From e14ed8232deb0980e58cdf7d24bc03457b5210bd Mon Sep 17 00:00:00 2001
From: Baptiste Daroussin <bapt@FreeBSD.org>
Date: Mon, 25 Jan 2021 17:16:21 +0000
Subject: [PATCH] Rework vuxml a bit to make them validable again

modify tidy.xsl to make it generates manually the xml declaration
xsl is not able to generate a list of entity otherwise.

Remove copyright form included files, they are redudundant anyway and
in the end only the vuln.xml file is distribued with entities expanded

Rework a bit the entity declaration in order for the document to look
great after expansion (as it did before we introduced the expansion
mechanism)

All validation are now processed direcly on the flattened file.

This is based on a patch from mfechner here

Submitted by:		mfechner
Differential Revision:	https://reviews.freebsd.org/D28299
---
 security/vuxml/Makefile       | 19 ++++++++++++-------
 security/vuxml/files/tidy.xsl | 25 +++++++++++++++++++++++--
 security/vuxml/vuln-2003.xml  | 31 -------------------------------
 security/vuxml/vuln-2004.xml  | 31 -------------------------------
 security/vuxml/vuln-2005.xml  | 31 -------------------------------
 security/vuxml/vuln-2006.xml  | 31 -------------------------------
 security/vuxml/vuln-2007.xml  | 31 -------------------------------
 security/vuxml/vuln-2008.xml  | 31 -------------------------------
 security/vuxml/vuln-2009.xml  | 31 -------------------------------
 security/vuxml/vuln-2010.xml  | 31 -------------------------------
 security/vuxml/vuln-2011.xml  | 31 -------------------------------
 security/vuxml/vuln-2012.xml  | 31 -------------------------------
 security/vuxml/vuln-2013.xml  | 31 -------------------------------
 security/vuxml/vuln-2014.xml  | 31 -------------------------------
 security/vuxml/vuln-2015.xml  | 31 -------------------------------
 security/vuxml/vuln-2016.xml  | 31 -------------------------------
 security/vuxml/vuln-2017.xml  | 31 -------------------------------
 security/vuxml/vuln-2018.xml  | 31 -------------------------------
 security/vuxml/vuln-2019.xml  | 31 -------------------------------
 19 files changed, 35 insertions(+), 536 deletions(-)

diff --git a/security/vuxml/Makefile b/security/vuxml/Makefile
index 231969d30dd5..6eb47eb15837 100644
--- a/security/vuxml/Makefile
+++ b/security/vuxml/Makefile
@@ -31,6 +31,11 @@ WRKSRC=		${WRKDIR}
 dir_DTD=	share/xml/dtd/vuxml
 
 VUXML_FILE?=	${PKGDIR}/vuln.xml
+VUXML_FLAT_FILE?=	${PKGDIR}/vuln-flat.xml
+
+post-clean:
+	@${RM} "${VUXML_FILE}.tidy"
+	@${RM} "${VUXML_FLAT_FILE}"
 
 do-extract:
 	@${RM} -r ${WRKDIR}
@@ -54,9 +59,9 @@ vuln-flat.xml: vuln.xml
 	xmllint -noent ${.ALLSRC} > ${.TARGET}
 
 validate: tidy
-	@${SH} ${FILESDIR}/validate.sh "${VUXML_FILE}"
+	@${SH} ${FILESDIR}/validate.sh "${VUXML_FLAT_FILE}"
 	@${ECHO_MSG} Checking if tidy differs...
-	@if ${DIFF} -u "${VUXML_FILE}" "${VUXML_FILE}.tidy"; \
+	@if ${DIFF} -u "${VUXML_FLAT_FILE}" "${VUXML_FILE}.tidy"; \
 	then \
 		${ECHO_MSG} ... seems okay; \
 		${RM} "${VUXML_FILE}.tidy"; \
@@ -64,8 +69,8 @@ validate: tidy
 		return 1; \
 	fi
 	@${ECHO_MSG} Checking for space/tab...
-	@unexpand "${VUXML_FILE}" | ${SED} -E 's,[[:space:]]*$$,,g' > "${VUXML_FILE}.unexpanded"
-	@if ${DIFF} -u "${VUXML_FILE}" "${VUXML_FILE}.unexpanded"; \
+	@unexpand "${VUXML_FLAT_FILE}" | ${SED} -E 's,[[:space:]]*$$,,g' > "${VUXML_FILE}.unexpanded"
+	@if ${DIFF} -u "${VUXML_FLAT_FILE}" "${VUXML_FILE}.unexpanded"; \
 	then \
 		${ECHO_MSG} ... seems okay; \
 		${RM} "${VUXML_FILE}.unexpanded"; \
@@ -74,15 +79,15 @@ validate: tidy
 		${ECHO_CMD} Consider using ${VUXML_FILE}.unexpanded for final commit; \
 		return 1; \
 	fi
-	${PYTHON_CMD} ${FILESDIR}/extra-validation.py ${VUXML_FILE}
+	${PYTHON_CMD} ${FILESDIR}/extra-validation.py ${VUXML_FLAT_FILE}
 
