security/vuxml 1.1_6

security/vuxml: document 20 py*-* vulnerabilities

Vulnerable Python ports discovered with pysec2vuxml.
See also: <https://github.com/HubTou/pysec2vuxml>.

PR:		270723

security/vuxml: add www/*chromium < 112.0.5615.49

Approved by:	rene (mentor)
Obtained from:	https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html
Differential Revision:	https://reviews.freebsd.org/D39423

security/vuxml: fix whitespace error

Reported by:	`make validate`

security/vuxml: Document Go vulnerabilities

securily/vuxml: document Samba vulnerabilities

CVE-2023-0225, CVE-2023-0922, CVE-2023-0614

Security:	CVE-2023-0225
		CVE-2023-0922
		CVE-2023-0614

security/vuxml: mark ffmpeg < 5.0.3,1 as vulnerable

security/vuxml: Document mediawiki multiple vulnerabilities

security/vuxml: document grafana vulnerabilities

CVE-2023-1410

PR:		270562
Reported by:	Boris Korzun

security/vuxml: Document gitlab vulnerabilities

security/vuxml: Document ReDoS vulnerability in rubygem-time

security/vuxml: Document ReDoS vulnerability in rubygem-uri

security/vuxml: Document powerdns vulnerabilities

PR:		270537

security/vuxml: Fix typo in blockquote

security/vuxml: mark xorg-server < 21.1.8,1 as vulnerable

security/vuxml: Document 2 OpenSSL vulnerabilities

security/vuxml: Document security vulnerabilities in Matrix clients

security/vuxml: phpmyfaq vulnerabilities

security/vuxml: Adapt OpenSSL vuln for openssl-quictls

security/vuxml: Document OpenSSL DoS vulnerability

security/vuxml: Document possible denial of service vulnerability in rack

security/vuxml: Fix range of rubygem-rack22 in f0798a6a-bbdb-11ed-ba99-080027f5fec9

Fixes:	ea12c503acc8

security/vuxml: Document vulnerability in net-im/dino

security/vuxml: mark libXpm < 3.5.15 as vulnerable

security/vuxml: Remove empty cvename tag in jenkins entry

security/vuxml: Document vulnerability for security/tailscale

PR:		270406

security/vuxml: add www/*chromium < 111.0.5563.110

Approved by:	rene (mentor)
Obtained from:	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html

security/vuxml: Document denial-of-serviece vulnerability in redis

security/vuxml: Document multiple vulnerabilities in curl

security/vuxml: Document phpmyadmin vulnerabilities

security/vuxml: Autofill CVE information

The `newentry` target accepts an optional parameter CVE_ID.
When provided, the newentry.sh script tries to retrieve information from the
NVD and MITRE databases and fill the template accordingly.

The script needs `textproc/jq` and warns the user and exists if it is not found.

How to use it:

make newentry CVE_ID=CVE-2022-39282

Note that this is just a helper. *YOU HUMAN* have to check that the information
is correct.

Reviewed by: tcberner, jlduran_gmail.com, mat
Differential Revision: https://reviews.freebsd.org/D38894

security/vuxml: Document Apache httpd vulnerabilities

Sponsored by:	Netzkommune GmbH

security/vuxml: fix typo in the openoffice entry

Fix a typo in the openoffice devel version value in the latest
openoffice entry.

security/vuxml: add www/*chromium < 111.0.5563.64

Approved by:	rene (mentor)
Obtained from:	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
Differential Revision:	https://reviews.freebsd.org/D38992

security/vuxml: Document Jenkins Security Advisory 2023-03-08

Sponsored by:	The FreeBSD Foundation

security/vuxml: databases/mantis <2.25.6 CVEs

CVE-2023-22476 and CVE-2022-31129

ChangeLog:
https://mantisbt.org/bugs/changelog_page.php?project=mantisbt&amp;version=2.25.6

PR:		270039
Reported by:	zab@zltech.eu

security/vuxml: Document Go vulnerability

security/vuxml: openoffice 2022 vulnerabilities

Belatedly document Apache OpenOffice vulnerabilities from 2022.  The
port was broken at the time.

security/vuxml: Document possible DoS vulnerability in rack

security/vuxml: Document multiple vulnerabilities in curl

security/vuxml: document strongSwan certificate verification vulnerability

Security:	3f9b6943-ba58-11ed-bbbd-00e0670f2660

security/vuxml: Document gitlab-ce vulnerabilities

security/vuxml: document grafana{8,9} CVEs

* CVE-2023-0507 - Stored XSS in geomap panel plugin via attribution (High)
 * CVE-2023-0594 - Stored XSS in TraceView panel (High)
 * CVE-2023-22462 - Stored XSS in text panel plugin

PR:		269903
Reported by:	drtr0jan@yandex.ru

security/vuxml: Document multiple vulnerabilities in redis

security/vuxml: Document multiple vulnerabilities in Emacs

security/vuxml: correct "vulnerabilities" spelling

Closes:	https://github.com/freebsd/freebsd-ports/pull/164

security/vuxml: document vulnerabilities for net/freerdp

CVE-2022-39282 and CVE-2022-39283.

PR:		269667
Reported by:	grahamperrin@freebsd.org

security/vuxml: add www/*chromium < 110.0.5481.177

Approved by:	rene (mentor)
Obtained from:	https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html

security/vuxml: Mark zeek < 5.0.7 as vulnerable as per:

https://github.com/zeek/zeek/releases/tag/v5.0.7

This release fixes the following potential DoS vulnerabilities:

 - Receiving DNS responses from async DNS requests (via the
   lookup_addr, etc BIF methods) with the TTL set to zero could
   cause the DNS manager to eventually stop being able to make new
   requests.

 - Specially-crafted FTP packets with excessively long usernames,
   passwords, or other fields could cause log writes to use large
   amounts of disk space.

 - The find_all and find_all_ordered BIF methods could take extremely
   large amounts of time to process incoming data depending on the
   size of the input.

Reported by:	Tim Wojtulewicz

security/vuxml: Document libde265 vulnabilities.

PR:             269382
Reported by:    diizzy@

security/vuxml: Document recent git CVEs

Document CVEs fixed by devel/git 2.39.1 and 2.39.2:

CVE-2022-41903
CVE-2022-23521
CVE-2023-22490
CVE-2023-23946
PR:		269655
Sponsored by:	Rubicon Communications, LLC ("Netgate")