CVE and update status of the FreeBSD ports tree3,312 unaddressed CVEs in 679 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 7b95a2eac4
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
Depends on
lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,339)

Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SAs issued on 2026-04-29

FreeBSD-SA-26:12.dhclient affects all supported releases
FreeBSD-SA-26:13.exec affects all supported releases
FreeBSD-SA-26:14.pf affects all supported releases
FreeBSD-SA-26:15.dhclient affects all supported releases
FreeBSD-SA-26:16.libnv affects all supported releases
FreeBSD-SA-26:17.libnv affects all supported releases
0821906582
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities

* CVE-2026-6786
 * CVE-2026-6785
 * CVE-2026-6784
 * CVE-2026-6783
 * CVE-2026-6782
 * CVE-2026-6781
 * CVE-2026-6780
 * CVE-2026-6779
 * CVE-2026-6778
 * CVE-2026-6777
 * CVE-2026-6776
 * CVE-2026-6775
 * CVE-2026-6774
 * CVE-2026-6773
 * CVE-2026-6772
 * CVE-2026-6771
 * CVE-2026-6770
 * CVE-2026-6769
 * CVE-2026-6768
 * CVE-2026-6767
 * CVE-2026-6766
 * CVE-2026-6765
 * CVE-2026-6764
 * CVE-2026-6763
 * CVE-2026-6762
 * CVE-2026-6761
 * CVE-2026-6760
 * CVE-2026-6759
 * CVE-2026-6758
 * CVE-2026-6757
 * CVE-2026-6756
 * CVE-2026-6755
 * CVE-2026-6754
 * CVE-2026-6753
 * CVE-2026-6752
 * CVE-2026-6751
 * CVE-2026-6750
 * CVE-2026-6749
 * CVE-2026-6748
 * CVE-2026-6747
 * CVE-2026-6746
32bc1f3462
Kousuke Kannagi (mce) · 1.1_6
security/vuxml: Add libXpm vulnerability

PR:		293154
Approved by:	osa (mentor)
4ede684840
Daniel Engberg (diizzy) · 1.1_6
security/vuxml: Add entry for (lib)expat CVE-2026-41080

(lib)expat before 2.8.0 uses insufficient entropy, and thus hash
flooding can occur via a crafted XML document

PR:		294769
568e884ccf
Daniel Engberg (diizzy) · 1.1_6
security/vuxml: Add entry for lcms2 CVE-2026-41254

Integer overflow
5e13c27cbe
Olivier Cochard (olivier) · 1.1_6
security/vuxml: add OpenVPN < 2.7.2 vulns

Security:       549313db-3e93-11f1-8d38-7fbbe0285610
Security:       CVE-2026-35058
Security:       CVE-2026-40215
PR:		294714
af4d9585ba
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
94630ac205
Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SAs issued on 2026-04-21

FreeBSD-SA-26:10.vm affects all supported releases
FreeBSD-SA-26:11.amd64 affects all supported releases
f043ed3ac1
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerability

* Base Score:  9.8 CRITICAL
 * Vector:  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
21e26919cb
Ashish SHUKLA (ashish) · 1.1_6
security/vuxml: Document ejabberd vulnerability
1ff7aec950
Craig Leres (leres) · 1.1_6
security/vuxml: Mark security/zeek < 8.0.7 as vulnerable as per:

https://github.com/zeek/zeek/releases/tag/v8.0.7

This release fixes the following potential DoS vulnerabilities:

 - A series of DNS messages containing long DNS compression chains
   can cause Zeek to spend a long time processing packets and
   potentially crash. Due to the fact that these packets can be
   received from remote hosts, this is a DoS risk.

 - A specially-crafted LDAP search request can cause Zeek to spend
   a long time processing the packet, resulting in Zeek silently
   dropping the LDAP analyzer for the connection. Due to the fact
   that these packets can be received from remote hosts, this is
   an evasion risk.

 - A specially-crafted series of ASN.1 messages in LDAP packets can
   cause Zeek to spend a long time processing the packets, resulting
   in Zeek silently dropping the LDAP analyzer for the connection.
   Due to the fact that these packets can be received from remote
   hosts, this is an evasion risk.

Reported by:	Tim Wojtulewicz
039d0a9ca8
Daniel Engberg (diizzy) · 1.1_6
security/vuxml: Add entry for OpenEXR vulnerabilities < 3.4.10

Multiple integer overflow issues

Obtained from:	GitHub repo
Security:	CVE-2026-39886
		CVE-2026-40244
		CVE-2026-40250
45e6a1dc9a
Koichiro Iwao (meta) · 1.1_6
security/vuxml: Document multiple xrdp vulnerability
e57b4ffdac
Kai Knoblich (kai) · 1.1_6
security/vuxml: Document py-strawberry-graphql security issues

* CVE-2026-35523 - 7.5
* CVE-2026-35526 - 7.5
f668526aa6
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerability

CVE-2026-5731
	Base Score:	9.8 CRITICAL
	Vector:		CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
91adf32523
Daniel Engberg (diizzy) · 1.1_6
security/vuxml: Add entry for Python CVE-2026-4786

Incomplete mitigation of CVE-2026-4519,
%action expansion for command injection to webbrowser.open()

Obtained from:	GitHub repo
Security:	CVE-2026-4786
		cf75f572-378a-11f1-a119-e36228bfe7d4
97f22e47ab
Daniel Engberg (diizzy) · 1.1_6
security/vuxml: Add entry for Python CVE-2026-6100

Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor
and gzip.GzipFile

Obtained from:	GitHub repo
Security:	b8e9f33c-375d-11f1-a119-e36228bfe7d4
		CVE-2026-6100
22584e71f4
Yusuf Yaman (nxjoseph) · 1.1_6
security/vuxml: Add go-ethereum vulnerabilities

PR:		293829
Approved by:	vvd (co-mentor)
4abd8b03fb
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 147.0.7727.101

Obtained from:	https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html
ce139189ea
Baptiste Daroussin (bapt) · 1.1_6
security/vuxml: fix php composer declaration to respect the DTD
f60266f2a4
Guido Falsi (madpilot) · 1.1_6
security/vuxml: Document php-composer vulnerabilities

Reference: https://github.com/composer/composer/releases/tag/2.9.6

PR:		294528
8721ecd01f
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: document xwayland vulnerabilities

Sponsored by:	tipi.work
e5b03a1fd0
Sergey A. Osokin (osa) · 1.1_6
security/vuxml: document xorg-server vulnerabilities

Sponsored by:	tipi.work
9cb7ae3b63
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document Vaultwarden vulnerabilities
7161d76c68
Daniel Engberg (diizzy) · 1.1_6
security/vuxml: Add entries for Python CVE-2026-1502 and gh-146333

PR:		294324
Security:	CVE-2026-1502
		/ 30bda1c3-369b-11f1-b51c-6dd25bec137b

Security:	5ec4dcf6-3588-11f1-b51c-6dd25bec137b
8575855cbb
Daniel Engberg (diizzy) · 1.1_6
security/vuxml: Update entry for Python CVE-2026-4519

Fixed in 3.14.4

PR:		294324
Security:	9fdad262-2e0f-11f1-88c7-00a098b42aeb
		/ CVE-2026-4519
2eb75c6b2f
Yusuf Yaman (nxjoseph) · 1.1_6
security/vuxml: Add py-ormar vulnerabilities

PR:		294382
Approved by:	osa (mentor)
6d75089f5e
Daniel Engberg (diizzy) · 1.1_6
security/vuxml: Document (lib)tiff vulnerability

Document CVE-2026-4775
90b45b864a
Yusuf Yaman (nxjoseph) · 1.1_6
security/vuxml: Add DNSdist vulnerabilities

PR:		294225
Approved by:	osa (mentor)
050b652ec0
Yusuf Yaman (nxjoseph) · 1.1_6
security/vuxml: Add MbedTLS vulnerabilities

Reviewed by:	osa, vvd (mentors)
Approved by:	osa (mentor)
Differential Revision: https://reviews.freebsd.org/D56344
1a38d8fb7a
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 147.0.7727.55

Obtained from:	https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html
b37836a814
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities

* CVE-2026-5732:	NVD assessment not yet provided
 * CVE-2026-5733:	NVD assessment not yet provided
 * CVE-2026-5734:	Base Score:  9.8 CRITICAL
			Vector:  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
 * CVE-2026-5734:	Base Score:  9.8 CRITICAL
			Vector:  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
bf8e91afef
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Update URL in latest OpenSSL vulns
46a9025aee
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
3577d03d12
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document OpenSSL vulnerabilities
7146c222ed
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add {lib}nghttp2 vulneability

CVE-2026-27135

Base Score:	7.5 HIGH
Vector:		CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
f2b8dcc5bc
Charlie Li (vishwin) · 1.1_6
security/vuxml: add missed python packages

PR: 294246
f07bff5c0d
Charlie Li (vishwin) · 1.1_6
security/vuxml: add ranges for python webbrowser.open() API entry

PR: 294246
2af09f68ce
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add mongodb{78}0 vulnerability

CVSS-B		6.0 MEDIUM
 Vector:	CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
d7f642fc78
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: add openexr < 3.4.9 vulns

Security:       CVE-2026-34589
Security:       CVE-2026-34588
Security:       CVE-2026-34380
Security:       CVE-2026-34379
Security:       CVE-2026-34378
Security:	adb096d4-2e72-11f1-acc1-339a1a6999b0

PR:	294196
53ac816170
Daniel Engberg (diizzy) · 1.1_6
security/vuxml: Document Python security issues

Security:	CVE-2025-15366
Security:	CVE-2025-15367
Security:	CVE-2026-4519
5d5dab25a1
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 146.0.7680.177

Obtained from:	https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html
c64ab19043
Thomas Zander (riggs) · 1.1_6
security/vuxml: Document multiple vulnerabilities in traefik
9702ad1b75
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document Roundcube vulnerability
1c5e093993
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
176b5c9d98
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Document Jenkins Security Advisory 2026-03-18

Sponsored by:	The FreeBSD Foundation
e6c8dd9d4f
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities
62f0a08173
Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SAs issued on 2026-03-25

FreeBSD-SA-26:06.tcp affects FreeBSD 14.3R, 14.4R and 15.0R
FreeBSD-SA-26:07.nvmf affects FreeBSD 15.0R
FreeBSD-SA-26:08.rpcsec_gss affects all supported releases
FreeBSD-SA-26:09.pf affects FreeBSD 14.3R, 14.4R and 15.0R
1546840cdd
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 146.0.7680.164

Obtained from:	https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_18.html
Obtained from:	https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_23.html
5904291f9c
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix roundcube package name

The package is flavorized.

PR:		293919
Reported by:	tomas@ciernik.sk
0edbd2a551
« newest← newerpage 8 of 167older →oldest »