Mark bro < 2.5.4 as vulnerable as per:

    https://www.bro.org/download/NEWS.bro.html

Reviewed by:	ler (mentor)
Approved by:	ler (mentor)
Differential Revision:	https://reviews.freebsd.org/D15677

security/vuxml/vuln.xml: Fix indentation (silences make validate)

Reported by:	mfechner

Document new vulnerabilities in www/gitlab < 10.8.2 or < 10.7.5 or < 10.6.6.

Reviewed by:	tz (mentor)
Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D15635

security/vuxml: Fix version ranges for latest Git vulnerabilities

Reported by:	jbeich

security/vuxml: Document devel/git CVEs (2018-11233 and 2018-11235)

Document security/strongswan multiple vulnerabilities
((CVE-2018-10811, CVE-2018-5388)

PR:		228631
Submitted by:	strongswan@Nanoteq.com

Document new vulnerabilities in www/chromium < 67.0.3396.62

Obtained
from:	https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html

Document BIND multiple vulnerabilities.

Update VuXML entry for xorg-server issues

Update VuXML entry for xorg-server issues related to CVE-2017-10971 and
CVE-2017-10972.  The version check was wrong missing the portepoch which
meant that the entry never matched anything.  It was also only added for
xorg-server 1.19, while we have 1.18 in base.

Fix formatting and edit the overly long lines.

Document curl vulnerability

Document vulnerabilities in wavpack 5.1.0 and earlier

PR:		228146
Submitted by:	yasu@utahime.org

Bump maximum description length to 5000

Details:
Thanks to www/chromium, we now have a valid entry with 4933 characters.
Entries this long will probably remain exceptions, but there should
not be a warning for the currently valid entries.

Bump copyright to 2018

Document vulnerabilities in chromium before 66.0.3359.170

Reported by:	Tommi Pernila <tommi.pernila@iki.fi> via e-mail

Document jenkins security issues

security/vuxml: mark firefox < 60 as vulnerable

PR:		226476

security/vuxml: document kamailio CVE-2018-8828

PR:		227677
Submitted by:	Ben Hood <ben@relops.com>

Document ftp/wget's cookie injection vulnerability

Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>
MFH:		2018Q2
Security:	CVE-2018-0494

Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb18-16.html

Document FreeBSD-SA-18:06.debugreg

Document python vulnerability

Security notice regarding kwallet-pam (KDE Plasma5).

  https://www.kde.org/info/security/advisory-20180503-1.txt

The port is not built by default through the regular KDE packages,
and has been in the ports tree only a week; the impact is expected
to be low.

Approved by:	tcberner (mentor, implicit)

Document multiple vulnerabilities in www/drupal7 and www/drupal8

Document vulnerabilities in gitlab for several versions.

Reviewed by:	eugen_grosbein.net, tz (mentor)
Approved by:	eugen_grosbein.net, tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D15248

Document free-after-use issue in chromium before 66.0.3359.139

Submitted by:	Tommi Pernila <tommi.pernila@iki.fi> via e-mail
Security:	CVE-2018-6118

Document vulnerabilities in quassel before 0.12.5

Security:	https://vuxml.freebsd.org/freebsd/499f6b41-58db-4f98-b8e7-da8c18985eda.html

Document vulnerabilities in chromium before 66.0.3359.117

Submitted by:	tommi.pernila@iki.fi (via mail to ports-secteam)
Reviewed by:	riggs

Document mbed TLS vulnerabilities

Security:	https://tls.mbed.org/tech-updates/releases/mbedtls-2.8.0-2.7.2-and-2.1.11-released

security/vuxml: Document MySQL vulns from quarterly Oracle CPU

Document wordpress issues

Document the latest phpMyAdmin vulnerabilities

- Document drupal8 vulnerability

security/vuxml: Bump portrev for latest OpenSSL vuln

security/vuxml: Add OpenSSL vulnerability

Add Blockquote

pointy hat to joneum

Document multiple vulnerabilities in www/drupal7

Security:	CVE-2018-7600

Document Perl vulnerability

Update freeimage vulnerability

ipsec-tools: document remotely exploitable computational-complexity attack.

PR:		225066
Security:	CVE-2016-10396

Document nghttp2 vulnerability

Document roundcube IMAP command injection vulnerability.

Document Jenkins vulnerabilities

Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb18-08.html

Fixed a wrong version definition for gitlab that report 10.4.6 as affected.

PR:		227293
Reported by:	majo-bugs.freebsd.org@cerny.sk
Reviewed by:	dbaio, swills (mentor)
Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D14999

Added information about security problems with port www/gitlab.

Reviewed by:	swills (mentor)
Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D14974

Document FreeBSD-SA-18:05.ipsec

Document FreeBSD-SA-18:04.vt

security/vuxml: adjust thunderbird version for CVE-2018-5148 backport

security/vuxml: delist palemoon from CVE-2018-514[67]

Let upstream to decide if the browser is affected.
https://github.com/MoonchildProductions/Pale-Moon/commits/master/media/libvorbis/lib/vorbis_codebook.c
https://github.com/MoonchildProductions/Pale-Moon/commits/master/media/libtremor/lib/tremor_codebook.c

security/vuxml: libxul didn't share release branch with thunderbird

- Document Moodle vulnerability

Fix space/tab to pet "make validate"

Document Ruby vulnerability

security/vuxml: Document Node.js vulnerabilities

https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/

Document gitlab vulnerability.

