Document drupal6 multiple vulnerabilities.

Submitted by:   Nick Hilliard <nick@foobar.org>

Document Erlang R14B02 ssh library vulnerability (cryptographically
weak RNG).

Security:       CVE-2011-0766

Document latest www/chromium vulnerabilities.

Security:       CVE-2011-1801, -1804, -1806, -1807

- Cleanup Part 1

PS: wonder when pplz start to ask ports-security for review ...

- Document the last unbound vulnerability

 - revert last change of apr-* entry

 Broken build reported by wxs@

- use apr-* and add <gt></gt> entries for all apr0/apr1 issues
  (<gt> .. is needed else the parser cannot make a difference
   between apr0 and apr1)

- lowercase ViewVC -> viewvc

 Thanks Jun Kuriyama ( kuriyama@ ) for the notice and the patch
 for the apr entries.

Update the mod_pubcookie entry with an ap20 prefix.  The port has alwasy
has USE_APACHE=2.0 in it so we can avoid enumarating all values of
APACHE_PKGNAMEPREFIX.

Pointy hat:     brooks

Unbreak VuXML web build by changing "ap*-" to "ap-" in package name for
1ca8228f-858d-11e0-a76c-000743057ca2 / mod_pubcookie -- Empty
Authentication Security Advisory.

While the new one is likely not correct, this fixes the build until
somebody can put in the right thing.

Fix build.

Partially address several years of neglect of pubcookie.  Indicate the
security issues in two two ports.

I've not use pubcookie in several year and given the lack of complaint
about the deprication of mod_pubcookie, I doubt anyone else uses it from
ports.  The mod_pubcookie port has already expired and I've set a two
week expriation for pubcookie-login-server.  If not maintainer
appears I will send both to the Attic on June 6th.

While I'm here, address the use of CONF_FILES and CONF_DIRS in
pubcookie-login-server to avoid getting in the way of progress. [0]

PR:             ports/157164 [0]
Security:       vuxml:115a1389-858e-11e0-a76c-000743057ca2
                vuxml:1ca8228f-858d-11e0-a76c-000743057ca2

- add entry for ViewVC < 1.1.11
- add entry for apr1 (CVE-2011-1928)
- correct version in previous apr1 entry
- run tidy

Update to 10.3r181.14 .

PR:             ports/156996
Submitted by:   Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>
Security:      
http://www.freebsd.org/ports/portaudit/d226626c-857f-11e0-95cc-001b2134ef46.html

Document Opera Frameset unload code injection vulnerability.

Document pure-ftpd multiple vulnerabilities prior to 1.0.32.

mail/exim: document CVE-2011-1764 and CVE-2011-1407

Both vulnerabilities are in the DKIM code and were fixed in 4.76.

Approved-by: erwin (mentor)
Feature-safe: yes

- document Apache APR DoS vulnerabilities

- Document www/zend-framework (potential SQL injection when using PDO_MySQL)

Security:       http://framework.zend.com/security/advisory/ZF2011-02

Document mediawiki multiple vulnerabilities.

PR:             ports/156914
Submitted by:   Ryan Steinmetz <rpsfa@rit.edu>

Document CVE-2011-1799 and CVE-2011-1800 for www/chromium

Incorporate changes recommended by the tidy target. While here, properly
label dc9f8335-2b3b-11e0-a91b-00e0815b8da8.

Document CVE-2011-1720: Postfix memory corruption error.

Document www/chromium vulnerabilities fixed in version 11.0.696.57

Security:       CVE-2011-[1303-1305, 1434-1452, 1454-1456]

Document mozilla -- multiple vulnerabilities

- document recent asterisk vulnerabilities
- fix topic in RT entry

Document VideoLAN-SA-1103. Heap corruption in MP4 demultiplexer in VLC.

Update to 10.2r159.1 .

Security:      
http://www.freebsd.org/ports/portaudit/32b05547-6913-11e0-bdc4-001b2134ef46.html

Document multiple vulnerabilities in RT www/rt36 and www/rt38

Document www/chromium vulnerabilities

Security:       CVE-2011-1301, CVE-2011-1302

Unbreak file format:
- Place <vuxml> tag at the start of the file.
- Close topic tags.

Pointy hat to:  cy

Add the following for security/krb5:
        MITKRB5-SA-2011-001 - kpropd denial of service
        MITKRB5-SA-2011-002 - KDC denial of service attacks
        MITKRB5-SA-2011-003 - KDC vulnerable to double-free when PKINIT enabled
        MITKRB5-SA-2011-004 - kadmind invalid pointer free()

Document a root exploit via rogue hostname in xrdb.

Limit affected mupdf version to <0.8

Submitted by:   tobez@ (irc)

Document "otrs" - several XSS attacks possible.

Fix typo

Submitted by:    Dan Langille <dan@langille.org>

Document isc-dhcp41-client and isc-dhcp31-client vulnerabilities.

PR:             ports/156246
Submitted by:   Douglas Thrift <douglas@douglasthrift.net>

Add CVE entry for recent tinyproxy vulnerability.

- tinyproxy

Document two quagga DoS vulnerabilities

Add a missing </p>.

Pointed out by: jadawin@

Document gdm privilege escalation vulnerability

Document vulnerabilities before Chromium 10.0.648.204

Obtained from: 
http://googlechromereleases.blogspot.com/search/label/Stable%20updates

Add entries for php5-exif and php5-zip before 5.3.6 release.

PR:             ports/155922
Submitted by:   Chris Tandiono <christandiono@tbp.berkeley.edu>

Update to 10.2r153.

