update versions for tomcat issue

Document tomcat issue

security/vuxml: Document latest cURL vulnerability

- Re-add 6887828f-0229-11e0-b84d-00262d5ed8ee as cancelled, instead of purging
it

Submitted by:	Mathieu Arnold <mat@FreeBSD.org>

Document FreeBSD-SA-17:06.openssh

Document FreeBSD-SA-17:05.heimdal

security/vuxml: seamonkey 2.49.1 build2 uses gecko from firefox 52.4

fix typo in dnsmasq < 2.78 entries

Security: b77b5646-a778-11e7-ac58-b499baebfeaf

security/vuxml: Fix title on latest entry

security/vuxml: Document dnsmasq vulnerabilities

- Add a warning if the description section seems unnecessarily large

Submitted by:	Vladimir Krstulja
Approved by:	ports-secteam (with hat)

- Condense additional entries where description >4500 characters

Approved by:	ports-secteam (with hat)

- Condense entries whose description is >5000 characters

Approved by:	ports-secteam (with hat)

- Add date format validation

Submitted by:	Vladimir Krstulja (via IRC)

- Purge another batch of superceded www/chromium entries to give us additional
headroom under the 5M vuln.xml file size limit

Approved by:	ports-secteam (with hat)

Document phpmyfaq issues

Document wordpress issues

- Fix invalid date entries
- Purge 6887828f-0229-11e0-b84d-00262d5ed8ee as it has been superceded by other
entries and it is massive. (We have hit 5M on vuln.xml)

Fix date format

While here, correct some grammar

PR:		222683
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>

security/vuxml: mark firefox < 56 as vulnerable

Document sam2p issue

docuent libraw issue

Extend OpenVPN security issue to slave ports.

Security:	CVE-2017-12166
Security:	3dd6ccf4-a3c6-11e7-a52e-0800279f2ff8

Document OpenVPN <2.4.4 CVE-2017-12166 legacy vuln.

Security:	CVE-2017-12166
Security:	3dd6ccf4-a3c6-11e7-a52e-0800279f2ff8

Fix version range for libzip's CVE-2017-14107 (r450692).

I am going to land a fix for libzip 1.1.3 (the version currently in the ports
tree) instead of updating the port to 1.3.0. 1.3.0 has a different SOVERSION
number, which also requires updating dependent ports and makes MFH'ing the fix
more difficult.

PR:		222638

Document ImageMagick issue

Update rubygem-geminabox vulnerability

Document libofx issue

Correct version of libbson issue

Document sugarcrm issue

Document libzip issue

Document libbson issue

Document multiple vulnerabilities in tcpdump

Document libraw issue

Document libraw issue

Document issue in gd

Document issue in php and gd

Document ledger vulnerabilities

Document aacplusenc issue

Document ansible issue

Add second CVE To geminabox entry, update versions affected

security/vuxml: Document WeeChat 1.9 vulnerability

Document Perl vulnerability

Document new vulnerabilities in www/chromium < 61.0.3163.100

Obtained
from:	https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop_21.html

Add new asterisk ports vulnerability.

security/vuxml: adjust for seamonkey 2.49.1

Document Ruby vulnerability

Document rubygem-geminabox vulnerability

Add new entry for Apache "OptionsBleed"

Reviewed by:	zi

Document GitLab vulnerabilities

Security: CVE-2017-5029
Security: CVE-2016-4738
Security:
https://vuxml.FreeBSD.org/freebsd/6a177c87-9933-11e7-93f7-d43d7e971a1b.html

- Add emacs-devel to the list of affected packages by emacs vulnerability
- Move it to the top, didn't realize this before. Sorry

Document latest Flash Player vulnerabilities.

https://helpx.adobe.com/security/products/flash-player/apsb17-28.html

- Correct package name in Emacs vulnerability
- Also add emacs-nox11 to the list

- Document emacs vulnerability

Document cyrus-imapd vulnerability

Security:	CVE-2017-14230

Fix indent

Document Django vulnerability

Correct vulnerability range for atril and atril-lite.

