CVE and update status of the FreeBSD ports tree3,317 unaddressed CVEs in 678 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 99e0fd1e6e
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
Depends on
lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,341)

Nicola Vitale (nivit) · 1.1_6
security/vuxml: Add devel/py-Jinja2 <= 3.1.3

Reference:	https://github.com/advisories/GHSA-h75v-3vvj-5mfj

PR:		279350
cab7616c17
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Record firefox spoofing vulnerability

CVE-2024-7518

 * Base Score:	6.5 MEDIUM
 * Vector:	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
45ab0e1eb0
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron31 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v31.4.0
a4a193c51b
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron{29,30} multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v29.4.6,
	 	https://github.com/electron/electron/releases/tag/v30.4.0
9434bcc75f
Alexander Leidinger (netchild) · 1.1_6
security/vuxml: Add an antry for dovecot.
c81b36005c
Joseph Mingrone (jrm) · 1.1_6
security/vuxml: Document Intel CPU vulnerabilities

Security:	CVE-2024-24853
Security:	CVE-2024-25939
Security:	CVE-2024-24980
Security:	CVE-2023-42667
Security:	CVE-2023-49141
Sponsored by:	The FreeBSD Foundation
7c5ead6bb4
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Register firefox vulnerabilities

CVE-2024-7527
CVE-2024-7528
CVE-2024-7530
CVE-2024-7521
CVE-2024-7520
CVE-2024-7522
CVE-2024-7525
CVE-2024-7529
CVE-2024-7531
ad193401a1
Alexander Leidinger (netchild) · 1.1_6
misc/openhab: update to 4.2.1

This is mainly for security fixes in the CometVisu plugin.
94def2b580
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document vaultwarden vulnerabilities
3ecad34586
Joseph Mingrone (jrm) · 1.1_6
security/vuxml: Document AMD CPU vulnerabilities

Security:	CVE-2023-31315
Sponsored by:	The FreeBSD Foundation
d72a8184c7
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document Roundcube 1.6.7 vulns
14152bd8f4
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add firefox CVE

By monitoring the time certain operations take, an attacker could have guessed
which external protocol handlers were functional on a user's system.
d229892deb
Ashish SHUKLA (ashish) · 1.1_6
security/vuxml: Document soft-serve vulnerability
932245df1a
Palle Girgensohn (girgen) · 1.1_6
security/vuxml: Document vulnerability in postgresql
0c9ebc9a5f
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Document Jenkins Security Advisory 2024-08-07

Sponsored by:	The FreeBSD Foundation
9fc0530113
Joe Marcus Clarke (marcus) · 1.1_6
security/vuxml: Correct mysql81-server typo

This was bothering me why mysql80-server 8.0.39 was being reported as
vulnerable when anything above 8.0.38 should be fine.  It wasn't until I
looked at the VuXML webpage that I saw mysql81-server had a typo calling
it mysql80-server.
856a61a3f1
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
15df20b90d
Wen Heping (wen) · 1.1_6
security/vuxml: Document Django's multiple vulnerabilities
8fc84d6588
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 127.0.6533.99

Obtained from:	https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop.html
5319b54a9e
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 127.0.6533.88

Obtained from:	https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_30.html
81352f435d
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 127.0.6533.72

Obtained from:	https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html
dfcb6a2bd8
Zsolt Udvari (uzsolt) · 1.1_6
security/vuxml: document glpi vulnerability

PR:		280313
ce3e9bc7ca
Danilo G. Baio (dbaio) · 1.1_6
security/vuxml: Add irc/znc security issue

PR:		280477
Reported by:	John R <gamer@ryppn.com>
db5b658b32
Guido Falsi (madpilot) · 1.1_6
security/vuxml: Document mailpit vulnerability
188e8f96ab
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
0a2c367c22
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron29 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v29.4.5
ce84c5afb8
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document Apache httpd vulnerability
14c4e37cf2
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document MySQL vulnerabilities

