security/vuxml 1.1_6

add a reference to ISC DHCP overflows

Add xorg-clients due to xdm socket vuln.

Move MoinMoin entry to VuXML.

reference cleanup

Fix the previous entry; it had an incorrect port range.

Add an entry for recent isc-dhcp3-server buffer overflows. Remove the one in portaudit.txt.

Move giFT-FastTrack to VuXML.

Fix an older entry which ends with "buffer overflows vuxml".

Fill in a date on my previous entry.

Move the Gallery entry to VuXML.

www/sitecopy uses the included libneon version 0.24.0

I believe that linux-png-1.2.2 still contains the vulnerability.

Add some references that support this opinion.

- Extend png entry to cover it's linux-png variant

Requested by:	eik

Midnight Commander security vulnerabilities

CAN-2004-0226, CAN-2004-0231, CAN-2004-0232

fixed in mc-4.6.0_10.

add a $FreeBSD$ tag

Add CAN-2004-0541 (buffer overflow in Squid NTLM authentication helper)

Fix for CAN-2004-0097

Forgotten by:	sobomax

Correction: FreeBSD-SA-04:12.jailroute does not apply to 4.7 and older.

Whitespace cleanup

Add FreeBSD-SA-04:12.jailroute.

FreeBSD-SA-04:11

Update modified date for mysql bug after fixing typo.

Requested by:	nectar

Add CVE name for one of the leafnode issues.

Edit the topics to distinguish a bit better between the different leafnode DoS issues.

Document several issues in leafnode.

Submitted by:	 Matthias Andree <matthias.andree@gmx.de>

Fix typo.

Spotted by:	eik

Correct a typo (s/Jon/Joe/)

Add subversion and neon date parsing vulnerabilities.

make tidy

Add an entry for the cvs pserver heap overflow.

Add CVE name and CERT Vulnerability Note references for old Cyrus bug.

make tidy

Add URI handling issue that affects Opera and KDE, at least.

Note that the mysqlbug has been fixed.

Update version number for fspd, now that it has been corrected.

Reported by:	Radim Kolar <hsn@netmag.cz>

&, not |

ProFTPD vulnerability is fixed in   <http://www.proftpd.org/docs/NEWS-1.2.10rc1>

Submitted by:	Koop Mast <kwm@rainbow-runner.nl>

Add Cyrus IMSPd security release.

Reported by:	eik

Add old Cyrus IMAP server heap buffer overflow.

Reported by:	eik

The security issue of multimedia/xine (insecure temporary file creation in xine-check, xine-bugreport) has been fixed in 0.9.23_3.

Only one <modified> is allowed per entry.

Correct the discovery date for the proftpd issue.

Oops.  s/2005-05-05/2004-05-05/ :-)

Second-guess Oliver and correct the affected entry for exim in order to unbreak this file.

exim buffer overflow when verify = header_syntax is used

Add phpBB session table exhaustion issue.

Submitted by:	Xin LI <delphij@frontfree.net>

Add the issues covered in FreeBSD-SA-04:08.heimdal and FreeBSD-SA-04:09.kadmind.

make tidy

Use PORTVERSION conventions for FreeBSD version numbers, so that 5.2.1-RELEASE-p5 becomes 5.2.1_5 (not 5.2.1p5, as it would have been previously).

This is necessary because e.g. 5.2p1 > 5.2.1p5 using existing version
comparison tools.

Correct package name for xchat Socks5 vulnerability (xchat -> xchat2). Note that the issue is fixed in version 2.0.8_2 (thanks marcus!).

Correct the fixed version for lha.