- Exclude LibreSSL 2.6.5 from CVE-2018-0732 entry

PR:		229037
Sponsored by:	iXsystems Inc.

Remove linux expat packages from latest expat entry.  Red Hat has marked
these "will not fix" because of the low impact so there's no point in
nagging users about this.

https://access.redhat.com/security/cve/cve-2016-9063
https://access.redhat.com/security/cve/cve-2017-9233

security/vuxml: Add CVE details for VLC vulnerability

security/vuxml: document VLC vulnerability

security/vuxml: add mutt vulnerabilities

Include mutt vulnerabilities for mutt < 1.10.1

PR:	229810
Submitted by:	dereks@lifeofadishwasher.com
Approved by:	tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D16321

security/vuxml: fix typo

security/vuxml: document NeoMutt and Mutt vulnerabilities

Document gitlab < 11.0.4 vulnerability.

Reviewed by:	swills (mentor)
Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D16317

Update CVE number of 20a1881e-8a9e-11e8-bddf-d017c2ca229d

Sponsored by:	The FreeBSD Foundation

Fix range of 20a1881e-8a9e-11e8-bddf-d017c2ca229d

Sponsored by:	The FreeBSD Foundation

Document Jenkins Security Advisory 2018-07-18

Sponsored by:	The FreeBSD Foundation

security/vuxml: Document irc/znc vulnerabilities

Reported by:	gordon
Security:	CVE-2018-14055
Security:	CVE-2018-14056

security/vuxml: Document Apache httpd vulns

Remove vendor-specific CVE numbers, following r474804.  This tag
is reserved for Mitre CVE numbers, otherwise it does not pass
validation.

Sponsored by:	The FreeBSD Foundation

security/vuxml: update version range for latest qutebrowser vuln

Update version for www/qutebrowser CVE-2018-10895 to reflect 2018Q3 fix.

Comment a project-specific CVE reference in attempt to fix the build.

Sponsored by:	The FreeBSD Foundation

Document vulberability for typo3-7 and typo3-8

security/vuxml: add entry for devel/upp

Affected by CVE-2018-874

PR:	227414
Reported by:	lightside@gmx.com
Approved by:	tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D16017

Document several security defects in the Bouncy Castle Crypto APIs
before version 1.60

Obtained from:	https://www.bouncycastle.org/latest_releases.html
Security:	https://vuxml.FreeBSD.org/freebsd/fe93803c-883f-11e8-9f0c-001b216d295b

Document www/qutebrowser CSRF vulnerability

Reviewed by:	miwi
Security:	CVE-2018-10895

Fix typos.

Reported by:	N.J. Mann (njm at njm dot me dot uk)

Document the latest Flash Player vulnerabilities.

https://helpx.adobe.com/security/products/flash-player/apsb18-24.html

Document vulnerability for libgit2 < 0.27.3.

Reviewed by:	swills (mentor)
Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D16220

Fix build.

Sponsored by:	The FreeBSD Foundation

security/vuxml: add CVE for Apache CouchDB 1.7.2 (databases/couchdb)

Approved by:	jrm
Differential Revision:	https://reviews.freebsd.org/D16212

security/vuxml: document vulnerabilities in security/clamav.

- Document devel/zziplib - multible vulnerabilities

PR:		226491
Sponsored by:	iXsystems Inc.

Document wordpress issues

security/vuxml: seamonkey-2.49.4 contains firefox-52.9.0

Document vulnerability in www/mybb

security/vuxml: Document expat vulnerabilities

libwww is also vulnerable because it has expat in its source tree.

Security:	CVE-2016-9063
Security:	CVE-2017-9233

security/vuxml: add CVE-2018-0608 for www/h2o

PR:		228762
Approved by:	jrm
Security:	CVE-2018-0608
Differential Revision:	https://reviews.freebsd.org/D16110

security/vuxml: mark firefox < 61 as vulnerable

Vulnerability entry for www/gitlab.

Reviewed by:	tz (mentor)
Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D16010

Fixup

Link release announcement to mail/mailman < 2.1.27 vuln/CVE 2018-0618

Add mailman vulnerabilities/hardening.

Obtained from:	Mark Sapiro
Security:	739948e3-78bf-11e8-b23c-080027ac955c
Security:	CVE-2018-0618
Security:	JVN#00846677
Security:	JPCERT#97432283

Docuement the latest phpMyAdmin vulnerabilities

Document SA-18:07.lazyfpu

Document GraphicsMagick vulnerability

PR:		223629
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>

Document vulnerability for libgit2 and py-pygit2.

Reviewed by:	tz (mentor)
Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D15668

security/vuxml: document Slurm vulnerability

https://lists.schedmd.com/pipermail/slurm-announce/2018/000008.html

While here, silence validation warnings caused by node.js 2018-06-15 entry.

security/vuxml: document Node.js vulnerabilities

https://nodejs.org/en/blog/vulnerability/june-2018-security-releases/

List GPG parsing vulnerabilities in sysutils/password-store < 1.7.2

security/vuxml: Document LibreSSL vuln

Document libgcrypt side-channel attack vulnerability

Security:	CVE-2018-0495

Update gnupg entry now that gnupg1-1.4.23 has landed

security/vuxml: Bump PORTREV for openssl

 - Chase missing svn add for openssl

security/vuxml: Document today's OpenSSL vuln (low)

Document new asterisk vulnerabilities.

