Enable inadvertantly disabled "securenet" access controls in ypserv. [1]

Correct a bug in the handling of backslash characters in smbfs which can
allow an attacker to escape from a chroot(2). [2]

Approved by:	so (cperciva)
Security:	FreeBSD-SA-06:15.ypserv [1]
Security:	FreeBSD-SA-06:16.smbfs [2]
Correct a bug in the handling of multipart messages by sendmail(8)
which can allow a malformed message to crash a sendmail queue
processing process.

Security:	FreeBSD-SA-06:17.sendmail
Approved by:	so (cperciva)
Correct buffer overflow in the handling of LCP options in ppp(4)

Security:	FreeBSD-SA-06:18.ppp
Approved by:	so (cperciva)
Correct incorrect PKCS#1 v1.5 padding validation in crypto(3). [1]

Correct multiple denial-of-service vulnerabilities in BIND related to
SIG Query Processing and Excessive Recursive Queries. [2]

Security:	FreeBSD-SA-06:19.openssl [1]
Security:	FreeBSD-SA-06:20.bind [2]
Approved by:	so (simon)
Correct multiple vulnerabilities in gzip(1).

Security:	FreeBSD-SA-06:21.gzip
Approved by:	so (simon)
Correct multiple vulnerabilities in crypto(3).
Limit the size of public keys used in order to protect applications
from a denial of service via insane key sizes.

Security:	FreeBSD-SA-06:23.openssl
Approved by:	so (cperciva)
Correct problem in the 2006-09-28 patch concerning the handling of
excessively large DH moduli.

Reported by:	Steve Kiernan (Juniper SIRT)
Security:	FreeBSD-SA-06:23.openssl
Approved by:	so (cperciva)
Correct multiple vulnerabilities in OpenSSH.

Security:	FreeBSD-SA-06:22.openssh
Approved by:	so (simon)
Correct a signedness bug which allowed members of the operator
group to read kernel memory. [1]

Disable handling of GNUTYPE_NAMES tar file entries by default,
since they can be used to extract files outside of the cwd. [2]

Security:	FreeBSD-SA-06:25.kmem [1]
Security:	FreeBSD-SA-06:26.gtar [2]
Approved by:	so (cperciva)
Fix jail rc.d script privilege escalation via symlink attack against
/var/log/console.log and mount points.

Security:	FreeBSD-SA-07:01.jail
Approved by:	so (simon)
Correct two remote denials of service in BIND involving DNSSEC and
recursive DNS queries respectively.

Security:	FreeBSD-SA-07:02.bind
Approved by:	so (cperciva)
Disable processing of IPv6 type 0 Routing Headers.  This behaviour
can be changed via the (newly added) net.inet6.ip6.rthdr0_allowed
sysctl.

Security:	FreeBSD-SA-07:03.ipv6
Approved by:	so (cperciva)
Fix buffer overflow in libmagic(3).

Security:	FreeBSD-SA-07:04.file
Approved by:	so (cperciva)
Correct multiple security issues in how libarchive handles corrupt
tar archives, including a potentially exploitable buffer overflow.

Approved by:	so (cperciva)
Reviewed by:	kientzle
Security:	FreeBSD-SA-07:05.libarchive
Correct a bug in the patch for FreeBSD-SA-07:01.jail which prevented
jails with custom fstab's from starting due to use of incorrect
variable. [1]

Correct buffer overflow in tcpdump(1). [SA-07:06]

Correct predictable query ids in named(8). [SA-07:07]

Reported by:	Joel Hatton <joel@auscert.org.au> [1]
Security:	FreeBSD-SA-07:06.tcpdump
Security:	FreeBSD-SA-07:07.bind
Approved by:	so (simon)
Correct a buffer overflow in OpenSSL SSL_get_shared_ciphers().

Security:	FreeBSD-SA-07:08.openssl
Approved by:	so (simon)
Correct a random value disclosure in random(4). [07:09]

Correct a gtar directory traversal vulnerability. [07:10]

Security:	FreeBSD-SA-07:09.random
Security:	FreeBSD-SA-07:10.gtar
Approved by:	so (simon)
Fix issues which allow snooping on ptys.

Security: FreeBSD-SA-08:01.pty
Approved by:	so (cperciva)
Fix date of last advisory -- January 14th, not January 18th.

Approved by:	so (cperciva)
Fix sendfile(2) write-only file permission bypass. [08:03.sendfile]

Fix IPsec null pointer dereference panic. [SA-08:04.ipsec]

Security:	FreeBSD-SA-08:03.sendfile
Security:	FreeBSD-SA-08:04.ipsec
Approved by:	so (simon)