- Document graphics/optipng buffer overflow

PR:             ports/129072
Submitted by:   Eygene Ryabinkin <rea-fbsd@codelabs.ru>

- Document old gitweb privilege escalation vulnerability.

PR:             ports/130600
Submitted by:   Eygene Ryabinkin <rea-fbsd@codelabs.ru>

Document vulnerability in older versions of GNU tar.

PR:             130602
Submitted by:   Mark Foster <mark@foster.cc>

- Mark net-mgmt/nagios2 as secure

- Document mplayer -- vulnerability in STR files processor

PR:             based on 130573

- Cleanup previous entry
- Add more references

- Add missing blockquote and linewrap properly

- Document cgiwrap XSS vulnerability

PR:             ports/130277
Submitted by:   Eric W. Bates <ericx@vineyard.net>

- Document nagios -- web interface privilege escalation vulnerability

- Document pdfjam -- insecure temporary files

PR:             based on 130028

- Document verlihub -- insecure temporary file usage and arbitrary command
execution

- Document mysql -- empty bit-string literal denial of service

PR:             based on 129978
Submitted by:   Eygene Ryabinkin <rea-fbsd@codelabs.ru>

- Fix discovery date

- Document mysql multiple vulnerabilities:

        * mysql -- renaming of arbitrary tables by authenticated users
        * mysql -- remote Denial of Service via malformed password packet
        * mysql -- privilege escalation and overwrite of the system table
information

PR:             based on 130025
Submitted by:   Eygene Ryabinkin <rea-fbsd@codelabs.ru>

- Document imap-uw -- imap c-client buffer overflow

PR:             130013
Submitted by:   Mark Foster <mark@foster.cc>
Approved by:    maintainer timeout

- Fix a small typo

- Document imap-uw -- local buffer overflow vulnerabilities

PR:             128923
Submitted by:   Mark Foster <mark@foster.cc>
Approved by:    maintainer timeout

- Document libcdaudio -- remote buffer overflow and code execution

- Mark xterm 238 safe

Import latest FreeBSD-SA's so that we are up to date again.

- Document xterm vulnerability.

- Document PHP gd library vulnerability.

- Update awstats entry (also affect www/awstats-devel)

- Fix the affected version of awstats

- Document awstats -- multiple XSS vulnerabilities

PR:             ports/129957
Submitted by:   Eygene Ryabinkin <rea-fbsd _at\ codelabs.ru>
Approved by:    Alex Samorukov (maintainer)
Security:       http://secunia.com/advisories/31519

- Cleanup (fix whitespaces, typos)

- Completely fix CVE-2005-0448

PR:             ports/129301
Submitted by:   Eygene Ryabinkin <rea-fbsd@codelabs.ru>

Bump copyright year.

- Document vim -- multiple vulnerabilities in the netrw module

PR:             ports/129137
Submitted by:   Eygene Ryabinkin <rea-fbsd codelabs.ru>

Add vinagre -- format string vulnerability entry.

PR:             ports/129959
Submitted by:   Eygene Ryabinkin <rea-fbsd@codelabs.ru>

Document twiki - multiple vulnerabilities

Add entry for roundcube.

Submitted by:   Eygene Ryabinkin <rea-fbsd@codelabs.ru>

- Document mysql -- MyISAM table privileges security bypass vulnerability for
symlinked paths

- Document mplayer -- twinvq processing buffer overflow vulnerability

Reported by:    Thomas Zander <riggs@rrr.de> (mplayer maintainer)

- ampache -- insecure temporary file usage

- Small cleanup for the last cups-base entry
  * CVE-2008-5184 was fixed in 1.3.8.
  * CVE-2008-1722 does not related to anything in this entry;
  * PNG buffer overflow is really CVE-2008-5286.

Reported by:    Eygene Ryabinkin <rea-fbsd@codelabs.ru>
No Cookies for: miwi

- Document opera -- multiple vulnerabilities

- Document mediawiki -- multiple vulnerabilities

- Fix make validate

- document drupal -- Multiple vulnerabilities

- Document mozilla -- multiple vulnerabilities

- Fix a small typo

- Document phpmyadmin -- cross-site request forgery vulnerability

- Document php5 -- potential magic_quotes_gpc vulnerability

Reviewed by:    miwi

- Fix a typo

Reported by:    Eygene Ryabinkin <rea-fbsd@codelabs.ru>

- Document wireshark --  SMTP Processing Denial of Service Vulnerability

- Document php -- multiple vulnerabilities

- Document mgetty+sendfax -- symlink attack via insecure temporary files

PR:             based on 129471
Submitted by:   Eygene Ryabinkin <rea-fbsd@codelabs.ru>

- Document dovecot-managesieve -- Script Name Directory Traversal Vulnerability

PR:             based on 129303
Submitted by:   Eygene Ryabinkin <rea-fbsd@codelabs.ru>

Document habari -- Cross-Site Scripting Vulnerability

PR:             129475
Submitted by:   Ayumi M <ayu@dahlia.commun.jp>

- Add 32545 to the latest vlc entry.

