security/vuxml 1.1_6

Re-revise emacs vulnerability to limit with >= 22 and < 22.2_1 instead of >21.* and <22.2_1 which didn't work as expected

- Limit emacs vulnerability to > 21.* and <= 22.2 instead of just <= 22.2

Document two OpenSSL vulnerabilities.

(There is no OpenSSL 0.9.8s in the ports so mark <1.0.0 as vulnerable).

fix last thunderbird entry

add firefox, thunderbird and seamonkey to the DigiNotar.nl entry

Security:	http://www.vuxml.org/freebsd/aa5bc971-d635-11e0-b3cf-080027ef73ec.html

Fix vuln.xml, while here fix indentation

- Update to 1.2.7

PR:		ports/160368
Submitted by:	gjb
Approved by:	dvl (maintainer), bapt (mentor)
Security:	CVE-2011-2938

- Document cfs buffer overflow vulnerability. - While here, unbreak packaudit -- it doesn't like newlines in the   middle of tags.  Perhaps a comment should say something?

Revise nss/ca_root_nss working around Mozilla, limit ca_root_nss vuln to < 3.12.11 from <= 3.12.11.

Add a new entry for the ca_root_nss bug that caused extraction of untrusted
certificates to the trust bundle.

PR: ports/160455

- Correct affected plone versions

- bump modifiled for CVE-2007-5137

- update CVE-2007-5137

Update range to exclude nss 3.12.11 from vuln, as kwm@'s commit to upgrade nss to 3.12.11 included the newer CKBI 1.87 that explicitly distrusts DigiNotar.

Add a security notice for the DigiNotar incident, listing nss/ca_root/nss.

- only match vulnerable versions in the hlstats entry - add additional CVEs

Final modification for apache22 vulnerability; include slave ports as well

Pointed out by:	flo
Reviewed by:	eadler

Correct range for apache22, 2.2.20 is fixed and 1.3 wasn't affected.

Submitted by:	Aleksandr Stankevic (sysmonk on IRC/Freenode##FreeBSD)
Security:	CVE-2011-3192

Put a lower bound on the last php entry, as the bug was introduced in 5.3.7-RC5.

Submitted by:	"jaset" via #bsdports

- Fix entry date and use two ranges

Reviewed by:	gahr@
Approved by:	jadawin@ (mentor)

- Document CVE-2011-3192 for recent apache DoS vulnerability

Approved by:	jadawin@ (mentor)
Security:	http://vuxml.org/freebsd/7f6108d2-cea8-11e0-9d58-0800279895ea.html

Upstream indicates that this only affects 4.40 and 4.41 so add a <ge> tag to indicate that.

Document stunnel heap corruption vulnerability.

Fix discovery date

DOcument phpMyAdmin CVE-2011-3181 (multiple XSS).

Document new Chromium vulnerabilities.

Obtained from:	http://google-chrome-browser.com/releases
Security:	CVE-2011-[2821, 2823-2829, 2839]

Mark PHP5 < 5.3.7_2 as vulnerable to PHP bug #55439: crypt() returns only the salt for MD5.

Document multiple PHP vulnerabilities.

Document Rails multiple vulnerabilities.

Document dovecot DoS vulnerability.

Document "otrs" - vulnerabilities in OTRS-Core allows read access to any file on local file system.

document recent mozilla vulnerabilities

Document samba vulnerabilities of SWAT web interface.

Adjust dates in 510b630e-c43b-11e0-916c-00e0815b8da8.

Noticed by:	kwm@

- Document ISC DHCP server DoS.

Document "bugzilla" - multiple vulnerabilities.

Document dtc security issues

PR:		ports/159736
Submitted by:	Ansgar Burchardt <ansgar@debian.org>

Document freetype2 and libXfont vulnabilities.

Update linux-f10-flashplugin to 10.3r183.5 .

Submitted by:	pointyhat via erwin
Security:	http://www.freebsd.org/ports/portaudit/2c12ae0c-c38d-11e0-8eb7-001b2134ef46.html

Document new vulnerabilities for www/chromium ( < 13.0.782.107)

Obtained from:	http://googlechromereleases.blogspot.com/
Security:	CVE-2011-{2358-2361, 2782-2805, 2818-2819}

Document libsoup security hole.

Fix match of phpmyadmin in recent revisions.

- Add CVE reference for OpenSAML2 issue - Use official citation

Document phpmyadmin vulnerabilities

Approved by:	wxs (mentor)

Document OpenSAML2 issue

Document rsync DoS issue (CVE-2011-1097).

Document BIND vulnerabilities for ports. This was inspired by the PR, but re-formatted and edited by me, so responsibility for errors is mine.

PR:		ports/158672
Submitted by:	Ryan Steinmetz <rpsfa@rit.edu>

Document phpMyAdmin multiple vulnerabilities

Reviewed by:	flo
Approved by:	rene (mentor vacation)

document one more vulnerability in the recent asterisk entry

Document new vulnerabilities for www/chromium ( < 12.0.742.112)

Security:	CVE-2011-[2345-2351]

Add modified tag to 8a5770b4-54b5-11db-a5ae-00508d6a62df.

Noticed by:	sahil@