CVE and update status of the FreeBSD ports tree3,317 unaddressed CVEs in 678 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 99e0fd1e6e
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
Depends on
lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,341)

Craig Leres (leres) · 1.1_6
security/vuxml: Update zeek range for 6.X

Really, it was silly of me to add the <ge> range since there were
no commited 6.X versions that were not vulnerable to the new issue.
734d5fbae5
Craig Leres (leres) · 1.1_6
security/vuxml: Mark zeek < 7.0.2 as vulnerable as per:

https://github.com/zeek/zeek/releases/tag/v7.0.2

This release fixes the following potential DoS vulnerability:

 - The POP3 parser has been hardened to avoid unbounded state growth
   in the face of one-sided traffic capture or when enabled for
   non-POP3 traffic.

Reported by:	Tim Wojtulewicz
f3bf10dd60
Philip Paeps (philip) · 1.1_6
security/vuxml: belatedly add FreeBSD SAs issued on 2024-08-07

FreeBSD-SA-24:05.pf affects all supported versions of FreeBSD
FreeBSD-SA-24:06.ktrace affects all supported versions of FreeBSD
FreeBSD-SA-24:07.nfsclient affects all supported versions of FreeBSD
90fa03342c
Philip Paeps (philip) · 1.1_6
security/vuxml: complete FreeBSD reference for CVE-2024-7589

FreeBSD-SA-24:08.openssh was issued on 2024-08-07 to address
CVE-2024-7589.  All supported versions of FreeBSD were affected.

While here, correct minor markup nits in the vuxml entry.
09398c098f
Philip Paeps (philip) · 1.1_6
security/vuxml: reference FreeBSD-SA-24:04.openssh in CVE-2024-6387

All supported versions of FreeBSD were affected by CVE-2024-6387,
announced on 2024-07-01.  Reference FreeBSD-SA-24:04.openssh in the
vuxml entry.
11f549f3b9
Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SAs issued on 2024-09-19

FreeBSD-SA-24:15.bhyve affects all supported versions of FreeBSD
FreeBSD-SA-24:16.libnv affects all supported versions of FreeBSD
b32b229ab8
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerability
2e762b70ab
Alan Somers (asomers) · 1.1_6
security/vuxml: correct vulnerable package range for nginx

14dc2636e72c396459a6559868033910ee8a4532 added a new vuxml entry, but
forgot to account for PORTEPOCH.

PR:		281250
Approved by:	maintainer timeout
Security:	CVE-2024-7347
59efdc09db
Mateusz Piotrowski (0mp) · 1.1_6
security/vuxml: Document OpenSSH's CVE-2024-7589

Sponsored by:	Klara, Inc.
21207218a2
Yasuhiro Kimura (yasu) · 1.1_6
security/vuxml: Document multiple mXSS vulnerabilities in SnappyMail
fcbdddeccb
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix entry

Correct number of recorded CVEs.

Fixes:	019e45d60224
9ad12df135
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 128.0.6613.137

Obtained from:	https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_10.html
019e45d602
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
7bfbc4750d
Joseph Mingrone (jrm) · 1.1_6
security/vuxml: Document Intel CPU vulnerabilities

Security:	CVE-2024-23984
Security:	CVE-2024-24968
Sponsored by:	The FreeBSD Foundation
bce04250c8
Yasuhiro Kimura (yasu) · 1.1_6
security/vuxml: Document multiple vulnerabilities in ClamAV
b689d06163
Joe Marcus Clarke (marcus) · 1.1_6
security/vuxml: Document recent netatalk3 CVEs
845d4ea587
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: add minio vulnerabilities

PR:		281362
Reported by:	tom@eborcom.com
cba51eeea7
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix firefox version

Reported by:	bapt@
d6899de046
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Record firefox vulnerability

CVE-2024-7652
da096b3e16
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix topic

Reported by:	jhaley@
Fixes:		05d4a95e7f58
a9fe5514fa
Baptiste Daroussin (bapt) · 1.1_6
security/vuxml: really fix versionning for firefox

in 8a5936ed301ec363fd7e80762e74bacf0d69fd05 I added the missing
portepoch except I added the wrong one, portepoch is at 2, not at 1

Reported by:	Piotr Smyrak <piotr@smyrak.com>
e87eba586c
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Add exiv2 >= 0.28.0 and < 0.28.3
56ac822d19
Vladimir Druzenko (vvd) · 1.1_6
security/vuxml: Add www/forgejo < 8.0.3 and www/forgejo7 < 7.0.9

PR:	281314
19df0c241e
Cy Schubert (cy) · 1.1_6
security/vuxml: Add portepoch

Noted by:	bapt
Pointy hat to:	cy
ef0f4c5a06
Cy Schubert (cy) · 1.1_6
security/vuxml: devel/binutils: Correct reporting URL
84f04e5ace
Cy Schubert (cy) · 1.1_6
security/vuxml: Add devel/binutils < 2.43
05d4a95e7f
Vladimir Druzenko (vvd) · 1.1_6
www/gitea: Update 1.21.11 → 1.22.2 (fixes security vulnerabilities)

Changelogs:
https://github.com/go-gitea/gitea/releases/tag/v1.22.0
https://github.com/go-gitea/gitea/releases/tag/v1.22.1
https://github.com/go-gitea/gitea/releases/tag/v1.22.2

While here replace spaces with tabs in Makefile.

