| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
1.1_6 13 Oct 2026 01:12:42
    |
Charlie Li (vishwin)  Author: John W. O'Brien |
security/vuxml: Document DSA sig vuln in pycryptodome(x) < 3.24.1
Sponsored by: Saltant Solutions LLC |
1.1_6 12 Oct 2026 15:43:52
    |
Matthias Fechner (mfechner)  |
security/vuxml: document gitlab vulnerabilities |
1.1_6 12 Oct 2026 04:26:39
    |
Jason E. Hale (jhale)  |
security/vuxml: Document GStreamer1 < 1.28.8 |
1.1_6 12 Oct 2026 00:48:11
    |
Sergey A. Osokin (osa)  |
security/vuxml: Document podman vulnerability |
1.1_6 11 Oct 2026 18:35:53
    |
Christos Longros (longros)  |
security/vuxml: Document py-WsgiDAV vulnerabilities
Approved by: jrm (mentor)
Differential Revision: https://reviews.freebsd.org/D60619 |
1.1_6 10 Oct 2026 23:16:16
    |
Ashish SHUKLA (ashish)  |
security/vuxml: Document ejabberd vulnerabilities |
1.1_6 10 Oct 2026 18:19:43
    |
Fernando Apesteguía (fernape)  Author: Derer Schrock |
security/vuxml: Add mutt vulnerabilities
CVE-2026-107570
PR: 299266 |
1.1_6 10 Oct 2026 12:34:09
    |
Thomas Zander (riggs)  |
security/vuxml: Document multiple vulnerabilities in net/traefik |
1.1_6 09 Oct 2026 15:48:46
    |
Jochen Neumeister (joneum)  |
security/vuxml: Document clamav vulnerabilities
Sponsored by: Netzkommune GmbH |
1.1_6 09 Oct 2026 10:26:36
    |
Palle Girgensohn (girgen)  |
security/vuxml: Correct postgresql-jdbc vulnerability
Apparenly, <range> with a ge and a lt requires both ends in the same
range, or they will be aggregated using logical OR. |
1.1_6 08 Oct 2026 16:56:43
    |
Bernard Spil (brnrd)  |
security/vuxml: Document OpenSSH vulnerabilities |
1.1_6 08 Oct 2026 15:19:06
    |
Kousuke Kannagi (mce)  |
security/vuxml: Add xorg-server, xwayland vulnerabilities
PR: 299218, 299219
Approved by: osa, fluffy (mentors, implicit) |
1.1_6 06 Oct 2026 09:04:05
    |
Dave Cottlehuber (dch)  |
security/vuxml: Document rabbitmq-c vulnerabilities fixed prior to 0.18.0
Sponsored by: SkunkWerks, GmbH |
1.1_6 06 Oct 2026 07:30:39
    |
Bernard Spil (brnrd)  |
security/vuxml: Document Vaultwarden vulnerabilities |
1.1_6 05 Oct 2026 21:29:07
    |
Daniel Engberg (diizzy)  |
security/vuxml: Fix entry for expat2 CVE-2026-93990
expat2 package is using expat as package name
PR: 299162
Reported by: Tomáš Čiernik <tomas@ciernik.sk> |
1.1_6 05 Oct 2026 17:21:25
    |
Bernard Spil (brnrd)  |
security/vuxml: Document LibreSSL vulnerbilities |
1.1_6 04 Oct 2026 20:37:30
    |
Yusuf Yaman (nxjoseph)  Author: Tomáš Čiernik |
security/vuxml: Document dns/bind920 vulnerabilities
PR: 298628
Approved by: osa, vvd (Mentors, implicit) |
1.1_6 04 Oct 2026 20:28:05
    |
Daniel Engberg (diizzy)  |
