- Fix libxine entry

- Whitespace fix in last entry.

Document drupal multiple vulnerabilities.

Submitted by:   Nick Hilliard <nick foobar org>

Newer version of wordpress-mu has resolved the security vulnerability,
I have verified the code with respect to older release and to wordpress
changeset.

Reviewed by:    stas

The libxml2-2.6.32_1 now have two security fixed. If I edit it incorrect,
please fix it for me.

Document libxine denial of service vulnerability.

- Fix formating from previous entry

- Fix previous commit

- Document linux-flashplugin -- multiple vulnerabilities

Reviewed by:    stas

Document libxml2 vulnerabilities.

- Fix a small typo

- Document drupal -- multiple vulnerabilities

Document cups multiple vulnerabilities.

Update mysql entries.

- Fix formating and remove whitespaces from previous commit.

Add two www/opera vulnarabilities which affect versions <9.60.20081004

PR:             ports/127941
Submitted by:   Arjan van Leeuwen (opera maintainer)

- Capitalize "Secunia" word in all entries.

Reviewed by:    tabthorpe

- Mplayer vulnerability has been fixed in 0.99.11_7.

- Document mysql-client input validation vulnerability.

- Document mplayer integer overflows.

Bump copyright year.

Really fix firefox 3 part of the latest mozilla entry.  Now it doesn't
match fixed firefox 2 versions.

Cluebat:        Eygene Ryabinkin <rea-fbsd@codelabs.ru>
Pointyhat:      simon (for too quick review of last update)

- Fix bad firefox3 specification

PR:             127712
Reported by:    Eygene Ryabinkin <rea-fbsd@codelabs.ru>
Reviewed by:    simon

lighttpd -- multiple vulnerabilities

- Fix last thunderbird entrys
- Bump modified date

- Cleanup previous entry.

Add irc/bitlbee entry.

- Update samba entries so they don't match upcomming Samba 3.2 which
  doesn't have PORTEPOCH in the version number.
- Bump modified date for all updated entries.

Requested by:   timur

- Fix firefox version

Reported by:    bsam@

- Fix a typo (s/reportss/reports)

Submitted by:   tabthorpe/remko

- Document mozilla --  multiple vulnerabilities

- Mark ftp/proftpd as safe
- Add more references to the last phpMyAdmin entry

- Document squirrelmail -- Session hijacking vulnerability

- Fix discovery from my previous commit

- Document proftpd -- Long Command Processing Vulnerability

- Document phpmyadmin -- cross-site scripting vulnerability

- Document gallery -- multiple vulnerabilities

Approved by:    portmgr (secteam blanked)

- Replace phpmyadmin with phpMyAdmin to fix portaudit

Note:
        portaudit does not flag phpmyadmin as vulnerable,
        so we need to change it to the pkgname (phpMyAdmin).

Reported by:    glarkin@
Reviewed by:    simon
Discussion on:  ports-security@
Approved by:    portmgr (secteam blanked)

- Document phpmyadmin -- Code execution vulnerability

Approved by:    portmgr (secteam blanked)

- Fix previous commit

Approved by:    portmgr (secteam blanked)

- Mark www/twiki FORBIDDEN due to security exploit

Approved by:    beech (mentor, implicit)
Approved by:    portmgr (pav)
Security:       http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-3195

- corrects the bid number from me previous commit

Approved by:    portmgr (secteam blanked)

- Document neon -- NULL pointer dereference in Digest domain support

Approved by:    portmgr (secteam blanked)

Document clamav CHM parser DoS issue.

Approved by:    portmgr (vuxml blanket)

- Document horde -- multiple vulnerabilities

Approved by:    portmgr (secteam blanked)

- Document python -- multiple vulnerabilities

Reviewed by:    remko/tabthorpe
Approved by:    portmgr (secteam blanked)

- Mark www/wordpress and german/wordpress as safe

Approved by:    portmgr (secteam approved: remko, blanket vuxml)

- Document wordpress, rails and mysql vulnerabilties.

Reviewed by:    remko
Approved by:    portmgr (secteam approved: remko, blanket vuxml)

Extend the Nagios entry to cover Nagios 3.x < 3.0.2. This covers the edge case
of `portupgrade -o net-mgmt/nagios-devel nagios'.

