CVE and update status of the FreeBSD ports tree3,312 unaddressed CVEs in 679 portsAll times are CET
Port details

security/vuxml 1.1_6

Vulnerability and eXposure Markup Language DTD

0
unaddressed
0
VuXML only
0
fixed
5
open problem reports

Port info

Maintainer
ports-secteam@FreeBSD.org
Packages
latest: 1.1_6
Upstream
up to date
Last update
to 1.1_6 · 7b95a2eac4
Quarterly
2026Q4: 1.1_6
WWW
https://vuxml.freebsd.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuxml
installs 1.1_6 from latest; from quarterly (2026Q4) 1.1_6
Port
# cd /usr/ports/security/vuxml && make install clean
Size
9.7 KiB download · 40 KiB installed
Depends on
lang/python312 3.12.15, textproc/libxslt 1.1.45, textproc/xhtml-basic 1.0.20001219_2, textproc/xhtml-modularization 1.0.20010410_1, textproc/xmlcatmgr 2.2_4
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.1_61.1_6–
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.1_61.1_6–
FreeBSD 141.1_61.1_61.1_6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.1_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295797maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256In Progress2026-07-17
295836maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-djangoNew2026-06-04
291717security/vuxml: add entry for uriparser < 1.0.0New2025-12-16
288090maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2New2025-07-08
270795security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entriesIn Progress2025-07-01

Commits (8,339)

Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix linux-c7-sqlite range

PR:		292617
Reported by:	John Hein <jcfyecrayz@liamekaens.com>
ef8a958cfc
Thomas Zander (riggs) · 1.1_6
security/vuxml: Document vulnerabilities in traefik
fe9b7bab83
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add unifi{9,10} vulnerabilities

CVE:		CVE-2026-22557
Base Score:	10.0 (Critical)
CVSS:		CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CVE:		CVE-2026-22558
Base Score:	7.7 (High)
CVSS: 		CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Reported by:	Jana Steuernagel
70d765816c
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document Roundcube vulnerabilities
adef1eedd4
Jesús Daniel Colmenares Oviedo (dtxdf) · 1.1_6
security/vuxml: Add homebox < 0.24.0
de94a3e620
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 146.0.7680.80

Obtained from:	https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_13.html
Obtained from:	https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_12.html
Obtained from:	https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_10.html
0c722506a3
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document OpenSSL 3.5/3.6 vulnerability
3fa91f54ec
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities

* CVE-2026-2771 - 9.8
 * CVE-2026-3846 - 6.5
 * CVE-2026-3847 - 8.8
814d765572
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
dbc1700159
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document curl 8.17.0 vulnerabilities
499334c659
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document curl 8.18.0 vulnerabilities
2ab5aa71b7
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Add GStreamer1 < 1.28.1

https://gstreamer.freedesktop.org/security/
39bb3e53d8
Charlie Li (vishwin) · 1.1_6
security/vuxml: update lang/python310 entry

gh-143935 has been committed upstream
ef828ff521
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Amend sqlite entry

Fix vulnerable version range for sqlite-based ports (CVE-2025-7709)

PR:		292617
Reported by:	jcfyecrayz@liamekaens.com (maintainer)
Reviewed by:	fluffy@
6c8efa3663
Jesús Daniel Colmenares Oviedo (dtxdf) · 1.1_6
security/vuxml: Add www/oauth2-proxy < 7.14.2
6ab856a4ab
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities

* CVE-2026-2809
 * CVE-2026-2808
fbf240f88e
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerabilities

* CVE-2026-2795
 * CVE-2026-2796
 * CVE-2026-2797
 * CVE-2026-2798
 * CVE-2026-2799
 * CVE-2026-2801
 * CVE-2026-2802
 * CVE-2026-2803
 * CVE-2026-2804
 * CVE-2026-2805
 * CVE-2026-2806
 * CVE-2026-2807

Changes to be committed:
e5db54b27b
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document gitlab vulnerabilities
bf556efbf9
Guido Falsi (madpilot) · 1.1_6
security/vuxml: Document new mail/mailpit vulnerability
7c47861aca
Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SAs issued on 2026-02-24

FreeBSD-SA-26:04.jail affects FreeBSD 13.5 and FreeBSD 14.3
FreeBSD-SA-26:05.route affects all supported versions of FreeBSD
837a3fd388
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document Vaultwarden vulnerabilities
dbdb672386
Daniel Engberg (diizzy) · 1.1_6
security/vuxml: Add openexr < 3.4.5

Security:	716d25a6-0fdc-11f1-bfdf-ff9355aecb00
78385925f6
Li-Wen Hsu (lwhsu) · 1.1_6
security/vuxml: Document Jenkins Security Advisory 2026-02-18

Sponsored by:	The FreeBSD Foundation
b089bd41fd
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add Mozilla vulnerability