security/vuxml: Add entrie for expat2 CVE-2026-93990
PR: 298799 |
1.1_6 04 Oct 2026 13:06:30
    |
Yusuf Yaman (nxjoseph)  Author: Nick Hilliard |
security/vuxml: Fix version typo of Apache httpd
PR: 299112
Approved by: osa, vvd (Mentors, implicit)
Fixes: 9e8e24c |
1.1_6 02 Oct 2026 08:58:16
    |
Yusuf Yaman (nxjoseph)  |
security/vuxml: Document net/keycloak vulnerabilities
PR: 299044
Approved by: osa, vvd (Mentors, implicit) |
1.1_6 01 Oct 2026 19:51:45
    |
Carlo Strub (cs)  |
security/vuxml: Add entries for arti |
1.1_6 01 Oct 2026 18:32:35
    |
Bernard Spil (brnrd)  |
security/vuxml: Document Apache httpd vulnerabilities |
1.1_6 01 Oct 2026 08:14:02
    |
Ronald Klop (ronald)  |
security/vuxml: apache-commons-lang -- Uncontrolled Recursion vulnerability |
1.1_6 01 Oct 2026 04:09:51
    |
Ashish SHUKLA (ashish)  |
security/vuxml: Document net-im/conduit vulnerability |
1.1_6 30 Sep 2026 13:05:38
    |
Philip Paeps (philip)  |
security/vuxml: add FreeBSD SAs issued on 2026-09-29
FreeBSD-SA-26:64.sysvsem affects all supported releases
FreeBSD-SA-26:65.kqueue affects 15.1R
FreeBSD-SA-26:66.jail affects all supported releases
FreeBSD-SA-26:67.ktls affects all supported releases
FreeBSD-SA-26:69.udp affects all supported releases |
1.1_6 30 Sep 2026 13:05:38
    |
Philip Paeps (philip)  |
security/vuxml: reference FreeBSD-SA-26:68.openssl
Add a reference to FreeBSD-SA-26:68.openssl (issued 2026-09-29) to the
vuxml entry for OpenSSL CVE-2026-84782.
FreeBSD-SA-26:68.openssl affects all supported versions of FreeBSD |
1.1_6 30 Sep 2026 11:42:45
    |
Bernard Spil (brnrd)  |
security/vuxml: Update latest OpenSSL vulns
after renames for 3.0 and 3.5 |
1.1_6 30 Sep 2026 10:06:51
    |
Bernard Spil (brnrd)  |
security/vuxml: Document OpenSSL vulnerabilities |
1.1_6 26 Sep 2026 21:08:33
    |
Yusuf Yaman (nxjoseph)  |
security/vuxml: Document mail/fetchmail vulnerability
PR: 298887
Approved by: osa, vvd (Mentors, implicit) |
1.1_6 26 Sep 2026 13:03:22
    |
Robert Nagy (rnagy)  |
security/vuxml: add www/*chromium < 154.0.8037.57
Obtained
from: https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html |
1.1_6 26 Sep 2026 11:02:24
    |
Rodrigo Osorio (rodrigo)  |
security/vuxml: Document p5-YAML-Syck vulnerabilities |
1.1_6 26 Sep 2026 11:02:23
    |
Rodrigo Osorio (rodrigo)  |
security/vuxml: Document p5-Authen-SASL vulnerability |
1.1_6 26 Sep 2026 07:51:55
    |
Bernard Spil (brnrd)  |
security/vuxml: Document Rauthy vulnerability |
1.1_6 26 Sep 2026 07:33:18
    |
Bernard Spil (brnrd)  |
security/vuxml: Document RusTLS-ffi vulnerability |
1.1_6 25 Sep 2026 14:25:15
    |
Rodrigo Osorio (rodrigo)  |
security/vuxml: Document multiple vulnerabilities in p5-DBI |
