security/vuxml 1.1_6

Add vuxml for older versions of multimedia/vlc .

PR:		ports/169985
Submitted by:	"Anders N." <wicked@baot.se>

Tell the world about the recent bacula vuln

- Update to 0.10.22.6 which fixes two security issues - Document security issues in vuxml [1]

Reviewed by:	bdrewery [1]
Security:	178ba4ea-fd40-11e1-b2ae-001fd0af1a4c

Update NVIDIA arbitrary memory access vulnerability with CVE-2012-4225.

- Update entry for net/freeradius2 to reflect local patch to address cve-2012-3547

VuXML: document remote code execution in freeRADIUS

www/moinmoin: fix CVE-2012-4404, wrong processing of group ACLs

Using upstream patch from
  http://hg.moinmo.in/moin/1.9/raw-rev/7b9f39289e16

PR:		171346
QA page:	http://codelabs.ru/fbsd/ports/qa/www/moinmoin/1.9.4_1
Approved by:	khsing.cn@gmail.com (maintainer)
Security:	http://www.vuxml.org/freebsd/4f99e2ef-f725-11e1-8bd8-0022156e8794.html

Add vim specific modeline to help users write correct vuxml

Submitted by:	bdrewery

Document the vulnerability that led to emacs 24.2

Add a sanity check to ensure vuxml is actually installed prior to performing the tidy step in validate. This step actually requires just the dependancies but the full validate requires that vuxml be installed.

Reviewed by:	simon
Approved by:	secteam (implicit)

- Update to 3.4.2 [1] [2] [3] - Document security issue [4]

PR:		ports/171397 [1]
PR:		ports/171404 [2]
PR:		ports/171405 [3]
Submitted by:	Yuan-Chung Hsiao <ychsiao@ychsiao.org> (maintainer) [1]
Submitted by:	Joe Horn <joehorn@gmail.com> (maintainer) [2] [3]
Reviewed by:	eadler [4]
Security:	30149157-f926-11e1-95cd-001fd0af1a4c

VuXML: add <modified> tag for Wireshark's entry for CVE-2012-3548

Change the wireshark version for the DRDA fix.

VuXML: document XSS in MoinMoin before 1.9.4 via RST parser

VuXML: document wrong group ACL processing in MoinMoin

PHP 5.x: document header splitting vulnerability

There is a related CVE number (CVE-2012-4388), but there is no current
consensus about it:
  http://article.gmane.org/gmane.comp.security.oss.general/8303

Modify fetchmail vuln' URLs to established site. While at it, adjust the two oldest topics to current format, for uniformity, on, for instance, http://www.vuxml.org/freebsd/pkg-fetchmail.html.

security/squidclamav: fix DoS and XSS vulnerabilities

Apply upstream patches for CVE-2012-3501 and CVE-2012-4667.

Security:	http://www.vuxml.org/freebsd/ce680f0a-eea6-11e1-8bd8-0022156e8794.html
Security:	http://www.vuxml.org/freebsd/8defa0f9-ee8a-11e1-8bd8-0022156e8794.html
PR:		171022
QA page:	http://codelabs.ru/fbsd/ports/qa/security/squidclamav/5.7_1
Approved by:	maintainer timeout (1 week)

Inform the community about a recent bitcoin DoS vuln.

Reviewed by:	swills

- update bugzilla bugzilla3 and bugzilla42 - use new bugzilla@ address (members skv@, tota@, ohauer@) - patch russian/japanese/german bugzilla and bugzilla templates   so the reflect the security updates in the original templates - patch german/bugzilla42 templates - adopt new Makefile header

vuxml: 6ad18fe5-f469-11e1-920d-20cf30e32f6d
	CVE: CVE-2012-3981
	https://bugzilla.mozilla.org/show_bug.cgi?id=785470
	https://bugzilla.mozilla.org/show_bug.cgi?id=785522
	https://bugzilla.mozilla.org/show_bug.cgi?id=785511

VuXML: document CVE-2012-3534, DoS via large number of connections

vuxml matches on PKGNAME, not on the port directory. mediawiki118 has PKGNAME mediawiki-1.18.4

Add "modified" tag to the Java 7 entry

Forgot to do it at r303435.

