security/vuxml 1.1_6

- Add CVE's referenc to 78f5606b-f9d1-11dd-b79c-0030843d3802

PR:		132797
Submitted by:	Mark Foster <mark@foster.cc>

- Mark mail/*thunderbird as safe

- Added more references to the netatalk

- Small cleanup

- Document netatalk -- arbitrary command execution in papd daemon

PR:		based on 132427
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

- Fix discovery date from previous entry

- Document gstreamer-plugins-good -- multiple memory overflows

PR:		 based on 132428

- Document libsndfile -- CAF processing integer overflow vulnerability

PR:		based on 132371

- Fix roundcube entry

Pointy hat to:	me

- Document ffmpeg -- 4xm processing memory corruption vulnerability

PR:		based on 132434
Submitted by:	Eygene Ryabinkin <rea-fbsd@codelabs.ru>

- Document roundcube -- webmail script insertion and php code injection

PR:		based on 130968

- Document proftpd -- multiple sql injection vulnerabilities

PR:		based on 132369

- Fix a typo

- Document zappix -- php frontend multiple vulnerabilities

PR:		based on 132315

- Document php-mbstring -- php mbstring buffer overflow vulnerability

PR:		based on 130603

- Document phppgadmin -- directory traversal with register_globals enabled

PR:		based on 132346

- Document opera -- multiple vulnerabilities

PR:		based on 132437

- Clean up latest curl entry

- Document epiphany -- untrusted search path vulnerability

- Document apache -- Cross-site scripting vulnerability

- Document pngcrush -- libpng Uninitialised Pointer Arrays Vulnerability

Reviewed by:	tabthorpe

Document the cURL redirection security bypass - CVE-2009-0037. I'll update the ftp/curl port itself ASAP.

PR:		132299
Reported by:	Mark Foster <mark@foster.cc> (the PR),
		Daniel Bond <db@danielbond.org> (e-mail)

Bump the modified date for the previous Firefox change.

Requested by:	miwi

Correct the Firefox 2.0 version for the recent Firefox vulnerabilities.

- Add CVE entries for last lighttpd security issue.

Reported by:	Eygene Ryabinkin <rea-fbsd___codelabs.ru>

- Update to 1.7.5 - Added UPDATING entry about incompatibility between 1.7.4 and 1.7.5 - Added vuln.xml entry for local file inclusion vulnerability in <1.7.5 - Added maintainer mode target in ZF Makefile to speed up fixups of   pkg-plist output from genplist

Security:	cf495fd4-fdcd-11dd-9a86-0050568452ac
Security:	http://framework.zend.com/issues/browse/ZF-5748
Security:	http://weierophinney.net/matthew/archives/206-Zend-Framework-1.7.5-Released-Important-Note-Regarding-Zend_View.html

- Document dia -- remote command execution vulnerability

Reviewed by:	miwi

- Document pycrypto -- ARC2 module buffer overflow

PR:		based on 131689
Submitted by:	Mark Foster <mark@foster.cc>

Update the latest firefox vulnerability ranges.

Minor whitespace nits.

- Update previous entry    * remove duplicate bid entry    * add more referens    * fix whitespaces

Document Varnish 2.0 DoS.

PR:		ports/131690
Submitted by:	Mark Foster <mark@foster.cc>

- Document tor -- multiple vulnerabilites

- Fix portaudit conflict with www/firefox and www/firefox3 - Mark www/firefox and www/linux-firefox FORBIDDEN

Discussion by:	simon/stas
With hat:	secteam

- Fix latest firefox entry

- Document firefox -- multiple vulnerabilities

- document codeigniter -- arbitrary script execution in the new                           Form Validationclass

- Document pyblosxom -- atom flavor multiple XML injection vulnerabilities

Reviewed by:	miwi

- Document typo3 -- cross-site scripting and information disclosure

- Update latest squid* entry 	Add CVE-2009-0478

Submitted by:	jadawin

- Update ruby vuxml entries due to ruby19 version bump.

- Document amaya -- multiple buffer overflow vulnerabilities

PR:		based on 131508
Submitted by:	Mark Foster <mark@foster.cc>

- Document websvn -- multiple vulnerabilities

PR:		based on 130934
Submitted by:	Mark Foster <mark@foster.cc>

- Document phplist -- local file inclusion vulnerability

PR:		based on 130932

- Document squid -- remote denial of service vulnerability

PR:		based on 131431

- Fix topic s/typo/typo3

- Document typo3 -- Multiple Vulnerabilities

- Fix previous entry

Security update for sudo to 1.6.9p20 for CVE 2009-0034

Changes:
- Only use the cached supplementory group vector when matching groups
  for the invoking user. (security)
- When setting the umask, use the union of the user's umask and the
  default value set in sudoers so that we never lower the user's umask
  when running a command.
- Sudo now operates in the C locale again when doing a match against
  sudoers.

PR:		131446
Submitted by:	Eygene Ryabinkin
Security:	vid:13d6d997-f455-11dd-8516-001b77d09812

- Fix a typo (s/drual/drupal)