Document rubygem-loofah vulnerability

Document py-notebook vulnerability

Document zero-day remote vulnerability in mail/squirrelmail

Reported by:	Roger Marquis <marquis@roble.com> via e-mail
Security:	CVE-2018-8741

security/vuxml: mark slurm-wlm < 17.02.10 as vulnerable

Security:	CVE-2018-7033

security/vuxml: mark libvorbis < 1.3.6 as vulnerable

security/vuxml: bump waterfox version after r464679

Mark e2fsprogs < 1.44.0 vulnerable.

Initial entry for the speculative execution vulnerability
(FreeBSD-SA-18:03.speculative_execution)

Update NTP entry to add the FreeBSD SA information (FreeBSD-SA-18:02.ntp)

Document FreeBSD-SA-18:01.ipsec

Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb18-05.html

security/vuxml: mark firefox < 59 as vulnerable

Add an entry for Samba vulnerabilities CVE-2018-1050 and CVE-2018-1057

Security:	CVE-2018-1050
		CVE-2018-1057

Document mbed TLS Security Advisory 2018-01.

Security:	https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-01
Security:	CVE-2018-0487
Security:	CVE-2018-0488

Document vulnerabilities in www/chromium before 65.0.3325.146

Submitted by:	Tommi Pernila <tommi.pernila@iki.fi> (via e-mail)

document vulnerabilities for net/wireshark{,-lite,qt5} and net/tshark{,-lite}

PR:		226355
Obtained from:	https://www.wireshark.org/security/

- Document vulnerabilities (CVE-2018-5732, CVE-2018-5733) in isc-dhcp ports

Document additional vulnerabilities in audio/libsndfile

Document PostgreSQL vulnerability

Security:	CVE-2018-1058

Document strongswan vulnerability

PR:		226043
Submitted by:	strongswan@Nanoteq.com
Security:	CVE-2018-6459
Sponsored by:	Rubicon Communications, LLC (Netgate)

Document vulnerability in audio/libsndfile and audio/linux-c[6|7]-libsndfile

Document multiple NTP vulnerabilities.

Document CVE-2018-6056 in chromium 64.0.3282.167

Reported by:	Tommi Pernila <tommi.pernila@iki.fi> (via e-mail)

Document multiple vulnerabilities in chromium 64.0.3282.119

Reported by:	Tommi Pernila <tommi.pernila@iki.fi> (via e-mail)

Document CVE-2018-1304 and CVE-2018-1305 in Apache Tomcat

Submitted by:	Roger Marquis <marquis@roble.com> via e-mail

Document security problems with shibboleth-sp

Security:	CVE-2018-0489

Document multiple vulnerabilities in www/drupal7 and www/drupal8

Security:	CVE-2017-6927
Security:	CVE-2017-6928
Security:	CVE-2017-6929
Security:	CVE-2017-6930
Security:	CVE-2017-6931
Security:	CVE-2017-6932

- Fix range for ja-mailman in CVE-2018-5950

Document ssh injection vulnerability in devel/cvs

PR:		226088
Reported by:	fk@fabiankeil.de
Security:	CVE-2017-12836

security/vuxml: Document vulnerability in editors/libreoffice

Security:	CVE-2018-6871

PR:		225797
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>

security/vuxml: Document vulnerabilities in www/squid

Security:	CVE-2018-1000024
Security:	CVE-2018-1000027

PR:		226138
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>

security/vuxml: Fix freebsdpr entry (r462310)

Document new asterisk and pjsip vulnerabilities.

Document the latest phpMyAdmin security advisory PMASA-2018-1

Document GitLab Vulnerability

Security:
https://vuxml.FreeBSD.org/freebsd/86291013-16e6-11e8-ae9f-d43d7e971a1b.html

security/vuxml: Document multiple vulnerabilities in irc/irssi

Security:	CVE-2018-7054
Security:	CVE-2018-7053
Security:	CVE-2018-7052
Security:	CVE-2018-7051
Security:	CVE-2018-7050

PR:		226001
Reported by:	tj@mrsk.me (email)
Reported by:	David O'Rourke <dor.bsd@xm0.uk>

Add Mojolicious vulnerability, for which there is very little
information about the actual issue.

- document bugzilla44 and bugzilla50 CVE issue

Mark bro < 2.5.3 as vulnerable as per:

    http://blog.bro.org/2018/02/bro-253-released-security-update.html

Reviewed by:	matthew (mentor)
Approved by:	matthew (mentor)
Differential Revision:	https://reviews.freebsd.org/D14395

Fix typo

Document consul issue

Mark bro < 2.5.2 as vulnerable as per:

    http://blog.bro.org/2017/10/bro-252-242-release-security-update.html

Reviewed by:	ler (mentor)
Approved by:	ler (mentor)
Security:	CVE-2017-1000458
Differential Revision:	https://reviews.freebsd.org/D14394

security/vuxml: 4 CVEs for net/quagga

Document vulnerabilities in graphics/libraw

VulnXML: Bitmessage vulnerability

No CVE is available. CVE is requested.
The bitmessage port will be updated shortly.

Approved by:	tcberner

Document Jenkins vulnerability

VulnXML records for vulnerabilities of sysutils/bchunk fixed in the upcoming
update to 1.2.2 (bug#225772)

Approved by:	tcberner (mentor, implicit)

- Document www/uwsgi vulnerability

- Fix URL in blockquote

Reported by:	remko via private email

Correct affected version of Mpv

Document python vulnerability

Document vulnerability in finance/electrum and finance/electrum2.