-tidy: vuln.xml
+tidy: vuln-flat.xml
 	@if [ ! -e ${LOCALBASE}/share/xml/dtd/vuxml/catalog.xml ]; \
 	then \
 		echo "Please install the VuXML port prior to running make validate/tidy."; \
 		exit 1; \
 	fi
-	${SH} ${FILESDIR}/tidy.sh "${FILESDIR}/tidy.xsl" "${VUXML_FILE}" > "${VUXML_FILE}.tidy"
+	${SH} ${FILESDIR}/tidy.sh "${FILESDIR}/tidy.xsl" "${VUXML_FLAT_FILE}" > "${VUXML_FILE}.tidy"
 
 newentry:
 	@${SH} ${FILESDIR}/newentry.sh "${VUXML_FILE}"
diff --git a/security/vuxml/files/tidy.xsl b/security/vuxml/files/tidy.xsl
index bf56f3184a0d..faf457596fea 100644
--- a/security/vuxml/files/tidy.xsl
+++ b/security/vuxml/files/tidy.xsl
@@ -12,8 +12,7 @@
 <xsl:output
   method="xml"
   encoding="utf-8"
-  doctype-system="http://www.vuxml.org/dtd/vuxml-1/vuxml-11.dtd"
-  doctype-public="-//vuxml.org//DTD VuXML 1.1//EN"
+  omit-xml-declaration="yes"
   indent="yes"
   />
 
@@ -24,6 +23,27 @@ result in more namespace declarations than we wish.
 -->
 
 <xsl:template match="/">
+	<xsl:text disable-output-escaping="yes"><![CDATA[<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE vuxml PUBLIC "-//vuxml.org//DTD VuXML 1.1//EN" "http://www.vuxml.org/dtd/vuxml-1/vuxml-11.dtd" [
+<!ENTITY vuln-2003 SYSTEM "vuln-2003.xml">
+<!ENTITY vuln-2004 SYSTEM "vuln-2004.xml">
+<!ENTITY vuln-2005 SYSTEM "vuln-2005.xml">
+<!ENTITY vuln-2006 SYSTEM "vuln-2006.xml">
+<!ENTITY vuln-2007 SYSTEM "vuln-2007.xml">
+<!ENTITY vuln-2008 SYSTEM "vuln-2008.xml">
+<!ENTITY vuln-2009 SYSTEM "vuln-2009.xml">
+<!ENTITY vuln-2010 SYSTEM "vuln-2010.xml">
+<!ENTITY vuln-2011 SYSTEM "vuln-2011.xml">
+<!ENTITY vuln-2012 SYSTEM "vuln-2012.xml">
+<!ENTITY vuln-2013 SYSTEM "vuln-2013.xml">
+<!ENTITY vuln-2014 SYSTEM "vuln-2014.xml">
+<!ENTITY vuln-2015 SYSTEM "vuln-2015.xml">
+<!ENTITY vuln-2016 SYSTEM "vuln-2016.xml">
+<!ENTITY vuln-2017 SYSTEM "vuln-2017.xml">
+<!ENTITY vuln-2018 SYSTEM "vuln-2018.xml">
+<!ENTITY vuln-2019 SYSTEM "vuln-2019.xml">
+]>
+]]></xsl:text>
   <xsl:apply-templates />
 </xsl:template>
 
@@ -54,6 +74,7 @@ don't have <modified>).  Insert an empty line between <vuln> elements.
       <xsl:text disable-output-escaping="yes">&#10;</xsl:text>
     </xsl:for-each>
   </xsl:element>
+<xsl:text>&#10;</xsl:text>
 </xsl:template>
 