PR:	281298
MFH:	2024Q3
afa1c64ca1
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Fix the name of CVE-2024-43110

Sponsored by:	The FreeBSD Foundation
9893ad73a6
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Add www/qt5-webengine < 5.15.17p3
2627f3bb50
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Firefox multiple vulnerabilities

CVE-2024-8381:
    * Base Score:	9.8 CRITICAL
    * Vector:		CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 CVE-2024-8382:
    * Base Score:	8.8 HIGH
    * Vector:		CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

 CVE-2024-8383:
    * Base Score:	7.5 HIGH
    * Vector:		CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

 CVE-2024-8384:
    * Base Score:	9.8 CRITICAL
    * Vector:		CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 CVE-2024-8385:
    * Base Score:	9.8 CRITICAL
    * Vector:		CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 CVE-2024-8386:
    * Base Score:	6.1 MEDIUM
    * Vector:		CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

 CVE-2024-8387:
    * Base Score:	9.8 CRITICAL
    * Vector:		CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 CVE-2024-8389:
    * Base Score:	9.8 CRITICAL
    * Vector:		CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
b447efc774
Philip Paeps (philip) · 1.1_6
security/vuxml: reference FreeBSD-SA-24:13.openssl

Add a reference to FreeBSD-SA-24:13.openssl (issued 2024-09-04) to the
vuxml entry for OpenSSL CVE-2024-6119.

FreeBSD-SA-24:13.openssl affects FreeBSD 14.x
1c2a42c43e
Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SAs issued 2024-09-04

FreeBSD-SA-24:09.libnv affects all supported releases
FreeBSD-SA-24:10.bhyve affects FreeBSD 14.x
FreeBSD-SA-24:11.ctl affects all supported releases
FreeBSD-SA-24:12.bhyve affects all supported releases
FreeBSD-SA-24:14.umtx affects all supported releases
b73693f0ee
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Fix urls in latest OpenSSL vulns

Reported by:	ashish
d662435e08
Baptiste Daroussin (bapt) · 1.1_6
security/vuxml: fix firefox version

portepoch should be specified otherwise the version won't ever match the
installed version
8a5936ed30
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document OpenSSL vulnerabilities
1e9ef2db7b
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 128.0.6613.119

fix syntax while here

Obtained from:	https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop.html
1f7cc421c0
Vladimir Druzenko (vvd) · 1.1_6
security/vuxml: Record www/forgejo security vulnerability

Upstream issue:
https://codeberg.org/forgejo/forgejo/pulls/5149

PR:	281133
d679d90261
Dave Cottlehuber (dch) · 1.1_6
security/vuxml: add rabbitmq-c creds disclosure
660b4adde4
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Record firefox multiple vulnerabilities

CVE-2024-6608
 * Base Score:	4.3 MEDIUM
 * Vector:	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CVE-2024-6609
 * Base Score:	8.8 HIGH
 * Vector:	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2024-6610
 * Base Score:	4.3 MEDIUM
 * Vector:	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CVE-2024-7524
 * Base Score:	6.1 MEDIUM
 * Vector:	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
893abaacfd
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Revert "Record firefox multiple vulnerabilites"

This reverts commit 4453cf7eef05f9ac2b27bda7a87afb7da713f1c4.

The 3 CVEs only apply to firefox on iOS.

Reported by:	ronald-lists@klop.ws
b823d9ff18
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Record firefox multiple vulnerabilites

CVE-2024-43111
 * Base Score:	6.1 MEDIUM
 * Vector:	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVE-2024-43112
 * Base Score:	6.1 MEDIUM
 * Vector:	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVE-2024-43113
 * Base Score:	6.1 MEDIUM
 * Vector:	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
4453cf7eef
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 128.0.6613.114

Obtained from:	https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html
219a902671
Nicola Vitale (nivit) · 1.1_6
security/vuxml: Add devel/py-configobj <= 5.0.8
3682d81129
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
84c4ed42ce
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Record firefox multiple vulnerabilities

CVE-2024-5698
CVE-2024-5697
f245e53cda
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Record heap buffer overflow for mcpp

PR:		280962
Reported by:	Älven <alster@vinterdalen.se>
d2c2fbb45d
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Record DoS vulnerability for md4c

PR:	280956
Reported by: Älven <alster@vinterdalen.se>
6b27d9ea72
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 128.0.6613.84

Obtained from:	https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html
860ccda68e
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: document buffer overread vulnerability in nginx

CVE-2024-7347
14dc2636e7
Alan Somers (asomers) · 1.1_6
security/vuxml: Correct recent postgresql vulnerability

Commit 0c9ebc9a5f6feb6859c23e2ea875f9d4f59b3e38 added VID
48e6d514-5568-11ef-af48-6cc21735f730 for CVE-2024-7348 , but misspelled
the package names.  Fix the spelling.

Approved by:	lwhsu (ports)
Sponsored by:	Axcient
d24e76ca72
« newest← newerpage 20 of 167older →oldest »