- Document Django multiple vulnerabilities

Document net-im/py-matrix-synapse vulnerabilities

PR:		241574
Submitted by:	Sascha Biberhofer <ports@skyforge.at>

Document gitlab-ce vulnerability.

Document www/gitlab-ce vulnerabilities.

Document webkit2-gtk3 vulnabilities

security/vuxml: Document net/py-urllib3 issues

PR:		229322
Security:	CVE-2018-20060
		CVE-2019-11236
		CVE-2019-11324

security/vuxml: add FreeBSD kernel entries for recent Intel CVEs

PR:		241931
Submitted by:	Miroslav Lachman <000.fbsd@quip.cz>
Reviewed by:	dch
Approved by:	joneum (ports-secteam)
Security:	CVE-2019-11135
Security:	CVE-2019-11139
Security:	CVE-2018-12126
Security:	CVE-2018-12127
Security:	CVE-2018-12130
Security:	CVE-2018-11091
Security:	CVE-2017-5715
Security:	CVE-2018-12207
Sponsored by:	SkunkWerks, GmbH

Add entry for security/clamav

PR:		242118
Sponsored by:	Netzkommune GmbH

Add entry for dns/unbound

PR:		242075
Sponsored by:	Netzkommune GmbH

security/vuxml: Document www/gitea issues

PR:		241981
Submitted by:	Nils Johannsen <nilsjohannsen@gmx.de> (based on)
Approved by:	stb@lassitu.de (maintainer)

Document asterisk vulnerabilities.

Remove extra whitespace.

Document intel drm driver vulnerabilities

Document intel drm driver vulnerabilities related to Intel 2019.2 IPU [1].

[1]
https://blogs.intel.com/technology/2019/11/ipas-november-2019-intel-platform-update-ipu

Add entry for www/squid

PR:		241976
Sponsored by:	Netzkommune GmbH

Document libidn2 vulnerability

Document vulnerabilities in GNU cpio < 2.13.

Document libmad vulnerability

Fix build.

Sponsored by:	Rubicon Communications, LLC (netgate.com)

Document new vulnerability in www/chromium < 78.0.3904.97

fix typo

Sponsored by:	Netzkommune GmbH

Add entry for wordpress

Sponsored by:	Netzkommune GmbH

security/vuxml: Document nexus2-oss vulnerabilities

PR:		241308
Approved by:	tz (mentor, implicit)

Adjust affected GNU patch package version after r516964.

security/vuxml: Document PHP RCE issues

- Document mediawiki's multiple vulnerabilities

security/vuxml: Document MySQL quarterly vulns

Adjust entry 381deebb-f5c9-11e9-9c4f-74d435e60b7c for sysutils/file.

Upstream version 5.37 is vulnerable, but the update to 5.37 in the ports tree
was landed with a fix for the CVE entry.

PR:		241424

Add entry for heap buffer overflow in sysutils/file.

PR:		241424
Submitted by:	Nathan Owens <ndowens04@gmail.com>
Approved by:	jharris@widomaker.com (maintainer)

Document webkit-gtk3 vulnerabilities.

Document www/gitea information disclosure vulnerability

PR:		241599
Submitted by:	stb@lassitu.de (maintainer)
Approved by:	tz (mentor, implicit)

Fix build.

Sponsored by:	Rubicon Communications, LLC (Netgate)

Add entry about Samba vulnerabilities

o  CVE-2019-10218:
   Malicious servers can cause Samba client code to return filenames containing
   path separators to calling code.
o  CVE-2019-14833:
   When the password contains multi-byte (non-ASCII) characters, the check
   password script does not receive the full password string.
o  CVE-2019-14847:
   Users with the "get changes" extended access right can crash the AD DC LDAP
   server by requesting an attribute using the range= syntax.

Security:	CVE-2019-10218
		CVE-2019-14833
		CVE-2019-14847
Sponsored by:	my wife

Document gitlab vulnerabilities.

Add missing FreeBSD SAs

Security:	FreeBSD-SA-19:24.mqueuefs
Security:	FreeBSD-SA-19:23.midi
Security:	FreeBSD-SA-19:22.mbuf
Security:	FreeBSD-SA-19:21.bhyve
Security:	FreeBSD-SA-19:20.bsnmp
Security:	FreeBSD-SA-19:19.mldv2
Security:	FreeBSD-SA-19:18.bzip2

Document Varnish VSV00004 Workspace information leak

Document potential bypass of Runas user restrictions in sudo

PR:		241244
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>

Document rubygem-loofah vulnerability

- Document python37 multiple vulnerabilities.

security/vuxml: Document graphics/py-pillow issue

PR:		241268
Security:	CVE-2019-16865

security/vuxml: mongodb vulnerabilities

- CVE-2019-2386, CVE-2019-2389, CVE-2019-2390

PR:		239717
Submitted by:	Ronald Klop <ronald-lists@klop.ws>

security/vuxml: add CVE-2011-2767 [www/mod_perl2]

  https://nvd.nist.gov/vuln/detail/CVE-2011-2767

Take PORTEPOCH into account.

PR:		241066
Reported by:	tobik

Document two new Xpdf vulnerabilities: CVE-2019-16927 and CVE-2019-9877.

PR:		241066
Security:	https://nvd.nist.gov/vuln/detail/CVE-2019-16927
Security:	https://nvd.nist.gov/vuln/detail/CVE-2019-9877
Security:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9877
Security:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16927

Document unbound vulnerability

Document ruby vulnerability

Document gitlab vulnerabilities.

Document gitlab vulnerabilities.

