security/vuxml: Document new OpenSSL vulnerabilitities

Document wordpress issues

Approved by:	tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D12898

Document wireshark issues

Document PHP Vulnerability

Security: CVE-2016-1283
Security:
https://vuxml.FreeBSD.org/freebsd/de7a2b32-bd7d-11e7-b627-d43d7e971a1b.html

Document new vulnerability in www/chromium < 62.0.3202.75

Obtained
from:	https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop_26.html
Security:	CVE-2017-15396

Document ftp/wget's stack and heap overflow

Submitted by:	Andrew Perry <pez_098@yahoo.com>
Security:	CVE-2017-13089
Security:	CVE-2017-13090

Add headings to each Apache Openoffice vulnerability description.

Update Apache OpenOffice entry.

security/vuxml: add node.js remote DoS vulnerability announced 2017-10-24

Reviewed by:	swills
Approved by:	swills (ports-secteam)
Security:	d7d1cc94-b971-11e7-af3a-f1035dd0da62
Differential Revision:	https://reviews.freebsd.org/D12788

Revert r452836 to re-add Apache Openoffice entry.

Remove empty <cvename/> to hopefully not break the build this time.

This passes "make validate" just like the last version did.

Suggested by:	gavin

Document GitLab vulnerabilities

Security:
https://vuxml.FreeBSD.org/freebsd/418c172b-b96f-11e7-b627-d43d7e971a1b.html

Revert r452818, the vuxmlweb build does not like empty CVE IDs.

This should likely be tested for as part of "make validate".

Hat:	clusteradm

Placeholder entry for editors/openoffice-4 and editors/openoffice-devel
multiple vulnerabilities.  Details are currently embargoed.

security/vuxml: Document cURL vulnerability

 - While here, fix date in latest mysql entry

Multiple vulnerabilites in www/h2o

Reviewed by:	jrm (mentor)
Approved by:	jrm (mentor)
Security:	CVE-2017-10868
Security:	CVE-2017-10869
Differential Revision:	https://reviews.freebsd.org/D12763

security/vuxml: Document multiple vulnerabilities in irc/irssi

Security:	CVE-2017-15721
Security:	CVE-2017-15722
Security:	CVE-2017-15723
Security:	CVE-2017-15727
Security:	CVE-2017-15228

PR:		223169
Reported by:	David O'Rourke <dor.bsd@xm0.uk>

Document new vulnerabilities in www/chromium < 62.0.3202.62

Obtained
from:	https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html

Document cacti issue

- Document arj archiver vulnerabilities

Ensure all krb5 packages are listed in the recent vulnerability entry

Fix formatting (line length) in recent krb5 vulnerability entry

Doucument recent MIT Kerberos (krb5) vulnerabilities

security/vuxml: Document MySQL vulnerabilities Q4 2017

Document xorg issues

Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb17-32.html

Fix version on solr issue

Document hostapd and wpa_supplicant issue

PR:		223051
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>

Document mercurial issue

Document textproc/freexl security vulnerabilities.

PR:		222130
Submitted by:	lbartoletti@tuxfamily.org (maintainer)

Document ffmpeg issues

PR:		222957
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>

Document xorg-server CVEs 2017-12176 through 2017-12187.

While here replace the SO-AND-SO part in the description of the previous
xorg-server entry[1], with the Alan Coopersmith who send the announce mail to
xorg-announce@ mailing list.

[1] entry: 4f8ffb9c-f388-4fbd-b90f-b3131559d888

Document solr issue

Document jenkins issues

Document xen-kernel XSA-{237..244}

Document nss issue

PR:		222952
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>

Document libosip2 issue

Document ncurses issues

Document python issue

Document node issue

Document zookeeper issue

Document libtiff issue

Document rubygems vulnerability

Document two xorg-server vulnabilities.