1.1_6 24 Sep 2026 23:33:58
    |
Jimmy Olgeni (olgeni)  |
security/vuxml: Document multiple vulnerabilities in Erlang/OTP |
1.1_6 24 Sep 2026 19:33:10
    |
Yusuf Yaman (nxjoseph)  Author: Rafael Grether |
security/vuxml: Document p5-Image-ExifTool vulnerability
PR: 298826
Approved by: osa, vvd (Mentors, implicit) |
1.1_6 24 Sep 2026 13:55:06
    |
Sergey A. Osokin (osa)  |
security/vuxml: document podman vulnerabilities
Sponsored by: tipi.work |
1.1_6 24 Sep 2026 04:13:45
    |
Matthias Fechner (mfechner)  |
security/vuxml: document gitlab vulnerabilities |
1.1_6 23 Sep 2026 04:29:46
    |
Daniel Engberg (diizzy)  |
security/vuxml: Add entries for popt CVE-2026-18743 and CVE-2026-18739
PR: 298326 |
1.1_6 22 Sep 2026 08:00:34
    |
Rodrigo Osorio (rodrigo)  |
security/vuxml: Report new p5-Dancer2 vulnerability |
1.1_6 19 Sep 2026 12:27:10
    |
Guido Falsi (madpilot)  |
security/vuxml: Report new mailpit vulnerability |
1.1_6 18 Sep 2026 18:15:37
    |
Jochen Neumeister (joneum)  |
security/vuxml: Document angie and angie-module-njs vulnerabilities
PR: 298632 298637
Sponsored by: Netzkommune GmbH |
1.1_6 18 Sep 2026 01:29:39
    |
Danilo G. Baio (dbaio)  |
security/vuxml: document vinyl/varnish issue |
1.1_6 17 Sep 2026 13:00:59
    |
Jochen Neumeister (joneum)  |
security/vuxml: Document multiple vulnerabilities in 389-ds-base
Sponsored by: Netzkommune GmbH |
1.1_6 16 Sep 2026 22:45:14
    |
Thomas Zander (riggs)  |
security/vuxml: Document vulnerabilities in net/traefik |
1.1_6 16 Sep 2026 22:45:13
    |
Thomas Zander (riggs)  |
security/vuxml: Document vulnerabilities in multimedia/mkvtoolnix |
1.1_6 16 Sep 2026 17:56:44
    |
Yusuf Yaman (nxjoseph)  Author: Jaap Akkerhuis |
security/vuxml: Document Unbound vulnerabilities
PR: 298574
Approved by: osa, vvd (Mentors, implicit) |
1.1_6 16 Sep 2026 17:54:15
    |
Ashish SHUKLA (ashish)  |
security/vuxml: Revise emacs vulnerability
See https://www.openwall.com/lists/oss-security/2026/09/14/1
PR: 298557 |
1.1_6 16 Sep 2026 14:24:32
    |
Jochen Neumeister (joneum)  |
security/vuxml: Refine the immich CVE-2026-82272 entry
Sponsored by: Netzkommune GmbH |
1.1_6 16 Sep 2026 12:24:53
    |
Jochen Neumeister (joneum)  |
security/vuxml: Document nginx vulnerability
Sponsored by: Netzkommune GmbH |
1.1_6 15 Sep 2026 20:31:02
    |
Fernando Apesteguía (fernape)  |
security/vuxml: Fix entry
Reported by: dan@ |
1.1_6 15 Sep 2026 17:46:35
    |
Jochen Neumeister (joneum)  |
security/vuxml: Extend immich range to 3.2.1
Sponsored by: Netzkommune GmbH |
1.1_6 14 Sep 2026 17:41:16
    |
Kai Knoblich (kai)  |
security/vuxml: Document games/anki vulnerabilities
* External Control of Path in "aqt" leads to Arbitrary Code Execution.
