Attempt to properly take care of the ooo3 -RC and -devel ports too (doh!)

Feature safe:   yes

- Document thunderbird3 vulnerabilities

Approved by:    miwi
Feature safe:   yes

Document openoffice -- multiple vulnerabilities

Reviewed by:    delphij
Feature safe:   yes

- Document mozilla -- multiple vulnerabilities

Approved by:    miwi (secteam)
Feature safe:   yes

Document lighttpd remote DoS vulnerability.

Reported by:    Dan Rowe <dan dracosplace com>
Feature safe:   yes

Update www/squid and www/squid30 to address Squid HTCP Packet Processing
NULL Pointer Dereference vulnerability (SQUID-2010:2)

Document linux-flashplugin -- multiple vulnerabilities.

Reviewed by:    miwi

Add CVE-2010-0414 and CVE-2010-0422 for gnome-screensaver.

Reviewed by:    miwi@

Fix range for fetchmail CVE-2010-0562.

Approved by: miwi@ (mentor)

Add CVE-2010-0562 entry for mail/fetchmail.

Approved by: miwi (mentor).

Document wireshark lwres buffer overflow vulnerability.

Reported by:    Andreas <akoga hawaii edu>

Document "otrs" - SQL injection.

- add the rest of the apache 1.3.x packages to the list
  that are vulnerable
- add a missing ) to the <topic>

Reviewed by:    secteam (miwi)

- document chunk-size integer overflow in apache 1.3.x

- remove extraneou '>' as reported by make tidy

- Mark squid30 now as safe

- Update 296ecb59-0f6b-11df-8bab-0019996bc1f7 entry and makr squid3* as safe

Security patch for Squid advisory 2010:1, denial of service.

Submitted by:   maintainer (Thomas-Martin Seck <tmseck web de>)

Document "bugzilla" - information leak.

- Correct fixed version from previous entry

- Document irc-ratbox -- multiple vulnerabilities

PR:             based on 143242
Submitted by:   moggie <moggie@elasticmind.net>

- Document thunderbird3 vulnerabilities

Reviewed by:    miwi

Document dokuwiki multiple vulnerabilities.

- Added entry for multiple vulnerabilities in www/zend-framework
- Cleaned up some entries reported by "make tidy"

Reviewed by:    secteam (delphij via email)
Approved by:    secteam (delphij via email)
Security:       http://framework.zend.com/security/advisory/ZF2010-06
Security:       http://framework.zend.com/security/advisory/ZF2010-05
Security:       http://framework.zend.com/security/advisory/ZF2010-04
Security:       http://framework.zend.com/security/advisory/ZF2010-03
Security:       http://framework.zend.com/security/advisory/ZF2010-02
Security:       http://framework.zend.com/security/advisory/ZF2010-01
Security:       http://framework.zend.com/security/advisory/ZF2009-02
Security:       http://framework.zend.com/security/advisory/ZF2009-01

Document powerdns-recursor multiple vulnerabilities.

Document pear-Net_Ping and pear-Net_Traceroute arbitrary command execution
vulnerability.

Bump copyright year to 2010

- Document drupal -- multiple cross-site scripting

- Document sysutils/fuser privileges check vulnerability.

Document monkey remote DoS vulnerability.

- Fix a typo (s/opensll/openssl)

Reported by:    pluknet <pluknet@gmail.com>

Document php multiple vulnerabilities.

Sponsored by:   iXsystems, Inc.

Document PostgreSQL multiple vulnerabilities.

Sponsored by:   iXsystems, Inc.

Add tptest pwd remote buffer overflow vulnerability.

Submitted by:   Mark Foster <mark foster cc>
PR:             ports/131938

- Document mozilla -- multiple vulnerabilities

Make the problem more visible by choosing a more descriptive subject.

Document freeradius remote packet of death exploit (CVE 2009-3111)

Submitted by:   "Danilo G. Baio" <dbaio bs2 com br>
PR:             ports/141318

- Mark Seamonkey 2.0 as safe

Reviewed by:    miwi

- Mark linux-firefox-devel as safe

Reviewed by:    miwi

- Fix build

- Document pligg -- Cross-Site Scripting and Cross-Site Request Forgery

- Document piwik -- php code execution

Requested by:   wen

- Fix previous entrys (formating etc)

- Document dovecot insecure directory permissions

Document linux-flashplugin -- multiple vulnerabilities.

Reviewed by:    miwi

- Document ruby 1.9.1 heap overflow vulnerability.

Document session fixation vulnerability in RequestTracker < 3.8.6

Reviewed by:    simon@, wxs@

- Add two CVE entries for expat2.