 <!--
diff --git a/security/vuxml/vuln-2003.xml b/security/vuxml/vuln-2003.xml
index b8534e5cafdf..ab8cd2c33a84 100644
--- a/security/vuxml/vuln-2003.xml
+++ b/security/vuxml/vuln-2003.xml
@@ -1,34 +1,3 @@
-<!--
-Copyright 2003-2021 Jacques Vidrine and contributors
-
-Redistribution and use in source (VuXML) and 'compiled' forms (SGML,
-HTML, PDF, PostScript, RTF and so forth) with or without modification,
-are permitted provided that the following conditions are met:
-1. Redistributions of source code (VuXML) must retain the above
-   copyright notice, this list of conditions and the following
-   disclaimer as the first lines of this file unmodified.
-2. Redistributions in compiled form (transformed to other DTDs,
-   published online in any format, converted to PDF, PostScript,
-   RTF and other formats) must reproduce the above copyright
-   notice, this list of conditions and the following disclaimer
-   in the documentation and/or other materials provided with the
-   distribution.
-
-THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
-BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
-OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
-OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
-BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
-OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,
-EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-  $FreeBSD$
--->
-
   <vuln vid="81313647-2d03-11d8-9355-0020ed76ef5a">
     <topic>ElGamal sign+encrypt keys created by GnuPG can be compromised</topic>
     <affects>
diff --git a/security/vuxml/vuln-2004.xml b/security/vuxml/vuln-2004.xml
index e31b80efff15..aa6e6b1adbe5 100644
--- a/security/vuxml/vuln-2004.xml
+++ b/security/vuxml/vuln-2004.xml
@@ -1,34 +1,3 @@
-<!--
-Copyright 2003-2021 Jacques Vidrine and contributors
-
-Redistribution and use in source (VuXML) and 'compiled' forms (SGML,
-HTML, PDF, PostScript, RTF and so forth) with or without modification,
-are permitted provided that the following conditions are met:
-1. Redistributions of source code (VuXML) must retain the above
-   copyright notice, this list of conditions and the following
-   disclaimer as the first lines of this file unmodified.
-2. Redistributions in compiled form (transformed to other DTDs,
-   published online in any format, converted to PDF, PostScript,
-   RTF and other formats) must reproduce the above copyright
-   notice, this list of conditions and the following disclaimer
-   in the documentation and/or other materials provided with the
-   distribution.
-
-THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
-BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
-OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
-OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
-BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
-OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,
-EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-  $FreeBSD$
--->
-
   <vuln vid="9168253c-5a6d-11d9-a9e7-0001020eed82">
     <topic>a2ps -- insecure temporary file creation</topic>
     <affects>
diff --git a/security/vuxml/vuln-2005.xml b/security/vuxml/vuln-2005.xml
index f96a8a56757c..7b03ffd4d899 100644
--- a/security/vuxml/vuln-2005.xml
+++ b/security/vuxml/vuln-2005.xml
@@ -1,34 +1,3 @@
-<!--
-Copyright 2003-2021 Jacques Vidrine and contributors
-
-Redistribution and use in source (VuXML) and 'compiled' forms (SGML,
-HTML, PDF, PostScript, RTF and so forth) with or without modification,
-are permitted provided that the following conditions are met:
-1. Redistributions of source code (VuXML) must retain the above
-   copyright notice, this list of conditions and the following
-   disclaimer as the first lines of this file unmodified.
-2. Redistributions in compiled form (transformed to other DTDs,
-   published online in any format, converted to PDF, PostScript,
-   RTF and other formats) must reproduce the above copyright
-   notice, this list of conditions and the following disclaimer
-   in the documentation and/or other materials provided with the
-   distribution.
-
-THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
-BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
-OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
-OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
-BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
-OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,
-EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-  $FreeBSD$
--->
-
   <vuln vid="8db2f8b2-9e12-11ea-9e83-0cc47ac16c9d">
     <topic>qmail -- 64 bit integer overflows with possible remote code execution on large SMTP requests</topic>
     <affects>
diff --git a/security/vuxml/vuln-2006.xml b/security/vuxml/vuln-2006.xml
index 1fd566d2d018..d94b827cbd2b 100644
--- a/security/vuxml/vuln-2006.xml
+++ b/security/vuxml/vuln-2006.xml
@@ -1,34 +1,3 @@
-<!--