PR:		221867
Submitted by:	rkoberman@gmail.com
Security:	CVE-2017-1000083

Document new vulnerabilities in www/chromium < 61.0.3163.79

Obtained
from:	https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html

Cancel CVE-2017-6419 for security/clamav

This only affected clamav-devel / the unreleased code for 0.99.3.

Document clamav vulnerability

PR:		221608
Security:	CVE-2017-6419

Document gdk-pixbuf2 vulnerabilities

Security:	CVE-2017-2862 CVE-2017-2870

Document vulnerabilities in asterisk ports.

Document libgcrypt side-channel attack vulnerability

Security:	CVE-2017-0379

Update pspp version range to 1.0.1

security/vuxml: Add entry for multiple rubygems vulnerabilities reported
2017-08-29 at
https://www.ruby-lang.org/en/news/2017/08/29/multiple-vulnerabilities-in-rubygems/

Approved by:	swills

Document vulnerabilities of www/kanboard

PR:		221826

Document issues in poppler

PR:		220608

Document vulnerabilities of mail/phpmailer

Document salt security vulnerability

Obtained
from:	https://docs.saltstack.com/en/latest/topics/releases/2017.7.1.html

Document dnsdist vulnerabilities

Obtained from:	https://dnsdist.org/security-advisories/index.html

Document security vulnerability in evince and atril

PR:		220713
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>

Document SquirrelMail vulnerability

Document vulnerabilities in math/pspp < 1.0.0

Obtained
from:	https://www.cvedetails.com/vulnerability-list/vendor_id-72/product_id-38732/year-2017/GNU-Pspp.html

Update the latest libsoup entry with the fixed version.

- Add entry about drupal8 vulnerabilities

security/vuxml: Document devel/libsoup vulnerability

security/vuxml: Document Zabbix vulnerability

Security:	CVE-2017-2824

security/vuxml: Document vulnerability in sysutils/py-supervisor

PR:		221539
Submitted by:	Franz Glasner <f.glasner@feldmann-mg.com>
Security:	CVE-2017-11610

Fix typo in affected versions of GitLab vulnerabilities

Document freeradius vulnerabilities

Document Mercurial vulnerability

security/vuxml: Update recent MySQL entry

 - Changelog reveals MariaDB 10.0.31 and 10.1.25 vulnerable

Match both dovecot and dovecot2.

Submitted by:	mat

Chase dovecot2's rename to dovecot.

Reported by:	remko

 Add CVE-2017-9800 for subversion ports.

Security:	http://subversion.apache.org/security/CVE-2017-9800-advisory.txt

Document GitLab vulnerabilities

Security: CVE-2017-12426
Security:
https://vuxml.FreeBSD.org/freebsd/abcc5ad3-7e6a-11e7-93f7-d43d7e971a1b.html

security/vuxml: Consolidate duplicate Apache Commons FileUpload entries

This also remove a wrong entry that marks tomcat 6 as vulnerable

Approved by:	ports-secteam (zi)
Differential Revision:	https://reviews.freebsd.org/D11941

Add CVE:s fixed in latest PostgreSQL release

Document latest Flash Player vulnerabilities.

https://helpx.adobe.com/security/products/flash-player/apsb17-23.html

security/vuxml: Document today's cURL vulnerabilities

security/vuxml: Document axis2 vulnerability

Security:	CVE-2016-1000031

security/vuxml: mark firefox < 55 as vulnerable

Update sqlite3 vuxml entry

The lower bound was incorrect. It has existed much longer than 3.17.0.

Document sqlite3 vulnerability

Security:	CVE-2017-10989

Fix Strongswan entries

PR:		220874

Document varnish vulnerability

Security:	https://varnish-cache.org/security/VSV00001.html

Document new vulnerabilities in www/chromium < 60.0.3112.78

Obtained
from:	https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html

security/vuxml: Document vulnerability in cacti v1.1.13

Security:	CVE-2017-11691

security/vuxml: fix indent in last entry