* CVE-2026-2447
6d6e57103f
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 145.0.7632.109

Obtained from:	https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_18.html
239f695f5f
Robert Nagy (rnagy) · 1.1_6
security/vuxml: fix chromium version number in latest entry
bcba3e3b28
Ryan Steinmetz (zi) · 1.1_6
security/vuxml: Document vulnerability in dns/powerdns-recursor
8421859a6c
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add png vulnerability

* CVE-2026-25646
ae6d80d8d9
Thomas Zander (riggs) · 1.1_6
security/vuxml: Document TCP readTimeout bypass in traefik
53a4a50317
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add munge vulnerability

* CVE-2026-25506

Reported by: Chris Dunlap <chris.m.dunlap@gmail.com>
ea5760cbbc
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: make newentry: Fix providers init.

An init fail shouldn't exit the script.
Initialize registered providers only.

Use successfully initialized providers only.

Keep euvd for now although it's been down for the last few days.
98a2024874
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 144.0.7559.75

Obtained from:	https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html
ca832c8dc1
Charlie Li (vishwin) · 1.1_6
security/vuxml: update lang/python312 entry

CVE-2024-6923 fix has been committed upstream
f88de1e88a
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: document expat vulnerabilities

* CVE-2026-24515
 * CVE-2026-25210

PR:		293078
a5cc652b1d
Palle Girgensohn (girgen) · 1.1_6
security/vuxml: add info about PostgreSQL vulnerabilities
4262abbf9e
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Add mongodb[78] vulnerabilities

* CVE-2026-1847
 * CVE-2026-1849
 * CVE-2026-1850
 * CVE-2026-25610
 * CVE-2026-25613
b455d20035
Matthias Fechner (mfechner) · 1.1_6
security/vuxml: document Gitlab vulnerabilities
e8dbbbac7e
Philip Paeps (philip) · 1.1_6
security/vuxml: add FreeBSD SA issued on 2026-02-10

FreeBSD-SA-26:03.blocklistd affects 15.0R
1813fbe6b7
Fernando Apesteguía (fernape) · 1.1_6
security/vuxml: Fix roundcube entry

mail/roundcube is php-flavorized

PR:		293058
Reported by:	tomas@ciernik.sk
Fixes:		a1ebf7d994441
d1c6be14cd
Robert Nagy (rnagy) · 1.1_6
security/vuxml: fix CVE ids for the latest chromium entry

Reported by:	fernape@
cc6de2458a
Robert Nagy (rnagy) · 1.1_6
security/vuxml: add www/*chromium < 144.0.7559.132

Obtained from:	https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop.html
3b69c21396
Bernard Spil (brnrd) · 1.1_6
security/vuxml: Document Roundcube vulnerabilities
a1ebf7d994
Jason E. Hale (jhale) · 1.1_6
security/vuxml: Add www/qt6-webengine < 6.10.2
30e17b515d
Jesús Daniel Colmenares Oviedo (dtxdf) · 1.1_6
security/vuxml: Add multimedia/navidrome < 0.60.0
ceece5573b
Thomas Zander (riggs) · 1.1_6
security/vuxml: Document potential DoS in traefik
95e7551ea1
Charlie Li (vishwin) · 1.1_6
security/vuxml: update lang/python311 entry

Upstream are still reviewing and reworking the following:
- lang/python312: CVE-2024-6923
- lang/python310: gh-143935
Updated version ranges to be provided after those commits land there.

While here, remove nonexistent and EOL lang/python39
5609b98496
Matthias Andree (mandree) · 1.1_6
security/vuxml: add python <3.14.3 <3.13.12 security issues

Security:	CVE-2026-0865
Security:	CVE-2026-1299
Security:	bfe9adc8-0224-11f1-8790-c5fb948922ad
a950cda247
Koichiro Iwao (meta) · 1.1_6
security/vuxml: Document xrdp RCE vulnerability

Security:	https://www.cve.org/CVERecord?id=CVE-2025-68670
Security:	https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-rwvg-gp87-gh6f
4f024b963a
Craig Leres (leres) · 1.1_6
security/vuxml: populate missing <name> for security/zeek

Reported by:	Dan Langille
Fixes:	03bfa3969e0d
649e3cfe1b
Craig Leres (leres) · 1.1_6
security/vuxml: Mark security/zeek < 8.0.6 as vulnerable as per:

https://github.com/zeek/zeek/releases/tag/v8.0.6

This release fixes the following potential DoS vulnerability:

 - Zeek's HTTP analyzer can be tricked into interpreting Transfer-Encoding
   or Content-Length headers set in MIME entities within HTTP bodies
   and change the analyzer behavior.

Reported by:	Tim Wojtulewicz
03bfa3969e
« newest← newerpage 9 of 167older →oldest »