CVE and update status of the FreeBSD ports tree3,312 unaddressed CVEs in 679 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 7b95a2eac4
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
Depends on
lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,339)

Dan Langille (dvl) · 1.1_6
security/vuxml: Add privatebin CVE

Security:	https://www.cve.org/CVERecord?id=CVE-2025-62796
b9e02b0261
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix entry

Please, run "make validate" before commit.

Fixes:	a69ad955c4bd2
cd13ba69de
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add SQLite vulnerability

* CVE-2025-52099
f09b5d0669
Dan Langille (dvl) · 1.1_6
security/vuxml: Add www/privatebin XSS issue

Security:	https://privatebin.info/reports/vulnerability-2025-10-28.html
a69ad955c4
R. Christian McDonald (rcm) · 1.1_6
security/vuxml: document eap-mschapv2 buffer overflow in strongSwan

* CVE-2025-62291

PR:		290578
Reviewed by:	brd
Sponsored by:	Rubicon Communications, LLC ("Netgate")
5cdc538ab3
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 141.0.7390.122

Obtained from:	https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_21.html
0d10afdaa3
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Improve newentry

Rearrange the code a bit by introducing providers.
Fields are retrieved from providers in an orderly fashion.
Should a provider fail to return a value, the next in the list is queried.

This should improve our chances of getting proper reports from different
providers.

Differential Revision:	https://reviews.freebsd.org/D52903
da37086a88
R. Christian McDonald (rcm) · 1.1_6
security/vuxml: document unbound non-DNSSEC cache poisoning vulns

* CVE-2025-11411

PR:		290429
Reviewed by:	brd
Sponsored by:	Rubicon Communications, LLC ("Netgate")
f4ead079c7
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add rt44, rt50 and rt60 vulnerabilities

* CVE-2025-9158
 * CVE-2025-61873

PR:		290436
Report by:	Einar Bjarni Halldórsson <einar@isnic.is>
5781817165
Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SA issued on 2025-10-22

FreeBSD-SA-25:09.netinet affects all supported versions of FreeBSD.
1803ce396a
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
7bbc1e0109
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 141.0.7390.107

Obtained from:	https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_14.html
Obtained from:	https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop.html
7c641cefed
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add mongodb[78] vulnerability

* CVE-2025-11979
e8ecef5b8f
Dan Langille (dvl) · 1.1_6
security/vuxml: Add entry for net-mgmt/icingaweb2-module-icingadb

* CVE-2025-61789
626a1c9b98
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add more Mozilla vulnerabilities

* CVE-2025-11712
 * CVE-2025-11711
 * CVE-2025-11710
 * CVE-2025-11709
 * CVE-2025-11708
 * CVE-2025-11714

 While here improve another Mozilla entry description a bit.
eb71b44271
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities

* CVE-2025-11715
 * CVE-2025-11721
b5a7bbd69c
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Firefox vulnerability

* CVE-2025-11152
56645ae725
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities

* CVE-2025-10537
 * CVE-2025-10536
 * CVE-2025-10534
 * CVE-2025-10533
abdc2199b3
Muhammad Moinur Rahman (bofh) · 1.1_6
security/vuxml: Add report for minio
c1e5c3645c
Craig Leres (leres) · 1.1_6
security/vuxml: Mark zeek < 8.0.2 as vulnerable as per:

https://github.com/zeek/zeek/releases/tag/v8.0.2

This release fixes the following vulnerability:

 - The KRB analyzer can leak information about hosts in analyzed
   traffic via external DNS lookups.