Reviewed by:	tz (mentor)
Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D14870

Fix typos

Document www/webkit2-gtk3 vulnerabilities

Document new vulnerability in www/chromium < 65.0.3325.181

Obtained
from:	https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop_20.html

security/vuxml: Document OpenSSL vulnerabilities

Attempt to fix vuxml build.

Sponsored by:	The FreeBSD Foundation

security/vuxml: Mark Apache 2.2 vulnerable

 - Upstream has removed all patches for 2.2.34

With hat:	apache

Fix build after r465658.

Sponsored by:	The FreeBSD Foundation

security/vuxml: mark firefox < 59.0.2 as vulnerable

thunderbird: fix affected versions for CVE-2018-5146

according to https://www.mozilla.org/en-US/security/advisories/mfsa2018-09/ ,
CVE-2018-5146 has been fixed in thunderbird 52.7.0 (and CVE-2018-5147
affects Android platforms as per it's description).
Add link to the thunderbird security advisory MFSA 2018-09, as this has
the info for thunderbird.

Fix mythtv ranges. Forgot to factor in PORTEPOCH.

Update entries for mythtv and mythtv-frontend

PR:		225652

Document rubygem-rails-html-sanitizer vulnerability

security/vuxml: Document recent Apache httpd vulnerabilities

Document vulnerability in www/mybb

VulnXML record: CVE-2018-8740: SQLite -- Corrupt DB can cause a NULL pointer
dereference

Patched in r465275.

Document rubygem-sanitize vulnerability

Document rubygem-loofah vulnerability

Document py-notebook vulnerability

Document zero-day remote vulnerability in mail/squirrelmail

Reported by:	Roger Marquis <marquis@roble.com> via e-mail
Security:	CVE-2018-8741

security/vuxml: mark slurm-wlm < 17.02.10 as vulnerable

Security:	CVE-2018-7033

security/vuxml: mark libvorbis < 1.3.6 as vulnerable

security/vuxml: bump waterfox version after r464679

Mark e2fsprogs < 1.44.0 vulnerable.

Initial entry for the speculative execution vulnerability
(FreeBSD-SA-18:03.speculative_execution)

Update NTP entry to add the FreeBSD SA information (FreeBSD-SA-18:02.ntp)

Document FreeBSD-SA-18:01.ipsec

Document the latest Flash Player vulnerability.

https://helpx.adobe.com/security/products/flash-player/apsb18-05.html

security/vuxml: mark firefox < 59 as vulnerable

Add an entry for Samba vulnerabilities CVE-2018-1050 and CVE-2018-1057

Security:	CVE-2018-1050
		CVE-2018-1057

Document mbed TLS Security Advisory 2018-01.

Security:	https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-01
Security:	CVE-2018-0487
Security:	CVE-2018-0488

Document vulnerabilities in www/chromium before 65.0.3325.146

Submitted by:	Tommi Pernila <tommi.pernila@iki.fi> (via e-mail)

document vulnerabilities for net/wireshark{,-lite,qt5} and net/tshark{,-lite}

PR:		226355
Obtained from:	https://www.wireshark.org/security/

- Document vulnerabilities (CVE-2018-5732, CVE-2018-5733) in isc-dhcp ports

Document additional vulnerabilities in audio/libsndfile

Document PostgreSQL vulnerability

Security:	CVE-2018-1058

Document strongswan vulnerability

PR:		226043
Submitted by:	strongswan@Nanoteq.com
Security:	CVE-2018-6459
Sponsored by:	Rubicon Communications, LLC (Netgate)

Document vulnerability in audio/libsndfile and audio/linux-c[6|7]-libsndfile

Document multiple NTP vulnerabilities.

Document CVE-2018-6056 in chromium 64.0.3282.167

Reported by:	Tommi Pernila <tommi.pernila@iki.fi> (via e-mail)

Document multiple vulnerabilities in chromium 64.0.3282.119

Reported by:	Tommi Pernila <tommi.pernila@iki.fi> (via e-mail)

Document CVE-2018-1304 and CVE-2018-1305 in Apache Tomcat

Submitted by:	Roger Marquis <marquis@roble.com> via e-mail

Document security problems with shibboleth-sp

Security:	CVE-2018-0489

Document multiple vulnerabilities in www/drupal7 and www/drupal8

Security:	CVE-2017-6927
Security:	CVE-2017-6928
Security:	CVE-2017-6929
Security:	CVE-2017-6930
Security:	CVE-2017-6931
Security:	CVE-2017-6932

- Fix range for ja-mailman in CVE-2018-5950

Document ssh injection vulnerability in devel/cvs

PR:		226088
Reported by:	fk@fabiankeil.de
Security:	CVE-2017-12836