CVE and update status of the FreeBSD ports tree3,611 unaddressed CVEs in 710 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 99e0fd1e6e
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
Depends on
lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,341)

Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document MariaDB vulnerability
743222a924
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Add www/qt5-webengine

VuXML ID 0da4db89-84bf-11ee-8290-a8a1599412c6 also affects
www/qt5-webengine < 5.15.16.p5
770747ad95
Eugene Grosbein (eugen) · 1.1_6
security/vuxml: document strongSwan vulnerability CVE-2023-41913

Security:	a62c0c50-8aa0-11ee-ac0d-00e0670f2660
Security:	CVE-2023-41913
8c6ee1a1c2
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron use after free in Garbage Collection

Obtained from:	https://github.com/electron/electron/releases/tag/v25.9.6,
		https://github.com/electron/electron/releases/tag/v26.6.1
99b28e67ae
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 119.0.6045.159

Obtained from:	https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_14.html
0060f4500d
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron use after free in WebAudio

Obtained from:	https://github.com/electron/electron/releases/tag/v25.9.5,
		https://github.com/electron/electron/releases/tag/v26.6.0
1c3f198aab
Matthias Andree (mandree) · 1.1_6
security/vuxml: 2.6.0 <= openvpn < 2.6.7 vulnerabilities

Related to:

PR:		275055
Security:	2fe004f5-83fd-11ee-9f5d-31909fb2f495
Security:	CVE-2023-46849
Security:	CVE-2023-46850

This specifically documents < 2.6.7_1 in order to collect the
regression fix for https://github.com/OpenVPN/openvpn/issues/449
which was a bug newly introduced into 2.6.7.
10625d13ea
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Record typo3-1{12} vulnerabilities

PR: 275073 275074
9f2b97cf90
Palle Girgensohn (girgen) · 1.1_6
security/vuxml: add issues for PostgreSQL

https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/
6e7190b6dc
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v25.9.4,
		https://github.com/electron/electron/releases/tag/v26.5.0
2ce5d2837a
Daniel Engberg (diizzy) · 1.1_6
security/vuxml: Document libsndfile vulnerability

https://nvd.nist.gov/vuln/detail/CVE-2022-33065
5ee3418719
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 119.0.6045.123

Obtained from:	https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop.html
8444d9a18c
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document OpenSSL vulnerability
c1abd1ca56
Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SAs released on 2023-11-08

FreeBSD-SA-23:15.stdio affects 12.4 and 13.2
FreeBSD-SA-23:16.cap_net affects 13.2
3c5f96dd32
Christian Weisgerber (naddy) · 1.1_6
security/vuxml: document vorbis-tools vulnerability

PR:		274900
Reported by:	diizzy
3308e62047
Robert Clausecker (fuz) · 1.1_6
security/vuxml: document optipng vulnerability

PR:		274822
Reported by:	Thomas Hurst <tom@hur.st>
058d72efcc
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 119.0.6045.105

Obtained from:	https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.html
f2cd1a1c48
Florian Smeets (flo) · 1.1_6
security/vuxml: add phpmyfaq < 3.2.2
8dbabd04fd
Renato Botelho (garga) · 1.1_6
security/vuxml: Add open-vm-tools vulnerabilities

Sponsored by:	Rubicon Communications, LLC ("Netgate")
22940da863
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: added gitlab vulnerabilities
39b205c80f
Craig Leres (leres) · 1.1_6
security/vuxml: Mark zeek < 6.0.2 as vulnerable as per:

https://github.com/zeek/zeek/releases/tag/v6.0.2

This release fixes the following potential DoS vulnerabilities:

 - A specially-crafted SSL packet could cause Zeek to leak memory
   and potentially crash.

 - A specially-crafted series of FTP packets could cause Zeek to
   log entries for requests that have already been completed, using
   resources unnecessarily and potentially causing Zeek to lose
   other traffic.

 - A specially-crafted series of SSL packets could cause Zeek to
   output a very large number of unnecessary alerts for the same
   record.

