- Add multiple missing entries

PR:		ports/188512
Submitted by:	Pawel Biernacki <pawel.biernacki@gmail.com>

Fix typo.

Submitted by:	matthew@

Mention a vulnerability in japanese/chasen* which exists since 2011-11-08

Obtained from:	http://jvn.jp/en/jp/JVN16901583/index.html

- Correct version ranges for
7ccd4def-c1be-11e3-9d09-000c2980a9f3/5631ae98-be9e-11e3-b5e3-c80aa9043978

Reported by:	Tim Zingelman <tez@netbsd.org>

- Move CVE-2014-0076 to its own entry+add FreeBSD system information as the
affected list does not 100% line up with the vulnerability described in
CVE-2014-0160/5631ae98-be9e-11e3-b5e3-c80aa9043978

- Note FreeBSD system vulnerability information for
5631ae98-be9e-11e3-b5e3-c80aa9043978

- Mark linux-f10-openssl vulnerabilities

Reported by:	frogs on freenode

- Document recent vulnerability in net/openafs (CVE-2014-0159)

Document new vulnerabilities in www/chromium < 34.0.1847.116

Obtained from:	http://googlechromereleases.blogspot.nl/
MFH:		2014Q2

Add mingw32-openssl.

Add more information for OpenSSL bug

- Sort references
- Add link to heartbleed.com that has a lot of useful information

- Document Openssl vulnerabilities

Security:	CVE-2014-0160
Security:	CVE-2014-0076
Security:	https://www.openssl.org/news/secadv_20140407.txt
MFH:		2014Q2

New OTRS vulnerability

Security:	CVE-2014-2554

Add CVE-2014-2525 which affects libyaml.

Fix all mod_php entries.
Please don't use the range <range><ge>0</ge></range>.

Add an entry for CVE-2014-2386

Add an entry for CVE-2014-2270, and correct the indentation
in the entry for CVE-2014-1943

Fix mod_php5 entry.

Sort reference entries in 36f9ac43-b2ac-11e3-8752-080027ef73ec
mail/trojita information leak.

This should really be in the DTD or at least "make validate" if it's
official requirement...

Submitted by:	remko

- Document multiple vulnerabilities for Joomla! 2 and Joomla! 3

Add an entry for trojita mail leak across unencrypted connections
(CVE-2014-2567). Port update in PR#187370, pending commit.
MFH: yes

Split nginx and nginx-devel entries, update date.

Add CVE-2014-0133 entries for www/nginx and www/nginx-devel.

- document apache22 /apache24
  CVE-2014-0098, CVE-2013-6438

Please Note:
 apache-2.2.27 is not released until now,
 but this is exoected during the next days.

Attempt to fix latest mozilla entry for firefox-esr

Reported by:	plukky on #bsdports

Document mozilla vulnerabilities

Document new vulnerabilities in www/chromium < 33.0.1750.152

Obtained from:	http://googlechromereleases.blogspot.nl/
MFH:		2014Q1

Update (c) year to be 2014.

PS. all rumors that this commit is to shup up the grim reaper are wildly
exagurated.

- Fix ordering

- Document recent vulnerability in mail/mutt (CVE-2014-0467)

Vulnerability in sysutils/wemux

Document samba multiple vulnerabilities announced today.

Document asterisk vulnerabilities

MFH:	2014Q1

Document new vulnerabilities in www/chromium < 33.0.1750.149

Obtained from:	http://googlechromereleases.blogspot.nl/
MFH:		2014Q1

Properly indent the last entry.

Discussed with:	kwm

Unbreak vuxml.

Submitted by:	battlez
MFH:		2014Q1

Document freetype2 vuln.

MFH:	2014Q1

Reference xmms vulnerabilities: CVE-2007-0653 and CVE-2007-0654

Add security advisory for nginx-1.5.10.

