security/vuxml: Document python39 multiple vulnerabilitiesf47439e258
Port details
security/vuxml 1.1_6
Vulnerability and eXposure Markup Language DTD
Port info
- Maintainer
- ports-secteam@FreeBSD.org
- Packages
- latest: 1.1_6
- Upstream
- up to date
- Last update
- to 1.1_6 · 99e0fd1e6e
- Quarterly
- 2026Q4: 1.1_6
- WWW
- https://vuxml.freebsd.org/
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install vuxmlinstalls 1.1_6 fromlatest; fromquarterly(2026Q4) 1.1_6- Port
# cd /usr/ports/security/vuxml && make install clean- Size
- 9.7 KiB download · 40 KiB installed
- License
- BSD2CLAUSE
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.1_6 | 1.1_6 | – |
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Dependencies
Depends on 5
- lang/python312 3.12.15 12 unaddressed
- textproc/libxslt 1.1.45
- textproc/xhtml-basic 1.0.20001219_2
- textproc/xhtml-modularization 1.0.20010410_1
- textproc/xmlcatmgr 2.2_4
Run and library dependencies of the package on latest. Build dependencies are not in the package index.
Required by 0
No package on latest depends on it.
Packages on latest that depend on it directly.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 1.1_6.Fixed (0)
No VuXML entries for this package.
Problem reports (5) · open in Bugzilla, most recently changed first
| PR | Summary | Status | Changed |
|---|---|---|---|
| 295797 | maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256 | In Progress | 2026-07-17 |
| 295836 | maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django | New | 2026-06-04 |
| 291717 | security/vuxml: add entry for uriparser < 1.0.0 | New | 2025-12-16 |
| 288090 | maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2 | New | 2025-07-08 |
| 270795 | security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries | In Progress | 2025-07-01 |
Commits (8,341)
security/vuxml: fix range Reported by: rene4df3725f5a
security/vuxml: add www/chromium < 93.0.4577.63 Obtained from: https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.htmld14afe74fa
security/vuxml: Document cyrus-imapd vulnerability.e15f422dd6
security/vuxml: Document gitlab vulnerabilities3e9e0373d4
security/vuxml: document fetchmail TLS vulns URL: https://www.fetchmail.info/fetchmail-SA-2021-02.txt Security: CVE-2021-39272 Security: 1d6410e8-06c1-11ec-a35d-03ca114d16d6c5670115ba
security/vuxml: add FreeBSD SA-21:17.openssl Reference FreeBSD SA-21:17.openssl in the 16 February 2021 OpenSSL entry and note the fixed patch releases.f937bef396
security/vuxml: add FreeBSD SA-21:16.openssl Reference FreeBSD SA-21:16.openssl in the 24 August 2021 OpenSSL entry and note the fixed patch releases.b3d2ea9f92
security/vuxml: add FreeBSD SA-21:15.libfetchb9c92c0d05
security/vuxml: add FreeBSD SA-21:14.ggatec9d7f0b3ad8
security/vuxml: add FreeBSD SA-21:13.bhyve7f941a9b88
security/vuxml: Fix openssl-devel version707b576b84
security/vuxml: Document OpenSSL vulnerabilities56b6825a17
vuxml: Add entry for gitea < 1.15.0 PR: 2579945557d0cea1
vuxml: Add entry for gitea < 1.14.6e8c2081891
security/vuxml: Document vulnerabilities in java/bouncycastle15 MFH: 2021Q3 Sponsored by: Modirum MDPay Sponsored by: Klara, Inc.c03169b92e
security/vuxml: Excessive memory consumption vulnerability in binutils Fixed in main a0e752df8013 and in 2021Q3 in 9c4ee12. PR: 256133 Reviewed by: fluffy@, koobs@ Security: CVE-2021-34872a99b5e684
security/vuxml: add www/chromium < 92.0.4515.159 Obtained from: https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.htmledc64acb15
security/vuxml: Update release number for fixed lynx vulnerability Security: e9200f8e-fd34-11eb-afb1-c85b76ce9b5a2950800c21
security/vuxml: Document credential leakage vulnerability Security: e9200f8e-fd34-11eb-afb1-c85b76ce9b5abbbc5396ce
security/vuxml: postgresql??-server vuln CVE-2021-36777cc11a5f1c
security/vuxml: document xtrlock CVE-2016-1089496369e83b3
security/vuxml: Document x11/cde local privilege escalation Security: CVE-2020-2696, VU#308289ea46c60b62
security/vuxml: Document lang/go vulnerability55557952f3
security/vuxml: Security vulnerabilities for gitlab-cef6761022ee
security/vuxml: Mark MariaDB vulnerable7583b9a0d9
security/vuxml: Add net-im/prosody CVE-2021-37601 PR: 257597bfc6a3ee04
security/vuxml: update fetchmail CVE-2021-36386 vuln this vuln was a reintroduction of CVE-2008-2711 which got fixed in fetchmail 6.3.9, when 6.3.17 refactored code. - restrict range (>= 6.3.9 < 6.3.17 unaffected) - add reference to old CVE-2008-2711 URL: https://www.fetchmail.info/fetchmail-SA-2021-01.txt Security: cbfd1874-efea-11eb-8fe9-036bd763ff35 Security: CVE-2021-36386 Security: CVE-2008-2711b956528b42