Security:      
http://www.freebsd.org/ports/portaudit/501ee07a-5640-11e0-985a-001b2134ef46.html
PR:             ports/155874
Submitted by:   Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>

- Document mozilla -- update to HTTPS certificate blacklist

Document CVE-2011-0411: Postfix "STARTTLS" Plaintext
Injection Vulnerability.

Reviewed by:    miwi (secteam)

- Documented integer overflow in hiawatha web server

Submitted by:   C-S <c-s@c-s.li>

Document asterisk multiple vulnerabilities.

Mark chromium-9.0.597.107 and chromium-10.0.648.127 as vulnerable.

- Cleanup a bit

- Add correct infos to the avahi issus
- Add url to original advisory

Fix date in avahi entry.

Add avahi denial of services attack.

Fix discovery for mailman XSS vulnerabilities.

Noticed by:     erwin@
Pointyhat to:   wxs@

Document mail/mailman XSS vulnerabilities.

- Document redmine -- XSS vulnerability

Document subversion -- remote HTTP DoS vulnerability
Obtained from http://subversion.apache.org/security/CVE-2011-0715-advisory.txt

- Document mozilla -- multiple vulnerabilities

Document Chromium versions 9.0.597.[84,94,107]

Obtained from: 
http://googlechromereleases.blogspot.com/search/label/Stable%20updates

Add two OpenLDAP security by-pass vulnerabilities.

Fix broken linux-sun-jdk vulndb entries.

VuXML:          18e5428f-ae7c-11d9-837d-000e0c2e438a
VuXML:          c93e4d41-75c5-11dc-b903-0016179b2dd5
PR:             ports/154918

- Cleanup previous entry

- add asterisk -- Exploitable Stack and Heap Array Overflows

Document PivotX administrator password reset vulnerability.

- Update lastest tomcat entry (tomcat6/7 have the same problem)

Note: Please ask for review at ports-security@  THX!

- Document tomcat vulnerability

Document two phpMyAdmin vulnerabilities.

Update to 10.2r152.

PR:             ports/154630
Submitted by:   Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>
Security:      
http://www.freebsd.org/ports/portaudit/4a3482da-3624-11e0-b995-001b2134ef46.html
Feature safe:   yes

Document mupdf PDF handling remote code execution vulnerability.

Submitted by:   Tim Zingelman <tez netbsd.org>

Document rubygem-mail Remote Arbitrary Shell Command Injection Vulnerability.

Submitted by:   Tim Zingelman <tez netbsd.org>

Document plone remote security bypass vulnerability.

Submitted by:   Tim Zingelman <tez netbsd.org>

Document exim local privilege escalasion vulnerability.

Submitted by:   Tim Zingelman <tez netbsd.org>

Document OpenOffice multiple vulnerabilities.

Submitted by:   Tim Zingelman <tez netbsd.org>

- Cleanup previous commit

Document multiple webkit-gtk2 security vulnabilities, fixed in 1.2.7.

Document awstat multiple vulnerability.

Notified by:    Tim Zingelman <tez netbsd.org>

Document Opera multiple vulnerabilities.

Notified by:    Tim Zingelman <tez netbsd.org>

Document multiple vulnerabilities in Django.

Notified by:    Jesco Freund <jesco.freund my-universe.com>

- S/seriuos/serious

- Document mediawiki - multiple vulnerabilites

- Add chinese/wordpress-zh_CN and  chinese/wordpress-zh_TW to the previous
wordpress entry

- While here drop MD5 Support

Feature safe:   yes

- Add entry for wordpress - SQL injection vulnerability

PR:             153526
Submitted by:   Mark Foster <mark@foster.cc>
Feature safe:   yes

- Cleanup previous commit

Feature safe:   yes

Add vlc - Insufficient input validation in MKV demuxer vulnability.
Feature safe:   yes

- Cleanup previous Entry

Feature safe:   yes

- Document maradns -- denial of service when resolving a long DNS hostname

Submitted by:   n j <nino80 at gmail dot com>
Feature safe:   yes

Adjust range for ISC DHCPv6 server crash.

Feature safe:   yes

Document ISC DHCPv6 server crash.

Feature safe:   yes

Document "bugzilla" - multiple seriuos vulnerabilities.

Feature safe:   yes

Add dokuwiki multiple ACL escalation vulnerabilities.

Feature safe:   yes

Try to unbreak vuxml portaudit build by removing use of HTML entity.
UTF-8 chars should be used.

This is not a fix, just a hack to get it working for now.

Feature safe:   yes (really)

Describe www/chromium vulnerabilities between 8.0.552.215 and 8.0.552.237

Obtained from:  http://googlechromereleases.blogspot.com/
Feature safe:   yes

asterisk-1.8.2.1 is still vulnerable due to a botched merge upstream.

Feature safe:   yes

- fix asterisk16 version string

Approved by:    fjoe (mentor)
Feature safe:   yes

- Document Exploitable Stack Buffer Overflow in asterisk

Approved by:    fjoe (mentor)
Feature safe:   yes

Document tarsnap cryptographic nonce reuse vulnerability.

Discussed with: cperciva@
Feature safe:   yes

Add entry for moinmoin XSS vulnerabilities.

PR:             ports/153898
Submitted by:   Ruslan Mahmatkhanov <cvs-src yandex ru>
Feature safe:   yes

Document tor remote code execution and crash vulnerability.

Submitted by:   Janne Snabb <snabb epipe com>
Feature safe:   yes

security/sudo: document privilege escalation, CVE-2011-0010

PR: 153939
Approved by: delphij (secteam), erwin (mentor)
Feature safe: yes