CVE and update status of the FreeBSD ports tree3,614 unaddressed CVEs in 711 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 99e0fd1e6e
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 5

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,341)

Cy Schubert (cy) · 1.1_6
security/vuxml: Document MIT krb5 CVE-2023-39975
cf9152850c
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Fix vid entry b1ac663f-3aa9-11ee-b887-b42e991fc52e

Sponsored by:	The FreeBSD Foundation
208750bb66
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: add typo3 vulnerabilities

https://typo3.org/article/typo3-1244-and-11530-security-releases-published

CVE-2023-38500	Vector:	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVE-2023-38499	Vector:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVE-2023-37905	Vector:	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

PR:	273128
cc6eb206e5
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron22 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v22.3.20
983b1c854c
Palle Girgensohn (girgen) · 1.1_6
security/vuxml: Add CVEs for PostgreSQL
ef15f677b7
Cy Schubert (cy) · 1.1_6
security/vuxml: Correct krb5-devel version string

An incorrect version string flags all krb5-devel as being vulnerable.
1cf314b9d4
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v23.3.12,
		https://github.com/electron/electron/releases/tag/v24.7.0,
		https://github.com/electron/electron/releases/tag/v25.4.0
4def9ef9f0
Yasuhiro Kimura (yasu) · 1.1_6
security/vuxml: Document multiple vulnerabilities in Samba

PR:		272638
3f30fc05f4
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 115.0.5790.170

Obtained from:	https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop.html
657cb1fee2
Dmitri Goutnik (dmgk) · 1.1_6
security/vuxml: Document Go vulnerabilities
3062adea71
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
e79188cc5e
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Fix versions in previous commit
11cb88e30b
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document OpenSSL vulnerability (Low)

Security:	CVE-2023-3817
cfe8866fbe
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Document Jenkins Security Advisory 2023-07-26

Sponsored by:	The FreeBSD Foundation
3d4513ad2c
Nuno Teixeira (eduardo) · 1.1_6
security/vuxml: Document www/gitea vulnerability

PR:		272672
Security:	ab0bab3c-2927-11ee-8608-07b8d3947721
91fd6b55ab
Bryan Drewery (bdrewery) · 1.1_6
security/vuxml: Add entry for OpenSSH CVE-2023-38408
22e2030b6e
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 115.0.5790.98

Approved by:	rene (mentor, implicit)
Obtained from:	https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html
2ef79dee3d
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Document vulnerabilities in emulators/virtualbox-ose*

ChangeLog: https://www.oracle.com/security-alerts/

PR:		271141
Reported by:	grahamperrin@freebsd.org
7be06437cf
Ashish SHUKLA (ashish) · 1.1_6
security/vuxml: Document www/element-web vulnerability

Security:	CVE-2023-37259
Security:	c70c3dc3-258c-11ee-b37b-901b0e9408dc
1ddd4b5092
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: record www/gitea vulnerabilities

* Test if container blob is accessible before mounting
 * Set type="password" on all auth_token fields

PR:	272538
878a79c79f
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document OpenSSL 3.x vuln
0d5cbaaa31
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron22 multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v22.3.17
c556b8a8d5
Jason E. Hale (jhale) · 1.1_6
security/vuxml: cad/librecad < 2.2.0.1 OOB read

Security:	CVE-2023-30259
Security:	b67d768c-1f53-11ee-82ed-4ccc6adda413
66c5a2ae1b
Yasuhiro Kimura (yasu) · 1.1_6
security/vuxml: Document multiple vulnerabilities in redis
1d28f4000a
Po-Chuan Hsieh (sunpoet) · 1.1_6
security/vuxml: Fix py-suds entry (b31f7029-817c-4c1f-b7d3-252de5283393)

PR:		272346
Reported by:	David M. <root@network-dev.org>
Reference:	https://github.com/suds-community/suds/issues/94
		https://github.com/advisories/GHSA-vpqp-hx68-p2wx
5097c65598
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: update www/gitea vulnerability

Avoid open HTTP redirects.

PR:	272380
abe49b255f
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v23.3.10,
		https://github.com/electron/electron/releases/tag/v24.6.2
8568f681bf
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerability
645e444123
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: add net/phpldapamin XSS vulnerability

An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows
users to store malicious values that may be executed by other users at a later
time via get_request in lib/function.php.

