security/vuxml 1.1_6

- Add entry for www/joomla25, needs min version 2.5.5

Submitted by:	scheidell@ (me)

Fix some nits: 	- cvename gets automatically expanded to the MITRE url

- Document recent vulnerabilities in security/clamav: CVE-2012-1419, CVE-2012-1457, CVE-2012-1458, CVE-2012-1459

Document asterisk vulnerability.

Add vuxml for older version of graphics/ImageMagick.

PR:		ports/166686 (related to)
Submitted by:	4721@hushmail.com (the vuxml, via irc)

Update 55587adb-b49d-11e1-8df1-0004aca374af with more information.

Document mantis vulnerabilities. The information is a bit light on details but I'm unable to track down better.

PR:		ports/168984
Submitted by:	Dan Langille <dan@langille.org>

Update to 11.1.r202.236 and inform community of security issues

Security:	38195f00-b215-11e1-8132-003067b2972c

Correct names for BIND 9.6.x and BIND 9.7.x.

Fix my previous commit by adding a accidentally removed <p>.

Remove unnecesarry <p> tags from 47f13540-c4cb-4971-8dc6-28d0dabfd9cd.

Fix some nits: 	- Improve wording of Sympa vuln description 	- The url used as a citation for the description must also be a reference for the user.

- Document mozilla -- multiple vulnerabilities

- Document the last quagga vulnerability

Document sympa vulnerability

Fix some nits: 	The url in the cite attribute must appear as a reference

Upgrade to 9.6-ESV-R7-P1, 9.7.6-P1, 9.8.3-P1, and 9.9.1-P1, the latest from ISC. These patched versions contain a critical bugfix:

Processing of DNS resource records where the rdata field is zero length
  may cause various issues for the servers handling them.

  Processing of these records may lead to unexpected outcomes. Recursive
  servers may crash or disclose some portion of memory to the client.
  Secondary servers may crash on restart after transferring a zone
  containing these records. Master servers may corrupt zone data if the
  zone option "auto-dnssec" is set to "maintain". Other unexpected
  problems that are not listed here may also be encountered.

All BIND users are strongly encouraged to upgrade.

Add the quoted url as a reference for nut.

Requested by:	eadler

- Fix formating in previous entrys

- better define ranges for a8864f8f-aa9e-11e1-a284-0023ae8e59f0 and add another vendor note

- Address postgresql*-servers for crypt vulnerability (CVE-2012-2143)

http://www.postgresql.org/about/news/1397/

With hat: pgsql

Add an entry for CVE-2012-2944 in sysutils/nut.

Fix some nits: 	The url in the cite attribute must appear as a reference 	References should be sorted

Document asterisk vulnerabilities.

Document vulnerabilities before www/chromium 19.0.1084.52 (the port is safe).

Obtained from:	http://googlechromereleases.blogspot.com/search/label/Stable%20updates
Security:	CVE-2011-[3103-3115]

Make validate target remove the tidy file if it passes.

Approved by:	chimera@

Correct spelling mistake, FreeSD -> FreeBSD

Reviewed by:	nox

- document security issue for haproxy

PR:	ports/165035
Submitted by:	jgh@
Security:	CVE-2012-2391

Document RT vulnerabilities.

(I'm only committing this as matthew is still waiting for mentor approval, and
we found it important enough to commit it right now)

Submitted by:	matthew

- inspircd 1.2.9 is not vulnerable

PR:	ports/167975
Spotted by: feld@feld.me

Add an entry for mail/sympa < 6.1.11 (CVE-2012-2352)

Add www/foswiki < 1.1.5 entry (CVE-2012-1004)

- Correct b8ae4659-a0da-11e1-a294-bcaec565249c entry [1] - Formating and cleanup

Submitted by:	Neal Dias <ndias@cisco.com> [1]

Document and fix a off-by-one vulnability in libxml2.

Obtained from:	libxml upstream
Security:	b8ae4659-a0da-11e1-a294-bcaec565249c

- fix date in 725ab25a-987b-11e1-a2ef-001fd0af1a4c

- revert unintentional date change in aa71daaa-9f8c-11e1-bd0a-0082a0c18826 - update date in f5f00804-a03b-11e1-a284-0023ae8e59f0 - adjust dates in 3d55b961-9a2e-11e1-a2ef-001fd0af1a4c a1d0911f-987a-11e1-a2ef-001fd0af1a4c for ordering

- Update inspircd to 2.0.5 [1] - document CVE-2012-1836 [2]

PR:	ports/167975
Submitted by:	maintainer, feld@feld.me [1], jgh@ [2]
Security:	CVE-2012-1836

Fix some nits: 	The url in the cite attribute must appear as a reference 	The CVE automatically gets expanded to a url so the mitre url is not needed

- fix spelling in b3435b68-9ee8-11e1-997c-002354ed89bc

Versions 3.2.0 and earlier of the pidgin-otr plugin contain a format string security flaw. This flaw could potentially be exploited by a remote attacker to cause arbitrary code to be executed on the user's machine.

The flaw is in pidgin-otr, not in libotr. Other applications
that use libotr are not affected.

Document sudo netmask vulnerability. Patch for port forthcoming.

- Security update OpenSSL 1.0.1c

Document vulnerabilities for www/chromium < 19.0.1084.46

Security:	CVE-2011-[3083-3097], CVE-2011-[3099-3100]

- Document vulnerability in net/socat (CVE-2012-0219)

Fix pivotx vuln.xml

- 59b68b1e-9c78-11e1-b5e0-000c299b62e1 also applies to lang/php52

- Document recent vulnerabilities in PHP (CVE-2012-2311 and CVE-2012-2329)

Add an entry for CVE-2012-2214 for an XMPP crash in libpurple.

- Document CVE-2012-2274 for port www/pivotx

PR:		ports/167819
Submitted by:	Fumiyuki Shimizu <fumifumi at abacustech.jp>
Security:	CVE-2012-2274

Belated VuXML entry for recent NVIDIA Unix driver arbitrary system memory access vulnerability.

Reviewed by:	eadler, delphij
Security:	CVE-2012-0946