Document libgcrypt ECDSA side-channel attack vulnerability

Security:	CVE-2019-13627

Update ruby version

PR:		240227
Reported by:	Trond Endrestol <Trond.Endrestol@ximalas.info>

Document www/webkit2-gtk3 vulnerabilities

PR:		240196

Document www/gitlab-ce vulnerabilities.

Document RDoc vulnerability

security/vuxml: document dovecot,dovecot-pigeonhole vulns

Document Jenkins Security Advisory 2019-08-28

Sponsored by:	The FreeBSD Foundation

security/vuxml: mark cliqz < 1.28.2 as vulnerable

PR:		239994
Submitted by:	Santhosh Raju

security/vuxml: Document multiple vulnerabilities in www/h2o*

http://blog.kazuhooku.com/2019/08/h2o-version-226-230-beta2-released.html

PR: 239843
Reported by:	Kazuho Oku
Approved by:	jrm (mentor, implicit)
Security:	CVE-2019-9512
Security:	CVE-2019-9514
Security:	CVE-2019-9515
Sponsored by:	SkunkWerks, GmbH

security/vuxml: Document www/gitea issues

PR:		240046
Submitted by:	stb@lassitu.de (maintainer)

security/vuxml: Document multiple vulnerabilities in ClamAV

PR:		240020
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org> (clamav maintainer)

security/vuxml: document recent Node.js vulnerabilities

https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/

Sponsored by:	Miles AS

Document vlc vulnerabilities prior to release 3.0.8

Add dns/nsd

PR:		239964
Reported by:	Jaap Akkerhuis <jaap@NLnetLabs.nl>
Sponsored by:	Netzkommune GmbH

security/vuxml: add vuxml entry for webmin and usermin (CVE-2019-15107).

security/vuxml: add vuxml entry for gitea

PR:		239930
Submitted by:	stb@lassitu.de

Document x11/xdm vulnerability CVE-2013-2179

Document libgit2 vulnerabilities.

Add www/apache24

Sponsored by:	Netzkommune GmbH

Document nghttp2 vulnerability

Document CUPS CVE-2019-8675 and CVE-2019-8696.

Security:	https://github.com/apple/cups/releases/tag/v2.2.12

security/vuxml: Update entry for security/doas

* Add a reference to OpenBSD's tech mailinglist that explains the issues
  with doas(1)'s environmetal security in further detail.
* Clarify the origins of the reporting sources and fix a grammar nit.

PR:		239629
Reported by:	Sander Bos

Document http/2 denial of service in net/traefik before 1.7.14

Edit entry for www/nginx

Sponsored by:	Netzkommune GmbH

Add entry for www/nginx and www/nginx-devel

Sponsored by:	Netzkommune GmbH

Document rubygem-nokogiri vulnerability

Document www/gitlab-ce vulnerabilities.

Add vuxml for KDE Frameworks CVE

security/vuxml: Document security/doas issues

PR:		239629

security/vuxml: Mark bro < 2.6.3 as vulnerable as per:

   
https://raw.githubusercontent.com/zeek/zeek/1d874e5548a58b3b8fd2a342fe4aa0944e779809/NEWS

The issues are a null pointer dereference in the RPC analysis code
and a signed integer overflow in BinPAC-generated parser code.

Approved by:	matthew (mentor, implicit)

Add security information for PostgreSQL

Document Django vulnerability

Add linux-c7-curl package to curl CVE-2018-14618 entry.

Security:	https://access.redhat.com/errata/RHSA-2019:1880
Security:	CVE-2018-14618

security/vuxml: Document www/gitea issues

PR:		239562
Submitted by:	stb@lassitu.de (maintainer)

Document FreeBSD-SA-19:17.fd

Document FreeBSD-SA-19:16.bhyve

Document FreeBSD-SA-19:15.mqueuefs

Document FreeBSD-SA-19:14.freebsd32

Document FreeBSD-SA-19:13.pts

Document FreeBSD-SA-19:12.telnet

Document FreeBSD-SA-19:11.cd_ioctl

Document FreeBSD-SA-19:10.ufs

Document FreeBSD-SA-19:09.iconv

Document FreeBSD-SA-19:08.rack

Document FreeBSD-SA-19:07.mds

Document FreeBSD-SA-19:06.pf

Document FreeBSD-SA-19:05.pf

Add freebsdsa metadata for FreeBSD-SA-19:04.ntp

Add freebsdsa metadata to the entry detailing FreeBSD-SA-19:03.wpa

Document www/gitlab-ce vulnerabilities.