* Imported note HTML may expose the internal Anki API API through image
occlusion documents. |
1.1_6 14 Sep 2026 17:19:46
    |
Fernando Apesteguía (fernape)  |
security/vuxml: Fix entry
Reported by: dan@
Fixes: db727c902a8fa37ce530139e6cfaf2cfe50188ec |
1.1_6 14 Sep 2026 16:54:37
    |
Fernando Apesteguía (fernape)  |
security/vuxml: Fix entry subject
Fixes: 85adc9fdc0e0535ead4b6b5368df074d96c17ae2 |
1.1_6 14 Sep 2026 16:51:05
    |
Fernando Apesteguía (fernape)  Author: Ivo Marino |
security/vuxml: Add devel/git-lfs entry
* CVE-2025-26625
PR: 298477
Reported by: ivo.marino+freebsd@gmail.com |
1.1_6 14 Sep 2026 16:41:03
    |
Fernando Apesteguía (fernape)  |
security/vuxml: Add devel/cjose vulnerabilities
* CVE-2026-53938
* CVE-2026-53939
PR: 298458
Reported by: Ivo Marino <ivo.marino+freebsd@gmail.com> |
1.1_6 13 Sep 2026 22:48:11
    |
Yusuf Yaman (nxjoseph)  |
security/vuxml: Document gitea < 1.27.3 vulnerabilities
Gitea 1.27.3 fixes 26 security issues, hardens issue searching
that an unfiltered query no longer enumerates every public
repository into the indexer filter and removes unsafe code
from the internal private endpoints.
PR: 298072
Approved by: osa, vvd (Mentors, implicit) |
1.1_6 13 Sep 2026 19:56:06
    |
R. Christian McDonald (rcm)  |
security/vuxml: Document multiple strongSwan vulnerabilities
PR: 298372
Sponsored by: Rubicon Communications, LLC ("Netgate") |
1.1_6 13 Sep 2026 15:59:20
    |
Danilo G. Baio (dbaio)  |
security/vuxml: document irc/znc vulnerabilities |
1.1_6 13 Sep 2026 04:02:32
    |
Matthias Fechner (mfechner)  |
security/vuxml: document Gitlab vulnerabilities |
1.1_6 11 Sep 2026 16:25:48
    |
Fernando Apesteguía (fernape)  Author: Christian Ullrich |
security/vuxml: Fix false negative due to missing
Quite old, but still worth the fix.
PR: 298399
Reported by: chris@chrullrich.net |
1.1_6 11 Sep 2026 16:15:03
    |
Fernando Apesteguía (fernape)  |
security/vuxml: Add www/yt-dlp vulnerability
* CVE-2026-55404
PR: 297810
Reported by: mce@ |
1.1_6 11 Sep 2026 13:02:49
    |
Jochen Neumeister (joneum)  |
security/vuxml: Document two vulnerabilities in immich
Sponsored by: Netzkommune GmbH |
1.1_6 11 Sep 2026 08:30:33
    |
Jimmy Olgeni (olgeni)  |
security/vuxml: Document redpanda-connect vulnerability |
1.1_6 11 Sep 2026 08:21:40
    |
Jochen Neumeister (joneum)  |
security/vuxml: Document multiple vulnerabilities in FreeIPA
Sponsored by: Netzkommune GmbH |
1.1_6 09 Sep 2026 16:36:24
    |
Yusuf Yaman (nxjoseph)  |
security/vuxml: Document security/crowdsec vulrenabilities
PR: 298349
Approved by: osa, vvd (Mentors, implicit) |
1.1_6 06 Sep 2026 09:05:31
    |
Bernard Spil (brnrd)  |
security/vuxml: Document Roundcube vulnerabilities |
1.1_6 04 Sep 2026 23:07:43
    |
Yusuf Yaman (nxjoseph)  |
security/vuxml: Fix package name typo
Fixes: 6911fd52c5d5 ("security/vuxml: Add OpenVPN vulnerability")
Approved by: osa, vvd (Mentors, implicit) |
1.1_6 04 Sep 2026 17:40:25
    |
Fernando Apesteguía (fernape)  |
security/vuxml: Add OpenVPN vulnerability
* CVE-2026-84732 |
1.1_6 03 Sep 2026 17:07:32
    |
Daniel Engberg (diizzy)  |
security/vuxml: Remove duplicate entry for giflib CVE-2026-26740
Already added in 5b67b86dbc40c1e6f20bac05b3f7b8a25ba00730 |
1.1_6 03 Sep 2026 16:45:11
    |
Jochen Neumeister (joneum)  |
security/vuxml: Document njs XML canonicalization vulnerability
CVE-2026-78689, fixed in njs 1.0.1.
