security/vuxml 1.1_6

security/vuxml: Document sudo CVE-2022-43995

Document a potential out-of-bounds write for passwords smaller than
eight bytes when crypt() is used.

PR:		267617
Security:	CVE-2022-43995

security/vuxml: document gitlab vulnerabilities

security/vuxml: Document pixman heap overflow

Document CVE-2022-44638

Sponsored by:   Beckhoff Automation GmbH & Co. KG

security/vuxml: Document Go vulnerability

security/vuxml: Document OpenSSL 3.0 vulnerabilities

security/vuxml: Document Q4 MySQL vulnerabilities

security/vuxml: add www/chromium < 107.0.5304.87

Obtained from:	https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_27.html

security/vuxml: add entry for CVE-2022-3437

There is a limited write heap buffer overflow in the GSSAPI unwrap_des()
and unwrap_des3() routines of Heimdal (included in Samba).

security/vuxml: Add www/*chromium < 107.0.5304.68

Obtained from:	https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html

security/vuxml: Document vulnerability in libudisks

PR:		267281
Reviewed by:	riggs

security/vuxml: Document vulnerabilities in phpmyfaq

security/vuxml: Document Python multiple vulnerabilities

security/vuxml: document nginx vulnerabilities

Document CVE-2022-41741, CVE-2022-41742

security/vuxml: Document git vulnerabilities

Document CVE-2022-39253 and CVE-2022-39260

Sponsored by:	Rubicon Communications, LLC ("Netgate")

security/vuxml: Document OpenSSL 3.0 vuln

security/vuxml: Document Gitea vulnerabilities

PR:		267106

security/vuxml: Format 0d1d2c1 text

security/vuxml: Fix malformed CVE

Fix malformed cvename entry by removing this tag since there is no CVE
for this security issue committed in 0d1d2c1

security/vuxml: Add mail/roundcube-thunderbird_labels vulnerabilities

PR:		266986

security/vuxml: add www/*chromium < 106.0.5249.119

Obtained from:	https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_11.html

security/vuxml: Document multiple vulnerabilities in Samba

security/strongswan: Document DOS vulnerability

ChangeLog:
https://www.strongswan.org/blog/2022/10/03/strongswan-vulnerability-(cve-2022-40617).html

PR:		266938
Reported by:	rob2g2-freebsd@bitbert.com
Security:	CVE-2022-40617

net/routinator: Add net/routinator CVE

Recent versions of Routinator contain a problem that causes Routinator to
exit if it encounters invalid data in RRDP snapshot or delta files.

Details: https://nlnetlabs.nl/downloads/routinator/CVE-2022-3029.txt

PR:		266865
Reported by:	jaap@NLnetLabs.nl

security/vuxml: Improve the description of c2a89e8f-44e9-11ed-9215-00e081b7aa2d

Suggested by:	joneum

security/vuxml: Document Django multiple vulnerabilities

security/vuxml: Fix broken tags

security/vuxml: Document Jenkins Security Advisory 2022-09-21

Sponsored by:	The FreeBSD Foundation

security/vuxml: Document Go vulnerabilities

security/vuxml: Add devel/zydis buffer overflow

CVE-2021-41253 devel/zydis buffer overflow vulnerability.

PR:		266766
Reported by:	Martin Filla <freebsd@sysctl.cz> (maintainer)

security/vuxml: Document mediawiki multiple vulnerabilities

security/vuxml: add www/chromium < 106.0.5249.91

Obtained from: https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_30.html

security/vuxml: document gitlab-ce vulnerabilities

security/vuxml: Document unbound vulnerability

PR:	266654
Reported by:	Herbert J. Skuhra <herbert@gojira.at>
Security:	CVE-2022-3204

security/vuxml: Document vulnerabilities for Matrix clients

security/vuxml: add www/chromium < 106.0.5249.61

Obtained from:	https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html

security/vuxml: document vulnerability in expat < 2.4.9

Rhodri James discovered a heap use-after-free vulnerability in the
doContent function in Expat, an XML parsing C library, which could
result in denial of service or potentially the execution of arbitrary
code, if a malformed XML file is processed.

https://www.debian.org/security/2022/dsa-5236
https://nvd.nist.gov/vuln/detail/CVE-2022-40674

Security:	CVE-2022-40674

security/vuxml: Document exposure of sensitive information in cache manager of squid

security/vuxml: Document potential remote code execution vulnerability in redis

security/vuxml: Document Grafana vulnerabilies

PR:		266530

security/vuxml: Mark zeek < 5.0.2 as vulnerable as per:

https://github.com/zeek/zeek/releases/tag/v5.0.2

The potential DoS vulnerabilities include:

 - Fix a possible overflow and crash in the ICMP analyzer when
   receiving a specially crafted packet

 - Fix a possible overflow and crash in the IRC analyzer when
   receiving a specially crafted packet

 - Fix a possible overflow and crash in the SMB analyzer when
   receiving a specially crafted packet

 - Fix two possible crashes when converting IP headers for output
   via the raw_packet event

Reported by:	Tim Wojtulewicz

security/vuxml: Document vulnerability in PuppetDB

security/vuxml: add www/chromium < 105.0.5195.125

Obtained from:	https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_14.html

security/vuxml: Document vulnerability for net-im/dendrite

security/vuxml: Document Gitea vulnerabilities

PR:		266359

security/vuxml: Document python multiple vulnerabilities

security/vuxml: Document Go vulnerabilities

security/vuxml: add www/chromium < 105.0.5195.102

Obtained from: https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop.html

security/vuxml: Unbreak vuxml build

Fix malformed CVE entry which I added in 46eb6e07f37e2. Thanks to dbaio@
for pointing it out.

dns/powerdns-recursor: Add VUXML entry

security/vuxml: Document Grafana vulnerabilities

- vuxml: CVE-2022-31176 - Unauthorized file disclosure

PR:		266128