CVE and update status of the FreeBSD ports tree3,317 unaddressed CVEs in 678 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 99e0fd1e6e
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
Depends on
lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,341)

Xin LI (delphij) · 1.1_6
security/vuxml: Document age arbitrary binary execution vulnerability.
e6f95ee980
Matthias Andree (mandree) · 1.1_6
security/vuxml: mention security/openvpn username/password length bugfix of v2.6.13

I am not aware of a CVE number yet.

Security:	47bc292a-d472-11ef-aaab-7d43732cb6f5
a07b2a9949
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Fix entry 163edccf-d2ba-11ef-b10e-589cfc10a551

Fixes:	e39886d24184 security/vuxml: add net/rsync vulnerabilities
Sponsored by:	The FreeBSD Foundation
30f6c60b1d
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: add net/rsync vulnerabilities
e39886d241
Joseph Mingrone (jrm) · 1.1_6
security/vuxml: Update 2025-01-13 keycloak entry to fix `make validate`

Reported by:	garga
Sponsored by:	The FreeBSD Foundation
3b2fc68e09
Renato Botelho (garga) · 1.1_6
security/vuxml: Add devel/git vulnerabilities

Sponsored by:	Rubicon Communications, LLC ("Netgate")
14a1910257
Vladimir Druzenko (vvd) · 1.1_6
security/vuxml: Add record for net/keycloak

CVE-2024-11736 Unrestricted admin use of system and environment variables
CVE-2024-11734 Denial of Service in Keycloak Server via Security Headers

Security:	CVE-2024-11734
Security:	CVE-2024-11736
PR:		284058
05933df68a
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: add asterisk{18,20} vulns

CVE-2024-53566: Path traversal

 * Base Score:	5.5 MEDIUM
 * Vector:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
a237308ba7
Yasuhiro Kimura (yasu) · 1.1_6
security/vuxml: Document two valnerabilities in redis and valkey

While here, update copyright year
aefdc1ec77
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
6b9aff1437
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix sqlite range

PR:		283830
Reported by:	John Hein <jcfyecrayz@liamekaens.com>
dac8aadbd7
Cy Schubert (cy) · 1.1_6
security/vuxml: Update open-motif entry to reflect fix in 2004

Release notes states:

2.2.4 October 2004
a. Fixed vulnerabilities in libXpm code [CVE numbers CAN-2004-0687
   (integer overflows) and CAN-2004-0688 (stack overflows)].
b41271854a
Cy Schubert (cy) · 1.1_6
security/vuxml: Note Xpm update in open-motif-devel

Upstream open-motif updated built-in Xpm to 3.5.12 in upstream commit
b100c321 making it no longer vulnerable.
2718279acb
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: TOCTOU Vulnerability in www/apache*

CVE-2024-56337
1a35b19e6d
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: www/kanboard vulnerability

Insufficient session validation.
76e3c47072
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document Vaultwarden vulnerability
d3c7341ee3
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 131.0.6778.204

Obtained from:	https://chromereleases.googleblog.com/2024/12/stable-channel-update-for-desktop_18.html
83360c8541
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document liboqs vulnerability
85e29ded84
Philip Paeps (philip) · 1.1_6
security/vuxml: fix parse errors

Fix parse errors introduced in 96ddbb42b98fcb6022729ea28cd6725fcfdc4597.
6cab62ade8
Vladimir Druzenko (vvd) · 1.1_6
security/vuxml: add records for www/gitea < 1.22.6

https://github.com/go-gitea/gitea/pull/32810
https://github.com/advisories/GHSA-v778-237x-gjrc
https://github.com/go-gitea/gitea/pull/32791
https://github.com/go-gitea/gitea/pull/32654
https://github.com/go-gitea/gitea/pull/32531
https://github.com/go-gitea/gitea/pull/32473

PR:	283389
44f68d0633
Vladimir Druzenko (vvd) · 1.1_6
security/vuxml: add records for www/forgejo < 9.0.3 and www/forgejo7 < 7.0.12

https://codeberg.org/forgejo/forgejo/pulls/5974
https://codeberg.org/forgejo/forgejo/pulls/6248
https://codeberg.org/forgejo/forgejo/pulls/6249

