CVE and update status of the FreeBSD ports tree3,611 unaddressed CVEs in 710 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 99e0fd1e6e
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
Depends on
lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,341)

Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document Unbound vulnerability
9d09574f1d
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron{27,28} vulnerability in libxml2

Obtained from:	https://github.com/electron/electron/releases/tag/v27.3.5,
		https://github.com/electron/electron/releases/tag/v28.2.6
cfa05dada9
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
07a729f640
Ashish SHUKLA (ashish) · 1.1_6
security/vuxml: Document lang/go* vulnerabilities

Security:	CVE-2023-45289
Security:	CVE-2023-45290
Security:	CVE-2024-24783
Security:	CVE-2024-24784
Security:	CVE-2024-24785
9e8cf22b62
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 122.0.6261.111

Obtained from:	https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop.html
7367b65398
Wen Heping (wen) · 1.1_6
security/vuxml: Document Django multiple vulnerabilities
589bb98372
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document nodejs vulnerabilities
44e2fbfdc3
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron{27,28} use after free in Mojo

Obtained from:	https://github.com/electron/electron/releases/tag/v27.3.4,
		https://github.com/electron/electron/releases/tag/v28.2.5
ad1b605dd2
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 122.0.6261.94

Obtained from:	https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_27.html
8b4e2296cc
Neel Chauhan (nc) · 1.1_6
net/routinator: Update to 0.13.2

Changes: 	https://nlnetlabs.nl/news/2024/Feb/26/routinator-0.13.2-released/
MFH:		2024Q1
PR:		277375
beca8ec1ad
Yasuhiro Kimura (yasu) · 1.1_6
security/vuxml: Document OCSP verification bypass vulnerability in curl

PR:		276879
16f370e33f
Nuno Teixeira (eduardo) · 1.1_6
security/vuxml: Document www/gitea vulnerabilities

PR:		277275
f8bb4184bb
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 122.0.6261.57

Obtained from:  https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html
1096137631
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Document CVE-2023-6152 for www/grafana*

PR:		277184
5f96aab981
Rodrigo Osorio (rodrigo) · 1.1_6
security/vuxml: Record dns/c-ares vulnerability
10eebcc6ae
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Record security/suricata multiple vulnerabilities

No details for this CVEs yet.

CVE-2024-23839 – Critical severity
CVE-2024-23836 – Critical severity
CVE-2024-23835 – High severity
CVE-2024-24568 – Moderate severity
CVE-2024-23837 – Critical severity

PR:	277025
Reported by:	franco@opnsense.org
MFH:		2024Q1 (security fixes)
2f82539eed
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron27 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v27.3.3
6669db647d
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
ef32fd74ae
Ryan Steinmetz (zi) · 1.1_6
security/vuxml: Add lower bound on new www/nginx-devel vuln
cf6eea5ac1
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: document dns/powerdns-recursor vulnerabilities

* CVE-2023-50387
* CVE-2023-50868

PR:		277048
Reported by:	Ralf van der Enden <tremere@cainites.net>
639716da93
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: document www/gitea vulnerability

Prevent anonymous container access if RequireSignInView is enabled

PR:	277066
41926dd0b3
Ryan Steinmetz (zi) · 1.1_6
security/vuxml: Document www/nginx-devel vulns: CVE-2024-24989, CVE-2024-24990
49a20d12b7
Gabriel M. Dutra (dutra) · 1.1_6
security/vuxml: Add sysutils/eza vulnerability

Include eza port in the Libgit2 entry.

Approved by:	dbaio (mentor), garga (mentor)
Differential Revision:	https://reviews.freebsd.org/D43868
324cdec765
Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SAs released on 2024-02-14

FreeBSD-SA-24:01.bhyveload affects all supported releases of FreeBSD.
FreeBSD-SA-24:02.tty affects all supported releases of FreeBSD.
b6e1db0fc4
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 121.0.6167.184

Obtained from:	https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_13.html
75ebe36cec
Matthias Andree (mandree) · 1.1_6
security/vuxml: document dnssec validating resolver DoS vuln...

for Bind9, dnsmasq, PowerDNS, Unbound.

