CVE and update status of the FreeBSD ports tree3,317 unaddressed CVEs in 678 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 99e0fd1e6e
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
Depends on
lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,341)

Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix make validate

After a clean.

PR:		287479
Reported by:	dvl@ lwhsu@
Fixes:		3c9a11c9111b
825f582e76
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Fix syntax of entry 2a220a73-4759-11f0-a44a-6cc21735f730

Fixes:	47f0fcd2cc49 security/vulxml: Add entry for PostgreSQL JDBC Driver
Sponsored by:	The FreeBSD Foundation
3be4401af5
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
6f97a7b5d5
Palle Girgensohn (girgen) · 1.1_6
security/vulxml: Add entry for PostgreSQL JDBC Driver
47f0fcd2cc
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add mod_security vulnerabilities

* CVE-2025-47947
 * CVE-2025-48866
c4ba83ba29
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Correct roundcube entry

Flavored ports should include all package names in the VuXML entry.

PR:		287306
Reported by:	Tomáš Čiernik <tomas@ciernik.sk>
9601584a5a
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities

* CVE-2025-5267
 * CVE-2025-5266
 * CVE-2025-5264
 * CVE-2025-5263
82fcaf5fe0
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: add electron{34,36} out of bounds read and write in V8
4acc783ce3
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Chromium vulnerability

* CVE-2025-5419
a11f845a82
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron35 out of bounds read and write in V8

Obtained from:	https://github.com/electron/electron/releases/tag/v35.5.1
04cd415c7f
Alex Dupre (ale) · 1.1_6
security/vuxml: add entry for roundcube.

PR:		287208
Submitted by:	Christos Chatzaras <chris@cretaforce.gr>
6f84450813
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix make vuln-flat.xml

According to the documentation, we should be able to type:

make vuln-flat.xml

(https://docs.freebsd.org/en/books/porters-handbook/book/#security-notify-vuxml-testing)

But after 87748de634d7b the target name includes the PKGDIR which is not right.

Fixes:	87748de634d7b
3c9a11c911
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Gimp vulnerabilities

* CVE-2025-2760
 * CVE-2025-2761
7465473495
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add entry for ftp/curl

* CVE-2025-4947
 * CVE-2025-5025

PR:		287219
Reported by:	chris@cretaforce.gr
3f32b24a86
Daniel Engberg (diizzy) · 1.1_6
security/vuxml: Fix libxml2 CVE-2025-32414 entry

xmlsoft is the vendor name, replace it with libxml2
For some reason it go picked up while adding the this entry

Reported by:	fernape
37a0d38734
Daniel Engberg (diizzy) · 1.1_6
security/vuxml: Document libxml2 vulnerabilities

Document CVE-2024-56171, CVE-2025-24928 and CVE-2025-32414
9a596e5a53
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix librewolf entries

librewolf does not have PORTEPOCH.

PR:		286455
Reported by:	ax61@disroot.org
e445d8caef
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 137.0.7151.55

Obtained from:	https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html
fc8715cd2d
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add chromium vulnerability

* CVE-2025-5063
196561431a
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities

* CVE-2025-5268
 * CVE-2025-5269
 * CVE-2025-5270
 * CVE-2025-5271
 * CVE-2025-5272
9773c8e3f7
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add mod_security DoS vulnerability

* CVE-2025-47947

PR:	278180
68cdd3bab9
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Fix entry 34744aab-3bf7-11f0-b81c-001b217e4ee5

Block-level elements such as <ul> are not allowed as children of <p>.

Fixes:		26d54384e9ef (security/vuxml: document kea vulnerabilities)
Sponsored by:	The FreeBSD Foundation
59aa6f8a57
Thomas Zander (riggs) · 1.1_6
security/vuxml: Document vulnerability in net/traefik
5796456d1d
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add glpi vulnerabilities

* CVE-2024-11955
 * CVE-2025-21619
 * CVE-2025-21626
 * CVE-2025-21627
 * CVE-2025-23024
 * CVE-2025-23046
 * CVE-2025-24799
 * CVE-2025-24801
 * CVE-2025-25192
741d807026
Brad Davis (brd) · 1.1_6
security/vuxml: document kea vulnerabilities
26d54384e9
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron{34,35} multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v34.5.7,
		https://github.com/electron/electron/releases/tag/v35.5.0
04ca25ee0d
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Ammend entry for asterisk18

An extra 0 was in the version number.

Reported by:	Sulev-Madis Silber
40093ee0b6
Charlie Li (vishwin) · 1.1_6
security/vuxml: adjust lang/python3 versions for CVE-2025-4516

PORTREVISIONs are bumped for each port containing the respective
upstream commit that is not included in any release yet.

PR: 287009
692ef6d1cf
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add grafana vulnerability

* CVE-2025-4123
44b87e4d3e
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add python3 vulnerability

* CVE-2025-4516

PR:		287009
Reported by:	ngie@
5e6a4ea2aa
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document OpenSSL 3.5 vulnerability
f318eff173
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Firefox vulnerability

* CVE-2025-3608
1c1f476516
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
8ff6a48b42
Brad Davis (brd) · 1.1_6
security/vuxml: Document screen vulnerabilities
ca3704d218
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add firefox{-esr} vulnerabilities

* CVE-2025-4918
 * CVE-2025-4919
03f6a57c28
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document WeeChat vulnerabilities
da705b754b
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 136.0.7103.113

Obtained from:	https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_14.html
8681ebc619
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities

* CVE-2025-4091
 * CVE-2025-4093
354804d247
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix 2025.xml

Please, remember to always run "make validate" before committing.

fernape@ with ports-secteam@ hat on.

Fixes:	7e75a5ba66e3a
ae17653a85
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document vscode security feature bypass vulnerability

Obtained from:	https://github.com/microsoft/vscode/security/advisories/GHSA-742r-ggwg-vqxm
cad2827eb6
Charlie Li (vishwin) · 1.1_6
security/vuxml: add textproc/libxslt

PR: 286782
7e75a5ba66
Danilo G. Baio (dbaio) · 1.1_6
security/vuxml: Add Varnish Cache vulnerability
81c93e4aa6
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities

* CVE-2025-4083
 * CVE-2025-4085
 * CVE-2025-4087
 * CVE-2025-4088
 * CVE-2025-4089
 * CVE-2025-4092
986be61969
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
bafe90a8c4
Palle Girgensohn (girgen) · 1.1_6
security/vuxml: Add information about PostgreSQL overflow issue
64bbf97f2a
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 136.0.7103.92

Obtained from:	https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop.html
b955465e8f
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 136.0.7103.59

Obtained from:	https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop_29.html
07173bc43f
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add entry for fcgi < 2.4.5

PR:		286590
Reported by:	chris@cretaforce.gr
a8dd74f939
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add dnsdist vulnerability

* CVE-2025-30194

PR:	286282
ced253b2ca
Philip Paeps (philip) · 1.1_6
security/vuxml: libspf2 >= 1.2.11_1 not vulnerable

Fix the version range for libspf2 CVE-2023-42118.

libspf2 was patched in commit bbdef08a89c2124b0c149597f23d67c39cf3a522
to address CVE-2023-42118.  PORTREVISION was bumped but vuxml was never
updated.

PR:		274215
Reported by:	JC Burger <Jc.Burger@nttdata.com>
Security:	CVE-2023-42118
21557ec770
« newest← newerpage 15 of 167older →oldest »