Add CVE assignment to r398701 Zend Framework 1 entry

PR:		203462
Security:	CVE-2015-7695
Security:	https://vuxml.FreeBSD.org/freebsd/d3324fdb-6bf0-11e5-bc5e-00505699053e.html

Add CVE assignment to r398626 PHP entry

PR:		203541
Security:	CVE-2015-7804
Security: 	CVE-2015-7803
Security:
	https://vuxml.FreeBSD.org/freebsd/c1da8b75-6aef-11e5-9909-002590263bf5.html

Document shell command execution via improper escaping in p5-UI-Dialog

PR:		203667
Security:	CVE-2008-7315
Security:	https://vuxml.FreeBSD.org/freebsd/00dadbf0-6f61-11e5-a2a1-002590263bf5.html

Document iPython vulnerabilities fixed in 3.2.2

PR:		203668
Security:	CVE-2015-6938
Security:	CVE-2015-7337
Security:	https://vuxml.FreeBSD.org/freebsd/290351c9-6f5c-11e5-a2a1-002590263bf5.html

Add entry for two security problems in PostgreSQL

CVE-2015-5289: json or jsonb input values constructed from arbitrary
user input can crash the PostgreSQL server and cause a denial of
service.

CVE-2015-5288: The crypt() function included with the optional pgCrypto
extension could be exploited to read a few additional bytes of memory.
No working exploit for this issue has been developed.

security/vuxml: Document Zend Framework 1 vulnerability

PR:		203462
Security:	d3324fdb-6bf0-11e5-bc5e-00505699053e
Security:	CVE-2014-8089

Document OpenSMTPD vulnerabilities (5.7.3)
Revise pkg name, add PORTEPOCH, add more detail to earlier entry (5.7.2)

Security:	42852f72-6bd3-11e5-9909-002590263bf5
Security:	ee7bdf7f-11bb-4eea-b054-c692ab848c20
Security:	CVE-2015-7687

Document recent mbed TLS/PolarSSL security releases

PR:		203544
Security:	5d280761-6bcf-11e5-9909-002590263bf5
Security:	953aaa57-6bce-11e5-9909-002590263bf5

Unbreak vuxml, woops.

Document heap overflows and a DoS in gdk-pixbuf2.

Security:	CVE-2015-7673, CVE-2015-7674

Document 20150910 Plone advisories

PR:		203255
Security:	6b3374d4-6b0b-11e5-9909-002590263bf5

Document PHP multiple security advisories in phar plugin

PR:		203541
Security:	c1da8b75-6aef-11e5-9909-002590263bf5

Add CVE reference to Apache James entry

PR:		203461
Security:	CVE-2015-7611
Security:	be3069c9-67e7-11e5-9909-002590263bf5

Document mail/opensmtpd vulnerability

Document security advisory for the Apache James server

PR:		203461
Security:	be3069c9-67e7-11e5-9909-002590263bf5

Report OTRS vulnerability

Security:	CVE-2015-6842, CVE-2013-7135

Document newest flash vulnabilities.

Fix <freebsdpr> syntax on several entries

Without ports/ prepended to the PR number, the http://www.vuxml.org links
go to https://bugs.FreeBSD.org and not the actual PR.

While here, "trongSwan" -> "StrongSwan" spelling correction

PR:		200777

Document multiple vulnerabilities in CodeIgniter

PR:		203401
Security:	5114cd11-6571-11e5-9909-002590263bf5
Security:	01bce4c6-6571-11e5-9909-002590263bf5
Security:	c21f4e61-6570-11e5-9909-002590263bf5
Security:	f838dcb4-656f-11e5-9909-002590263bf5
Security:	b7d785ea-656d-11e5-9909-002590263bf5

Document new vulnerabilities in www/chromium < 45.0.2454.101

Obtained
from:	http://googlechromereleases.blogspot.nl/2015/09/stable-channel-update_24.html

Revise Moodle multiple security vulnerabilities from r397210 to reflect
recently published advisory

Security:	CVE-2015-5264
Security:	CVE-2015-5272
Security:	CVE-2015-5265
Security:	CVE-2015-5266
Security:	CVE-2015-5267
Security:	CVE-2015-5268
Security:	CVE-2015-5269
Security:	c2fcbec2-5daa-11e5-9909-002590263bf5

Fix older ruby vuxml entry

If you follow official instructions to change your default ruby version
it alters the ruby package name and vuxml will produce false positives.
This change will solve these scenarios.