PR:	283388
96ddbb42b9
Ashish SHUKLA (ashish) · 1.1_6
security/vuxml: Document net-im/py-matrix-synapse vulnerability

Signed-off-by: Sascha Biberhofer <sascha.biberhofer@skyforge.at>

PR:		283350
Reviewed by:	ashish
8800222e62
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix range for thunderbird vulnerability

PR:		283357
Reported by:	John Hein <jcfyecrayz@liamekaens.com>
15d9f54005
Craig Leres (leres) · 1.1_6
security/vuxml: Mark zeek < 7.0.5 as vulnerable as per:

https://github.com/zeek/zeek/releases/tag/v7.0.5

This release fixes the following potential DoS vulnerability:

 - Large QUIC packets can cause Zeek to overflow memory and potentially
   crash. Due to the possibility of receiving these packets from
   remote hosts, this is a DoS risk.

Reported by:	Tim Wojtulewicz
859ffd0b26
Yuri Victorovich (yuri) · 1.1_6
textproc/halibut: update 1.2 → 1.3

PR:	282213
4327d290f8
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
4d0e39815f
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 131.0.6778.139

Obtained from:	https://chromereleases.googleblog.com/2024/12/stable-channel-update-for-desktop_10.html
Obtained from:	https://chromereleases.googleblog.com/2024/12/stable-channel-update-for-desktop.html
327c49946f
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add mozilla vulnerabilities

* CVE-2024-11692
 * CVE-2024-11696
 * CVE-2024-11697
 * CVE-2024-11699
eb66f46580
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Add www/qt6-webengine < 6.7.3_3
d5d17095a9
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Document gstreamer1-plugins* < 1.24.10
d1aaee3f16
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add zabbix-frontend vulnerability

* Base Score:  9.9 CRITICAL
 * Vector:  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
a938308f3e
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron33 inappropriate implementation in extensions

Obtained from:	https://github.com/electron/electron/releases/tag/v33.2.1
6ae992b063
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: security/vuxml: Document Jenkins Security Advisory 2024-11-27

Sponsored by:	The FreeBSD Foundation
bfa4731f42
Robert Clausecker (fuz) · 1.1_6
net/keycloak: document multiple vulnerabilities

Security:	CVE-2024-9666 CVE-2024-10039 CVE-2024-10270
Security:	CVE-2024-10451 CVE-2024-10492
PR:		282983
2666126bb6
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
c64a2a1bcd
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 131.0.6778.85

Obtained from:	https://chromereleases.googleblog.com/2024/11/stable-channel-update-for-desktop_19.html
ee2196fe8e
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Add www/qt6-webengine < 6.7.3_2
358768e313
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Add www/qt5-webengine < 5.15.18p5
9b26e39ed4
Kurt Jaeger (pi) · 1.1_6
security/vuxml: Add x11-servers/xorg-server, x11-servers/xwayland

PR:		282415
cd195d1678
Michael Reifenberger (mr) · 1.1_6
security/vuxml: Add vaultwarden

Vaultwarden -- Multiple vulnerabilities

PR:		282795
Reported by:	Bernard Spil
5c3d5f53fc
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add mongodb vulnerability

Buffer over-read.
a66fafb28a
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document vaultwarden vulnerabilities
1892499aa5
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron32 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v32.2.5
b52b79ff64
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 131.0.6778.69

Obtained from:	https://chromereleases.googleblog.com/2024/11/stable-channel-update-for-desktop_12.html
36a0a1e991
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron31 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v31.7.5
52e93139cf
Palle Girgensohn (girgen) · 1.1_6
security/vuxml: Add CVEs for PostreSQL
f3fe33710c
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron31 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v31.7.4
ca2ab31aaa
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
d02ca41855
Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SAs issued on 2024-10-29

FreeBSD-SA-24:17.bhyve affects all supported versions of FreeBSD
FreeBSD-SA-24:18.ctl affects all supported versions of FreeBSD
FreeBSD-SA-24:19.fetch affects all supported versions of FreeBSD
0e79ec27f0
Ashish SHUKLA (ashish) · 1.1_6
security/vuxml: Document element-web vulnerabilities

Security:	CVE-2024-51749
Security:	CVE-2024-51750
82100c261b
« newest← newerpage 18 of 167older →oldest »