CVE and update status of the FreeBSD ports tree3,310 unaddressed CVEs in 678 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 7b95a2eac4
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
Depends on
lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,339)

Piotr Smyrak (smyru) · 1.1_6
security/vuxml: document ffmpeg vulnerability

Approved by:	0mp (mentor)
Approved by:	fernape
Security:	CVE-2026-8461
Differential Revision:	https://reviews.freebsd.org/D57843
28d0364bc5
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
a9385cb337
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document go-git vulnerability
75c4d74e18
Yusuf Yaman (nxjoseph) · 1.1_6
security/vuxml: Document dns/{ldns,py-ldns} vulnerability

PR:		296232
Approved by:	osa, vvd (Mentors, implicit)
Security:	CVE-2026-10846
7f52e258f9
Dave Cottlehuber (dch) · 1.1_6
security/vuxml: Document podman vulnerability

Reviewed by:	dfr
Sponsored by:  SkunkWerks, GmbH
Differential Revision:	https://reviews.freebsd.org/D57736
42d4814aae
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Fix month error on latest MariaDB entry
1326b4fc12
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Unbreak 'validate' target

73ebb85ec34a introduced basic CVE ID checking, which is fantastic. It
kind of broke the 'validate' target for a sane VuXML DB, though.

This fixes the 'validate' target keeping to the orginal idea and with
pretty-print as an added bonus.
168937aaec
Piotr Smyrak (smyru) · 1.1_6
security/vuxml: refuse non CVE vuln IDs in validate target

PR:		295994
Approved by:	0mp (mentor)
Reviewed by:	0mp, fernape, philip
Differential Revision:	https://reviews.freebsd.org/D57539
73ebb85ec3
Charlie Li (vishwin) · 1.1_6
security/vuxml: fix lang/python311 version typo

Event: BSDCan 2026
18013e1ee4
Charlie Li (vishwin) · 1.1_6
security/vuxml: update python entries with upstream commits

Event: BSDCan 2026
d77fc69a26
Jochen Neumeister (joneum) · 1.1_6
security/vuxml: Add entry for NGINX

Add entry for NGINX

Sponsored by:	Netzkommune GmbH
9576addb97
Jochen Neumeister (joneum) · 1.1_6
security/vuxml: fix NGINX entry again

That's what happens when you're not focused.
Edit the entry again, since it's for nginx-devel

Sponsored by:	Netzkommune GmbH
3926c092eb
Jochen Neumeister (joneum) · 1.1_6
security/vuxml: fix NGINX entry

Fix NGINX entry

Sponsored by:	Netzkommune GmbH
174ff3f8dc
Jochen Neumeister (joneum) · 1.1_6
security/vuxml: add entry for NGINX

Add entry for NGINX

Sponsored by:	Netzkommune GmbH
cb3db8256e
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Document Jenkins Security Advisory 2026-06-10

Sponsored by:	The FreeBSD Foundation
c534bbf7e8
Yusuf Yaman (nxjoseph) · 1.1_6
security/vuxml: Document net/routinator vulnerabilities

PR:		295979
Security:       CVE-2026-49232
Security:       CVE-2026-49233
Security:       CVE-2026-49234
Security:       CVE-2026-49235
Approved by:	osa, vvd (Mentors, implicit)
f8d574e8d8
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 149.0.7827.155 + fix prev version

Obtained from:	https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.html
688821fd77
Guido Falsi (madpilot) · 1.1_6
security/vuxml: Report mailpit vulnerability
cfbe13aa02
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 149.0.7827.114

Obtained from:	https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01962725236.html
4e032f579c
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: improve recent change

Fixes:	a90e0c311e44e5916df1d0b26f288bac063d1688
9bb4f84bbe
Kousuke Kannagi (mce) · 1.1_6
security/vuxml: Add libsmi 0.4.8 vulnerability

PR:		295866
Approved by:	osa (mentor)
a90e0c311e
Thomas Zander (riggs) · 1.1_6
security/vuxml: Document multiple vulnerabilities in net/traefik
3a86be23bc
Adam Weinberger (adamw) · 1.1_6
security/vuxml: Add caddy < 2.11.4
532e24160a
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
6dbb100aa4
Dave Cottlehuber (dch) · 1.1_6
security/vuxml: Document h2o vulnerabilities

Sponsored by:  SkunkWerks, GmbH
9ddbbe15b7
Philip Paeps (philip) · 1.1_6
security/vuxml: remove bogus <cvename/s> tags

Unbreak the vuxml build (again).