PR:		203227

libssh2 version entry range was missing PORTEPOCH

Security:	9770d6ac-614d-11e5-b379-14dae9d210b8

Document vulnerability in security/libssh2

Security:	CVE-2015-1782

Summary: Document recent Mozilla vulnerabilities

Mention ports with libzip copy

Fix typo

Next avidemux2 may have CVE-2015-3395 fix, adjust

https://github.com/mean00/avidemux2/commit/cfb9760

Document recent ffmpeg vulnerabilities

libav 11.4 was released before the fixes were made while ffmpeg 2.3.x
and lower are not maintained anymore. Bundle consumers are out of luck
unless low impact there or the fixes are easy to cherry-pick.

Update dcraw entry in VUXML

PR:		203034
Submitted by:	yuri@rawbw.com (maintainer of lightzone)
Security:	57325ecf-facc-11e4-968f-b888e347c638

Document Moodle multiple security vulnerabilities

Note upstream has not released CVE assignments or details of the issues at
this time. Document the current verbiage from the release notes to help
downstream users proactively update.

Document squid TLS/SSL parser denial of service vulnerability

No CVE assigned yet

PR:		203186

Document remind buffer overflow with malicious reminder file input

PR:		202942
Security:	CVE-2015-5957

Alter <topic> of some of my recent entries to be more consistently worded

Normalize "use after free" as "use-after-free" in <topic>

I noticed when browsing vuxml.freebsd.org an even split between "use
after free" and "use-after-free". It seemed to make sense to standardize
on one style so future editors will have a common usage to guide them
when new entries are created.

Document deskutils/shutter vulnerability

Security:	CVE-2015-0854

Document graphics/openjpeg vulnerability

No CVE assigned yet

Document vulnerability in older graphics/optipng

No CVE assigned yet

Document net/openslp vulnerability

Security:	CVE-2015-5155

Document archivers/p7zip vulnerability

Security:	CVE-2015-1038

Document www/h2o vulnerability

PR:		203096
PR:		203147
Security:	CVE-2015-5638

Fix spelling of zh_CN for wordpress vulnerabilities.

Document wordpress multiple vulnerabilities.

- document bugzilla CVE-2015-4499

net/openldap24-server Fix affected package name

Submitted by:	dvl
Security:	4910d161-58a4-11e5-9ad8-14dae9d210b8

Document net/openldap24-server vulnerability

Security:	CVE-2015-6908

Expand a35f415d-572a-11e5-b0a4-f8b156b6dcc8:
multiple vulnerabilities in audio/vorbis-tools and audio/opus-tools

Document oggenc buffer overflow in audio/vorbis-tools.

Security:	CVE-2015-6749

Document pgbouncer failed auth_query lookups falling back to auth_user

Note the vulnerable version was not committed to ports, however document
the issue in the interest of being thorough and catching any user who
made this as a local change.

PR:		202957
Security:	CVE-2015-6817
Security:	d76961da-56f6-11e5-934b-002590263bf5
Approved by:	feld (mentor)

Document the latest phpMyAdmin vulnerability: reCaptcha	bypass

Correct some package names that were mistakenly labeled as php56

Security:	3d675519-5654-11e5-9ad8-14dae9d210b8

Add assigned CVEs to previous php vulnerability entry

Security:	787ef75e-44da-11e5-93ad-002590263bf5
Security:	CVE-2015-6831
Security:	CVE-2015-6832
Security:	CVE-2015-6833

Document php vulnerabilities

Security:	CVE-2015-6834
Security:	CVE-2015-6835
Security:	CVE-2015-6836
Security:	CVE-2015-6837
Security:	CVE-2015-6838

Spelling frontent -> frontend

Security:	d68df01b-564e-11e5-9ad8-14dae9d210b8

Document sysutils/ganglia-webfrontent vulnerability

Security:	CVE-2015-6816

Add net/wireshark-qt5 as affected

Security:	9bdd8eb5-564a-11e5-9ad8-14dae9d210b8

Document net/wireshark vulnerabilities

Security:	CVE-2015-6241
Security:	CVE-2015-6242
Security:	CVE-2015-6243
Security:	CVE-2015-6244
Security:	CVE-2015-6245
Security:	CVE-2015-6246
Security:	CVE-2015-6247
Security:	CVE-2015-6248
Security:	CVE-2015-6249

Document sysutils/screen vulnerability

Security:	CVE-2015-6806

Document net/libvncserver vulnerability
Old issue ignored in RH bugzilla; CVE recently requested

Document a number of integer overflows in gdk-pixbuf2.