Security:	CVE-2017-13721, CVE-2017-13723

Fix range for 58fafead-cd13-472f-a9bd-d0173ba1b04c

update versions for tomcat issue

Document tomcat issue

security/vuxml: Document latest cURL vulnerability

- Re-add 6887828f-0229-11e0-b84d-00262d5ed8ee as cancelled, instead of purging
it

Submitted by:	Mathieu Arnold <mat@FreeBSD.org>

Document FreeBSD-SA-17:06.openssh

Document FreeBSD-SA-17:05.heimdal

security/vuxml: seamonkey 2.49.1 build2 uses gecko from firefox 52.4

fix typo in dnsmasq < 2.78 entries

Security: b77b5646-a778-11e7-ac58-b499baebfeaf

security/vuxml: Fix title on latest entry

security/vuxml: Document dnsmasq vulnerabilities

- Add a warning if the description section seems unnecessarily large

Submitted by:	Vladimir Krstulja
Approved by:	ports-secteam (with hat)

- Condense additional entries where description >4500 characters

Approved by:	ports-secteam (with hat)

- Condense entries whose description is >5000 characters

Approved by:	ports-secteam (with hat)

- Add date format validation

Submitted by:	Vladimir Krstulja (via IRC)

- Purge another batch of superceded www/chromium entries to give us additional
headroom under the 5M vuln.xml file size limit

Approved by:	ports-secteam (with hat)

Document phpmyfaq issues

Document wordpress issues

- Fix invalid date entries
- Purge 6887828f-0229-11e0-b84d-00262d5ed8ee as it has been superceded by other
entries and it is massive. (We have hit 5M on vuln.xml)

Fix date format

While here, correct some grammar

PR:		222683
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>

security/vuxml: mark firefox < 56 as vulnerable

Document sam2p issue

docuent libraw issue

Extend OpenVPN security issue to slave ports.

Security:	CVE-2017-12166
Security:	3dd6ccf4-a3c6-11e7-a52e-0800279f2ff8

Document OpenVPN <2.4.4 CVE-2017-12166 legacy vuln.

Security:	CVE-2017-12166
Security:	3dd6ccf4-a3c6-11e7-a52e-0800279f2ff8

Fix version range for libzip's CVE-2017-14107 (r450692).

I am going to land a fix for libzip 1.1.3 (the version currently in the ports
tree) instead of updating the port to 1.3.0. 1.3.0 has a different SOVERSION
number, which also requires updating dependent ports and makes MFH'ing the fix
more difficult.

PR:		222638

Document ImageMagick issue

Update rubygem-geminabox vulnerability

Document libofx issue

Correct version of libbson issue

Document sugarcrm issue

Document libzip issue

Document libbson issue

Document multiple vulnerabilities in tcpdump

Document libraw issue

Document libraw issue

Document issue in gd

Document issue in php and gd

Document ledger vulnerabilities

Document aacplusenc issue

Document ansible issue

Add second CVE To geminabox entry, update versions affected

security/vuxml: Document WeeChat 1.9 vulnerability

Document Perl vulnerability

Document new vulnerabilities in www/chromium < 61.0.3163.100

Obtained
from:	https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop_21.html

Add new asterisk ports vulnerability.

security/vuxml: adjust for seamonkey 2.49.1

Document Ruby vulnerability

Document rubygem-geminabox vulnerability

Add new entry for Apache "OptionsBleed"

Reviewed by:	zi

Document GitLab vulnerabilities

Security: CVE-2017-5029
Security: CVE-2016-4738
Security:
https://vuxml.FreeBSD.org/freebsd/6a177c87-9933-11e7-93f7-d43d7e971a1b.html

- Add emacs-devel to the list of affected packages by emacs vulnerability
- Move it to the top, didn't realize this before. Sorry

Document latest Flash Player vulnerabilities.

https://helpx.adobe.com/security/products/flash-player/apsb17-28.html

- Correct package name in Emacs vulnerability
- Also add emacs-nox11 to the list

- Document emacs vulnerability

Document cyrus-imapd vulnerability

Security:	CVE-2017-14230

Fix indent