CVE-2021-35132 with Base Score 7.8 (HIGH).
32f51190e3
Wen Heping (wen) · 1.1_6
security/vuxml: Document Django multiple vulnerabilities
15f41951d1
Wen Heping (wen) · 1.1_6
security/vuxml: Document mediawiki multiple vulnerabilities
8bebd5de23
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
c813008e34
Koichiro Iwao (meta) · 1.1_6
security/vuxml: Document security/softether{,-devel} vulnerability

Security:	https://www.softether.org/9-about/News/904-SEVPN202301
5b6bc4cfbe
Matthias Andree (mandree) · 1.1_6
security/vuxml: document openexr dwa out-of-bounds read

OSS-Fuzz 59382

Security:	06428d91-152e-11ee-8b14-dbdd62da85fb
e0d54fd9fa
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 114.0.5735.198

Approved by:	rene (mentor, implicit)
Obtained from:	https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop_26.html
9b5d668ef2
Nuno Teixeira (eduardo) · 1.1_6
security/vuxml: Add www/grafana{8,9} vulnerabilities

* CVE-2023-3128 - Account takeover / authentication bypass
( https://grafana.com/security/security-advisories/cve-2023-3128 )

PR:		272161
60127f6f40
Eugene Grosbein (eugen) · 1.1_6
security/vuxml: another correction for devel/py-setuptools*

This time is covers two other records additionally.

Reported-by:	leres
11842bbbd9
Eugene Grosbein (eugen) · 1.1_6
security/vuxml: correct range after previous commit for py39-setuptools

Fixes:	a3d611120fccf3b51b3dc62ec9246588e7d7a8ac
6a95bd16a4
Eugene Grosbein (eugen) · 1.1_6
devel/py-setuptools{44,58}: fix CVE-2022-40897 backporting a patch

Follow recent commit to devel/py-setuptools and fix old versions same way.

Reported-by:	vishwin
a3d611120f
Eugene Grosbein (eugen) · 1.1_6
devel/py-setuptools: fix CVE-2022-40897 backporting a patch

This commit integrates one-line upstream fix for the problem:
https://github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be.diff

Our port has not been fixed for several months making users unhappy.
It's upto the maintainer to update the port, this commit does not update it.

Bump PORTREVISION and adjust VuXML entry.
Due to the nature of the problem and fix there is no need in updating consumers.
3dda704910
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v22.3.14,
		https://github.com/electron/electron/releases/tag/v23.3.8,
		https://github.com/electron/electron/releases/tag/v24.6.0
3d21c0a37a
Jan Beich (jbeich) · 1.1_6
security/vuxml: mark libX11 < 1.8.6 as vulnerable

PR:		263190
Reported by:	lwhsu
9476f01c8b
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document electron multiple vulnerabilities

Obtained from:	https://github.com/electron/electron/releases/tag/v22.3.13,
	 	https://github.com/electron/electron/releases/tag/v23.3.7,
	 	https://github.com/electron/electron/releases/tag/v24.5.1
8c5ca229dc
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Document Jenkins Security Advisory 2023-06-14

Sponsored by:	The FreeBSD Foundation
ae897776cf
Hiroki Tagato (tagattie) · 1.1_6
security/vuxml: document vscode information disclosure vulnerability

Obtained from:	https://github.com/microsoft/vscode/security/advisories/GHSA-j5wm-6crw-xvmr
e82648cefb
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 114.0.5735.133

Approved by:	rene (mentor, implicit)
Obtained from:	https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop_13.html
1f5814bef5
Palle Girgensohn (girgen) · 1.1_6
security/vuxml: add devel/xmltooling vulnerability
5559dc4679
Dan Langille (dvl) · 1.1_6
security/vuxml: add security/acme.sh vuln

I didn't find a CVE.

https://github.com/acmesh-official/acme.sh/issues/4659
6430f908f7
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add www/grafana{8,9} vulnerabilities

* CVE-2023-2183: with Base Score 4.1 (MEDIUM)
* CVE-2023-2801: with Base Score 7.5 (HIGH)

PR:		271893
Reported by:	Boris Korzun <drtr0jan@yandex.ru>
78a5f3b644
Wen Heping (wen) · 1.1_6
security/vuxml: Document python's multiple vulnerabilities
1e13346341
« newest← newerpage 28 of 167older →oldest »