Add more CVE references to sdl2_image entry

security/vuxml: Document net-im/py-matrix-synapse issues

PR:		239013
Submitted by:	Sascha Biberhofer <ports@skyforge.at> (maintainer)

Fix version range of exim entry

It currently does not account for PORTREVISION, i.e., it excludes
4.92_1, 4.92_2, 4.92_3, 4.92_4 which are affected by CVE-2019-13917
too.

Document exim vulnerability CVE-2019-13917

security/vuxml: mark seamonkey 2.49.5 as vulnerable

security/vuxml: Add vulns from Oracle 2019-07 Critical Patch Update

- Add drupal8 vulnerability entry
- Modify 9b8a52fc-89c1-11e9-9ba0-4c72b94353b5 entry. Drupal8 was affected too

Document PuTTY < 0.72 vulnerabilities.

Document Jenkins Security Advisory 2019-07-17

Sponsored by:	The FreeBSD Foundation

document libxslt issue

PR:		238049
Submitted by:	egypcio

Document asterisk vulnerabilities.

- Document python37 multiple vulnerabilities

security/vuxml: mark firefox < 68 as vulnerable

Add vuxml entry for gnupg < 2.2.17

- Document python 3.6 multiple vulnerabilities

PR:		238952
Submitted by:	wenheping2000@hotmail.com(myself)
Reviewed by:	koobs@

Add Linux packages to the latest libssh2 entry.  Also link to all CVEs.

Document webkit2-gtk3 vulnerabilities

PR:		239003

- Document mediawiki multiple vulnerabilities

Document ettercap vulnerability

Documented several gitlab security vulnerabilities.

Document SDL2_image vulnerabilities

security/vuxml: Document irc/irssi issue

PR:		238892
Security:	CVE-2019-13045

- Document Django vulnerabilities.

PR:		238911, 238910
Submitted by:	koobs@

Document minor bzip2 issues

PR:		238854

Document powerdns issue

PR:		239705
Submitted by:	Ralf van der Enden <tremere@cainites.net>

Document typo3 vulnerability

PR:		238862, 238863

Add vuxml entry for postgresql lt 10.9 and lt 11.4

security/vuxml: Document irc/znc issue

Security:	CVE-2019-12816

document recent Mozilla advisories

MFSA2019-17, MFSA2019-19, MFSA2019-20

Document two vulnerabilities in vlc < 3.0.7.1, potential remote exploit

security/vuxml: mark waterfox < 56.2.11 as vulnerable

https://github.com/MrAlex94/Waterfox/commit/27ce846f9d46

security/vuxml: mark firefox < 67.0.3 as vulnerable

Fix version range of recent ImageMagick6 entry

graphics/ImageMagick6 has PORTEPOCH=1 (ImageMagick7 does not) but
it is not included in vuln.xml.  The recent vulnerabilities are
never raised by pkg audit as a result and users are left uninformed
about them.

Add an entry for netatalk3.

Document the netatalk3 remote code execution vulnerability fixed in 3.1.12.

PR:		238573

Document GraphicsMagick vulnerability

security/vuxml: add entry for www/chromium < 75.0.3770.90

Document PMASA-2019-4; CSRF vulnerability in login form

Add entry for Vim/NeoVim arbitrary code execution

Add entry for www/mybb

Sponsored by:	Netzkommune GmbH

Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb19-30.html

Set correct Port Name for last drupal7 entry

Sponsored by:	Netzkommune GmbG

Fix vuxml build.

Sponsored by:	The FreeBSD Foundation

Add entry for drupal7

- Set correct modified Date for 183d700e-ec70-487e-a9c4-632324afa934

Sponsored by:	Netzkommune GmbH

Document Exim RCE CVE-2019-10149

- Document Django vulnerabilities.

Fix modification date, the future isn't quite here yet.

Reported by:	Daniel Ebdrup

Fix Imagemagick 6 package name.

Document gitlab vulnerabilities.

security/vuxml: Add buildbot -- OAuth Authentication Vulnerability

security/vuxml: Mark bro < 2.6.2 as vulnerable as per:

   
https://raw.githubusercontent.com/zeek/zeek/bb979702cf9a2fa67b8d1a1c7f88d0b56c6af104/NEWS

The issue is unsafe integer conversions that can cause unintentional
code paths to be executed.

Reviewed by:	ler (mentor)
Approved by:	ler (mentor)
Security:	CVE-2019-12175
Differential Revision:	https://reviews.freebsd.org/D20481