CVE and update status of the FreeBSD ports tree3,317 unaddressed CVEs in 678 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 99e0fd1e6e
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
Depends on
lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,341)

Ashish SHUKLA (ashish) · 1.1_6
security/vuxml: Document matrix-js-sdk vulnerability

Security:	CVE-2024-50336
b1e492a32d
Florian Smeets (flo) · 1.1_6
security/vuxml: Document icinga2 vulnerability
8db69c83f1
Joseph Mingrone (jrm) · 1.1_6
security/vuxml: Document new Intel CPU vulnerabilities

Intel has disclosed new CPU vulnerabilities in the release notes for
microcode-20241112.  This release also includes updates to previous
microcode updates for CVE-2024-24968 and CVE-2024-23984.

Reference:	https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20241112
Security:	CVE-2024-21820
Security:	CVE-2024-21853
Security:	CVE-2024-23918
Security:	CVE-2024-23984 (updated microcode)
Security:	CVE-2024-24968 (updated microcode)
Sponsored by:	The FreeBSD Foundation
af75177d4a
Dirk Meyer (dinoex) · 1.1_6
security/vuxml: add CVE-2018-10195, CVE-2020-29074
0b6f281593
Renato Botelho (garga) · 1.1_6
security/vuxml: Document tnef vulnerabilities

PR:		282228
2f47d7ff7d
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron32 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v32.2.3
7ce45b8e01
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Document gstreamer1-rtsp-server

Only affected if assertions are enabled, which we don't do by default.
3d87c4ff59
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 130.0.6723.116

Obtained from:	https://chromereleases.googleblog.com/2024/11/stable-channel-update-for-desktop.html
92e1c36a51
Vladimir Druzenko (vvd) · 1.1_6
security/vuxml: Add record for devel/libqb < 2.0.8 CVE-2023-39976

log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long
log messages because the header size is not considered.
https://nvd.nist.gov/vuln/detail/CVE-2023-39976

PR:	282536
1bdede316d
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 130.0.6723.91

Obtained from:	https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_29.html
508fcad02f
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Add www/qt5-webengine < 5.15.18p2

Fix indentation issues caught by `make validate` for previous entry.
6892e780d7
Vladimir Druzenko (vvd) · 1.1_6
security/vuxml: Add record for net/keycloak < 26.0.4 CVE-2021-44549

PR:	282419
331f33b5fe
Vladimir Druzenko (vvd) · 1.1_6
security/vuxml: www/librewolf < 131.0.3 CVE-2024-9936

PR:	282423
e5b28e0a67
Vladimir Druzenko (vvd) · 1.1_6
security/vuxml: Add record for devel/hwloc2 < 2.9.2 CVE-2022-47022

PR:	282215
77f0c7d39a
Vladimir Druzenko (vvd) · 1.1_6
security/vuxml: add record for www/forgejo < 9.0.1 and www/forgejo7 < 7.0.10

https://codeberg.org/forgejo/forgejo/milestone/8544
https://codeberg.org/forgejo/forgejo/pulls/5719
https://codeberg.org/forgejo/forgejo/pulls/5718

PR:	282387
43e383b8b4
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 130.0.6723.{58,69}

Obtained from:	https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_22.html
Obtained from:  https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_15.html
de651c9978
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron31 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v31.7.2
e3d887e9aa
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
e9ab9d755a
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron32 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v32.2.2
960ac189cd
Robert Clausecker (fuz) · 1.1_6
security/vuxml: document www/oauth2-proxy vulnerabilities

Reported by:	Matthias Wolf <freebsd@rheinwolf.de>
PR:		282004
bc5176c12c
Bernard Spil (brnrd) · 1.1_6
security/vuxml: OpenSSL 3.4 not affected by CVE-2024-9143
5237c9972d
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Fix and add OpenSSL versions
5484674eda
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document OpenSSL low vulnerability
d0f01687dc
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron{31,32} multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v31.7.1,
	 	https://github.com/electron/electron/releases/tag/v32.2.1
1c620b90f1
Ashish SHUKLA (ashish) · 1.1_6
security/vuxml: Document element-web vulnerability
90a45de5e4
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document VSCode remote code execution vulnerability

Obtained from:	https://github.com/microsoft/vscode/issues/230824
882f13d52f
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix typo in firefox entry

Reported by:	jbeich@
69c1f9b658
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add firefox{-esr} use-after-free code execution

