Enable inadvertantly disabled "securenet" access controls in ypserv. [1]

Correct a bug in the handling of backslash characters in smbfs which can
allow an attacker to escape from a chroot(2). [2]

Approved by:	so (cperciva)
Security:	FreeBSD-SA-06:15.ypserv [1]
Security:	FreeBSD-SA-06:16.smbfs [2]
Correct a bug in the handling of multipart messages by sendmail(8)
which can allow a malformed message to crash a sendmail queue
processing process.

Security:	FreeBSD-SA-06:17.sendmail
Approved by:	so (cperciva)
Fix problems in the startup scripts for jails.

Errata:		FreeBSD-EN-06:01.jail
Approved by:	so (cperciva)
Correct buffer overflow in the handling of LCP options in ppp(4)

Security:	FreeBSD-SA-06:18.ppp
Approved by:	so (cperciva)
Correct several problems in the network stack, including a
locally-triggered kernel panic, inaccuracy in reported memory
allocation statistics, and problems on IPv6 point-to-point links.

Approved by:	so (cperciva)
Errata:		FreeBSD-EN-06:02.net
Correct incorrect PKCS#1 v1.5 padding validation in crypto(3). [1]

Correct multiple denial-of-service vulnerabilities in BIND related to
SIG Query Processing and Excessive Recursive Queries. [2]

Security:	FreeBSD-SA-06:19.openssl [1]
Security:	FreeBSD-SA-06:20.bind [2]
Approved by:	so (simon)
Correct multiple vulnerabilities in gzip(1).

Security:	FreeBSD-SA-06:21.gzip
Approved by:	so (simon)
Correct multiple vulnerabilities in crypto(3).
Limit the size of public keys used in order to protect applications
from a denial of service via insane key sizes.

Security:	FreeBSD-SA-06:23.openssl
Approved by:	so (cperciva)
Correct problem in the 2006-09-28 patch concerning the handling of
excessively large DH moduli.

Reported by:	Steve Kiernan (Juniper SIRT)
Security:	FreeBSD-SA-06:23.openssl
Approved by:	so (cperciva)
Correct multiple vulnerabilities in OpenSSH.

Security:	FreeBSD-SA-06:22.openssh
Approved by:	so (simon)
Correct a signedness bug which allowed members of the operator
group to read kernel memory.

Security:	FreeBSD-SA-06:25.kmem
Approved by:	so (cperciva)
Fix jail rc.d script privilege escalation via symlink attack against
/var/log/console.log and mount points.

Security:	FreeBSD-SA-07:01.jail
Approved by:	so (simon)
Correct two remote denials of service in BIND involving DNSSEC and
recursive DNS queries respectively.

Security:	FreeBSD-SA-07:02.bind
Approved by:	so (cperciva)
Correct problems with locking, namei leakage, and symlink
creation in the NFS subsystem.

Approved by:	so (cperciva)
Submitted by:	re (hrs)
Errata:		FreeBSD-EN-07:01.nfs
Update zoneinfo and required support files for change in Daylight
Savings Time that begins in 2007.

Approved by:	so (simon)
Submitted by:	re (kensmith)
Errata:		FreeBSD-EN-07:04.zoneinfo
Disable processing of IPv6 type 0 Routing Headers.  This behaviour
can be changed via the (newly added) net.inet6.ip6.rthdr0_allowed
sysctl.

Security:	FreeBSD-SA-07:03.ipv6
Approved by:	so (cperciva)
Fix buffer overflow in libmagic(3).

Security:	FreeBSD-SA-07:04.file
Approved by:	so (cperciva)
Correct multiple security issues in how libarchive handles corrupt
tar archives, including a potentially exploitable buffer overflow.

Approved by:	so (cperciva)
Reviewed by:	kientzle
Security:	FreeBSD-SA-07:05.libarchive
Correct buffer overflow in tcpdump(1). [SA-07:06]

Correct predictable query ids in named(8). [SA-07:07]

Security:	FreeBSD-SA-07:06.tcpdump
Security:	FreeBSD-SA-07:07.bind
Approved by:	so (simon)
Correct a buffer overflow in OpenSSL SSL_get_shared_ciphers().

Security:	FreeBSD-SA-07:08.openssl
Approved by:	so (simon)