security/vuxml 1.1_6

Document "bugzilla" - multiple vulnerabilities.

Document PHP remote code vulnerability.

Add vuxml entry for mathopd directory traversal vulnerability.

PR:		164717
Submitted by:	Michiel Boland <michiel at boland dot org>
Security:	6e7ad1d7-4e27-11e1-8e12-90e6ba8a36a2

- adjust ordering for latest apache entry

Spotted by: remko

MITRE is spelled in all capital letters.

document latest Apache vulnerabilities

PR:	ports/164675
Reviewed by: crees, eadler
Approved by: crees (mentor)

document recent mozilla vulnerabilities

Correct versions for sudo format string vulnerability.

Noticed by:	pluknet@

Document sudo format string vulnerability.

Document missing FreeBSD Security Advisories: - SA-11:01.mountd - SA-11:04.compress - SA-11:09.pam_ssh - SA-11:10.pam

Modify existing entries to document (add/adjust modified tag for all):
- SA-11:06.bind
  - Add FreeBSD package and freebsdsa
- SA-11:07.chroot
  - Add FreeBSD package
- SA-11:08.telnetd
  - Add FreeBSD package, freebsdsa and a relevant URL

- Adjust formatting for 93688f8f-4935-11e1-89b4-001ec9578670

- Document vulnerabilities in mail/postfixadmin (CVE-2012-0811, CVE-2012-0812)

- Cleanup & Formating

- Document vulnerability in converters/mpack

- Document vulnerabilities in print/acroread9 (prior to 9.4.7)

- update entry fixed in chromium-16.0.912.75 (CVE-2011-3925) - add entry for vulnerabilities fixed in chromium-16.0.912.77

Security:	CVE-2011-[3924-3928]

Fix build while chanting "I will run make validate". :(

Pointyhat to:	wxs@

Add CVE for recent spamdyke buffer overflows.

Document multiple vulnerabilities in wireshark, all of which have already been fixed in our port.

Whitespace cleanup.

- Document buffer overflows in spamdyke.

Fixup to please "make tidy". No need to wrap this line.

- Add CVE for spamdyke STARTTLS plaintext injection.

- Fix affected rubygem-rack version: add ,3 as PORTEPOCH=3 is restored

- Correct package range in 5c5f19ce-43af-11e1-89b4-001ec9578670 - Add databases/redis to the affected list for 91be81e7-3fea-11e1-afc7-2c4138874f7d

- Fix formatting/topic in 91be81e7-3fea-11e1-afc7-2c4138874f7d

Reviewed by:	wxs

- Document security vulnerability in security/openssl (CVE-2012-0050)

fix uuid on latest tomcat vulnerability

Approved by:	crees, rene (implicit)

- Fix modified date;  - Add more ruby variants.

Update 91be81e7-3fea-11e1-afc7-2c4138874f7d to cover ruby+no-pthreads as well.

Spotted by:	Kevin Oberman <kob6558 gmail.com>

- document asterisk remote crash vulnerability

Document recent vulnerability of Apache Tomcat Server.

Approved by:	rene (mentor)

Sigh, should have used <lt> instead of <gt>.

Pointy hat to:	delphij

php52-exif no longer vulnerable to CVE-2011-4566 as of 5.2.17_6

Fix the version range for ruby.  The stock version is affected.

There was no patch release in rubygem-rack 1.3.5_*, so just say < 1.3.6.

- Fix affected rubygem-rack version: it should be _3 for PORTREVISION=3

Fix CVE URL in recent OpenTTD entry.

Unexpand (convert leading spaces to tabs when possible).

Document recent vulnerability of OpenTTD game server.

Reported by:	Ilya Arkhipov

PHP5 had its own entry for this vulnerability, so remove this.

Pointed out by:	ohauer

Add node < 0.6.7 (for V8).

Add v8 < 3.8.5 (CVE-2011-5037).

Add PHP < 5.3.9 (CVE-2011-4885).

Add Multiple implementations denial-of-service via hash algorithm collision.

Currently only JRuby, Ruby, and Rack are mentioned.  More to follow.

Add missing URL reference to last commit

Add relevant FFmpeg vulnerabilities from Ubuntu USN-1320-1

- clean up

- Document vulnerabilities in security/openssl -- CVE-2011-4108, CVE-2011-4109, CVE-2011-4576 -- CVE-2011-4577, CVE-2011-4619, CVE-2012-0027

- Document vulnerability in net/isc-dhcp42-server (CVE-2011-4868)