- Document vlc -- arbitrary code execution in the RealMedia processor

- S/secunia/Secunia

- Document mantis - PHP Code Execution Vulnerability

PR:             based on 129438
Submitted by:   Eygene Ryabinkin <rea-fbsd@codelabs.ru>

Document mantis -- multiple vulnerabilities

PR:             based on 129438

- Fix previous entry

- Document squirrelmail -- Cross site scripting vulnerability

- Fix discovery from previous entry

- Document openoffice -- arbitrary code execution vulnerabilities

PR:             based on 129192
Submitted by:   Eygene Ryabinkin <rea-fbsd@codelabs.ru>

- Document wordpress -- Header RSS Feed Script Insertion Vulnerability

- Document samba -- potential leakage of arbitrary memory contents
- Fix my previous entry

- Document hplip -- hpssd Denial of Service

PR:             based on 129097
Submitted by:   Eygene Ryabinkin

- Document cups -- multiple vulnerabilities

- Document a buffer overflow vulnerability in imlib2.

PR:             ports/129037
Submitted by:   Eygene Ryabinkin <rea-fbsd@codelabs.ru>

- Fix latest mozilla entry

Note:
        mail/thunderbird and mail/linux-thunderbird versions are wrong.
        All problems are fixed in 2.0.0.18 and not in 2.0.0.17.

Pointy hat to:  tabthorpe

- Document streamripper -- multiple buffer overflows

PR:             based on 128999

- Dokument -- Mantis: Session hijacking vulnerability

- Cleanup
- Fix a lot whitespaces

Document two ACL bypassing vulnerabilities of dovecot.

Submitted by:   Eygene Ryabinkin <rea-fbsd codelabs.ru> (with changes)
PR:             ports/129000

- Document libxml2 -- multiple vulnerabilities

- Document openfire -- multiple vulnerabilities

Document syslog-ng2 chroot vulnerability.

PR:             ports/128960
Submitted by:   Eygene Ryabinkin <rea-fbsd@codelabs.ru>
Reviewed by:    tabthorpe

- Add a missing new line between entries

- Add an entry for print/enscript and its slave ports

PR:             ports/128958
Submitted by:   Eygene Ryabinkin <rea-fbsd at codelabs.ru> (based on)
Reviewed by:    stas@

Add CVE identifier for clamav off-by-one error.

PR:             ports/128924
Submitted by:   Mark Foster <mark@foster.cc>

- Fix an indentation in the latest net-snmp entry.

- Document the recent chain validation vulnerability in gnutls.

PR:             ports/128868
Submitted by:   Eygene Ryabinkin <rea-fbsd@codelabs.ru> (based on)

- Fix formating

Add entry for net-snmp (fix will be followed).

PR:             ports128772, ports/128837
Submitted by:   "Mark D. Foster" <mark@foster.cc>,
                Eygene Ryabinkin <rea-fbsd@codelabs.ru>

- Cleanup
  * Add some more references to the faad2 entry
  * Fix formating for the last emacs and trac entry

- Document mozilla -- multiple vulnerabilities

Reviewed by:    simon

- Document faad2 -- heap overflow vulnerability

- Fix multimedia/vlc entry

Document vulnerability in Emacs python integration.

PR:             127168
Submitted by:   keramida

- Document clamav get_unicode_name() off-by-one buffer overflow, 0.94.1 have
  fixed the problem [1]
- Since i'm here, document clamav-devel either

PR:             ports/128749 [1]
Submitted by:   Eygene Ryabinkin <rea-fbsd@codelabs.ru> [1]

Document trac wiki markup DoS issue

- Document vlc -- cue processing stack overflow

Document opera -- multiple vulnerabilities

With hat:       secteam
Requested by:   simon

Document qemu -- Heap overflow in Cirrus emulation

Fix BugTraq ID :(

Pointy hat to:  delphij

Add more reference with last commit

Document phpmyadmin XSS issue

Add linux-opera with opera entries. Remove the YYYYMMDD in the version (ie:
9.61.YYYYMMDD -> 9.61) as linux-opera does not do it anymore. It should not
affect anything on opera.

- Fix formating

- Document opera -- multiple vulnerabilities

PR:             ports/128264
Submitted by:   Arjan van Leeuwen <freebsd-maintainer opera.com>

- Document libspf2 -- Buffer overflow

- Document openx -- sql injection vulnerability

- Fix duplicate wording

- Document flyspray -- multiple vulnerabilities

Submitted by:   Nick Hilliard (nick@foobar.org) (based on)

Document wordpress snoopy shell command execution vulnerability