security/vuxml: document gitlab vulnerabilities007e553e0e
Port details
security/vuxml 1.1_6
Vulnerability and eXposure Markup Language DTD
Port info
- Maintainer
- ports-secteam@FreeBSD.org
- Packages
- latest: 1.1_6
- Upstream
- up to date
- Last update
- to 1.1_6 · 7b95a2eac4
- Quarterly
- 2026Q4: 1.1_6
- WWW
- https://vuxml.freebsd.org/
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install vuxmlinstalls 1.1_6 fromlatest; fromquarterly(2026Q4) 1.1_6- Port
# cd /usr/ports/security/vuxml && make install clean- Size
- 9.7 KiB download · 40 KiB installed
- Depends on
- lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
- License
- BSD2CLAUSE
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.1_6 | 1.1_6 | – |
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 1.1_6.Fixed (0)
No VuXML entries for this package.
Problem reports (5) · open in Bugzilla, most recently changed first
| PR | Summary | Status | Changed |
|---|---|---|---|
| 295797 | maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256 | In Progress | 2026-07-17 |
| 295836 | maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django | New | 2026-06-04 |
| 291717 | security/vuxml: add entry for uriparser < 1.0.0 | New | 2025-12-16 |
| 288090 | maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2 | New | 2025-07-08 |
| 270795 | security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries | In Progress | 2025-07-01 |
Commits (8,339)
security/vuxml: version Python vuln entries Security: 613d0f9e-d477-11f0-9e85-03ddfea11990 Security: CVE-2025-12084 Security: CVE-2025-138362b5859f938
security/vuxml: add Python <3.13.11/<3.14.2 vulns Security: 613d0f9e-d477-11f0-9e85-03ddfea11990 Security: CVE-2025-12084 Security: CVE-2025-13836ab82fd6ccc
security/vuxml: add www/*chromium < 143.0.7499.40 Obtained from: https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.htmlbd343d76b8
security/vuxml: Add audio/py-spotipy <= 2.25.183b0b77b52
security/vuxml: Add xkbcomp vulnerabilities * CVE-2018-15853 * CVE-2018-15859 * CVE-2018-15861 * CVE-2018-15863 PR: 291407 Reported by: Polarian <polarian@polarian.dev>7eb7762d75
security/vuxml: Out of bounds read in graphics/png PR: 291266, 291410df1135a895
security/vuxml: add entry for libvirt vulnerabilities * CVE-2025-12748 * CVE-2025-13193d7cbaaa4f1
security/vuxml: Document Apache httpd vulnerabilities2d7047f6cf
security/vuxml: Add entry for go124, go125 * CVE-2025-61729 PR: 291366 Reported by: einar@isnic.is6d02ae4f10
security/vuxml: Add mongodb multiple vulnerabilities * CVE-2025-13644 * CVE-2025-13507 * CVE-2025-13643d7f4e84f28
security/vuxml: Document wolfSSL multiple vulnerabilities.dd09ed9097
security/vuxml: Add mongodb{7,8}0 vulnerability
* CVE-2025-1289306159a109bsecurity/vuxml: reference FreeBSD-SA-25:10.unbound Add a reference to FreeBSD-SA-25:10.unbound (issued 2025-11-26) to the vuxml entry for Unbound CVE-2025-11411. FreeBSD-SA-25:10.unbound affects all supported versions of FreeBSD1db1c79df1
security/vuxml: Add png vulnerabilities * CVE-2025-65018 * CVE-2025-64720 * CVE-2025-64506 * CVE-2025-64505 Reported by: Stefan Grundmann <sg2342@googlemail.com>28c9d484c3
security/vuxml: document gitlab vulnerabilitiesa20082836a
security/vuxml: Add GNUTLS-SA-2025-11-18ff9c2513f9
security/vuxml: add www/*chromium < 142.0.7444.175 Obtained from: https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html958e2f9c93
security/vuxml: add pkcs11-helper < 1.31.0 parser buffer overflow5e9ec52ba3
security/vuxml: add two OpenVPN CVEs Security: 50a0c266-c3ff-11f0-b513-0da7be77c170 Security: CVE-2025-12106 Security: 17a40d76-c3fd-11f0-b513-0da7be77c170 Security: CVE-2025-13086d7c6210857
security/vuxml: Document py-pdfminer.six security issue * CVE-2025-64512 - 8.67bbae4233d
