security/vuxml 1.1_6

Document shell command execution via improper escaping in p5-UI-Dialog

PR:		203667
Security:	CVE-2008-7315
Security:	https://vuxml.FreeBSD.org/freebsd/00dadbf0-6f61-11e5-a2a1-002590263bf5.html

Document iPython vulnerabilities fixed in 3.2.2

PR:		203668
Security:	CVE-2015-6938
Security:	CVE-2015-7337
Security:	https://vuxml.FreeBSD.org/freebsd/290351c9-6f5c-11e5-a2a1-002590263bf5.html

Add entry for two security problems in PostgreSQL

CVE-2015-5289: json or jsonb input values constructed from arbitrary
user input can crash the PostgreSQL server and cause a denial of
service.

CVE-2015-5288: The crypt() function included with the optional pgCrypto
extension could be exploited to read a few additional bytes of memory.
No working exploit for this issue has been developed.

security/vuxml: Document Zend Framework 1 vulnerability

PR:		203462
Security:	d3324fdb-6bf0-11e5-bc5e-00505699053e
Security:	CVE-2014-8089

Document OpenSMTPD vulnerabilities (5.7.3) Revise pkg name, add PORTEPOCH, add more detail to earlier entry (5.7.2)

Security:	42852f72-6bd3-11e5-9909-002590263bf5
Security:	ee7bdf7f-11bb-4eea-b054-c692ab848c20
Security:	CVE-2015-7687

Document recent mbed TLS/PolarSSL security releases

PR:		203544
Security:	5d280761-6bcf-11e5-9909-002590263bf5
Security:	953aaa57-6bce-11e5-9909-002590263bf5

Unbreak vuxml, woops.

Document heap overflows and a DoS in gdk-pixbuf2.

Security:	CVE-2015-7673, CVE-2015-7674

Document 20150910 Plone advisories

PR:		203255
Security:	6b3374d4-6b0b-11e5-9909-002590263bf5

Document PHP multiple security advisories in phar plugin

PR:		203541
Security:	c1da8b75-6aef-11e5-9909-002590263bf5

Add CVE reference to Apache James entry

PR:		203461
Security:	CVE-2015-7611
Security:	be3069c9-67e7-11e5-9909-002590263bf5

Document mail/opensmtpd vulnerability

Document security advisory for the Apache James server

PR:		203461
Security:	be3069c9-67e7-11e5-9909-002590263bf5

Report OTRS vulnerability

Security:	CVE-2015-6842, CVE-2013-7135

Document newest flash vulnabilities.

Fix <freebsdpr> syntax on several entries

Without ports/ prepended to the PR number, the http://www.vuxml.org links
go to https://bugs.FreeBSD.org and not the actual PR.

While here, "trongSwan" -> "StrongSwan" spelling correction

PR:		200777

Document multiple vulnerabilities in CodeIgniter

PR:		203401
Security:	5114cd11-6571-11e5-9909-002590263bf5
Security:	01bce4c6-6571-11e5-9909-002590263bf5
Security:	c21f4e61-6570-11e5-9909-002590263bf5
Security:	f838dcb4-656f-11e5-9909-002590263bf5
Security:	b7d785ea-656d-11e5-9909-002590263bf5

Document new vulnerabilities in www/chromium < 45.0.2454.101

Obtained from:	http://googlechromereleases.blogspot.nl/2015/09/stable-channel-update_24.html

Revise Moodle multiple security vulnerabilities from r397210 to reflect recently published advisory

Security:	CVE-2015-5264
Security:	CVE-2015-5272
Security:	CVE-2015-5265
Security:	CVE-2015-5266
Security:	CVE-2015-5267
Security:	CVE-2015-5268
Security:	CVE-2015-5269
Security:	c2fcbec2-5daa-11e5-9909-002590263bf5

Fix older ruby vuxml entry

If you follow official instructions to change your default ruby version
it alters the ruby package name and vuxml will produce false positives.
This change will solve these scenarios.

PR:		203227

libssh2 version entry range was missing PORTEPOCH

Security:	9770d6ac-614d-11e5-b379-14dae9d210b8

Document vulnerability in security/libssh2

Security:	CVE-2015-1782

Summary: Document recent Mozilla vulnerabilities

Mention ports with libzip copy

Fix typo

Next avidemux2 may have CVE-2015-3395 fix, adjust

https://github.com/mean00/avidemux2/commit/cfb9760

Document recent ffmpeg vulnerabilities

libav 11.4 was released before the fixes were made while ffmpeg 2.3.x
and lower are not maintained anymore. Bundle consumers are out of luck
unless low impact there or the fixes are easy to cherry-pick.

Update dcraw entry in VUXML

PR:		203034
Submitted by:	yuri@rawbw.com (maintainer of lightzone)
Security:	57325ecf-facc-11e4-968f-b888e347c638

Document Moodle multiple security vulnerabilities

Note upstream has not released CVE assignments or details of the issues at
this time. Document the current verbiage from the release notes to help
downstream users proactively update.

Document squid TLS/SSL parser denial of service vulnerability

No CVE assigned yet

PR:		203186

Document remind buffer overflow with malicious reminder file input

PR:		202942
Security:	CVE-2015-5957

Alter <topic> of some of my recent entries to be more consistently worded

Normalize "use after free" as "use-after-free" in <topic>

I noticed when browsing vuxml.freebsd.org an even split between "use
after free" and "use-after-free". It seemed to make sense to standardize
on one style so future editors will have a common usage to guide them
when new entries are created.

Document deskutils/shutter vulnerability

Security:	CVE-2015-0854

Document graphics/openjpeg vulnerability

No CVE assigned yet

Document vulnerability in older graphics/optipng

No CVE assigned yet

Document net/openslp vulnerability

Security:	CVE-2015-5155

Document archivers/p7zip vulnerability

Security:	CVE-2015-1038

Document www/h2o vulnerability

PR:		203096
PR:		203147
Security:	CVE-2015-5638

Fix spelling of zh_CN for wordpress vulnerabilities.

Document wordpress multiple vulnerabilities.

- document bugzilla CVE-2015-4499

net/openldap24-server Fix affected package name

Submitted by:	dvl
Security:	4910d161-58a4-11e5-9ad8-14dae9d210b8

Document net/openldap24-server vulnerability

Security:	CVE-2015-6908

Expand a35f415d-572a-11e5-b0a4-f8b156b6dcc8: multiple vulnerabilities in audio/vorbis-tools and audio/opus-tools

Document oggenc buffer overflow in audio/vorbis-tools.

Security:	CVE-2015-6749

Document pgbouncer failed auth_query lookups falling back to auth_user

Note the vulnerable version was not committed to ports, however document
the issue in the interest of being thorough and catching any user who
made this as a local change.

PR:		202957
Security:	CVE-2015-6817
Security:	d76961da-56f6-11e5-934b-002590263bf5
Approved by:	feld (mentor)

Document the latest phpMyAdmin vulnerability: reCaptcha	bypass

Correct some package names that were mistakenly labeled as php56

Security:	3d675519-5654-11e5-9ad8-14dae9d210b8

Add assigned CVEs to previous php vulnerability entry

Security:	787ef75e-44da-11e5-93ad-002590263bf5
Security:	CVE-2015-6831
Security:	CVE-2015-6832
Security:	CVE-2015-6833