 - A specially-crafted series of SSL packets could cause Zeek to
   generate very long ssl_history fields in the ssl.log, potentially
   using a large amount of memory due to unbounded state growth

 - A specially-crafted IEEE802.11 packet could cause Zeek to overflow
   memory and potentially crash

Reported by:	Tim Wojtulewicz
f85e384228
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 118.0.5993.117

Obtained from:	https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_24.html
545cc3c049
Jan Beich (jbeich) · 1.1_6
security/vuxml: mark xorg-server < 21.1.9,1 as vulnerable
b154d924c2
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Register multiple www/squid vulnerabilities

Denial of Service in FTP
	Base Score:	8.6
	Vector:		CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Request/Response smuggling in HTTP/1.1 and ICAP
	Base Score:	9.3
	Vector:		CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

Denial of Service in HTTP Digest Authentication
	Base Score: 9.9
	Vector:		CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H
74de9d47ef
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document OpenSSL vulnerability
c490d55ae9
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document MySQL vulnerabilities
3f3224feea
Mikael Urankar (mikael) · 1.1_6
security/vuxml: security/vuxml: Document www/rt44 and www/rt50 vulnerabilities
c88f964e36
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron use after free in site isolation

Obtained from:	https://github.com/electron/electron/releases/tag/v25.9.2,
	 	https://github.com/electron/electron/releases/tag/v26.4.1
96c2392578
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document Apache httpd vulnerabilities
b17679979a
Robert Clausecker (fuz) · 1.1_6
security/vuxml: add games/moonlight-embedded vulnerability

PR:		274452
Reported by:	Armin Zhu <lisp_25689@163.com>
243a85de69
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Document Jenkins Security Advisory 2023-10-18

Sponsored by:	The FreeBSD Foundation
85d0247840
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document Roundcube vulnerability
3bc2ff2e55
Yasuhiro Kimura (yasu) · 1.1_6
security/vuxml: Document possible bypassing Unix socket permissions in redis
0b85db4c72
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: Document a vulnerability in textproc/libcue

PR:	274413
bef6792d8c
Thomas Zander (riggs) · 1.1_6
security/vuxml: Document HTTP/2 DoS vulnerability in net/traefik
8cab786461
Joseph Mingrone (jrm) · 1.1_6
security/vuxml: Update version range for samba413 vulnerabilities

Security fixes were back-ported from Samba 4.6.11 to samba413-4.13.17_6
in fe495574527e3f97cbb57438f8c468fad8842e9d.

PR:		273595
Sponsored by:	The FreeBSD Foundation
7494968ff8
Emmanuel Vadot (manu) · 1.1_6
security/vuxml: Document libXpm recent CVEs

PR:	274266
93b4cdd20b
Emmanuel Vadot (manu) · 1.1_6
security/vuxml: Document libX11 recent CVEs

PR:	274266
e7ca9d32f9
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 118.0.5993.70

Obtained from:	https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_10.html
2ddb8a80b1
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron25 use after free in extensions

Obtained from:	https://github.com/electron/electron/releases/tag/v25.9.1
12ea8741d3
Po-Chuan Hsieh (sunpoet) · 1.1_6
security/vuxml: Fix bca498407bf9e529936ebb68e9ca257bdd1428de

The pkg audit result before the fix:
curl-8.4.0 is vulnerable:
  curl -- SOCKS5 heap buffer overflow
  CVE: CVE-2023-38545
  WWW: https://vuxml.FreeBSD.org/freebsd/d6c19e8c-6806-11ee-9464-b42e991fc52e.html

1 problem(s) in 1 installed package(s) found.
c06e206dff
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix description body

Keep the original description body for "make newentry" without parameters.
27b1250d59
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: register ftp/curl heap buffer overflow

Severity: High
CVE-2023-38545 reserved:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545
bca498407b
Dave Cottlehuber (dch) · 1.1_6
security/vuxml: add h2o-devel vuln details

Security:	CVE-2023-44487
Sponsored by:	SkunkWerks, GmbH
e247a75c54
Wen Heping (wen) · 1.1_6
security/vuxml: Document Django multiple vulnerabilities
ecb3f8a491
Kurt Jaeger (pi) · 1.1_6
security/vuxml: add entry for recent libspf2 CVE-2023-42118

PR:	274215
3c178fb0a6
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 117.0.5938.149

Obtained from:	https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop.html
199a6d39f1
Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SAs released on 2023-10-03

FreeBSD-SA-23:12.msdosfs affects 12.4 and 13.2
FreeBSD-SA-23:13.capsicum affects 13.2
FreeBSD-SA-23:14.smccc affects 13.2
f9be46acb2
Philip Paeps (philip) · 1.1_6
security/vuxml: fix validation errors

Fix whitespace errors in vid 6e0ebb4a-5e75-11ee-a365-001b217b3468
introduced by commit 36a838e202256d5a528abfc8ff6a66ca7ce4d148.
433216ab05
Wen Heping (wen) · 1.1_6
security/vuxml: Document mediawiki multiple vulnerabilities
d6503d5a5a
« newest← newerpage 26 of 167older →oldest »