CVE and update status of the FreeBSD ports tree3,317 unaddressed CVEs in 678 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 99e0fd1e6e
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
Depends on
lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,341)

Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add vim* shell commands execution
976ac8ad30
Bryan Drewery (bdrewery) · 1.1_6
security/vuxml: Update recent OpenSSH entry to include port
e3256b6a0d
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron33 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v33.4.3
7d7d98352a
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron32 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v32.3.3
7f35be0bed
Nicola Vitale (nivit) · 1.1_6
security/vuxml: add devel/py-Jinja2 <= 3.1.5
414eee6e27
Emmanuel Vadot (manu) · 1.1_6
security/vuxml: Document recent xorg-server and xwayland vulnerabilities

Sponsored by:   Beckhoff Automation GmbH & Co. KG
b0f1512cc4
Jose Alonso Cardenas Marquez (acm) · 1.1_6
security/vuxml: Add security/caldera and security/caldera4 vulnerabilities

Obtained from:	https://github.com/mitre/caldera/pull/3129
beb077ea2a
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Document Jenkins Security Advisory 2025-03-05

Sponsored by:	The FreeBSD Foundation
1943629f19
Nicola Vitale (nivit) · 1.1_6
security/vuxml: Add audio/py-spotify <= 2.24.0
096923ddcf
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 134.0.6998.35

Obtained from:	https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html
e2ece3a980
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron{32,33} multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v32.3.2,
		https://github.com/electron/electron/releases/tag/v33.4.2
0d3d1394f0
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: document unit* vulnerabilities
21c77e23be
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix entry

Add missing </p> tag.

Reported by:	dan@langille.org
Fixes:		003195a3c754204bc61aaa39fea85fd62004b014
62f369ac25
Adam Weinberger (adamw) · 1.1_6
vuxml: Document vim code execution
003195a3c7
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
5c5aff412b
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 133.0.6943.141

Obtained from:	https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_25.html
f25f082b26
Joseph Mingrone (jrm) · 1.1_6
security/vuxml: Update affected versions for recent Emacs entry

For entry e60e538f-e795-4a00-b475-cc85a7546e00, even though
CVE-2025-1244 was created recently, the workaround was committed to the
upstream master branch much earlier.

https://git.savannah.gnu.org/cgit/emacs.git/commit/?id=820f0793f0b46448928905552726c1f1b999062f

After confirming details with an upstream developer, update the affected
editors/emacs-devel package versions.

Sponsored by:	The FreeBSD Foundation
14ae7c780b
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Add <= 0.28.0 exiv2 < 0.28.4

Add Med 5.3 CVE-2025-26623 for graphics/exiv2
https://github.com/Exiv2/exiv2/security/advisories/GHSA-38h4-fx85-qcx7
b2ebad847b
Joseph Mingrone (jrm) · 1.1_6
security/vuxml: Add entries for Emacs CVE-2024-53920 and CVE-2025-1244

Security:	CVE-2024-53920
Security:	CVE-2025-1244
Sponsored by:	The FreeBSD Foundation
4fb4b8bb0c
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add exim SQL injection vulnerability

CVE-2025-26794

 * Base Score:	7.5 HIGH
 * Vector:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
481c8355ee
Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SA issued on 2025-02-21

FreeBSD-SA-25:05.openssh affects all supported versions of FreeBSD
f309e2d2aa
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 133.0.6943.126

Obtained from:	https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop.html
Obtained from:	https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_12.html
Obtained from:	https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_18.html
f18d21afdd
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document vscode multiple vulnerabilities

Obtained from:	https://github.com/microsoft/vscode/releases/tag/1.97.1
8ee114bdd6
Ryan Steinmetz (zi) · 1.1_6
security/vuxml: Document vulnerability in security/openvpn-auth-ldap
76087c45a0
Palle Girgensohn (girgen) · 1.1_6
security/vuln: Add entry for PostgreSQL
60223989ed
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
918ef671b6
Joseph Mingrone (jrm) · 1.1_6
security/vuxml: Document new Intel CPU vulnerabilities

Intel has disclosed new CPU vulnerabilities in the release notes for
microcode-20250211.

Reference:	https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20250211
Security:	CVE-2024-31068
Security:	CVE-2024-36293
Security:	CVE-2023-43758
Security:	CVE-2024-39355
Security:	CVE-2024-37020
Sponsored by:	The FreeBSD Foundation
ad8033d4f7
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document OpenSSL 3.2+ vuln
f20c9995a2
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Entries for mozilla products

CVE-2025-10{09,10,11,12,13,14,15,16,17,18,19,20}
d62ea8c0ed
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document MariaDB InnoDB vuln
785522bfad
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Add graphics/libcaca < 0.99.b20
21d5e4f153
Rodrigo Osorio (rodrigo) · 1.1_6
security/vuxml: add entry for net-mgmt/cacti < 1.2.29
69f20ef2a4
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: document www/nginx* vulnerability
3a64de6dcf
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Add www/qt6-webengine < 6.8.2
fe2f031405
Yasuhiro Kimura (yasu) · 1.1_6
security/vuxml: Update entries for redis and valkey

Add affected range for redis-devel package.
c3f4861e84
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 132.0.6834.159

Obtained from:	https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_28.html
8960bd7faa
Michael Reifenberger (mr) · 1.1_6
security/vaultwarden: Security update to 1.33.0

Also added CVE IDs to security/vuxml vaulwarden entry.

PR:		 284399
Reported by:	 foudfou
75bb613dd6
Ashish SHUKLA (ashish) · 1.1_6
security/vuxml: Document net-im/dendrite vulneraability
1f4fb1b7c2
Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SAs issued on 2025-01-29

FreeBSD-SA-25:01.openssh affects FreeBSD 14.1
FreeBSD-SA-25:02.fs affects all supported versions of FreeBSD
FreeBSD-SA-25:03.etcupdate affects all supported versions of FreeBSD
FreeBSD-SA-25:04.ktrace affects FreeBSD 14.2
327b7fac9b
Philip Paeps (philip) · 1.1_6
security/vuxml: fix whitespace errors in recent oauth2-proxy entry

Turn some spaces into tabs to make `make validate` happy.  The errors
were introduced in ab5f837462e075723c1be8573d178751b2ba2ede earlier
today.

Pointy hat to:	rm
6424e7bb83
Ruslan Makhmatkhanov (rm) · 1.1_6
security/vuxml: add www/oauth2-proxy < 7.8.0 entry

PR:		284059
Reported by:	Matthias Wolf <freebsd@rheinwolf.de>
ab5f837462
Bernard Spil (brnrd) · 1.1_6
security/vaultwarden: Register <= 1.32.7 vulns
88f39d025c
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 132.0.6834.110

Obtained from:	https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_22.html
Obtained from:	https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html
2a206e393c
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron32 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v32.3.0
0b7755f455
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron33 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v33.3.2
c12b248245
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
7911f2ba4c
Yasuhiro Kimura (yasu) · 1.1_6
security/vuxml: Document possbile denial-of-service vulnerability in clamav
e1438a229a
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron32 type confusion in v8 vulnerability

Obtained from:	https://github.com/electron/electron/releases/tag/v32.2.8
2c3b037e20
Ashish SHUKLA (ashish) · 1.1_6
security/vuxml: Document lang/go* vulnerabilities

PR:		284181
ce6bdfd4ae
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron31 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v31.7.7
a368f07827
« newest← newerpage 17 of 167older →oldest »