CVE-2024-9680
5acf2d27a5
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
4da2b186fe
Vladimir Druzenko (vvd) · 1.1_6
security/vuxml: Add record for www/gitea: Fix bug when a token is given public only

PR:	281949
83ec241c54
Vladimir Druzenko (vvd) · 1.1_6
security/vuxml: Add record about CVE-2024-25590 in dns/powerdns-recursor

PowerDNS Recursor Security Advisory 2024-04:
https://blog.powerdns.com/2024/10/03/powerdns-recursor-4-9-9-5-0-9-5-1-2-released

PR:	281914
bbb9892c21
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 129.0.6668.{89,100}

Obtained from:	https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop.html
Obtained from:	https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_8.html
d5f8bbbb15
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix Thunderbird version

PR:		281960
Reported by:	John Hein <jcfyecrayz@liamekaens.com>
Fixes:		86d1aa3caa24c97cdc63962d13fef16be12c84b7
67b39654b8
Robert Clausecker (fuz) · 1.1_6
security/vuxml: document unbound vulnerability

PR:		281894
Security:	CVE-2024-8508
Security:	2368755b-83f6-11ef-8d2e-a04a5edf46d9
7382ac2b1b
Craig Leres (leres) · 1.1_6
security/vuxml: Mark zeek < 7.0.3 as vulnerable as per:

https://github.com/zeek/zeek/releases/tag/v7.0.3

This release fixes the following potential DoS vulnerability:

 - Adding to the POP3 hardening in 7.0.2, the parser now simply
   discards too many pending commands, rather than any attempting
   to process them. Further, invalid server responses do not result
   in command completion anymore. Processing out-of-order commands
   or finishing commands based on invalid server responses could
   result in inconsistent analyzer state, potentially triggering
   null pointer references for crafted traffic.

Reported by:	Tim Wojtulewicz
29c86bfa4c
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix name tag for textproc/expat2

Reported by:	Adam McDougall <mcdouga9@egr.msu.edu>
Fixes:		47955717fc53
f2f6d65884
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add firefox{-esr}, thunderbird vulnerabilities

CVE-2024-9392
CVE-2024-9396
CVE-2024-9400
CVE-2024-9401
CVE-2024-9402
CVE-2024-9403
86d1aa3caa
Yasuhiro Kimura (yasu) · 1.1_6
security/vuxml: Update range of redis in 8b20f21a-8113-11ef-b988-08002784c58d

In 2024Q3 branch databases/redis still stays in 7.2.x.

Fixes:		e44e4021e418
4775d28b85
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Document Jenkins Security Advisory 2024-10-02

Sponsored by:	The FreeBSD Foundation
1562a9671b
Yasuhiro Kimura (yasu) · 1.1_6
security/vuxml: Document multiple valnerabilities in Redis and Valkey
e44e4021e4
Torsten Zuehlsdorff (tz) · 1.1_6
security/vuxml: Document PHP vulnerabilities

There were 4 vulnerabilities found and fixed in PHP.

PR:		281770
Reported by:	FiLis <freebsdbugs@filis.org>
d00372f062
Tijl Coosemans (tijl) · 1.1_6
security/vuxml: Update cups-filters entry
c391dd71c6
Mateusz Piotrowski (0mp) · 1.1_6
security/vuxml: Add CVE-2022-45197
eee92723f2
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 129.0.6668.70

Obtained from:	https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_24.html
7e1bbdadcf
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix typos

Add linux-*-sqlite3 to last entry.
s/mozilla/firefox in an older entry

Reported by:	Edward Sanford Sutton, III (mirror176@hotmail.com)
91064fdc5d
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add sqlite use after free vulnerability

CVE-2024-0232
  * Base Score:	5.5 MEDIUM
  * Vector:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
d94547d54e
Tijl Coosemans (tijl) · 1.1_6
security/vuxml: Add cups-browsed RCE
02f3b1662d
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add textproc/expat2 vulnerabilities

CVE-2024-45490
CVE-2024-45491
CVE-2024-45492

PR:		281738
Reported by:	FiLiS <freebsdbugs@filis.org>
47955717fc
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
a69537fc4a
Olivier Cochard (olivier) · 1.1_6
security/vuxml: document frr vulnerabilities
dcfd8e16e1
« newest← newerpage 19 of 167older →oldest »