-22796.

FreeBSD-SA-26:01.openssl affects all supported versions of FreeBSD
bad5869b76
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document OpenSSL vulnerabilities
208c22954b
Charlie Li (vishwin) · 1.1_6
security/vuxml: update/simplify Python vulnerability version ranges

Event: Winter Field Day 2026
PR: 291609
cfbc3c7b90
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Add MySQL vulnerabilities
94470dd915
Nicola Vitale (nivit) · 1.1_6
security/vuxml: Add devel/py-wheel < 0.46.2
d5594ef2cd
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 144.0.7559.96

Obtained from:	https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_20.html
29a2561a65
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
94eb33968d
Guido Falsi (madpilot) · 1.1_6
security/vuxml: Document multiple mail/mailpit vulnerabilities
bdfacb7223
Jesús Daniel Colmenares Oviedo (dtxdf) · 1.1_6
security/vuxml: Add www/oauth2-proxy < 7.14.1
d14705d9ea
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities

* CVE-2026-0892
 * CVE-2026-0889
 * CVE-2026-0888
 * CVE-2026-0881
 * CVE-2026-0891
 * CVE-2026-0890
 * CVE-2026-0887
 * CVE-2026-0885
 * CVE-2026-0884
 * CVE-2026-0883
 * CVE-2026-0878
 * CVE-2026-0886
 * CVE-2026-0882
 * CVE-2026-0880
 * CVE-2026-0879
 * CVE-2026-0877
717db2337b
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 144.0.7559.59

Obtained from:	https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_13.html
d76ba0d47a
Nicola Vitale (nivit) · 1.1_6
security/vuxml: Add devel/py-virtualenv <= 20.36.0
4c16cd51c0
Roman Bogorodskiy (novel) · 1.1_6
security/vuxml: document libtasn1 vulnerability

Security:	CVE-2025-13151
57fb9adb52
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulerabilities
7070441ae3
Guido Falsi (madpilot) · 1.1_6
security/vuxml: security/vuxml: Document mail/mailpit vulnerability (CVE-2026-22689)
6bd3dbdc01
Florian Smeets (flo) · 1.1_6
security/vuxml: Record phpmyfaq vulenrabilities
6bdff9a739
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 143.0.7499.192

Obtained from:	https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop.html
6c0f11c2e8
Vsevolod Stakhov (vsevolod) · 1.1_6
security/vuxml: Document libsodium vuln CVE-2025-69277
afe630b89f
Guido Falsi (madpilot) · 1.1_6
security/vuxml: Document mail/mailpit vulnerability (CVE-2026-21859)
358dbfdb28
Ryan Steinmetz (zi) · 1.1_6
security/vuxml: Document nets-snmp vuln (CVE-2025-68615)
96df395351
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Add gstreamer1-plugins-bad < 1.26.10

Update for 2026.
f118bbed28
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Fix 613d0f9e-d477-11f0-9e85-03ddfea11990 syntax

PR:		291609
Fixes:	119cc45cd5f2 security/vuxml: update lang/python312 entry
Sponsored by:	The FreeBSD Foundation
6ee690a735
Charlie Li (vishwin) · 1.1_6
security/vuxml: update lang/python312 entry

PR: 291609
119cc45cd5
Matthias Andree (mandree) · 1.1_6
security/vuxml: revise libxslt ~1.1.43 advisory of 2025

Security:	b0a3466f-5efc-11f0-ae84-99047d0a6bcc
c21c74a71a
Matthias Andree (mandree) · 1.1_6
security/vuxml: update security entry for libxslt

PR:		289213
5c7464d46f
Kai Knoblich (kai) · 1.1_6
security/vuxml: Adjust version range for py-pdfminer.six

* The fix for CVE-2025-64512 introduced with release 20251107 was
  incomplete.  This has been remedied with release 20251230, adjust
  the entry accordingly.
dc112148c1
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add forgejo vulnerability

* CVE-2025-68937
4740aad892
Ronald Klop (ronald) · 1.1_6
security/vuxml: MongoBleed is also in 8.0.16 and before

Fixes:	a69bda1
Fixes:	b587cd0
Security:	CVE-2025-14847
d6d3e0a008
Thomas Zander (riggs) · 1.1_6
security/vuxml: Document use-after-free in fluidsynth
631fb952b6
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Amend entry for Mongodb

The port is for mongodb 8.0 and not 8.2

Reported by:	ronald-lists@klop.ws
a69bda1109
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add mongodb{78}0 vulnerability

* CVE-2025-14847
b587cd0d69
Thomas Zander (riggs) · 1.1_6
security/vuxml: Document k8s / nginx cert validation bypass in traefik
dfa272b3b1
Thomas Zander (riggs) · 1.1_6
security/vuxml: Document vuln via special characters in traefik
a02bca8e09
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add smb4k vulnerabilities

* CVE-2025-66002
* CVE-2025-66003
7223b7ae11
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add firefox vulnerabilities

* CVE-2025-14860
 * CVE-2025-14861
64161a4d4c
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 143.0.7499.146

Obtained from:	https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_16.html
847395f500
Dan Langille (dvl) · 1.1_6
security/vuxml: Correct the step-cli vuln

It's not the client, it's only the server: step-certificates
33545e2ed8
Dan Langille (dvl) · 1.1_6
security/vuxml: add security/step-cli vuln

re: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291741

PR:		291741
b1f75a2045
Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SAs issued on 2025-12-17

FreeBSD-SA-25:11.ipfw affects FreeBSD 13.5 and FreeBSD 14.3
FreeBSD-SA-25:12.rtsold affects all supported versions of FreeBSD
de60c20fa7
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document Roundcube vulnerabilitie
7a5d088e9f
Jesús Daniel Colmenares Oviedo (dtxdf) · 1.1_6
security/vuxml: Add www/github-release-monitor < 1.4.1
c4a0804efc
Ryan Steinmetz (zi) · 1.1_6
security/vuxml: Document vulnerability in www/varnish-libvmod-digest
229c32e03e
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Document Jenkins Security Advisory 2025-12-10

PR:		291580
Sponsored by:	The FreeBSD Foundation
381fdeaeae
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add c-ares vulnerability

* CVE-2025-62408

PR:		291503
Reported by:	polarian@polarian.dev
ae0ba35aae
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 143.0.7499.109

Obtained from:	https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html
2bf3afbb63
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add mozilla, mongo vulnerabilities

* CVE-2025-14345
 * CVE-2025-14333
 * CVE-2025-14332
 * CVE-2025-14331
 * CVE-2025-14330
 * CVE-2025-14329
 * CVE-2025-14328
 * CVE-2025-14327
 * CVE-2025-14326
 * CVE-2025-14325
 * CVE-2025-14324
 * CVE-2025-14323
 * CVE-2025-14322
 * CVE-2025-14321
b8562e5993
« newest← newerpage 10 of 167older →oldest »