- Document opera -- multiple vulnerabilities

Request by:     itetcu

Fix the libtool entry to include 2.2.6a as vulnerable.

Document libtool vulnerability.

Reviewed by:    miwi@

- Cleanup (whitespaces/tabs)

document: libvorbis -- multiple vulnerabilities

Document "bugzilla" - information leak.

- Report a XSS vulnerability in net-mgmt/cacti port

- fix german wordpress name

- Document wordpress -- multiple vulnerabilities

Mark php5-gd 5.2.11_2 as safe.

- Note that CVE-2009-3546 has been fixed in graphics/gd.

Noticed by:     N.J. Mann <njm@njm.me.uk>

- Fix previous commit

- Document HTML-Parser denial of service

Document remote buffer overflow vulnerability in gd.

Document typo3 multiple vulnerabilities.

Notified by:    Wennrich, Markus <Markus Wennrich f-i-ts de>

Add an entry for VideoLAN-SA-0901, about multimedia/vlc.

- Document KDE -- multiple vulnerabilities

Reported by:    Eygene Ryabinkin <rea-fbsd@codelabs.ru>

- Fix previous entry

Add two opera vulnerabilities

PR:             140101
Submitted by:   Arjan van Leeuwen

- Fix latest entrys

Document vulnerability in net-p2p/ctorrent < 3.3.2_2 (CVE-2009-1759).

PR:             ports/139635
Submitted by:   Eygene Ryabinkin
Security:       http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1759

- Fix linux-opera vuxml entry (it uses different version numbering scheme) [1]
- Add entry for opera-devel as well.

PR:             ports/140038 [1]
Submitted by:   Sato Kuro <poyopoyo@puripuri.plala.or.jp> [1]

- Document mozilla -- multiple vulnerabilities

Approved by:    miwi (secteam)

- Fix discovery date of a recent entry

- Document elinks < 0.11.4 buffer overflow vulnerability.

Add CVE reference provided by author via maintainer for the squidguard
issue.

Apply vendor fixes 20091015 and 20091019 to fix multiple vulnerabilities
of squidGuard 1.4.

Requested by:   maintainer
Security:       692ab645-bf5d-11de-849b-00151797c2d4

- Add an entry for Xpdf -- Multiple Vulnerabilities.

- Document django -- denial-of-service attack

- Document phpmyadmin -- XSS and SQL injection vulnerabilities

- Document php5 multiple security vulnerabilities.

PR:             ports/139196
Submitted by:   Mark Foster <mark@foster.cc>

- Document virtualbox -- privilege escalation

Add FreeBSD-SA-09:14.devfs to the VuXML list.

Hat:    secteam
Facilitated by: Snow B.V.

Add FreeBSD-SA-09:13.pipe to the VuXML list.

Hat:    secteam
Facilitated by: Snow B.V.

- linux-f10-pango is affected by 4b172278-3f46-11de-becb-001cc0377035 too.

Reported by:    "Edward Sanford Sutton, III" <mirror176@cox.net>

- Document mybb -- multiple vulnerabilities

PR:             based on 139197

- Document drupal -- Multiple Vulnerabilities

Submitted by:   Nick Hillard (based on)
Feature safe:   yes

- Rework latest horde-base entry (ee23aa09-a175-11de-96c0-0011098ad87f)

Feature safe:   yes

Fix a formatting issue.

Pointy hat to:          myself
Noticed by:             miwi
Feature safe:           Yes

Fix build.

Feature safe:   yes

Document a security problem in fwbuilder/libfwbuilder 3.0.4 - 3.0.6.
Generated iptables scripts when used to generate static routing
configurations have a security issue.

Feature safe:   Yes

Document "bugzilla" - two SQL injections, sensitive data exposure.

Feature safe:   yes

Adding an entry for three vulnerabilities fixed in the latest Horde
framework (i.e. the port www/horde-base).

- Fix formatting.
- Add link to the debian security advisory.
- Fix the description to be the actual citation from the official sources
  instead of some wild interpretation.  We do not know for sure if remote
  code execution is possible at all and from looking to the source code it
  seems unlikely as the buffer undeflown is allocated on the heap.  Moreover,
  it is not clear if this is exploitable in the default install.

Discussed with: az

Document nginx DoS condition.

Submitted by:   az@ (via IRC)

Add cvename and bid for cyrus-imapd potential buffer overflow
in Sieve.

Add ikiwiki vulnerability.

- Cleanup previous commit

- Add xapian-omega cross-scripting vulnerability

- Document mozilla firefox -- Multiple Vulnerabilities

Fix xml broke by my previous commit.

Document cyrus-imapd potential buffer overflow vulnerability in Sieve.