security/vuxml 1.1_6

Document OpenSSL multiple vulnerabilities.

Add three upstream patches to busybox 1.22.1, bumping PORTREVISION to 2. One fixes the CVE-2014-4608 buffer overrun in LZO2, one fixes the nc app, one fixes the zcat and related apps when accessing files without extension.

List busybox < 1.22.1_2 as vulnerable, and add CVE Name to the vulndb.

Security:	CVE-2014-4608
Security:	d1f5e12a-fd5a-11e3-a108-080027ef73ec

VuXML: document multiple vulnerabilities in WordPress

CVE-2014-9033 to CVE-2014-9039.

VuXML: document heap overflow in 32-bit builds of libpng

Document file multiple vulnerabilities.

Fix whitespace in entry for ntp (4033d826-87dd-11e4-9079-3c970e169bc2)

Document CVE-2014-9116 in mutt

Document ntp multiple vulnerabilities.

Document git vulerability

Approved by:	swills
Security:	CVE-2014-9390

OTRS security announcement

Register portepoch in the xorg-server entry.

Submitted by:	Adam McDougall <mcdouga9@egr.msu.edu>
Pointyhat to:	kwm@

Fix version information on several subversion vulnerabilities

- document Subversion remote DoS

The GLX indirect rendering support supplied on NVIDIA products is subject to the recently disclosed X.Org vulnerabilities (CVE-2014-8093, CVE-2014-8098) as well as internally identified vulnerabilities (CVE-2014-8298).

Document BIND vulnerability.

Document vulnerability in asterisk11.

Document xserver security advisories.

- Remove a redundant dot

Document unbound vulnerability

Document freetype 2 vulnability.

The latest in a long line of phpMyAdmin security advisories: DoS and XSS vulnerabilities.

Security:	c9c46fbf-7b83-11e4-a96e-6805ca0b3d42

Document mozilla vulnerabilities

PR:		195559
Submitted by:	Jan Beich

Document OpenVPN Denial of Service vulnerability.

Document CVE-2014-8962 and CVE-2014-9028 in audio/flac.

Add CVE names for recent asterisk vulnerabilities.

Document multiple vulnerabilities in asterisk ports.

Document the latest round of phpMyAdmin vulnerabilities.

Security:	a5d4a82a-7153-11e4-88c7-6805ca0b3d42

Add note about CVE-2014-8600 in kde4-runtime and kwebkitpart.

Document yii vulnerability CVE-2014-4672.

Document new vulnerabilities in www/chromium < 39.0.2171.65

Obtained from:	http://googlechromereleases.blogspot.nl/2014/11/stable-channel-update_18.html

Fix version check for the entry added in r372686.

4.11.14 is not in ports yet, the fix was backported to 4.11.13 so we are
safe with 4.11.13_1.

Add entry for CVE-2014-8651 in x11/kde4-workspace.

Cleanup plist

document dbus CVE-2014-7824

ftp/wget: document CVE-2014-4877, path traversal in recursive FTP mode

VuXML: fix spelling for the latest entry

Noticed by:	ports-secteam (rea)

VuXML: document CVE-2014-8483 for irc/konversation-kde4

Approved by:	ports-secteam (zi)

VuXML: document remote Perl code execution in TWiki

Crafted GET parameter "debugenableplugins" can be used to trigger
code execution,
  http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2014-7236

VuXML: document vulnerability in Jenkins

CVE-2014-3665, remote code execution on master servers that can
be initiated by (untrusted) slaves,
  https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-30

Add entry for libssh's CVE-2014-0017.

- Document recent vulnerabilities in libpurple/pidgin

Document cross site scripting vulnerabilities in phpMyAdmin

Security:	25b78f04-59c8-11e4-b711-6805ca0b3d42

Document asterisk susceptibility to the POODLE vulnerability, described in CVE-2014-3566.

Document libxml2 denial of service

Add linux-c6-openssl to OpenSSL entry from 2014-10-15.

Approved by:	swills (mentor)

Document critical SQL Injection Vulnerability in www/drupal7

- Mark libxul as vulnerable too

Submitted by:	Jan Beich

Document OpenSSL multiple vulnerabilities.

Document mozilla vulnerabilities

PR:		194356
Submitted by:	Jan Beich

Convert USE_PYTHON_RUN to new USES syntax; Appease the angry DEVELOPER=YES god

Approved by:	mat