security/vuxml 1.1_6

devel/cscope was fixed in version 15.6 so use lt instead of le.

Submitted by:	joerg
Pointyhat to:	erwin
Approved by:	portmgr (self)

Mark zgv as fixed wrt. "zgv, xzgv -- heap overflow vulnerability".

- Add php-suhosin to edabe438-542f-11db-a5ae-00508d6a62df   as per original advisory

Discussed with:	ale

- Fix python package naming in 6afa87d3-764b-11d9-b0e7-0000e249a0a2

Reported by:	simon

Update versions affected by python -- buffer overrun in repr() for unicode strings:

- Python 2.5.c2 was already fixed (verified in upstream SVN).
- Python 2.4 port just got the fix.
- I can't find any trace of python23, python22, and python-devel ever
  having existed as package names, so I removed them.
- Add python+ipv6.  I don't really know if it contained the
  problematic unicode code, but better safe than sorry.

Fix whitespace in openssh -- multiple vulnerabilities entry, which I originally missed.

Update vuxml id 5a39a22e-5478-11db-8f1a-000a48049292 - Fixed in version 1.1.13.8.1

Remove mono-devel and mono-svn from 5a39a22e-5478-11db-8f1a-000a48049292 - These are packages from BSD#'s (my project) development repo.  Don't even   give the impression that FreeBSD is supporting security updates for an   outside project.

- Remove an empty url (a typo)

- Document User-Agent XSS Vulnerability in torrentflux

- Document buffer overrun in repr() for unicode strings in python

devel/cscope was fixed in version 15.6

Glanced at by:	remko

- Document _ecalloc Integer Overflow Vulnerability in php5

- Update an old mambo advisory and document its new vulnerabilities

- Add linux-curl to a curl advisory and tweak versions a bit

- Add ja-lynx* to a lynx advisory

- chinese/tin was also vulnerable

- Document buffer overflow vulnerabilities in tin

- Use >0 for unpatched vulnerabilities

Submitted by:	simon

- Document slapd acl selfwrite Security Issue in openldap

- Document "System.CodeDom.Compiler" Insecure Temporary Creation in mono

- Document open_basedir Race Condition Vulnerability in php

- Document NULL byte injection vulnerability in phpbb

- Add references and use earlier discovery date in fffa9257-3c17-11db-86ab-00123ffe8333

- Add CVE names to 19b17ab4-51e0-11db-a5ae-00508d6a62df

- Document admin section SQL injection in postnuke

- Document LWFN Files Buffer Overflow Vulnerability in freetype

- Document Buffer Overflow Vulnerabilities in cscope

- Document RSA Signature Forgery Vulnerability in gnutls

- Document Search Unspecified XSS in MT

- Update dokuwiki advisories

- Document latest XSRF vulnerabilities in phpmyadmin

- Mark gtetrinet 0.7.10 safe

Document openssh -- multiple vulnerabilities AKA FreeBSD-SA-06:22.openssh.

- Document multiple vulnerabilities in dokuwiki

- Document multiple vulnerabilities in tikiwiki

- Document NULL byte injection vulnerability in punbb

- Concisify a Secunia report - Use <gt>0 for an unpatched bug

Suggested by:	simon

- Document (another) Denial of Service Vulnerability in freeciv

- Document Packet Parsing Denial of Service Vulnerability in freeciv

- Document multiple vulnerabilities in plans

- Update the unace advisory

- Document multiple XSS security bugs in eyeOS

- Document restructuredText "csv_table" Information Disclosure in zope

- Document stack-based buffer overflow in libmms

- Document Opera SSL RSA Signature Forgery

Bump modified data which was missed in last commit.

- Mark latest linux-{firefox,seamonkey}-devel safe

Document mozilla -- multiple vulnerabilities.

In the PHP entry, replace mod-php with mod_php [1].

Rewrite the win32-codecs entry to even better explain the vulnerability [2].

Noticed by:		Dan Langille (with FreshPorts.org) [1]
Discussed with:		simon [2]