Fix error in old asterisk entry.

Document new vulnerability in www/chromium < 67.0.3396.79

Obtained
from:	https://chromereleases.googleblog.com/2018/06/stable-channel-update-for-desktop.html

Fix vuxml build.

Sponsored by:	The FreeBSD Foundation

Add entry for gnupg CVE

security/vuxml: mark firefox < 60.0.2 as vulnerable

Document the latest Flash Player vulnerabilities.

https://helpx.adobe.com/security/products/flash-player/apsb18-19.html

Mark bro < 2.5.4 as vulnerable as per:

    https://www.bro.org/download/NEWS.bro.html

Reviewed by:	ler (mentor)
Approved by:	ler (mentor)
Differential Revision:	https://reviews.freebsd.org/D15677

security/vuxml/vuln.xml: Fix indentation (silences make validate)

Reported by:	mfechner

Document new vulnerabilities in www/gitlab < 10.8.2 or < 10.7.5 or < 10.6.6.

Reviewed by:	tz (mentor)
Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D15635

security/vuxml: Fix version ranges for latest Git vulnerabilities

Reported by:	jbeich

security/vuxml: Document devel/git CVEs (2018-11233 and 2018-11235)

Document security/strongswan multiple vulnerabilities
((CVE-2018-10811, CVE-2018-5388)

PR:		228631
Submitted by:	strongswan@Nanoteq.com

Document new vulnerabilities in www/chromium < 67.0.3396.62

Obtained
from:	https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html

Document BIND multiple vulnerabilities.

Update VuXML entry for xorg-server issues

Update VuXML entry for xorg-server issues related to CVE-2017-10971 and
CVE-2017-10972.  The version check was wrong missing the portepoch which
meant that the entry never matched anything.  It was also only added for
xorg-server 1.19, while we have 1.18 in base.

Fix formatting and edit the overly long lines.

Document curl vulnerability

Document vulnerabilities in wavpack 5.1.0 and earlier

PR:		228146
Submitted by:	yasu@utahime.org

Bump maximum description length to 5000

Details:
Thanks to www/chromium, we now have a valid entry with 4933 characters.
Entries this long will probably remain exceptions, but there should
not be a warning for the currently valid entries.

Bump copyright to 2018

Document vulnerabilities in chromium before 66.0.3359.170

Reported by:	Tommi Pernila <tommi.pernila@iki.fi> via e-mail

Document jenkins security issues

security/vuxml: mark firefox < 60 as vulnerable

PR:		226476

security/vuxml: document kamailio CVE-2018-8828

PR:		227677
Submitted by:	Ben Hood <ben@relops.com>

Document ftp/wget's cookie injection vulnerability

Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>
MFH:		2018Q2
Security:	CVE-2018-0494

Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb18-16.html

Document FreeBSD-SA-18:06.debugreg

Document python vulnerability

Security notice regarding kwallet-pam (KDE Plasma5).

  https://www.kde.org/info/security/advisory-20180503-1.txt

The port is not built by default through the regular KDE packages,
and has been in the ports tree only a week; the impact is expected
to be low.

Approved by:	tcberner (mentor, implicit)

Document multiple vulnerabilities in www/drupal7 and www/drupal8

Document vulnerabilities in gitlab for several versions.

Reviewed by:	eugen_grosbein.net, tz (mentor)
Approved by:	eugen_grosbein.net, tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D15248

Document free-after-use issue in chromium before 66.0.3359.139

Submitted by:	Tommi Pernila <tommi.pernila@iki.fi> via e-mail
Security:	CVE-2018-6118

Document vulnerabilities in quassel before 0.12.5

Security:	https://vuxml.freebsd.org/freebsd/499f6b41-58db-4f98-b8e7-da8c18985eda.html

Document vulnerabilities in chromium before 66.0.3359.117

Submitted by:	tommi.pernila@iki.fi (via mail to ports-secteam)
Reviewed by:	riggs

Document mbed TLS vulnerabilities

Security:	https://tls.mbed.org/tech-updates/releases/mbedtls-2.8.0-2.7.2-and-2.1.11-released

security/vuxml: Document MySQL vulns from quarterly Oracle CPU

Document wordpress issues

Document the latest phpMyAdmin vulnerabilities

- Document drupal8 vulnerability

security/vuxml: Bump portrev for latest OpenSSL vuln

security/vuxml: Add OpenSSL vulnerability

Add Blockquote

pointy hat to joneum

Document multiple vulnerabilities in www/drupal7

Security:	CVE-2018-7600

Document Perl vulnerability

Update freeimage vulnerability

ipsec-tools: document remotely exploitable computational-complexity attack.

PR:		225066
Security:	CVE-2016-10396

Document nghttp2 vulnerability

Document roundcube IMAP command injection vulnerability.

Document Jenkins vulnerabilities

Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb18-08.html

Fixed a wrong version definition for gitlab that report 10.4.6 as affected.

PR:		227293
Reported by:	majo-bugs.freebsd.org@cerny.sk
Reviewed by:	dbaio, swills (mentor)
Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D14999