Minimum range adjustment for bind vulnerability

Pointyhat:	firmly seated on head
Submitted by:	mat
Security:	CVE-2015-5986
Security:	2c5e7e23-5248-11e5-9ad8-14dae9d210b8

Correct version range mistakes in bind vulnerabilities

Submitted by:	mat
Security:	2c5e7e23-5248-11e5-9ad8-14dae9d210b8
Security:	eaf3b255-5245-11e5-9ad8-14dae9d210b8

Document bind vulnerabilities

Security:	CVE-2015-5986
Security:	CVE-2015-5722

Document new vulnerabilities in www/chromium < 45.0.2454.85

Submitted by:	Carlos Jacobo Puga Medina
Obtained from:	http://googlechromereleases.blogspot.nl/

Document dns/powerdns vulnerability

PR:		202738
Security:	CVE-2015-5230

Revise Ghostscript entry date to match date of commit.

Approved by:	delphij (mentor)

Document denial of service (crash) via crafted Postscript files for Ghostscript

PR:		202781
Security:	CVE-2015-3228
Security:	fc1f6658-4f53-11e5-934b-002590263bf5
Approved by:	feld (mentor)

Document recent ffmpeg/libav vulnerabilities

Document graphics/graphviz vulnerability
No CVE assigned

Document recent mozilla vulnerabilities

graphics/libpgf was assigned a CVE

Security:	9a71953a-474a-11e5-adde-14dae9d210b8
Security:	CVE-2015-6673

Document multiple security advisories for go and go14

PR:		202633
Security:	CVE-2015-5739
Security:	CVE-2015-5740
Security:	CVE-2015-5741
Security:	4464212e-4acd-11e5-934b-002590263bf5
Approved by:	delphij (mentor)

Fix MFSA quote link and add libtremor commits

Document libtremor vulnerabilities in the ancient version we provide

Document devel/pcre vulnerability

Security:	6900e6f1-4a79-11e5-9ad8-14dae9d210b8

Document drupal multiple vulnerabilities.

Remove excess space

Document OpenSSH 7.0 PAM fixes.

It is unclear from the announcement what the minimum version affected
was.

Document OpenSSH 7.0 PermitRootLogin issue

Document sysutils/tarsnap security announcement

Document vlc arbitrary pointer dereference.

graphics/jasper new CVE added to entry

Security:	f1692469-45ce-11e5-adde-14dae9d210b8
Security:	CVE-2015-5221

Document vulnerability in graphics/libpgf
No CVE assigned yet

Look up a reference to a commit in 2005 that had been previously lost.

Update some legacy items that don't work or are using runtime remapping:
- cvsweb -> svnweb
- stray cgi query-pr -> xml pr references
- remove redundant formatting that references obsolete cgi scripts.

Should be cosmetic and reduce some http redirects.

Extend recent QEMU related xen-tools CVEs to include the qemu-* ports

PR:		202402
Security:	CVE-2015-5154
Security:	CVE-2015-5165
Security:	CVE-2015-5166
Security:	da451130-365d-11e5-a4a5-002590263bf5
Security:	f06f20dc-4347-11e5-93ad-002590263bf5
Security:	ee99899d-4347-11e5-93ad-002590263bf5
Approved by:	feld (mentor)

Document CVE-2015-4491 in gdk-pixbuf2.

irc/unreal fix <name> to be capitalized

Security:	0ecc1f55-45d0-11e5-adde-14dae9d210b8

Document django vulnerabilities

Security:	CVE-2015-5963
Security:	CVE-2015-5964

Document irc/unreal denial of service
No CVE assigned yet

Document graphics/jasper vulnerability

Security:	CVE-2015-5203

Document freexl multiple vulnerabilities. One is still awaiting CVE assignment.

Security:	CVE-2015-2776

rt was assigned a CVE

Security:	83b38a2c-413e-11e5-bfcf-6805ca0b3d42
Security:	CVE-2015-6506

ansible was assigned a CVE

Security:	72fccfdf-2061-11e5-a4a5-002590263bf5
Security:	CVE-2015-6240

gnutls was assigned a CVE

Security:	ec6a2a1e-429d-11e5-9daa-14dae9d210b8
Security:	CVE-2015-6251

Document mod_jk vulnerability

Security:	CVE-2014-8111

Document two QEMU related xen-tools security advisories

PR:		201931
Security:	CVE-2015-5166
Security:	ee99899d-4347-11e5-93ad-002590263bf5
Security:	CVE-2015-5165
Security:	f06f20dc-4347-11e5-93ad-002590263bf5
Approved by:	feld (mentor)

Document PHP security issues impacting the lang/php5* ports (Core/SPL)
and 3 extensions (OpenSSL, Phar, SOAP)

PR:		202386
Security:	787ef75e-44da-11e5-93ad-002590263bf5
Approved by:	feld (mentor)

Document MediaWiki multiple security vulnerabilities

PR:		202328
Security:	6241b5df-42a1-11e5-93ad-002590263bf5
Approved by:	feld (mentor)

Sync libvpx check for CVE-2015-448[56] with r394231