security/vuxml 1.1_6

Add an entry for the mod_proxy buffer overflow existant in apache13.

Approved by:	portmgr

Note some fixes for XPM image decoding vulnerabilities.

Submitted by:	lesi

Add references to Chris Evans's advisories while I'm at it.

Approved by:	portmgr

Update to gdk-pixbuf vulnerability to reflect the fixed version of gtk20.

Approved by:	portmgr( implicit)

Note that a patched version of webmin 1.150 is now available, thanks to olengi@.

Submitted by:	olengi

Add a paragraph introducing the Webmin blockquote while I'm here.

Approved by:	portmgr

Note gdk-pixbuf image decoding issues.

Approved by:	portmgr

clement@ has patched Apache 2.

Approved by:	portmgr

Note CUPS printer queue browser denial-of-service.

Approved by:	portmgr

Note Apache 2 IPv6 address parsing bug.

Approved by:	portmgr

Note new libXpm vulnerabilities.

Approved by:	portmgr

I appear to have deleted a line at the last minute.  Restore it.

Approved by:	portmgr

Add mod_dav denial-of-service issue.

Approved by:	portmgr

Oops, forgot to note that the previous issue affects only the Apache 2.x series.

Approved by:	portmgr

Add Apache 2 vulnerability concerning environmental variables in configuration files.

Approved by:	portmgr

Repair three <freebsdpr> elements.  The content of these elements must be e.g. "ports/46613", not just "46613".

Reported by:	Matthew Seaman <m.seaman@infracaninophile.co.uk>
Approved by:	portmgr

Note that some versions of OpenOffice have been corrected.

Approved by:	portmgr

Fix botched date entry and correct iDefense URL.

Approved by:	portmgr

Really add Samba 3 vulnerability. Remove incorrect URL in mpg123 entry.

Approved by:	portmgr
URL noticed:	nectar

Correct version.  Note my last commit here was for mpg123 instead of samba3.

Noticed by:	nectar
Approved by:	portmgr

- There is a WITHOUT_X11 version of ImageMagick that needs to be   taken into account. - Fix transposed characters in `isakmpd'.

Noticed by:	Dan Langille <dan@langille.org>

- Add CVE name reference for ImageMagick.
- Add webmin temporary file handling issue.
- Add OpenOffice temporary file handling issue.
- Widen the `KDE frame injection' issue to cover Mozilla, Firebird,
  Netscape, and Opera as well
- Add Mozilla/Firebird/Netscape SOAPParameter vulnerability
- Add Mozilla/Thunderbird/Netscape POP client vulnerability

Approved by:	portmgr

Update for recent Samba3 vulnerabilities.

Approved by:	portmgr

Adjust the affected version for imlib now that the 2nd instance of BMP loader has been corrected.

The recent commit to the krb5 port brought the version to 1.3.4_1 but did not correct one of the existing vulnerabilities.  Update the affected range to compensate.

Note recent MIT Kerberos 5 vulnerabilities.

Document imlib2 BMP decoder bug.

Document BMP decoder bugs in imlib1 and ImageMagick.

Correct bogus date in mysql entry. (It should be YYYY-MM-DD, not DD-MM-YYYY.)

Reported by:	robert@openbsd.org

Add more references (particularly CVE names) for issues affecting SpamAssassin, tnftpd, ruby, mysql.

Place text taken from another source inside <blockquote cite="...">
for ruby issue.

correct/add some references

Document NSS SSLv2 server buffer overflow (already referenced in portaudit.txt).

Document ripMIME decoding bug (already referenced in portaudit.txt).

Remove <modified/> from the gnomevfs vulnerability since it was the same as <entry/> and it needed to be last anyway.

Suggested by:	nectar

Update the gnomevfs entry to reflect the fixed versions.

Add entry for moinmoin ACL bypass.

Note sanitize_path bug in rsync (already referenced in portaudit.txt).

Unsafe URI handling in gnome-vfs, MidnightCommander.

Document buffer overflows in SoX (already referenced in portaudit.txt).

Document cookie bug in Konqueror (already referenced in portaudit.txt).

- Fix "make validate" problem when textproc/xhtml-basic is   installed by adding an SGML declaration and DTDDECL. - Remove the --catalogs option for xmllint(1) in validate.sh.

Approved by:	nectar (maintainer)
PR:		ports/63035

Place port name in the description.

Suggested by:	eik

Add libxine vcd URL handling issue.

Add DoS in SpamAssassin.

Add <modified> date for previous commit.

fidogate-ds was also affected by the ``write files as `news' user'' issue.

Off-by-one error in courier-imap entry.

Noticed by:	oliver

Add a more useful reference for the Qt issue.

Add Qt heap overflow issue.

Add a security issue affected courier-imap when run with certain debug flags.

Add fidogate issue.

Add an issue covering a vulnerability in mysqlhotcopy.

Reported by:	robert@openbsd.org

Cancel a VuXML entry for an Apache vulnerability that does not affect FreeBSD.

Reminded by:	recent conversations :-)