security/vuxml: Document sudo-rs < 0.2.10 vulnerabilites PR: 290945b043c72cd3
security/vuxml: Add postgresql{13,14,15,16,17,18}-client vulnerabilities
* CVE-2025-12818 - 5.9
* CVE-2025-12817 - 3.1162b87967bsecurity/vuxml: lightdm-kde-greeter vulnerability8e20e11194
security/vuxml: Mozilla multiple vulnerabilities * CVE-2025-13012 - 7.5 * CVE-2025-13013 - 6.1 * CVE-2025-13014 - 6.1 * CVE-2025-13015 - 3.4 * CVE-2025-13016 - 7.5 * CVE-2025-13017 - 6.1 * CVE-2025-13018 - 6.1 * CVE-2025-13019 - 6.1 * CVE-2025-13020 - 6.1 * CVE-2025-13021 - 7.5 * CVE-2025-13022 - 7.5 * CVE-2025-13023 - 7.5 * CVE-2025-13024 - 7.5 * CVE-2025-13025 - 7.5 * CVE-2025-13026 - 7.5 * CVE-2025-13027 - 7.5dcb1b3e74e
security/vuxml: Fix newentry template3b3a449794
security/vuxml: correct syntax Reported by: dan@langille.org1eb051dbd6
security/vuxml: document gitlab vulnerabilities7503d426d4
security/vuxml: add www/privatebin vuln CVE-2025-627960006368a25
security/vuxml: add www/*chromium < 142.0.7444.162 Obtained from: https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_11.html03450defe3
security/vuxml: Revise SQLite3 entry - mention this bug is only for >= 3.49.1 according to https://github.com/google/security-research/security/advisories/GHSA-v2c8-vqqp-hv3g - advance the discovery date to Mid July per the same - strip double -9.6 from linux_base-rl9 name to get the entry to actually trigger for the package, and set it to ">= 0" because we don't want unrelated updates to linux_base-rl9-9.6 make this entry disappear. It's left for emulation@ to clean up. Security: CVE-2025-7709 Security: c5889223-b4e1-11f0-ae9b-b42e991fc52ef94b70f52d
security/vuxml: add www/*chromium < 142.0.7444.134 Obtained from: https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop.html101ece58fb
security/vuxml: document openjph < 0.24.5 vulnerabilites Security: 77bac392-ba98-11f0-aada-f59a8ea34d1233d2176d8a
security/vuxml: OpenEXR < 3.4.3 multiple vulnerabilities Security: c71a3914-ba96-11f0-aada-f59a8ea34d12c914bd4e21
security/vuxml: Add mongodb70 vulnerability * CVE-2025-126571998050c52
security/vuxml: Fix entry Add PORTEPOCH Fixes: 73e658448343bb48d5
security/vuxml: Add xorg-server, xwayland vulnerabilities * CVE-2025-62229 * CVE-2025-62230 * CVE-2025-6223173e658445c
security/vuxml: Add entry for databases/rediscbfeceada5
security/vuxml: Fix body tag indentation To pass "make validate" without more modifications.c99705c0fc
security/vuxml: Add Mozilla vulnerabilities * CVE-2025-9182 * CVE-2025-9180 * CVE-2025-11152 * CVE-2025-10536 * CVE-2025-10534 * CVE-2025-10533 * CVE-2025-10532 * CVE-2025-10531 * CVE-2025-10529 * CVE-2025-10528 * CVE-2025-1052762b9836d61
security/vuxml: mark Python 3.9 EOL thus not receiving security support.ae56e6dfcf
security/vuxml: Document powerdns-recursor multiple vulnerabilities PR: 290563 Reported by: Ralf van der Enden <tremere@cainites.net> Obtained from: https://blog.powerdns.com/powerdns-security-advisory-2025-06-2025-10-2282751f61c4
security/vuxml: add www/*chromium < 142.0.7444.59 Obtained from: https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html5e3989c74c
security/vuxml: Add firefox vulnerability * CVE-2025-12380b10c38f165
security/vuxml: Fix ranges for sqlite entries Add PORTEPOCHf907f0c7d3
security/vuxml: Amend entries for sqlite3 Fix package name383369ba8e
security/vuxml: Add erlan vulnerability * CVE-2025-4748 Reported by: stephen.wall@redcom.comae2563208a
security/vuxml: add kea vulnerability
* CVE-2025-11232
PR: 290660
Reviewed by: brd
Sponsored by: Rubicon Communications, LLC ("Netgate")4147c5d059security/vuxml: Add SQLite vulnerability * CVE-2025-77094f01a94bd5
security/vuxml: Document py-social-auth-app-django issue * Do the same for for the Django 5.1 and 5.2 variants as well. * CVE-2025-61783b04300a36f