Sponsored by: Netzkommune GmbH |
1.1_6 03 Sep 2026 12:51:39
    |
Hiroki Tagato (tagattie)  |
security/vuxml: Document electron42 multiple vulnerabilities
Obtained from: https://github.com/electron/electron/releases/tag/v42.11.1 |
1.1_6 02 Sep 2026 14:54:53
    |
Li-Wen Hsu (lwhsu)  |
security/vuxml: Document Jenkins Security Advisory 2026-09-02
Sponsored by: The FreeBSD Foundation |
1.1_6 02 Sep 2026 09:48:49
    |
Kai Knoblich (kai)  |
security/vuxml: Document py-strawberry-graphql vulnerability |
1.1_6 02 Sep 2026 06:35:06
    |
Robert Nagy (rnagy)  |
security/vuxml: add www/*chromium < 152.0.7977.75
Obtained
from: https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop.html |
1.1_6 01 Sep 2026 21:56:50
    |
Daniel Engberg (diizzy)  |
security/vuxml: Add entry for giflib CVE-2026-26740 |
1.1_6 01 Sep 2026 21:44:57
    |
Daniel Engberg (diizzy)  |
security/vuxml: Add entries for expat2 CVE-2026-66046 and CVE-2026-76641 |
1.1_6 01 Sep 2026 20:02:03
    |
Jimmy Olgeni (olgeni)  |
security/vuxml: Document remaining Erlang/OTP vulnerabilities
Upstream published 16 advisories alongside OTP 29.0.6, 28.5.0.6 and
27.3.4.17. CVE-2026-75538 already had an entry; add a combined one for
the other 15, which share the same affected packages and fixed versions.
Most are in the inets httpd and httpc implementations: HTTP request
smuggling, two mod_auth authentication bypasses and several denial of
service issues, plus unbounded integer conversion in stdlib, snmp and
eldap.
Also add the now-published GHSA reference to the CVE-2026-75538 entry. |
1.1_6 01 Sep 2026 19:25:35
    |
Jimmy Olgeni (olgeni)  |
security/vuxml: Document CVE-2026-75538 in Erlang/OTP |
1.1_6 01 Sep 2026 13:21:42
    |
Dag-Erling Smørgrav (des)  |
security/vuxml: Unbreak
Fixes: 820ac6c24c44 ("security/vuxml: add www/*chromium < 152.0.7977.64") |
1.1_6 01 Sep 2026 06:56:59
    |
Robert Nagy (rnagy)  |
security/vuxml: add www/*chromium < 152.0.7977.64
Obtained
from: https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html |
1.1_6 31 Aug 2026 20:53:59
    |
Yusuf Yaman (nxjoseph)  |
security/vuxml: Document net/keycloak vulnerabilities
PR: 298077
Reported by: Matthias Wolf <freebsd@rheinwolf.de>
Approved by: osa, vvd (Mentors, implicit) |
1.1_6 31 Aug 2026 20:23:58
    |
Yusuf Yaman (nxjoseph)  Author: Valdemar Erk |
security/vuxml: Document sudo-rs < 0.2.15 vulnerability
PR: 298074
Reported by: Valdemar Erk <valdemar@erk.dev> (author)
Approved by: osa, vvd (Mentors, implicit) |
1.1_6 29 Aug 2026 16:38:42
    |
Vasil Dimov (vd)  |
security/vuxml: document net-p2p/c-lightning vulnerabilities |
1.1_6 28 Aug 2026 21:03:40
    |
Jochen Neumeister (joneum)  |
security/vuxml: Document phpBB vulnerabilities
Sponsored by: Netzkommune GmbH |
1.1_6 28 Aug 2026 13:23:04
    |
Dave Cottlehuber (dch)  |
security/vuxml: Document Elixir vulnerabilities
Sponsored by: SkunkWerks, GmbH |
1.1_6 28 Aug 2026 10:51:27
    |