Reported by:	Tim Wojtulewicz
7bc640ff6b
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Firefox vulnerability

* CVE-2025-11153
d6b1ec61fd
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
eadc249fe8
Guido Falsi (madpilot) · 1.1_6
security/vuxml: Report mailpit information disclosure vuln

Obtained from:	https://github.com/axllent/mailpit/releases/tag/v1.27.10
22e3c0a71e
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities
6362280e91
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix mongodb entries

Remove entry that only affects 8.1.x which we don't still have in the repo.
Modify an entry removing the 8.1.x entry from the affected packages

Reported by:	ronald-lists@klop.ws
Fixes:		7ec6fda16269
06fc096ebd
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities
9e279d1d0f
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Remove redundant version information
c361c54f79
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add mongodb vulnerabilities

* CVE-2025-10061
 * CVE-2025-10060
 * CVE-2025-10059
 * CVE-2025-7259
7ec6fda162
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add mongodb6 vulnerability

* CVE-2024-8654
5c4e719056
Muhammad Moinur Rahman (bofh) · 1.1_6
security/vuxml: Add multiple CVEs for redis and valkey
9cf9b7f5ed
Matthias Andree (mandree) · 1.1_6
security/vuxml: Add CVE-2025-61962 to fetchmail

add CVE-2025-61962 to existing fetchmail < 6.5.6 SMTP AUTH entry

Security:	21fba35e-a05f-11f0-a8b8-a1ef31191bc1
Security:	CVE-2025-61962
467dbc3ca6
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Add www/qt6-webengine < 6.9.3
3ed40657b3
Matthias Andree (mandree) · 1.1_6
security/vuxml: Add mail/fetchmail < 6.5.6 vuln (SMTP AUTH)

CVE requested from MITRE but not received yet.

URL:		https://www.fetchmail.info/fetchmail-SA-2025-01.txt
Security:	21fba35e-a05f-11f0-a8b8-a1ef31191bc1
45aebb954a
Philip Paeps (philip) · 1.1_6
security/vuxml: reference FreeBSD-SA-25:08.openssl

Add a reference to FreeBSD-SA-25:08.openssl (issued 2025-09-30) to the
vuxml entry for OpenSSL CVE-2025-9230, CVE-2025-9231 and CVE-2025-9232.

FreeBSD-SA-25:08.openssl affects all supported versions of FreeBSD
7d07016e11
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 141.0.7390.54

Obtained from:	https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_30.html
49eb330079
Wen Heping (wen) · 1.1_6
security/vuxml: Document Django's multiple vulnerabilities
6308a7fe25
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Mark OpenSSL 3.6 and 3.3 QUICTLS vulnerable too
7f1aba1456
Muhammad Moinur Rahman (bofh) · 1.1_6
security/vuxml: Add entry for py-mysql-connector-python

PR:		289934
Reported by:	patrik@hildingsson.se
810b7de4a9
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Register OpenSSL vulnerabilities
cf9db76f72
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Register LibreSSL vulnerability
be87e90eda
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: krb5-1.20 is not vulnerable to CVE-2023-39975

PR:		274159
Reported by:	wollman@FreeBSD.org
2b0d9157ce
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: fix SQLite entry

Vulnerable version range for sqlite currently bundled in
linux_base-rl9 (CVE-2025-6595).

PR:		289358
Reported by:	jcfyecrayz@liamekaens.com
ba0e37e325
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Record textproc/goldendict vulnerability
8fa77d4f3c
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix some reporters

Reported by:	dan@langille.org
2cc390f6a9
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: record security fixes in sysutils/libudisks 2.10.{2,91}

PR:		289689
Reported by:	pauamma@gundo.com
91756ff4e1
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix entry

"SO-AND-SO" is not a valid reporter.

Fixes:	21c77e23be74b
72f395160f
Florian Smeets (flo) · 1.1_6
security/vuxml: Document net/quiche vulnerabilities

PR:		289810
0b4ab02703
Florian Smeets (flo) · 1.1_6
security/vuxml: Add 1.9.X branch of dnsdist to recent entry

PR:		289811
054583453e
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: gitlab vulnerabilities
e9faa0bdb9
Matthias Andree (mandree) · 1.1_6
security/vuxml: add openvpn-devel < 2.7beta2 vuln

PR:		289838
Security:	e5cf9f44-9a64-11f0-8241-93c889bb8de1
Security:	CVE-2025-10680
ebd38b03a8
« newest← newerpage 12 of 167older →oldest »