Spotted by:	wxs
Pointyhat to:	rea

- Update www/mediawiki to 1.19.2 - Update www/mediawiki118 to 1.18.5 - Document the security bugs

VuXML: update Java 7 entry with Oracle-provided details

Oracle's Java 7 update 7 fixes CVE-2012-4681.

Tidy up paragraph formatting (it passed "make validate" before).

Suggested by:	wxs

VuXML: document CVE-2012-3548, DoS in Wireshark

Document vulnerabilities in www/chromium < 21.0.1180.89

Obtained from:	http://googlechromereleases.blogspot.nl/search/label/Stable%20updates

- Update net/asterisk to 1.8.15.1 - Update net/asterisk10 to 10.7.1 - Document vulnerabilities in vuln.xml - Fix URLs in the pervious asterisk vuln.xml entry

Security:	http://www.vuxml.org/freebsd/4c53f007-f2ed-11e1-a215-14dae9ebcf89.html

- update firefox and thunderbird to 15.0 - update firefox-esr, thunderbird-esr, linux-thunderbird and linux-firefox to 10.0.7 - update seamonkey and linux-seamonkey to 2.12 - update nss to 3.13.6 - update bsdipc code (posix_spawn, SysV shared memory) - rename patches to easily track those not (yet) submitted upstream - reduce package size, except for www/libxul[1] - restore default objdir to what 

Obtained from:	OpenBSD ports[1]
PR:		ports/159831, ports/160933, ports/170467[3], ports/170236 [4]
Submitted by:	avilla [4]
In collaboration with:	Jan Beich <jbeich@tormail.net> Who did most of the hard
			work.

- Update to 1.5.20 - Update MASTER_SITES - Convert to optionsNG and add DOCS option - Document security vulnerabilities [1]

PR:		ports/169558
Requested by:	Alexey <alexey@kouznetsov.com> (submitter)
Security:	6dd5e45c-f084-11e1-8d0f-406186f3d89d [1]
Approved by:	flo (mentor)

VuXML: document CVE-2012-4681, security manager bypass in Java 7.x

Add a vuln' entry for fetchmail's CVE-2011-3389 vulnerability.

Update fetchmail to 6.3.21_1, fixing CVE-2012-3482. Adjust VuXML database entry from < 6.3.22 to < 6.3.21_1.

PR:		ports/170613
Approved by:	maintainer timeout (14 days)
Security:	http://www.vuxml.org/freebsd/83f9e943-e664-11e1-a66d-080027ef73ec.html
Security:	CVE-2012-3482

VuXML entry c906e0a4-efa6-11e1-8fbf-001b77d09812: fix port epoch

Pointyhat to: rea

VuXML: document XSS in RoundCube Web-mail application

Branch 0.8.x before 0.8.1 is prone to XSS attack via incoming
HTML messages.

news/inn: fix plaintext command injection, CVE-2012-3523

Relevant only for INN installations that are using encryption.

PR:		171013
Approved by:	fluffy@FreeBSD.org (maintainer)
Security:	http://www.vuxml.org/freebsd/a7975581-ee26-11e1-8bd8-0022156e8794.html

- Document Calligra input validation failure.

- Document that CVE-2012-3386 only affects automake >= 1.5.0

Verified this by inspecting the automake14 source, as well as
official release tarballs and git history.

Approved by:	bapt (mentor)

VuXML: document cross-site scripting in SquidClamav

VuXML: document DoS in SquidGuard

SquidGuard can be crashed via the specially-crafted URL
when external URL checker is used.

VuXML: document INN plaintext command injection vulnerability

VuXML: document CVE-2012-3525 in jabberd 2.x

VuXML: fix whitespace in my previous rssh entry

VuXML: document rssh vulnerabilities fixed in version 2.3.3

rssh: document arbitrary code execution, CVE-2012-3478

Put libotr entry back. I added the cited URL to the references.

Remove the improperly formatted libotr entry. Someone with more knowledge and experience needs to take care of this, I'm clearly not competent.

14 August 2012 libotr version 3.2.1 released

Versions 3.2.0 and earlier of libotr contain a small heap write overrun
(thanks to Justin Ferguson for the report), and a large heap read overrun
(thanks to Ben Hawkes for the report).

Add a vuxml entry, and tune up the notes about adding a new entry.

Document OpenTTD DoS.