security/vuxml 1.1_6

vuln.xml: Adjust sqlite version in sqlite entry

Update the sqlite versions affected in the latest sqlite entry.  The entry
failed to take PORTEPOCH into account, and without this fix pkg audit fails
to mark sqlite as vulnerable when it's not updated to the latest version,
since any version with PORTEPOCH set will always be greater than any version
without.

PR:		247149

Fix build, again...

Sponsored by:	Rubicon Communications, LLC (netgate.com)

Document new vulnerablities in www/chromium < 83.0.4103.116

Update VuXML with security issues in mail/mutt

PR:		247399
Submitted by:	Derek Schrock

Document curl vulnerability

Attempt to fix build.

Sponsored by:	Rubicon Communications, LLC (netgate.com)

Document CUPS CVE-2019-8842 and CVE-2020-3898.

PR:		246011
Security:	https://github.com/apple/cups/releases/tag/v2.3.3

Clean up unnecessary "<p>.</p>" in blockquote section

Document rails vulnerability

security/vuxml: Document multimedia/vlc Vulnerability

PR:		247341
Security:	CVE-2020-13428

security/vuxml:

Document CVE-2020-13882 and CVE-2019-13033 for security/lynis.

security/vuxml: CVE-2020-8618 and CVE-2020-8619

ISC published CVE-2020-8618 affecting dns/bind916 and CVE-2020-8619
affecting dns/bind911 and dns/bind916.  Both ports were updated.

security/vuxml: Update CVE-2019-18348 and CVE-2020-8492 entries

Python 3.6 and 3.7 are not vulnerable in the ports tree anymore.
Change range for python35 to <le>, suggested by swills.

PR:		246984, 246738

security/vuxml: document libreoffice <6.4.4 security issues

PR:		247196
Submitted by:	rob2g2 <spam123@bitbert.com>

Document multiple sqlite3 vulnerabilities with CVSS scores ranging from 5.5 (medium) to 7.5 (high).

PR:		247149

security/vuxml: document Node.js June 2020 Security Releases

https://nodejs.org/en/blog/vulnerability/june-2020-security-releases/

Sponsored by:	Miles AS

Document net-mgmt/tcpreplay vulnerabilities

security/vuxml: Document irc/znc issue

Security:	CVE-2020-13775

Document npm vulnerabilities.

Document the audio/libadplug vulnerabilities:

https://github.com/adplug/adplug/releases/tag/adplug-2.3.3

security/vuxml: Mark zeek < 3.0.7 as vulnerable as per:

https://raw.githubusercontent.com/zeek/zeek/v3.0.7/NEWS

Various issues including stack overflows and memory leaks.

Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb20-30.html

Add FreeBSD-SA-20:17.usb.

Approved by:	so

Unbreak vuxmlbuild

Parsing VuXML ...Application exception:
bad CVE name for vid 669f3fe8-a07a-11ea-b83e-f0def1f5c5a2: GHSL-2020-100 @ho:215
*** Error code 1

Sponsored by:	Netzkommune GmbH

security/vuxml: document new vulnerabilities in net/freerdp < 2.1.0

PR:		246931, 245517
Obtained from:	https://github.com/FreeRDP/FreeRDP/blob/2.1.0/ChangeLog
Approved by:	koobs (mentor)

security/vuxml: Update CVE-2019-18348 and CVE-2020-8492 entries

CVE-2019-18348:	Add missing Python packages range
CVE-2020-8492:	Fix Python 3.7 entrie, it's currently affected.

After committing fixes, we'll need to change ranges again.

PR:		246984

Document new vulnerabilities in www/chromium < 83.0.4103.97

Obtained from:	https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html

- Fix the name of py-django30 in my previous commit

Spotted by:	dan@langille.org

Attempt to fix build.

Sponsored by:	Rubicon Communications, LLC (netgate.com)

- Update c5ec57a9-9c2b-11ea-82b8-4c72b94353b5 entry. Add drupal 8.8.6

Document gitlab-ce vulnerabilities.

- Document Django multiple vulnerabilities

vuxml: Document git vulnerability CVE-2020-5260

PR:		245821
Submitted by:	rob2g2 <spam123@bitbert.com>
Sponsored by:	Rubicon Communications, LLC (Netgate)

vuxml: Document git vulnerability CVE-2020-11008

PR:		245822
Submitted by:	rob2g2 <spam123@bitbert.com>
Sponsored by:	Rubicon Communications, LLC (Netgate)

Add entry for GNUTLS-SA-2020-06-03 (flaw in TLS). Add CVE reference to previous GnuTLS entry.

Document rubygem-websocket-extensions vulnerability

Document nghttp2 vulnerability

VuXML: Add entry for gitea < 1.11.6

PR:		246892
Submitted by:	maintainer

Correct vulnerable version range of powerdns-recursor

PR:		246655
Submitted by:	Ralf van der Enden <tremere@cainites.net>
Approved by:	ehaupt (mentor)

Fix r536871

Document rubygem-kaminari-core vulnerability

document sane-backend vulnerabilities

CVE-2020-12861, CVE-2020-12862, CVE-2020-12863, CVE-2020-12864,
CVE-2020-12865, CVE-2020-12866, CVE-2020-12867

PR:		246803

Document gitlab-ce vulnerabilities.

security/vuxml: add two entries for mail/sympa

PR:		246701
Submitted by:	Geoffroy Desvernay <dgeo@centrale-marseille.fr>

Document powerdns-recursor vulnerabilities

PR:		246655
Submitted by:	Ralf van der Enden <tremere@cainites.net>
Approved by:	ehaupt (mentor)

security/vuxml: add three CVEs for qmail

PR:		245010
Submitted by:	erdgeist@erdgeist.org

Document new vulnerabilities in www/chromium 83.0.4103.61.

The website is somewhat crippled and does not show the full text.

Add entry for piwigo

PR:		245153
Sponsored by:	Netzkommune GmbH

Add entry for tomcat

PR:		246657
Sponsored by:	Netzkommune GmbH

Document unbound multiple vulnerabilities.