security/vuxml 1.1_6

security/vuxml: add CouchDB CVE details

while here, appease `make validate` indentation

Security:	https://docs.couchdb.org/en/stable/cve/2021-38295.html
Sponsored by:	SkunkWerks, GmbH

security/vuxml: topic format consistency

Reformat to be consistent with other entries.

security/vuxml: update editors/openoffice-{4,devel} latest entry

Add info about three just announced CVEs.

security/vuxml: Document Ansible vulnerability

Security:	CVE-2021-3620

security/vuxml: Document editors/openoffice-{4,devel} vulnerability

security/vuxml: Document lang/go vulnerability

security/vuxml: document www/chromium < 94.0.4606.81

Obtained from:	https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop.html

security/vuxml: Only apache24 2.4.49 and 2.4.50 are vulnerable

security/vuxml: Fix version range of 9bad457e-b396-4452-8773-15bec67e1ceb

Sponsored by:	The FreeBSD Foundation

security/vuxml: Document Jenkins Security Advisory 2021-10-06

Sponsored by:	The FreeBSD Foundation

security/vuxml: Only apache24 2.4.49 is vulnerable

security/vuxml: document multiple issues with databases/redis-devel

security/vuxml: document multiple issue with databases/redis{,5,6}

PR:	258935

security/vuxml: Document Apache httpd vulnerability

security/vuxml: Document bacula-web vulnerabilities

security/vuxml: Document mediawiki's multiple vulnerabilities

security/vuxml: add www/chromium < 94.0.4606.71

Obtained from:	https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html

security/vuxml: Document gitlab vulnerabilities

security/vuxml: Fix entry 7062bce0-1b17-11ec-9d9d-0022489ad614

This should also fix vuxml build.

PR:		258802
Sponsored by:	The FreeBSD Foundation

security/vuxml: document archivers/ha vulnerabilities

security/vuxml: document recent nexus2-oss vulnerabilities

PR:	252564

security/vuxml: Fix range on latest cURL vuln

Submitted by:	yasu
PR:		258586

security/vuxml: Fix double CVE- in latest httpd entry

security/vuxml: add www/webkit2-gtk3

PR:		255528
Obtained from:	https://webkitgtk.org/security/WSA-2021-0005.html

security/vuxml: add www/chromium < 94.0.4606.61

Obtained from:	https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_24.html

security/vuxml: Fix missing <name> field

I wasn't able to see my mistake based on the error "make validate"
gave me:

    Traceback (most recent call last):
      File "/usr/local/poudriere/ports/current-patched/security/vuxml/files/extra-validation.py", line 99, in <module>
	if (re_invalid_package_name.search(name.text) is not None):
    TypeError: expected string or bytes-like object
    *** Error code 1

Thanks to Dan for the pointy hat save.

Reported by:	Dan Langille

security/vuxml: Mark zeek < 4.0.4 as vulnerable as per:

https://github.com/zeek/zeek/releases/tag/v4.0.4

 - Paths from log stream make it into system() unchecked, potentially
   leading to commands being run on the system unintentionally.
   This requires either bad scripting or a malicious package to be
   installed, and is considered low severity.

 - Fix potential unbounded state growth in the PIA analyzer when
   receiving a connection with either a large number of zero-length
   packets, or one which continues ack-ing unseen segments. It is
   possible to run Zeek out of memory in these instances and cause
   it to crash. Due to the possibility of this happening with packets
   received from the network, this is a potential DoS vulnerability.

security/vuxml: Document mod_auth_mellon vulnerability

security/vuxml: document Node.js August 2021 Security Releases (2)

https://nodejs.org/en/blog/vulnerability/aug-2021-security-releases2/

Sponsored by:	Miles AS

security/vuxml: document Node.js August 2021 Security Releases

https://nodejs.org/en/blog/vulnerability/aug-2021-security-releases/

Sponsored by:	Miles AS

security/vuxml: document Node.js July 2021 Security Releases (2)

https://nodejs.org/en/blog/vulnerability/july-2021-security-releases-2/

Sponsored by:	Miles AS

security/vuxml: document Node.js July 2021 Security Releases

https://nodejs.org/en/blog/vulnerability/july-2021-security-releases/

Sponsored by:	Miles AS

security/vuxml: add chromium < 94.0.4606.54

Obtained from:	https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html

security/vuxml: Document libssh vulnerability

security/vuxml: Add entry for libpano13 < 2.9.20

PR:		258354
Approved by:	tcberner
Differential Revision:	https://reviews.freebsd.org/D31980

security/vuxml: update seatd 0.6.{0,1} entry

- Discovered 1 day before announcement
- Assigned CVE-2021-41387

security/vuxml: fix range in vid f55921aa-10c9-11ec-8647-00e0670f2660

Fix ranges for latest net/mpd5 vulnerability.

Reported by:	Clive Lin

security/vuxml: Document Apache httpd vulns

security/vuxml: Register cURL vulns

security/vuxml: consistently use -- in topic after e0992ef21346

security/vuxml: mark seatd 0.6.{0,1} as vulnerable

security/vuxml: add chromium < 93.0.4577.82

Obtained from:	https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html

security/vuxml: Document vulnerabilities in Matrix clients

Security:	93eb0e48-14ba-11ec-875e-901b0e9408dc
Security:	CVE-2021-40823
Security:	CVE-2021-40824

security/vuxml: document sysutils/consul vulnerability

security/vuxml: Document lang/go vulnerability

security/vuxml: Document multiple vulnerabilities of python38

security/vuxml: add net/mpd5 PPPoE Server remotely exploitable crash

Version 5.9_2 contains security fix for PPPoE servers.
Insufficient validation of incoming PPPoE Discovery request
specially crafted by unauthenticated user might lead to unexpected
termination of the process. The problem affects mpd versions since 5.0.
Installations not using PPPoE server configuration were not affected.

Reported by:	Yannick C at SourceForge
Tested by:	Yannick C at SourceForge, paul at SourceForge

security/vuxml: Document multiple vulnerabilities of python36 and python37

security/vuxml: Document WeeChat vulnerability

security/vuxml: Document py-matrix-synapse vulnerabilities

PR:		258187
Reported by:	Sascha Biberhofer <ports@skyforge.at>
Security:	a67e358c-0bf6-11ec-875e-901b0e9408dc
Security:	CVE-2021-39163
Security:	CVE-2021-39164