* At the time of writing the CVE numbers had not been published
f073a58b1f
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron30 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v30.2.0
131d27eead
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron29 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v29.4.4
8e43cddfb3
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
ec5034b75d
Wen Heping (wen) · 1.1_6
security/vuxml: Django multiple vulnerabilities
43917e9565
Thomas Zander (riggs) · 1.1_6
security/vuxml: Document vulnerability in net/traefik

Documenting CVE-2024-39321 in net/traefik: There is a vulnerability in
Traefik that allows bypassing IP allow-lists via HTTP/3 early data
requests in QUIC 0-RTT handshakes sent with spoofed IP addresses.
265464b9c0
Bernard Spil (brnrd) · 1.1_6
securty/vuxml: Document Apache httpd 2.4.60 vulnerability
48122ea745
Philip Paeps (philip) · 1.1_6
security/vuxml: document www/rt50 vulnerability

Obtained from:	https://github.com/bestpractical/rt/releases/tag/rt-5.0.6
Reported by:	Dan Mahoney <dmahoney@isc.org>
7ef5fde868
Ashish SHUKLA (ashish) · 1.1_6
security/vuxml: Document Go vulnerability

Security:	CVE-2024-24791
a2efe54fd6
Po-Chuan Hsieh (sunpoet) · 1.1_6
security/vuxml: Fix 66a620a734b489596452f342224330207c6e23b1 and b4f09ace0fb2a43504a5d63501ddf3503a67da76

% pkg audit -F
openssh-portable-9.7.p1_2,1 is vulnerable:
  OpenSSH -- Race condition resulting in potential remote code execution
  CVE: CVE-2024-6387
  WWW: https://vuxml.FreeBSD.org/freebsd/f1a00122-3797-11ef-b611-84a93843eb75.html

1 problem(s) in 1 installed package(s) found.
20096671ac
Bryan Drewery (bdrewery) · 1.1_6
security/vuxml: Fix range for OpenSSH vuln.

Security:	f1a00122-3797-11ef-b611-84a93843eb75
b4f09ace0f
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document Apache httpd vulnerabilities
5df2bb5b0f
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document OpenSSH vulnerability
66a620a734
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: add net/netatalk3 vulnerabilities

* CVE-2024-38439
 * CVE-2024-38440
 * CVE-2024-38441

 NVD assessments not yet provided.

PR:		280046
Reported by:	Dutchman01 <dutchman01@quicknet.nl>
c999b14763
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix entry

Fix tab/spaces as reported by "make validate".

Fixes:	3af96db033a5f519e222932ecc0ddbdbba4b87a8
551a2ffda9
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron29 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v29.4.3
a2509376b0
Olivier Cochard (olivier) · 1.1_6
security/vuxml: Fix bad copy/past in latest frr entry
57f752e585
Olivier Cochard (olivier) · 1.1_6
security/vuxml: document frr vulnerabilities
3af96db033
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
1dae53187b
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 126.0.6478.126

Obtained from:	https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop_24.html
f8f0bd95db
Joseph Mingrone (jrm) · 1.1_6
security/vuxml: Update Emacs arbitrary shell code vulnerability entry

- Tweak title
- Add vulnerable emacs-devel packages

Sponsored by:	The FreeBSD Foundation
bdd09407a0
Joseph Mingrone (jrm) · 1.1_6
security/vuxml: Document Emacs arbitrary shell code evaluation

Emacs 29.4 is an emergency bugfix release intended to fix a security
vulnerability.  Arbitrary shell commands are no longer run when turning
on Org mode in order to avoid running malicious code.

Reviewed by:	ashish, yasu
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D45702
3c06e8a44b
Thomas Zander (riggs) · 1.1_6
security/vuxml: Document Azure Identity Libraries vuln in net/traefik
390e032961
« newest← newerpage 21 of 167older →oldest »