CVE and update status of the FreeBSD ports tree3,317 unaddressed CVEs in 678 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 7b95a2eac4
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
Depends on
lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,339)

Florian Smeets (flo) · 1.1_6
security/vuxml: Add dns/dnsdist vulnerability < 2.0.1
bc49b2190b
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 140.0.7339.207

Obtained from:	https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_23.html
8ff1e4729c
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 140.0.7339.185

Obtained from:	https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html
59e8812403
Daniel Engberg (diizzy) · 1.1_6
security/vuxml: Add pcre2 vulnerability

Document CVE-2025-58050
470e666a69
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: update expat records

Reported by:	delphij
Fixes:		f0e1c34246486f53b0636ec39f73edb116a52f3f
541e919be4
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: add expat2 vulnerability
f0e1c34246
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Document Jenkins Security Advisory 2025-09-17

Sponsored by:	The FreeBSD Foundation
9e36425c89
Tijl Coosemans (tijl) · 1.1_6
security/vuxml: Merge 2 entries for CUPS

Reported by:	osa
817fbf37bf
Tijl Coosemans (tijl) · 1.1_6
security/vuxml: Document CUPS vulnerabilities

CVE-2025-58060 cups: Authentication bypass with AuthType Negotiate
CVE-2025-58364 cups: Remote DoS via null dereference
29e24be904
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: correct the product version with a security fix
46690f115f
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: add www/unit-java vulnerability
136fddc527
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: update cups vulnerabilities
f07fe7d978
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: add print/cups < 2.4.13
1fc2969314
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 140.0.7339.127

Obtained from:	https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_9.html
b0bee944f4
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
15ef27da63
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 140.0.7339.80

Obtained from:	https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop.html
3d004bae0d
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: adjust libxslt version

Please visit https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=289213
for details.
b3399ceded
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Add graphics/exiv2 < 0.28.6
c5c9d253c0
Wen Heping (wen) · 1.1_6
security/vuxml: Document Django's multiple vulnerabilities
86cbd143db
Palle Girgensohn (girgen) · 1.1_6
security/vuxml: document shibboleth vulnerability
9069807816
Nicola Vitale (nivit) · 1.1_6
security/vuxml: Add www/linux-vieb < 12.4.0
78ab74a930
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
17a37be97c
Renato Botelho (garga) · 1.1_6
security/vuxml: Adjust affected kea versions

CVE-2025-40779 doesn't affect Kea 2.6.x, which is the version present on
quarterly branch.  On net/kea, it only affects 3.0.0 while it affects
3.1.0 and 2.7.x on net/kea-devel.
64e60d652c
Renato Botelho (garga) · 1.1_6
security/vuxml: Add net/kea vulnerability

* CVE-2025-40779
f094f84255
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Add devel/qt6-base < 6.9.2
e544b07215
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Add www/qt6-webengine < 6.9.2
b663d42d1c
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix entry

Fixes:	35f7214f7a9ec
64861d1b7e
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add SQLite vulnerability

* CVE-2025-29088
0b5abbbf08
Rodrigo Osorio (rodrigo) · 1.1_6
security/vuxml: add p5-Catalyst-Authentication-Credential-HTTP
35f7214f7a
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities

* CVE-2025-9187
 * CVE-2025-9184
 * CVE-2025-9185
 * CVE-2025-9183
 * CVE-2025-9182
 * CVE-2025-9181
 * CVE-2025-9180
 * CVE-2025-9179
e7f3ac4786
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: add www/nginx-devel < 1.29.1

Obtained from:	https://my.f5.com/manage/s/article/K000152786
7a7f34e4d6
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 139.0.7258.127

Obtained from:	https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_12.html
8bc173ea40
Palle Girgensohn (girgen) · 1.1_6
security/vuxml: Add vulnerabilities for PostgreSQL
bd39e99be4
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
ac49b013aa
Ryan Steinmetz (zi) · 1.1_6
security/vuxml: Document www/varnish7 DoS condition
56b1f15f02
Rodrigo Osorio (rodrigo) · 1.1_6
security/vuxml: add security/p5-Authen-SASL
0f0638d4ab
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 139.0.7258.66

Obtained from:	https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html
0aa8752f44
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document Apache httpd vulnerability
33ef74eef2
Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SA issued on 2025-08-08

FreeBSD-SA-25:07.libarchive affects all supported versions of FreeBSD.
ab46eb7f8e
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Sqlite vulnerability

* CVE-2025-3277
1306e2c0ed
Matthias Andree (mandree) · 1.1_6
security/vuxml: navidrome < 0.56.0 CVE-2025-48948

This wasn't mentioned along with the other navidrome < 0.56
vuln and also has a wider affected version range.

Security:	CVE-2025-48948
Security:	95480188-6ebc-11f0-8a78-bf201f293bce
a2e68a8063
Matthias Andree (mandree) · 1.1_6
security/vuxml: fixup linux_base -> linux_base-rl9
1ba883ceae
Matthias Andree (mandree) · 1.1_6
security/vuxml: clean up sqlite3 version range mess

Several sqlite3 entries mentioned wrong version ranges
with respect to PORTEPOCH and/or forgot the linux-*-sqlite
or, more recently, linux_base port.

While auditing this, I saw several implausible tags that used <gt>
(greater-than) in ranges where I believe that <ge> (greater-or-equal)
would be more adequate.

Add relevant reminders to vuxml's Makefile.

Fix up sqlite3's 2025 entries.

linux_base-rl9 currently ships 3.34.1-7.el9_3, see
emulators/linux_base-rl9/Makefile.version - I don't know if that's
vulnerable or was patched inside Rocky Linux, but let's err on the safe side.
I'll leave it up to emulation@ to clean up this particular entry.
7296fd2fe2
Matthias Andree (mandree) · 1.1_6
security/vuxml: fix up range for sqlite3's CVE-2025-7458

Security:	f51077bd-6dd7-11f0-9d62-b42e991fc52e
Security:	CVE-2025-7458
4dac70c7e8
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Sqlite vulnerability

CVE_ID=CVE-2025-7458
041f9ec0e5
Rodrigo Osorio (rodrigo) · 1.1_6
security/vuxml: Use of Cryptographically Weak Pseudo-Random Number Generator in p5-Crypt-CBC

Also, fix typo missing space in previous report.
9f5786f381
Dan Langille (dvl) · 1.1_6
security/vuxml: Add devel/viewvc-devel entry
4dc7640d9b
Yasuhiro Kimura (yasu) · 1.1_6
security/vuxml: Document possible DoS valnerability in rubygem-resolv
6488e4f3f8
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities

* CVE-2025-8027
 * CVE-2025-8028
 * CVE-2025-8029
 * CVE-2025-8030
 * CVE-2025-8031
 * CVE-2025-8032
 * CVE-2025-8033
 * CVE-2025-8034
 * CVE-2025-8035
 * CVE-2025-8036
 * CVE-2025-8037
 * CVE-2025-8038
 * CVE-2025-8039
 * CVE-2025-8040
 * CVE-2025-8043
 * CVE-2025-8044
8b56cab119
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: document gdk-pixbuf2 vulnerability
a3ec65f531
« newest← newerpage 13 of 167older →oldest »