Yusuf Yaman (nxjoseph)  |
security/vuxml: Document dns/nsd vulnerabilities
PR: 297994
Reported by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Approved by: osa, vvd (Mentors, implicit) |
1.1_6 28 Aug 2026 04:50:42
    |
Matthias Fechner (mfechner)  |
security/vuxml: document Gitlab vulnerabilities |
1.1_6 27 Aug 2026 17:58:39
    |
Guido Falsi (madpilot)  |
security/vuxml: Document new php-composer vulnerabilities |
1.1_6 26 Aug 2026 21:09:25
    |
Rodrigo Osorio (rodrigo)  |
security/vuxml: Document rsync vulnerability |
1.1_6 26 Aug 2026 11:11:03
    |
Ashish SHUKLA (ashish)  |
security/vuxml: Document matrix-conduit vulnerability |
1.1_6 26 Aug 2026 04:16:57
    |
Philip Paeps (philip)  |
security/vuxml: correct a tpyo
FreeBSD-SA-26:61.openssl not FreeBSD-SA-26:62.openssl.
Fixes: 6caee4041ace ("security/vuxml: reference
FreeBSD-SA-26:61.openssl")
Pointy hat to: philip |
1.1_6 26 Aug 2026 04:08:06
    |
Philip Paeps (philip)  |
security/vuxml: add FreeBSD SAs issued on 2026-08-25
FreeBSD-SA-26:56.hwpmc affects all supported releases
FreeBSD-SA-26:57.unix affects 15.0R and 15.1R
FreeBSD-SA-26:58.sound affects all supported releases
FreeBSD-SA-26:59.mac_do affects 15.0R and 15.1R
FreeBSD-SA-26:60.ppp affects all supported releases
FreeBSD-SA-26:62.tty affects all supported releases
FreeBSD-SA-26:63.posixshm affects all supported releases |
1.1_6 26 Aug 2026 04:08:06
    |
Philip Paeps (philip)  |
security/vuxml: reference FreeBSD-SA-26:61.openssl
Add a reference to FreeBSD-SA-26:61.openssl (issued 2026-08-25) to the
vuxml entry for OpenSSL CVE-2026-14457, CVE-2026-18798, CVE-2026-54874,
CVE-2026-63072, CVE-2026-63073, CVE-2026-63074, CVE-2026-63075 and
CVE-2026-63076
FreeBSD-SA-26:61.openssl affects all supported versions of FreeBSD |
1.1_6 26 Aug 2026 04:08:06
    |
Philip Paeps (philip)  |
security/vuxml: remove duplicate OpenSSL entry
Reference FreeBSD-SA-26:35.openssl in the existing entry for OpenSSL
CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34182, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766,
CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770,
CVE-2026-45445, CVE-2026-45446 and CVE-2026-45447 instead of duplicating
the entry.
FreeBSD-SA-26:35.openssl affected all supported versions of FreeBSD. |
1.1_6 25 Aug 2026 18:16:03
    |
Bernard Spil (brnrd)  |
security/vuxml: Document OpenSSL vulnerabilities |
1.1_6 25 Aug 2026 08:56:26
    |
Bernard Spil (brnrd)  |
security/vuxml: Document MariaDB vulnerabilities |
1.1_6 24 Aug 2026 10:04:33
    |
Jochen Neumeister (joneum)  |
security/vuxml: Document mod_gnutls -- multiple vulnerabilities
CVE-2026-33307 is an out-of-bounds write when mod_gnutls receives a client
certificate chain longer than its buffer, CVE-2026-33308 a missing Key
Purpose check during client certificate verification. Upstream fixed both
on 2026-03-20; in the tree the fix arrives with www/mod_gnutls 0.13.0.
Sponsored by: Netzkommune GmbH |