Fixes:	        81a6669e034d07e3db13eff0688b32365ceff302
86e1123a9c
Jimmy Olgeni (olgeni) · 1.1_6
security/vuxml: Document Erlang/OTP June 2026 vulnerabilities
81a6669e03
Rodrigo Osorio (rodrigo) · 1.1_6
security/vuxml: Document p5-ack vulnerabilities
91986e7a00
Piotr Smyrak (smyru) · 1.1_6
security/vuxml: document devel/tree-sitter-cli vulnerabilities

PR:		294982
Approved by:	0mp
Differential Revision:	https://reviews.freebsd.org/D57502
27367635aa
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document OpenSSL vulnerabilities
8690ce709e
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 149.0.7827.102

Obtained from:	https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html
f9c1261587
Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SAs issued on 2026-06-09

FreeBSD-SA-26:25.thr affects all supported releases
FreeBSD-SA-26:26.ktls affects all supported releases
FreeBSD-SA-26:27.sound affects all supported releases
FreeBSD-SA-26:28.capsicum affects all supported releases
FreeBSD-SA-26:29.ip6_multicast affects all supported releases
FreeBSD-SA-26:30.linux affects all supported releases
FreeBSD-SA-26:31.arm64 affects all supported releases
FreeBSD-SA-26:32.elf affects all supported releases
FreeBSD-SA-26:33.unbound affects all supported releases
FreeBSD-SA-26:34.vt affects all supported releases
FreeBSD-SA-26:35.openssl affects all supported releases
FreeBSD-SA-26:36.ldns affects all supported releases
f0de041ce2
Dave Cottlehuber (dch) · 1.1_6
security/vuxml: Document Elixir vulnerabilities

- CVE-2026-49762, GHSA-w2h8-8x3g-278p

References:
https://github.com/elixir-lang/elixir/releases/tag/v1.20.1

Sponsored by:    SkunkWerks, GmbH
2e0d331577
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document Apache httpd 2.4.67 vulnerabilities
6493d6b38c
R. Christian McDonald (rcm) · 1.1_6
security/vuxml: Document multiple Unbound vulnerabilities

* CVE-2026-32792
* CVE-2026-33278
* CVE-2026-40622
* CVE-2026-41292
* CVE-2026-42534
* CVE-2026-42923
* CVE-2026-42944
* CVE-2026-42959
* CVE-2026-42960
* CVE-2026-44390
* CVE-2026-44608

References:
https://www.nlnetlabs.nl/projects/unbound/security-advisories/

PR:		295442
Sponsored by:	Rubicon Communications, LLC ("Netgate")
46134cbede
R. Christian McDonald (rcm) · 1.1_6
security/vuxml: Add entry for strongSwan CVE-2026-47895

PR:		295936
Sponsored by:	Rubicon Communications, LLC ("Netgate")
c8ffb7af8c
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document WeeChat 4.9.0 vulnerabilities
7657d0656a
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document WeeChat vulnerabilities
5dfc8caf38
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
9c341050f8
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: add CVEs for xorg-server and xwayland

Sponsored by:	tipi.work
4017ca9200
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix nginx entry

PR:		295797
Reported by:	tomas@ciernik.sk and others
d336f6df77
Florian Smeets (flo) · 1.1_6
security/vuxml: Document PowerDNS vulnerabilities
bdf70f4f41
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document Apache DoS vulnerability
cc2732f402
Philip Paeps (philip) · 1.1_6
security/vuxml: remove bogus <cvename/> references

ZDI-CAN-* references are not CVEs.  They are internal references from a
security company.  CVEs that don't exist upset the vuxmlbuild.
226b23044e
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: add xwayland vulnerabilities

Sponsored by:	tipi.work
d22150a1ac
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: add xorg-server vulnerabilities
990dcd812e
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: fix x11-servers/xorg-server's PORTEPOCH

% make -V PORTEPOCH -f /usr/ports/x11-servers/xorg-server/Makefile
1

Sponsored by:	tipi.work
36ffcd2e85
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix nginx entry

The range seems wrong according to https://nginx.org/en/CHANGES:

Changes with nginx 1.31.1                                        22 May 2026

    *) Security: a heap memory buffer overflow might occur in a worker
       process when using a configuration with overlapping captures in
       ngx_http_rewrite_module, potentially resulting in arbitrary code
       execution (CVE-2026-9256).
       Thanks to Mufeed VH of Winfunc Research.
5399aa48fb
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 148.0.7778.215

Obtained from:	https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html
5301551513
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Add missing PORTEPOCH for many entries

fixes portepoch warnings from `make validate`
While here: fix some whitespace
dcd262a7a5
« newest← newerpage 6 of 167older →oldest »