Document new vulnerabilities in www/chromium < 33.0.1750.146

Obtained from:	http://googlechromereleases.blogspot.nl/

security/gnutls is fixed for CVE-2014-0092 and CVE-2014-1959

Document GnuTLS multiple certification verification issues.

Add an entry for the file DOS vulnerability, CVE-2014-1943

Use correct PORTREVISION for python33's CVE.

security/vuxml: Sort Python entry references alphabetically

MFH:		2014Q1
Reported by:	remko

security/vuxml: Document CVE-2014-1912 for Python 2.7 - 3.3

Python: buffer overflow in socket.recvfrom_into()

MFH:		2014Q1
Security:	CVE-2014-1912

- add entry for subversion CVE-2014-0032

Report new vulnerability in otrs to vuxml
Security:	CVE-2014-1695

Document new vulnerabilities in www/chromium < 33.0.1750.117

Obtained from:	http://googlechromereleases.blogspot.nl/
MFH:		2014Q1

The PostgreSQL Global Development Group has released an important
update to all supported versions of the PostgreSQL database system,
which includes minor versions 9.3.3, 9.2.7, 9.1.12, 9.0.16, and
8.4.20. This update contains fixes for multiple security issues, as
well as several fixes for replication and data integrity issues.  All
users are urged to update their installations at the earliest
opportunity, especially those using binary replication or running a
high-security application.

This update fixes CVE-2014-0060, in which PostgreSQL did not properly
enforce the WITH ADMIN OPTION permission for ROLE management. Before
this fix, any member of a ROLE was able to grant others access to the
same ROLE regardless if the member was given the WITH ADMIN OPTION
permission. It also fixes multiple privilege escalation issues,
including: CVE-2014-0061, CVE-2014-0062, CVE-2014-0063, CVE-2014-0064,
CVE-2014-0065, and CVE-2014-0066. More information on these issues can
be found on our security page and the security issue detail wiki page.

Security:	CVE-2014-0060,CVE-2014-0061,CVE-2014-0062,CVE-2014-0063
		CVE-2014-0064,CVE-2014-0065,CVE-2014-0066,CVE-2014-0067

- Last whitespace change
- Sort CVE entries

Notified by:	remko

Document the latest PMA security advisory: PMSA-2014-1

The version of PMA currently in ports (since 2014-02-09) is not
affected.

Add CVE entry to references

Notified by:	remko

whitespace

Notified by:	remko

Document Jenkins Security Advisory 2014-02-14

- Document recent vulnerabilities in www/lighttpd

Document phpmyfaq vulnerabilities

Update VUXML entry on recent otrs vulnerabilities

Suggested by:	remko@

Update the latest flash security advisory

Report the latest flash security issue

Document mozilla vulnerabilities

Reviewed by:	flo

- Add modified date to libyaml entry

- Add libyaml to the libyaml vulnerability entry

- Document libyaml vulnerability in pkg

Security:	CVE-2013-6393

Use the same URL as in blockquote.

Submitted by:	remko

- Fix format

Document socat vulnerability.

Security:	CVE-2014-0019

2 new OTRS vulnerabilities

Security:	CVE-2014-1471

rt42-4.2.1_3, which appears only on the 2014Q1 branch, should also be
counted as not vulnerable.

Document vulnerabilities in www/chromium < 32.0.1700.102

Obtained from:	http://googlechromereleases.blogspot.nl/

Formatting fixes

Submitted by:	remko

- Fix style for strongswan entry

Reported by:	remko

vuxml entry concerning	the recent security advisory about www/rt42
from 4.2.0 to 4.2.2 inclusive.  This is slightly unusual in the the
fix is applied to a completely different port
mail/p5-Email-Address-List which www/rt42 depends on..