Documented gitlab vulnerabilities.

security/vuxml: Document net-mgmt/cacti issue

PR:		240999
Reported by:	Michael Muenz <m.muenz@gmail.com>
Security:	CVE-2019-16723

Fix misprint

Document RCE in Exim: CVE-2019-16928

security/vuxml: Add entry for lang/go and lang/go-devel CVE-2019-16276

Approved by:	araujo (mentor)
Differential Revision:	https://reviews.freebsd.org/D21802

Document databases/mantis vulnerabilities

Document Jenkins Security Advisory 2019-09-25

Sponsored by:	The FreeBSD Foundation

Add linux-c6-openssl to CVE-2019-1559 entry.

Security:	https://access.redhat.com/errata/RHSA-2019:2471

security/vuxml: add CVEs for net/kea

PR:		240399
Submitted by:	Andrey Pevnev <apevnev@me.com>

security/vuxml: add entry for CVE-2019-15903 in expat < 2.2.8

PR:		240613
Submitted by:	Sergei Vyshenski <svysh.fbsd@gmail.com> (maintainer)

Document Mbed TLS side channel attack on deterministic ECDSA.

Security:	https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2019-10

security/vuxml: Mark bro < 2.6.4 as vulnerable as per:

   
https://raw.githubusercontent.com/zeek/zeek/3b5a9f88ece1d274edee897837e280ef751bde94/NEWS

The issue is inproper data handling of data that is either either
empty or unterminated, resulting in invalid memory access or heap
buffer over-read.

Approved by:	matthew (mentor, implicit)

security/vuxml: fix vuln.xml entry for expat

PR:		238864
Submitted by:	tobik

security/vuxml: document expat2 pre-2.2.7 vulnerability

PR:		238864
Submitted by:	Sergei Vyshenski <svysh.fbsd@gmail.com>

security/vuxml: Fix latest openssl entry

Reported by:	tobik

Document curl vulnerability

security/vuxml: Document OpenSSL vulnerabilities

Document the latest Flash Player vulnerabilities.

https://helpx.adobe.com/security/products/flash-player/apsb19-46.html

Document devel/oniguruma < 6.9.3 vulnerabilities.

PR:		240368
Reported by:	Pascal Christen
Obtained from:	MITRE
Security:	a8d87c7a-d1b1-11e9-a616-0992a4564e7c
Security:	CVE-2019-13224
Security:	CVE-2019-13225

Document recent xymon-server CVEs

Add entry for wordpress

Sponsored by:	Netzkommune GmbH

Document Exim vulnerability

Document asterisk vulnerabilities.

Add entry about CVE-2019-10197

On a Samba SMB server for all versions of Samba from 4.9.0 clients are
able to escape outside the share root directory if certain
configuration parameters set in the smb.conf file.

Security:	CVE-2019-10197

security/vuxml: mark firefox < 69 as vulnerable

- Document www/varnish6 vulnerability

Document libgcrypt ECDSA side-channel attack vulnerability

Security:	CVE-2019-13627

Update ruby version

PR:		240227
Reported by:	Trond Endrestol <Trond.Endrestol@ximalas.info>

Document www/webkit2-gtk3 vulnerabilities

PR:		240196

Document www/gitlab-ce vulnerabilities.

Document RDoc vulnerability

security/vuxml: document dovecot,dovecot-pigeonhole vulns

Document Jenkins Security Advisory 2019-08-28

Sponsored by:	The FreeBSD Foundation

security/vuxml: mark cliqz < 1.28.2 as vulnerable

PR:		239994
Submitted by:	Santhosh Raju

security/vuxml: Document multiple vulnerabilities in www/h2o*

http://blog.kazuhooku.com/2019/08/h2o-version-226-230-beta2-released.html

PR: 239843
Reported by:	Kazuho Oku
Approved by:	jrm (mentor, implicit)
Security:	CVE-2019-9512
Security:	CVE-2019-9514
Security:	CVE-2019-9515
Sponsored by:	SkunkWerks, GmbH

security/vuxml: Document www/gitea issues

PR:		240046
Submitted by:	stb@lassitu.de (maintainer)

security/vuxml: Document multiple vulnerabilities in ClamAV

PR:		240020
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org> (clamav maintainer)

security/vuxml: document recent Node.js vulnerabilities

https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/

Sponsored by:	Miles AS

Document vlc vulnerabilities prior to release 3.0.8

Add dns/nsd

PR:		239964
Reported by:	Jaap Akkerhuis <jaap@NLnetLabs.nl>
Sponsored by:	Netzkommune GmbH

security/vuxml: add vuxml entry for webmin and usermin (CVE-2019-15107).

security/vuxml: add vuxml entry for gitea

PR:		239930
Submitted by:	stb@lassitu.de

Document x11/xdm vulnerability CVE-2013-2179

Document libgit2 vulnerabilities.

Add www/apache24

Sponsored by:	Netzkommune GmbH

Document nghttp2 vulnerability

Document CUPS CVE-2019-8675 and CVE-2019-8696.

Security:	https://github.com/apple/cups/releases/tag/v2.2.12

security/vuxml: Update entry for security/doas

* Add a reference to OpenBSD's tech mailinglist that explains the issues
  with doas(1)'s environmetal security in further detail.
* Clarify the origins of the reporting sources and fix a grammar nit.

PR:		239629
Reported by:	Sander Bos

Document http/2 denial of service in net/traefik before 1.7.14

Edit entry for www/nginx

Sponsored by:	Netzkommune GmbH

Add entry for www/nginx and www/nginx-devel

Sponsored by:	Netzkommune GmbH

Document rubygem-nokogiri vulnerability

Document www/gitlab-ce vulnerabilities.