security/vuxml: add www/chromium < 92.0.4515.131 Obtained from: https://chromereleases.googleblog.com/search/label/Stable%20updates0f1e5bf445
security/vuxml: document net/rabbitmq CVE-2021-22116 https://tanzu.vmware.com/security/cve-2021-2211627cdbd277c
security/vuxml: document tomcat CVE-2021-33037 PR: 257153515969d6d6
security/vuxml: document tomcat CVE-2021-30640 PR: 2571539c1924450f
security/vuxml: correct tomcat package name/versions PR: 257153 Fixes: 9462edd84baf63c4db72a0
security/vuxml: document tomcat CVE-2021-30639 PR: 2571539462edd84b
security/vuxml: add fetchmail < 6.4.20 vuln Security: cbfd1874-efea-11eb-8fe9-036bd763ff35 Security: CVE-2021-36386b913df304c
security/vuxml: Document integer overflow vulnerability in redis PR: 257325b40cccda54
security/vuxml: Document dns/powerdns CVE-2021-36754 PR: 25743591a5f545e1
security/vuxml: Mark mosquitto >= 2.0.0, < 2.0.10 vulnerable as per: https://github.com/eclipse/mosquitto/blob/d5ecd9f5aa98d42e7549eea09a71a23eef241f31/ChangeLog.txt - If an authenticated client connected with MQTT v5 sent a malformed CONNACK message to the broker a NULL pointer dereference occurred, most likely resulting in a segfault. PR: 255229 Reported by: Daniel Engberg5baee87529
security/vuxml: Document new pjsip vulnerability651d4068e0
security/vuxml: Document new asterisk vulnerabilitiese7ba102c4b
security/vuxml: document Chromium < 92.0.4515.107532b411520
security/vuxml: fix `make validate'4c7dacf67b
security/vuxml: Document cURL 7.77.0 vulnerabilitiesef33c559ba
security/vuxml: Document MySQL vulnerabilities Jul20210e38a69358
security/vuxml: Document vulnerabilities in www/gitea PR: 257221 Approved by: lwhsu (mentor)eeb94ec5a2
security/vuxml: Fix make validate after 069e58611c7933431ec82b0b9c119677e8d6cc21 Reported by: lwhsu Approved by: delphij (ports-secteam)88c66b779e
security/vuxml: document chromium < 91.0.4472.164 Obtained from: https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.htmla9bfed5dc7
security/vuxml: Document ruby vulnerability743e73b183
security/vuxml: Fix make test - Respect VUXML_FILE and VUXML_FLAT_FILE [1] It allows run "make test" on read-only media (e.g. poudriere jail) - Copy all vuln XML file to the test directory [2] Since vuln.xml has been split into multiple XML files, all of them must be copied to the test directory. Without [1], the error message is as follows: ===> Testing for vuxml-1.1_5 xmllint -noent vuln.xml > vuln-flat.xml /bin/sh: cannot create vuln-flat.xml: Read-only file system *** Error code 2 Stop. Without [2], the error message is as follows: ===> Testing for vuxml-1.1_5 xmllint -noent /wrkdirs/usr/ports/security/vuxml/work/test/vuln.xml > /wrkdirs/usr/ports/security/vuxml/work/test/vuln-flat.xml warning: failed to load external entity "/wrkdirs/usr/ports/security/vuxml/work/test/vuln-2021.xml" warning: failed to load external entity "/wrkdirs/usr/ports/security/vuxml/work/test/vuln-2020.xml" warning: failed to load external entity "/wrkdirs/usr/ports/security/vuxml/work/test/vuln-2019.xml" warning: failed to load external entity "/wrkdirs/usr/ports/security/vuxml/work/test/vuln-2018.xml" warning: failed to load external entity "/wrkdirs/usr/ports/security/vuxml/work/test/vuln-2017.xml" warning: failed to load external entity "/wrkdirs/usr/ports/security/vuxml/work/test/vuln-2016.xml" warning: failed to load external entity "/wrkdirs/usr/ports/security/vuxml/work/test/vuln-2015.xml" warning: failed to load external entity "/wrkdirs/usr/ports/security/vuxml/work/test/vuln-2014.xml" warning: failed to load external entity "/wrkdirs/usr/ports/security/vuxml/work/test/vuln-2013.xml" warning: failed to load external entity "/wrkdirs/usr/ports/security/vuxml/work/test/vuln-2012.xml" warning: failed to load external entity "/wrkdirs/usr/ports/security/vuxml/work/test/vuln-2011.xml" warning: failed to load external entity "/wrkdirs/usr/ports/security/vuxml/work/test/vuln-2010.xml" warning: failed to load external entity "/wrkdirs/usr/ports/security/vuxml/work/test/vuln-2009.xml" warning: failed to load external entity "/wrkdirs/usr/ports/security/vuxml/work/test/vuln-2008.xml" warning: failed to load external entity "/wrkdirs/usr/ports/security/vuxml/work/test/vuln-2007.xml" warning: failed to load external entity "/wrkdirs/usr/ports/security/vuxml/work/test/vuln-2006.xml" warning: failed to load external entity "/wrkdirs/usr/ports/security/vuxml/work/test/vuln-2005.xml" warning: failed to load external entity "/wrkdirs/usr/ports/security/vuxml/work/test/vuln-2004.xml" warning: failed to load external entity "/wrkdirs/usr/ports/security/vuxml/work/test/vuln-2003.xml" ... *** Error code 1 Stop. Approved by: delphij (ports-secteam)069e58611c
security/vuxml: Document lang/go vulnerabilityea4ec27ac9