Security:	d1dfc4c7-8791-11e3-a371-6805ca0b3d42

- Fix typo in last entry

Reported by:	bz

- Document multiple DoS vulnerabilities in strongswan

Security:	CVE-2013-5018
Security:	CVE-2013-6075
Security:	CVE-2013-6076

Document Varnish HTTP Cache < 3.0.5 DoS Vulnerability

Reviewed by:	remko

Update flash to 11.2r202.335
Report security issues

PR:		ports/185790
Reported by:	Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>

Cleanup the HTMLDOC entry, long lines and remove the ...
entries because I think it's not needed.  Also adjust
the previous entry by indenting correctly.

Hat:		secteam
Facilicated by:	Snow B.V.

Document HTMLDOC < 1.8.28 vulnerability.

Document virtualbox-ose vulnerabilities

Security:	CVE-2013-5892

Document new vulnerabilities in www/chromium < 32.0.1700.77

Obtained from:	http://googlechromereleases.blogspot.nl/
MFH:		2014Q1

Sort references

Submitted by:	remko

Document SA-13:07.bind

Fix the latest entry, it has many issues, make validate
told us exactly what was wrong. I redid the entry and
just took out the ul/li structure and replaced it with
regular paragraphs. It might be worth investigating
to use the FreeBSD SA that got released because of this
as the main text, which is best suited imo.

Hat:	    secteam

Mark net/ntp forbidden.

Security:	CVE-2013-5211 / VU#348126

Document the latest nagios vulnerability.

Security update to fix CVE-2014-0591 as reported at
https://kb.isc.org/article/AA-01078/74/

9.9.4 -> 9.9.4-P2
9.8.6 -> 9.8.6-P2
9.6-ESV-R10 -> 9.6-ESV-R10-P2

Security:	CVE-2014-0591 Remote DOS

Update libXfont to 1.4.7

This is a security fix and it is important to update, since it might lead to
a privilege escalation if the X server is run as root (which is the default)

Security:	CVE-2013-6462

Document OpenSSL 1.0.1e multiple vulnerabilities.

Correct ident for most recent entries.  No functional changes.

People, please be aware that we use the FreeBSD Documentation Primer
and that there are style rules we have to follow.  If you are in
doubt please consult me and I am more then willing to help.

Hat:	secteam

- mark as FORBIDDEN (zero day SQL vuln)

Security:	CVE-2013-7149

Cover gnupg1 ports/packages as well.

Apply vendor fix for CVE-2013-6422, cURL libcurl cert name check ignore
with GnuTLS.  Document the vulnerability fix in vuxml while I'm here.

Add about gnupg-1.4.16.

- document asterisk vulnerabilities
- correctly order references [1]

Reported by:	remko [1]

- update to 2.8.4
- add stage support

Security:	3b86583a-66a7-11e3-868f-0025905a4771

Document Zabbix agent remote command execution vulnerability.

Update to 5.3.28

Security:	47b4e713-6513-11e3-868f-0025905a4771

Update to nspr 4.10.2
Update to nss 3.15.3.1
Update firefox-esr and thunderbird to 24.2.0
Update firefox to 26.0
Update seamonkey to 2.23

- catch up with directory renames since USES=webplugins was introduced;
  fixes plugins not being automatically enabled after install
- linux-firefox and linux-seamonkey can play HTML5 audio [2][3] and
  measure about:memory usage, again
- dom.ipc.plugins.enabled->true no longer crash linux-firefox which makes
  some flash sites work again; as there's no nspluginwrapper in-between
  the infamous "youtube issue" never occurs
- install DEBUG with symbols [3] and describe the option better [4]
- enable dumping about:memory upon kill -65, kill -66 and GC/CC log
  upon kill -67 to a file under /tmp directory; linux-firefox uses
  kill -34, kill -35 and kill -36 respectively

PR:		ports/183861 [1]
PR:		ports/184006 [2]
PR:		ports/169896 [3]
PR:		ports/184285 [3]
PR:		ports/184286 [4]
Security:	dd116b19-64b3-11e3-868f-0025905a4771
In collaboration with: Jan Beich <jbeich@tormail.org>