Approved by:    portmgr (simon@ using secteam blanket)

Add FreeBSD-SA-08:09.icmp6

Add FreeBSD-SA-08:08.nmount

Add FreeBSD-SA-08:07.amd64.

Hat:    secteam

Update for php5 safe_mode fix.

Fix XML in openvpn-devel entry: – was used but as vuln.xml does
not import HTML named entities this is not allowed - use –
instead which produces the same end result.

- Document opera -- multiple vulnerabilities

gnutls -- "gnutls_handshake()" Denial of Service

Use joomla15 as name for the vulnerability

Document joomla flaw in the reset token validation

Register a Buffer Overflow Vulnerability in CDF 3.2.

- Clean up whitespace a bit
- Wrap long lines where appropriate
- Fix previous commit

- Fix drupal5 version

- Document drupal - multiple vulnerabilities

- Document recent ruby vulnerabilities.

- fix make validate

Pointy hat to:  skv

- Fix previous commit.

Document bugzilla directory traversal vulnerability.

- Document openvpn-devel -- arbitrary code execution

PR:             126352 (based on)
Submitted by:   Matthias Andree <matthias.andree@gmx.de>

- Fix kdewebdev conflict with upcommig kdewebdev4

Reviewed by:    simon

Fix vuxml-entries for 'devel/bugzilla*'.

- Fix portversion

- Document phpmyadmin -- cross site request forgery vulnerabilites

- Document drupal - multiple vulnerabilities

Add the latest security advisory to vuxml.

Hat:    secteam

Document poppler -- uninitialized pointer.

- Document py-pylons -- Path traversal bug

- Document FreeType 2 -- Multiple Vulnerabilities

PR:             ports/124917
Submitted by:   Nick Barkas <snb threerings.net>

Document revised patch for CVE-2008-2711.

- Document phpmyadmin - Cross Site Scripting Vulnerability

PR:             124900

Update squid SNMP DoS vulnerability to cover squid 3.0STABLE6 as well.

Submitted by:   Thomas-Martin Seck <tmseck web de>

- Document apache -- multiple vulnerabilities

Reviewed by:    delphij

- Add missing <code></code> block around safe_mode.

Pointy hat to:  me

- Add a note to php-posix entry, that
  safe_mode is considred to be insecure
  by FreeBSD Security Team.
- Add <code> blocks around function
  names.

Suggested by:   simon

- Document php5-posix directory traversal vulnerability.

Fix the Firefox 3 part, it has no multiple vulnerabilities.

Reviewed by:    remko

- Document vim -- Vim Shell Command Injection Vulnerabilities

Reviewed by:    remko, miwi

- Document recent ruby vulnerabilities.

- Clean up whitespace a bit
- Wrap long lines where appropriate

Reviewed by:    remko

Document potiential crash in fetchmail < 6.3.8_6 (in -v -v verbose mode).

Unbreak VuXML.org build: Use correct syntax for CVE name in latest
moinmoin entry.

Document xorg -- multiple vulnerabilities.

- Document moinmoin -- superuser privilege escalation

Notified by:    Janos Mohacsi

add an error about courier-authlib < 0.60.6

Fix 2747fc39-915b-11dc-9239-001c2514716c.  zh-xpdf, ja-xpdf, and
ko-xpdf have nothing to do with "multiple remote Stream.CC
vulnerabilities" because they are packages which just install
additional data files.

Add entry for www/ikiwiki.

Approved by:    erwin (mentor, implicit)

Avoid confusion about backported www/ikiwiki security fix by not
mentioning version 2.48 in the entry.

Approved by:    erwin (mentor, implicit)

Add www/ikiwiki entry.

Approved by:    erwin (mentor, implicit)

- Fix range on previous commit

Noticed by:     miwi

- Document linux-flashplugin -- unspecified remote code execution
  vulnerability

Document XSS vulnerabilities in nagios and nagios-devel.

PR:             ports/123893 ports/123894
Submitted by:   Jarrod Sayers <jarrod@netleader.com.au> (maintainer)
Reviewed by:    miwi
Approved by:    garga (mentor, implicit)

Document spamdyke open relay vulnerability.

PR:             ports/124013
Reviewed by:    miwi
Approved by:    garga (mentor), miwi