CVE and update status of the FreeBSD ports tree3,317 unaddressed CVEs in 678 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 99e0fd1e6e
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
Depends on
lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,341)

Kurt Jaeger (pi) · 1.1_6
security/vuxml: add VuXML entry for CVE-2025-30195 for dns/powerdns-recursor

PR:		286139
Reported-by:	Jordan Ostreff <jordan@ostreff.info>
0306de43f9
Koichiro Iwao (meta) · 1.1_6
security/vuxml: fix clumsy whitespace use

This text was added in 72eea8b with words split in half.

Pull Request:	https://github.com/freebsd/freebsd-ports/pull/385
43ec1340e7
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add sqlite vulnerability

* CVE-2025-29087
61abc1beec
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix entry range

PR:		286470
Reported by:	Einar Bjarni Halldórsson <einar@isnic.is>
Fixes:		86c0781ad496e
de94acbe7b
Kevin Bowling (kbowling) · 1.1_6
security/vuxml: Fix navidrome range statement
728f5966af
Muhammad Moinur Rahman (bofh) · 1.1_6
net/py-h11: Update version 0.14.0=>0.16.0

- This addresses fix for CVE-2025-43859 — a critical vulnerability
  affecting HTTP/1.1 connection handling.

- This update may break ports that depend on older h11 APIs, as some
  interfaces and behaviors have changed in the new release.

Ports known or suspected to be affected should be tested carefully and
updated accordingly. A heads-up will also be sent to ports@.

Quarterly merge should take place after all the downstream ports have
been fixed for building.

Security: CVE-2025-43859
Changelog: https://github.com/python-hyper/h11/releases/tag/v0.16.0
MFH:	2025Q2
72eea8b95e
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add grafana vulnerabilities

* CVE-2025-2703 - DOM XSS vulnerability (Medium)
 * CVE-2025-3260 - Bypass Viewer and Editor permission (High)
 * CVE-2025-3454 - Authorization bypass in data source proxy API (Medium)

PR:		286323
Reported by:	Boris Korzun <drtr0jan@yandex.ru
41bcfffbcb
Yasuhiro Kimura (yasu) · 1.1_6
security/vuxml: Document DoS vulnerability in redis and valkey
86c0781ad4
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
5626746c4a
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 135.0.7049.114

Obtained from:	https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop_22.html
e0e6f271c4
Kevin Bowling (kbowling) · 1.1_6
security/vuxml: Add multimedia/navidrome CVE-2025-27112
89fc4a4bd6
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add lang/erlang* vulnerabilities

CVE-2025-32433

Reported by:	Stefan Grundmann <sg@ennead.xyz>
6895b5c637
Ashish SHUKLA (ashish) · 1.1_6
security/vuxml: Document ejabberd vulnerability
bc550c7279
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 135.0.7049.95

Obtained from:	https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop_15.html
60d7da693f
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add perl vulnerability

* CVE-2024-56406
f37cc43f3a
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Complete suricata entries

Add details for suricata vulnerabilities that were not disclosed at the time of
adding the entry.

Fixes:	dedae0ab7185
c199630333
Koichiro Iwao (meta) · 1.1_6
security/vuxml: Fix spelling mistakes
00dc559fd2
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 135.0.7049.84

Obtained from:	https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop_8.html
cd292b21a8
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: add gogs vulnerabilities

* CVE-2024-39930
 * CVE-2024-39931
 * CVE-2024-39932
 * CVE-2024-39933
 * CVE-2024-44625

PR:	280241
07dccc2562
Ashish SHUKLA (ashish) · 1.1_6
security/vuxml: Document net-im/py-matrix-synapse vulnerability

PR:		285773
3f76937a51
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities

* CVE-2024-11704
 * CVE-2024-11706
8ec84fad39
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Document Jenkins Security Advisory 2025-04-02

Sponsored by:	The FreeBSD Foundation
5cb22d1fa8
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
2c4d5a1a58
Philip Paeps (philip) · 1.1_6
security/vuxml: document CVE-2024-8176 (expat)

The textproc/expat2 port was already updated by diizzy@ on 25 March.
See commit a627ba49b6691cb8baf545c0d9b841458fb00859.
9821f83137
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities

* CVE-2025-3028
 * CVE-2025-3029
 * CVE-2025-3030
 * CVE-2025-3031
 * CVE-2025-3032
 * CVE-2025-3033
 * CVE-2025-3034
2fcd3ef3a7
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 135.0.7049.52

Obtained from:	https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop.html
e90aa3f950
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Mozilla vulnerabilities

* CVE-2025-0237
 * CVE-2025-0238
 * CVE-2025-0239
 * CVE-2025-0240
 * CVE-2025-0241
 * CVE-2025-0242
 * CVE-2025-0243
 * CVE-2025-0245
 * CVE-2025-0247
9d1c1d171e
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add librewolf to recent vulns

Fixes: 5cf86187 14b335cd
24781632ed
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Mozilla multiple vulnerabilities

* CVE-2025-1931
 * CVE-2025-1933
 * CVE-2025-1934
 * CVE-2025-1935
 * CVE-2025-1937
 * CVE-2025-1938
 * CVE-2025-1943
14b335cdfe
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add mongodb multiple vulnerabilities

* CVE-2022-3085
 * CVE-2025-3083
 * CVE-2025-3084
5cf86187a0
Matthias Andree (mandree) · 1.1_6
security/vuxml: add openvpn<2.6.14 server DoS vuln

Security:       2cad4541-0f5b-11f0-89f8-411aefea0df9
Security:       CVE-2025-2704
e1b5c97875
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix firefox{-esr} version numbers

Fixes:	5f6d70f7ea52fb12b29ca098afa148441aa93df3
f4ac492b3e
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add gitea vulnerabilities

* CVE-2025-30204
 * CVE-2025-29923
 * CVE-2025-22870

PR:	285727
64f0d5abe9
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add firefox derivative
20dffd39e5
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities

Affects firefox, fireforx-esr, thunderbird

 * CVE-2025-1942
 * CVE-2025-1941
 * CVE-2025-1932
 * CVE-2025-27424
5f6d70f7ea
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add suricata multiple vulnerabilities

No details have been published yet.

 * CVE-2025-29915: HIGH
 * CVE-2025-29916: Moderate
 * CVE-2025-29917: HIGH
 * CVE-2025-29918: HIGH

PR:	285574
dedae0ab71
Jason E. Hale (jhale) · 1.1_6
security/vuxml: security/vuxml: Add www/qt6-webengine < 6.8.3

Also add print/qt6-pdf, since PDFium is involved this time.
f14ef0899e
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron{33,34} incorrect handle provided in unspecified circumstances in Mojo

Obtained from:	https://github.com/electron/electron/releases/tag/v33.4.8,
		https://github.com/electron/electron/releases/tag/v34.4.1
f31eaca8ac
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
27c82184c1
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron{33,34} type confusion in V8

Obtained from:	https://github.com/electron/electron/releases/tag/v33.4.6,
		https://github.com/electron/electron/releases/tag/v34.3.4
e1095fc87f
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Add www/qt5-webengine < 5.15.18p7
c4f17232d9
Danilo G. Baio (dbaio) · 1.1_6
security/vuxml: Add Varnish Cache vulnerability
6326090098
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 134.0.6998.117

Obtained from:	https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_19.html
6df3764ea9
Muhammad Moinur Rahman (bofh) · 1.1_6
security/vuxml: Document PHP vulnerabilities

PR:		285386
537b5822a5
Palle Girgensohn (girgen) · 1.1_6
security/vuxml: Add security information about opensaml/shibboleth-sp
928bd4f5b6
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
66e068fa15
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Fix 9cf03c96-ffa5-11ef-bb15-002590af0794 entry

vuxml build:

```
Application exception:
bad CVE name for vid 9cf03c96-ffa5-11ef-bb15-002590af0794: GHSA-693p-m996-3rmf @ho:215
```

Fixes:	90289c6eaa01 vuxml: Document vim vulnerability
Sponsored by:	The FreeBSD Foundation
ce94fb7757
Adam Weinberger (adamw) · 1.1_6
vuxml: Document vim vulnerability
90289c6eaa
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 134.0.6998.88

Obtained from:	https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_10.html
31e28ef17b
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: libreoffice macro URL arbitrary script execution
82e3a2a35d
« newest← newerpage 16 of 167older →oldest »