CVE and update status of the FreeBSD ports tree3,610 unaddressed CVEs in 709 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 99e0fd1e6e
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
Depends on
lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,341)

Jason E. Hale (jhale) · 1.1_6
security/vuxml: add qt5-webengine >= 5.15.17.p2_1
49a392816a
Jason E. Hale (jhale) · 1.1_6
security/vuxml: add qt6-webengine < 6.7.2
8344c9064d
Matthias Andree (mandree) · 1.1_6
security/vuxml: document two openvpn < 2.6.11 vulns

Security:	142c538e-b18f-40a1-afac-c479effadd5c
Security:	CVE-2024-5594
Security:	CVE-2024-28882
ab25013a46
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 126.0.6478.114

Obtained from:	https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop_18.html
93db17adf9
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 126.0.6478.54

Obtained from:	https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html
d232b1d05f
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: update nginx 1.26.0 security issues
268e92b4e2
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add www/forgejo vulnerability

CVE-2024-24789
NVD assessment not yet provided

PR: 299781
46213c50d8
Thomas Zander (riggs) · 1.1_6
security/vuxml: Document vulnerability in net/traefik

Details:
- Document Unexpected behavior with IPv4-mapped IPv6 addresses in
  net/traefik before 2.11.4, see:
  https://github.com/traefik/traefik/security/advisories/GHSA-7jmw-8259-q9jx
7b97499d38
Ashish SHUKLA (ashish) · 1.1_6
security/vuxml: Document go language vulnerabilities
5f00830ebf
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gilab vulnerabilities
f45171fd3b
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Document plasma[56]-plasma-workspace vuln
7dd32faead
Guido Falsi (madpilot) · 1.1_6
security/vuxml: Report php composer vulnerabilities.

Obtained from:	https://github.com/composer/composer/security/advisories/GHSA-47f6-5gq3-vx9c
		https://github.com/composer/composer/security/advisories/GHSA-v9qv-c7wm-wgmf
26f8cc466c
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: record kanboard vulnerability

CVE-2024-36399

NVD assessment not yet provided.
ae8b261a09
Hajimu UMEMOTO (ume) · 1.1_6
security/vuxml: add cyrus-imapd* < 3.8.3

Obtained from:	https://www.cyrusimap.org/3.8/imap/download/release-notes/3.8/x/3.8.3.html
87af01cb1e
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 125.0.6422.141

Obtained from:	https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_30.html
3e70f65ff7
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: add www/nginx-devel < 1.27.0

Obtained:	https://nginx.org/en/security_advisories.html
ba05634827
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 125.0.6422.112

Obtained from:	https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_23.html
035f89625b
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document OpenSSL Use-after-free
3c6a99764d
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Fix typo
3af4ae2e66
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron29 use after free in Dawn

Obtained from:	https://github.com/electron/electron/releases/tag/v29.4.1
c70ec49a80
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron28 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v28.3.2
284a7e367c
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Document CVE-2024-36048 for qt[56]-networkauth
1f5a0d033f
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: documented gitlab vulnerabilities
817c86d447
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 125.0.6422.76

Obtained from:	https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_21.html
7cf9cbe6d5
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: openfire admin console bypass

NVD assessment not yet provided.

PR:		277054
c43f42aea2
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document Roundcube XSS
399890025b
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Fix up 54181a8860c8

Reported by:	dbaio
5239b70f17
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Document vulnerabilities in www/qt5-webengine
894bcff030
Carlo Strub (cs) · 1.1_6
security/vuxml: Add arti security issues

Security:	CVE-2024-35313 and CVE-2024-35312
54181a8860
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document OpenSSL 3.x vuln (Low)
601952e6e0
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron29 setuid vulnerability

Obtained from:	https://github.com/electron/electron/releases/tag/v29.4.0
15444b08f4
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Document www/qt6-webengine vulnerabilities
e40c4fb1d0
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Document devel/qt6-base vulnerability
de4a0e2a97
Neel Chauhan (nc) · 1.1_6
dns/dnsdist: update to 1.9.4 (fixes CVE-2024-25581)

PR: 278954
Approved by: submitter is maintainer
9422b76b11
Joseph Mingrone (jrm) · 1.1_6
security/vuxml: Document Intel CPU vulnerabilities

Security:	CVE-2023-45733
Security:	CVE-2023-45745
Security:	CVE-2023-46103
Sponsored by:	The FreeBSD Foundation
6f30f5b325
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 124.0.6367.207

Obtained from:	https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_13.html
8ec1afa520
Ashish SHUKLA (ashish) · 1.1_6
security/vuxml: Document lang/go vulnerability
0181a2e52a
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 124.0.6367.201

Obtained from:	https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html
bf27393264
Palle Girgensohn (girgen) · 1.1_6
security/vuxml: Document vulnerability in postgresql.

CVE-2024-4317: Restrict visibility of "pg_stats_ext" and "pg_stats_ext_exprs"
entries to the table owner

https://www.postgresql.org/support/security/CVE-2024-4317/
de67baaee9
Ashish SHUKLA (ashish) · 1.1_6
security/vuxml: Document tailscale vulnerability
60c830746c
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron29 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v29.3.3
8008c2dbec
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
d005618036
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron29 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v29.3.2
d31af5574d
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 124.0.6367.118

Obtained from:	https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_30.html
2417fd85e5
Joseph Mingrone (jrm) · 1.1_6
security/vuxml: Document ACE vulnerability in math/R

In versions released before 4.4.0, the R statistical program is
vulnerable to CVE-2024-27322, which allows maliciously crafted RDS (R
Data Serialization) files or R packages to run arbitrary code.

Sponsored by:	The FreeBSD Foundation
f237383c60
Thomas Zander (riggs) · 1.1_6
security/vuxml: Document buffer overflow in korean/hcode

Before ko-hcode-2.1.3_2, the port was affected by CVE-2024-34020, where
a buffer overflow can be exploited to (at least) crash the program.
55d99e03b4
Philip Paeps (philip) · 1.1_6
security/vuxml: CVEs affecting www/glpi < 10.0.15

CVE-2024-31456 and CVE-2024-29889 were fixed in GLPI 10.0.15.

PR:		278641
PR:		278642
fc8db0625d
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add powerdns-recursor DOS

* CVE-2024-25583

A crafted response from an upstream server the recursor has been configured to
forward-recurse to can cause a Denial of Service in the Recursor. The default
configuration of the Recursor does not use recursive forwarding and is not
affected.

PR:	278564
9466b58e05
Kai Knoblich (kai) · 1.1_6
security/vuxml: Amend previous commit 3b46eb72e1df

Add a missing paragraph, which was not found by "make validate" before
committing.

Fixes:	3b46eb72e1df security/vuxml: Document www/py-social-auth-app-django vulnerability
c91e00f9e6
Kai Knoblich (kai) · 1.1_6
security/vuxml: Document www/py-social-auth-app-django vulnerability
3b46eb72e1
« newest← newerpage 22 of 167older →oldest »