security/vuxml 1.1_6

- www/opera PR:		151471 Submitted by:	Arjan van Leeuwen

- Add bzip2 integer overflow vulnerability

Approved by:	pgollucci (mentor, implicit)

Add the missing FreeBSD SA entries. We used to add these but stopped a while back. This should catch us up.

According to cperciva@ the reason we stopped was that it was causing a lot of
false positives. I ran portaudit with these changes and did not see any false
positives but if it turns out to be too noisy I will remove them.

Submitted by:	Christopher J. Umina (private mail)
Approved by:	cperciva@

Add monotone denial of service.

Security:	http://www.monotone.ca/NEWS

- Add devel/apr0 to list of packages that is affect.

- Document mozilla -- multiple vulnerabilities

Add multiple vulnabilities in webkit-gtk2.

- set modified date

- these 2 urls are covered by the <cvename/> tags

Suggested by:   stas

- Fix a minor typo

Reported by:    stas

Document devel/apr1's apr-util vunerabilities

Security:       http://secunia.com/advisories/41701
Reviewed by:    secteam (cperciva) via irc

Documented phpMyFaq XSS vulnerability

PR:		ports/151055
Submitted by:	Florian Smeets <flo@smeets.im>
Approved by:	itetcu (mentor, implicit)
Security:	http://www.phpmyfaq.de/advisory_2010-09-28.php

Report an XSS vulnerability in ftp/horde-gollem.

Report a XSS vulnerability in mail/horde-dimp.

Report a XSS vulnerability in mail/horde-imp.

Report 2 vulnerabilities in www/horde-base.

Documented remote code execution vulnerability in OpenX

PR:		ports/150610
Approved by:	itetcu (mentor, implicit)
Security:	ttp://blog.openx.org/09/security-update/

Documented squid denial of service vulnerability

PR:		ports/150364
Submitted by:	Thomas-Martin Seck <tmseck@web.de>
Approved by:	itetcu (mentor, implicit)
Security:	CVE-2010-3072
Security:	http://www.squid-cache.org/Advisories/SQUID-2010_3.txt

Update to 10.1r85 resp. 9.0r283 [1].

Security:	http://www.freebsd.org/ports/portaudit/8a34d9e6-c662-11df-b2e1-001b2134ef46.html
PR:		ports/150832 [2]
Submitted by:	pointyhat via pav [1], Tsurutani Naoki
		<turutani@scphys.kyoto-u.ac.jp> [2]

Correct discovery date, my bad :(

Document django XSS vulnerability.

- Add libxul as affected package to the latest mozilla entry

Approved by:	beat (co-mentor)

- Fix CVE name for webkit-gtk2

Document webkit-gtk2 - multiple vulnerabilities.

Also add 1 extra CVE to the previous webkit-gtk2 entry that was fixed but
didn't make it to the release notes.

Belatedly (and perhaps pointlessly) document [1]:

vim6 -- heap-based overflow while parsing shell metacharacters

While here, prepare this old port for termination with DEPRECATED.

PR:		ports/129300 [1]
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru> [1]

- Document mozilla -- multiple vulnerabilities

Document sudo Runas group vulnerability.

- wget 1.12_1 is also concerned

- Add wget entry CVE-2010-2252 - Add lftp entry CVE-2010-2251

- Document p5-libwww vulnerability (remote servers can create .(dot) files)

Documented quagga vulnerabilities (stack overflow, DoS)

Approved by:	itetcu (mentor,implicit)
Security:	http://www.openwall.com/lists/oss-security/2010/08/24/3
Security:	http://www.quagga.net/news2.php?y=2010&m=8&d=19#id1282241100

Document "bugzilla" - information disclosure, denial of service.

- Fix version range of phpMyAdmin

Submitted by:	Marko Njezic <mr.max AT maxempire.com>

Adjust the version range in previous entry: 1.0.1 is also vulnerable, and fix minor whitespace nit while here.

Add entry for OpenTTD denial of server vulnability.

Reviewed by:	danfe@ (OpenTTD maintainer)

- Added corkscrew: overflow condition due to insecure sscanf usage - Fixed SLiM title: /SLiM/slim/

Approved by:	itetcu (mentor, implicit)
Security:	http://people.freebsd.org/~niels/issues/corkscrew-20100821.txt

- Add phpMyAdmin's CVE-2010-3056 entry

- Fix date of the latest ruby entry.

Added CVE to SLiM vulnerability

Approved by:	itetcu (mentor, implicit)
Security:	CVE-2010-2945

- Document SLiM insecure PATH assignment issue - Removed space from vlc title

Approved by:	itetcu (implicit, mentor)
Security:	http://seclists.org/oss-sec/2010/q3/198

- Document recent WEBrick XSS vulnerability in ruby.

- Add security/isolate entry

PR:		ports/148911
Submitted by:	Steve Wills <steve _at_ mouf.net> (maintainer)
Approved by:	tabthorpe (mentor)

Fix krb5 entry (86b8b655-4d1a-11df-83fb-0015587e2cc1) version range mark-up.

Submitted by:	Peggy Wilkins via freebsd-ports

- Fix last entry by adding the forgotten package name.   (Hint: always run make validate before committing to this file)

Forgotten by:	jsa, kwm

Document VLC CVE-2010-2937.

Approved by:	kwm (mentor)

Update to 10.1r82 resp. 9.0r280.

Security:	http://www.freebsd.org/ports/portaudit/e19e74a4-a712-11df-b234-001b2134ef46.html

Document opera -- multiple vulnerabilities.

- Belatedly document firefox -- Dangling pointer crash regression from plugin   parameter array fix

Approved by:	miwi

Whitespace fixes.

- Fix Piwik entry's <name> tag

Pointed out by:	jadawin