PR:		225056
Submitted by:	pete@nomadlogic.org, vermaden@interia.pl (via mail)
Security:	CVE-2018-6353

security/vuxml: Document vulnerability in net-p2p/libtorrent

PR:		224664
Reported by:	Henry David Bartholomew <PopularMoment@protonmail.com>

- Document CVE-2018-6789 in mail/exim

Security:	316b3c3e-0e98-11e8-8d41-97657151f8c2

Add entries for CVE-2017-17969 and CVE-2018-5996 in p7zip

Security:	CVE-2017-17969
Security:	CVE-2018-5996

Document vulnerability in Mpv

PR:		225783
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>
Obtained from:	https://nvd.nist.gov/vuln/detail/CVE-2018-6360
Security:	CVE-2018-6360

Extend mailman CVE-2018-5950 vuln entry to mailman-with-htdig

Security:	3d0eeef8-0cf9-11e8-99b0-d017c2987f9a
Security:	CVE-2018-5950

Document Mailman vulnerability

PR:		225767
Submitted by:	Vladimir Krstulja
Reviewed by:	Matthias Andree
Security:	CVE-2018-5950
Security:	3d0eeef8-0cf9-11e8-99b0-d017c2987f9a

Add security notice for PostgreSQL

Security:	CVE-2018-1052
Security:	CVE-2018-1053

security/vuxml: Document recent tiff CVEs

PR:		225545
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>

Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb18-03.html

Mark mini_httpd < 1.28 and thttpd < 2.28 as vulnerable as per:

    http://acme.com/updates/archive/199.html

While we're here, fix whitespace in vuln.xml that "make validate"
flagged.

Reviewed by:	ler (mentor)
Approved by:	ler (mentor)
Security:	CVE-2017-17663
Differential Revision:	D14217

Adding VuXML record for vulnerability CVE-2017-15924 in net/shadowsocks-libev.

D14200 (part I).

The next commit will update net/shadowsocks-libev and fix this
vulnerability.

PR:		225442
Submitted by:	myself
Approved by:	adamw (mentor)
Differential Revision:	https://reviews.freebsd.org/D14200

Add modification date for the entry of w3m vulnerabilities.

Spotted by:	 dbaio

Update entry of w3m vulnerabilities.

PR:		225611
Submitted by:	D. Ebdrup <debdrup@gmail.com>

Document www/palemoon vulnerabilities

PR:		225644
Security:	CVE-2018-5102
Security:	CVE-2018-5122

Document django vulnerability

Document vulns in www/w3m.

PR:		225611
Submitted by:	D. Ebdrup <debdrup@gmail.com>

Update range for dovecot vulnerability.

security/vuxml: mark waterfox < 56.0.3.65 as vulnerable

Add modified date, forgotten in r460325

security/vuxml: mark firefox < 58.0.1 as vulnerable

security/vuxml: bump min waterfox version with FF58 fixes

Update range for linux-*-nss.

PR:		225541
Submitted by:	dbn
Security:	https://access.redhat.com/errata/RHSA-2017:2832

FIx range for dovecot

2.2.33.2_2 is vulnerable.

Document gcab stack overflow.

Security:	CVE-2018-5345

Document dovecot issue

Submitted by:	Roger Marquis <marquis@roble.com>

Document curl issue

Submitted by:	Roger Marquis <marquis@roble.com>

document recent clamav vulnerabilities

See: http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html

Fix wordpress entries in vuxml

- Fix incorrect package names
- Fix epoch in older entry which makes it incorrectly report fresh ports as
vulnerable

With hat:	ports-secteam

security/vuxml: seamonkey 2.49.2 will use firefox-esr 52.6 engine

security/vuxml: mark firefox < 58 as vulnerable

Fix typo.

Document new vulnerability in dns/powerdns-recursor < 4.1.1

Obtained
from:	https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-01.html
Security:	CVE-2018-1000003

Document new vulnerabilities in www/chromium < 63.0.3239.108

Obtained
from:	https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop_14.html
Security:	CVE-2017-15429

Document new vulnerabilities in www/chromium < 63.0.3239.84

Obtained
from:	https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html

Document new vulnerability in www/chromium < 62.0.3202.94

Obtained
from:	https://chromereleases.googleblog.com/2017/11/stable-channel-update-for-desktop_13.html
Security:	CVE-2017-15428

Add missing entry for www/chromium

Security:	CVE-2017-15406

Add more information about the recents security notice for shibboleth2-sp

security/vuxml: Document vulnerability in dns/unbound

Security:	CVE-2017-15105

PR:		225313
Reported by:	jaap@NLnetLabs.nl

Document phpbb3 issues

Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D13983

security/vuxml: Fix tabs and spaces settings

security/vuxml: Document 2018Q1 Oracle MySQL vulns

Document wordpress issues

Approved by:	tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D13954

Document GitLab issue

Document DNS rebinding vulnerabilities in net-p2p/transmission-daemon

PR:		225150
Security:	https://www.vuxml.org/freebsd/3e5b8bd3-0c32-452f-a60e-beab7b762351.html

Document vulnerability of devel/xmltooling

security/shibboleth2-sp depends on the xmltooling port

Security:	CVE-2018-0486

Add vim-console instead of replacing vim-list.

Reported by:	ohauer

Chase the vim-lite -> vim-console rename

Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb18-01.html