Security:	21a854cc-cac1-11ee-b7a7-353f1e043d9a
Security:	CVE-2023-50387
Security:	CVE-2023-50868
58e048cad6
Florian Smeets (flo) · 1.1_6
security/vuxml: add phpmyfaq < 3.2.5
b3506d6b82
Matthias Andree (mandree) · 1.1_6
security/vuxml: fix NS tag on body of Gitlab vuln entry

This fixes a vxquery warning (line number may vary):

| Parsing failed @ line 4442:
| Expected element in XHTML namespace.

Security:	6e0ebb4a-5e75-11ee-a365-001b217b3468
424fb6c301
Matthias Andree (mandree) · 1.1_6
security/vuxml: Add openexr<3.2.2 (<3.1.12) heap overflow

Security:	CVE-2023-5841
Security:	f161a5ad-c9bd-11ee-b7a7-353f1e043d9a
4d04c19b89
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Document vulnerability in readstat
221e9b7667
Rodrigo Osorio (rodrigo) · 1.1_6
security/vuxml: add vulnerability for p5-Spreadsheet-ParseExcel

https://nvd.nist.gov/vuln/detail/CVE-2023-7101
425c2f9bd7
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Add qt[56]-webengine

qt5-webengine and qt6-webengine are also vulnerable to:
dc9e5237-c197-11ee-86bb-a8a1599412c6
19047673-c680-11ee-86bb-a8a1599412c6

qt5-webengine is also vulnerable to:
bbcb1584-c068-11ee-bdd6-4ccc6adda413
d3727f2516
Baptiste Daroussin (bapt) · 1.1_6
vuxml: fix cve name for postgres

This was breaking the build of the vuxml website
9d3d5fcf01
Palle Girgensohn (girgen) · 1.1_6
security/vuxml: add issue for PostgreSQL

https://www.postgresql.org/support/security/CVE-2024-0985/
22c09215c0
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
90fd8b9cbc
Guido Falsi (madpilot) · 1.1_6
security/vuxml: Add new php-composer vulnerability.
b3fafb5cba
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document a libgit2 vulnerability
3edae19a1b
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 121.0.6167.160

Obtained from:	https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop.html
a0f9b56945
Yasuhiro Kimura (yasu) · 1.1_6
security/vuxml: Document multiple vulnerabilities in clamav
22073304c7
Wen Heping (wen) · 1.1_6
security/vuxml: Document django multiple vulnerabilities
1333f1ec3d
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 121.0.6167.{85,139}

Obtained from:	https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html
Obtained from:	https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_30.html
45c3209d2b
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron{26,27,28} use after free in Web Audio

Obtained from:	https://github.com/electron/electron/releases/tag/v26.6.8,
		https://github.com/electron/electron/releases/tag/v27.3.1,
		https://github.com/electron/electron/releases/tag/v28.2.1
7b6b3c330a
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Document qt6-webengine vulnerabilities
281b755983
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Register OpenSSL vulnerabilities
3a77db540f
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document lizard memory corruption

Obtained from:	https://nvd.nist.gov/vuln/detail/CVE-2018-11498
145041b730
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Document qt(5|6)-webengine vulnerabilities
72702c707b
Cy Schubert (cy) · 1.1_6
security/vuxml: Fix krb5-devel version number
734ecfaad4
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: document rclone vulnerabilities

CVE-2023-48795:	Base Score:  5.9 MEDIUM
		Vector:  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CVE-2023-45286:	Base Score:  5.9 MEDIUM
		Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

PR:	276515
0401fcc4c4
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
708f3b2e6d
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Document Jenkins Security Advisory 2024-01-24

Sponsored by:	The FreeBSD Foundation
358e7e288b
« newest← newerpage 24 of 167older →oldest »