security/vuxml 1.1_6

- Re-add PHP removed in previous commit - Update pcre to use lt instead of gt

- Make version matching on the pcre vuln a little more sane - Remove PHP as the vulnerability appears to be in devel/pcre, not php

Document two recent pcre vulnerabilities that can be triggered by specifically crafted *patterns* and would lead to stack or heap overflow.

Update information for graphics/libraw.

PR:	200194

security/vuxml: multiple vulnerabilities of wpa_supplicant and hostapd

Security:	CVE-2015-4141
Security:	CVE-2015-4142
Security:	CVE-2015-4143
Security:	CVE-2015-4144
Security:	CVE-2015-4145
Security:	CVE-2015-4146
PR:		200568

Document recent ffmpeg0 vulnerabilities

Add entry for vulnerable versions of avidemux2 and avidemux26

PR:		200507
Submitted by:	venture37@geeklan.co.uk

security/vuxml: add www/rubygem-rest-client vulnerabilities

PR:		200504
Differential Revision:	https://reviews.freebsd.org/D2699
Submitted by:	Sevan Janiyan <venture37@geeklan.co.uk>
Approved by:	ports-secteam (delphij, eadler)
Security:	CVE-2015-1820
Security:	CVE-2015-3448

- Add kodi to 57325ecf-facc-11e4-968f-b888e347c638 [1]  - Update entry dates for newly added entry.

PR:		200200 [1]
Submitted by:	Jason Unovitch [1]

Reflect CVE-2015-2060 and CVE-2014-9556.

PR:		ports/198955
Submitted by:	Jason Unovitch

- Document django vulnerability CVE-2015-3982

Extend 57325ecf-facc-11e4-968f-b888e347c638 to cover rawstudio as well.

PR:		200199
Submitted by:	Jason Unovitch

Document the issue with proxychains-ng which uses current directory when searching for its own shared library (CVE-2015-3887).

PR:		200511
Submitted by:	Jason Unovitch

Document wireshark multiple vulnerabilities.

Document krb5 requires_preauth bypass in PKINIT-enabled KDC.

Retrofit document cURL multiple vulnerabilities.

Document cassandra remote code execution vulnerability.

PR:		199091
Submitted by:	Jason Unovitch <jason unovitch gmail com>

Fix version range for previous commit.

Extend CVE-2015-3456 to cover xen-tools (4.5.0-4.5.0_5: we didn't supported the feature in earlier version of this port) and VirtualBox cases as well.

PR:		200311

document possible vulnerabilities in sysutils/py-salt

PR:		200172
Submitted by:	Sevan Janiyan <venture37@geeklan.co.uk>

Add entry for mail/davmail.

PR:		198297
Submitted by:	Jason Unovitch <jason.unovitch@gmail.com>
Approved by:	<john.c.prather@gmail.com> (maintainer (timeout))

Document dnsmasq and -devel vulnerabilities (CVE-2015-3294 and one other in rc).

Document PCRE and PHP multiple vulnerabilities.

Correct PR number.

Submitted by:	jason.unovitch gmail.com

Record some minor PostgreSQL sercurity problems.

"This update fixes three security vulnerabilities reported in PostgreSQL over
the past few months. Nether of these issues is seen as particularly urgent.
However, users should examine them in case their installations are vulnerable."

URL:	http://www.postgresql.org/about/news/1587/

Pass full path to the vuln.xml file to extra-validation.py.  Without this, if .OBJDIR differs from .CURDIR, the validation would fail.

PR:		193923
Reported by:	jbeich

Document CVE-2015-3306 proftpd mod_copy unauthenticated copying of files vulnerability.

Document vulnerability in security/ipsec-tools.

PR:		200334
Approved by:	bdrewery (mentor)

Document new vulnerabilities in www/chromium < 43.0.2357.65

Obtained from:	http://googlechromereleases.blogspot.nl/2015/05/stable-channel-update_19.html

Document ClamAV multiple vulnerabilities.

security/vuxml: Add CVE-2015-3900 entry for devel/ruby-gems

PR:		200264
Differential Revision:	https://reviews.freebsd.org/D2572
Approved by:	mat (mentor)
Security:	CVE-2015-3900

Document qemu "VENOM" vulnerability - CVE-2015-3456

PR:		200255
PR:		200256
PR:		200257
Submitted by:	venture37@geeklan.co.uk
Security:	http://vuxml.FreeBSD.org/freebsd/2780e442-fc59-11e4-b18b-6805ca1d3bb1.html

Document Quassel IRC vulnerability CVE-2015-3427

Correct entry for apache-openoffice-* / libreoffice CVE-2015-1774 so that apache-openoffice-4.1.1_9 is not incorrectly flagged as vulnerable.

Approved by:	mat (mentor, implicit)

security/vuxml: document vulnerability in rubygem-redcarpet <3.2.3

PR:		200195
Differential Revision:	https://reviews.freebsd.org/D2548
Submitted by:	Sevan Janiyan <venture37@geeklan.co.uk>
Approved by:	mat (mentor)

security/vuxml: Add CVE-2015-3885 entry for graphics/ufraw

PR:		200197

Record two new phpMyAdmin security vulnerabilities

Document multiple vulnerabilities in www/linux-*-flashplugin11.

Security:	CVE-2015-3044
Security:	CVE-2015-3077
Security:	CVE-2015-3078
Security:	CVE-2015-3079
Security:	CVE-2015-3080
Security:	CVE-2015-3081
Security:	CVE-2015-3082
Security:	CVE-2015-3083
Security:	CVE-2015-3084
Security:	CVE-2015-3085
Security:	CVE-2015-3086
Security:	CVE-2015-3087
Security:	CVE-2015-3088
Security:	CVE-2015-3089
Security:	CVE-2015-3090
Security:	CVE-2015-3091
Security:	CVE-2015-3092
Security:	CVE-2015-3093

VuXML: document recent mozilla vulnerabilities

security/vuxml: Add CVE-2015-0971 entry for security/suricata

Revert r385940,r385932,r385864:

The usage of * is actually valid, as pointed out at the FreeBSD porter's
handbook:

https://www.freebsd.org/doc/en/books/porters-handbook/security-notify.html

Which denotes "the smallest version number" (in other words, * < 0).

Requested by:	many
Pointy hat to:	delphij

Add entry for CVE-2015-3146 in security/libssh.

- fix a second postfix entry

PR:			200089 (followup)

Correct version range.

PR:		200089

* is not valid for version number, replace all instances with 0 and bump modification date.

Submitted by:	Chris Nehren <cnehren tenable com> (version number part)

VuXML: update sqlite3 entry with verbose descriptions. CVE-2015-341[4-6]

PR:		199483

Document HWP filter vulnerability in editors/libreoffice < 4.3.7 and editors/openoffice < 4.1.2, CVE-2015-1774.

Approved by:	mat (mentor)
Differential Revision:	https://reviews.freebsd.org/D2475

Document current and previous wordpress vulnabilities.

Fix version range of two ancient items.

Submitted by:	Chris Nehren <cnehren tenable com>

Add entry for powerdns and powerdns-recursor.

Approved by:	bdrewery (mentor)