-Copyright 2003-2021 Jacques Vidrine and contributors
-
-Redistribution and use in source (VuXML) and 'compiled' forms (SGML,
-HTML, PDF, PostScript, RTF and so forth) with or without modification,
-are permitted provided that the following conditions are met:
-1. Redistributions of source code (VuXML) must retain the above
-   copyright notice, this list of conditions and the following
-   disclaimer as the first lines of this file unmodified.
-2. Redistributions in compiled form (transformed to other DTDs,
-   published online in any format, converted to PDF, PostScript,
-   RTF and other formats) must reproduce the above copyright
-   notice, this list of conditions and the following disclaimer
-   in the documentation and/or other materials provided with the
-   distribution.
-
-THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
-BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
-OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
-OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
-BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
-OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,
-EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-  $FreeBSD$
--->
-
   <vuln vid="f4ff7434-9505-11db-9ddc-0011098b2f36">
     <topic>plone -- user can masquerade as a group</topic>
     <affects>
diff --git a/security/vuxml/vuln-2007.xml b/security/vuxml/vuln-2007.xml
index 61ca4162bb48..cfac8ca9cf37 100644
--- a/security/vuxml/vuln-2007.xml
+++ b/security/vuxml/vuln-2007.xml
@@ -1,34 +1,3 @@
-<!--
-Copyright 2003-2021 Jacques Vidrine and contributors
-
-Redistribution and use in source (VuXML) and 'compiled' forms (SGML,
-HTML, PDF, PostScript, RTF and so forth) with or without modification,
-are permitted provided that the following conditions are met:
-1. Redistributions of source code (VuXML) must retain the above
-   copyright notice, this list of conditions and the following
-   disclaimer as the first lines of this file unmodified.
-2. Redistributions in compiled form (transformed to other DTDs,
-   published online in any format, converted to PDF, PostScript,
-   RTF and other formats) must reproduce the above copyright
-   notice, this list of conditions and the following disclaimer
-   in the documentation and/or other materials provided with the
-   distribution.
-
-THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
-BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
-OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
-OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
-BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
-OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,
-EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-  $FreeBSD$
--->
-
   <vuln vid="cf484358-b5d6-11dc-8de0-001c2514716c">
     <topic>dovecot -- Specific LDAP + auth cache configuration may mix up user logins</topic>
     <affects>
diff --git a/security/vuxml/vuln-2008.xml b/security/vuxml/vuln-2008.xml
index aac344c0c23b..f5f2ff988c59 100644
--- a/security/vuxml/vuln-2008.xml
+++ b/security/vuxml/vuln-2008.xml
@@ -1,34 +1,3 @@
-<!--
-Copyright 2003-2021 Jacques Vidrine and contributors
-
-Redistribution and use in source (VuXML) and 'compiled' forms (SGML,
-HTML, PDF, PostScript, RTF and so forth) with or without modification,
-are permitted provided that the following conditions are met:
-1. Redistributions of source code (VuXML) must retain the above
-   copyright notice, this list of conditions and the following
-   disclaimer as the first lines of this file unmodified.
-2. Redistributions in compiled form (transformed to other DTDs,
-   published online in any format, converted to PDF, PostScript,
-   RTF and other formats) must reproduce the above copyright
-   notice, this list of conditions and the following disclaimer
-   in the documentation and/or other materials provided with the
-   distribution.
-
-THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
-BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
-OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
-OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
-BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
-OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,
-EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-  $FreeBSD$
--->
-
   <vuln vid="214e8e07-d369-11dd-b800-001b77d09812">
     <topic>vinagre -- format string vulnerability</topic>
     <affects>
diff --git a/security/vuxml/vuln-2009.xml b/security/vuxml/vuln-2009.xml
index 01376ce671bb..4ed63453900d 100644
--- a/security/vuxml/vuln-2009.xml
+++ b/security/vuxml/vuln-2009.xml
@@ -1,34 +1,3 @@
-<!--
-Copyright 2003-2021 Jacques Vidrine and contributors
-
-Redistribution and use in source (VuXML) and 'compiled' forms (SGML,
-HTML, PDF, PostScript, RTF and so forth) with or without modification,
-are permitted provided that the following conditions are met:
-1. Redistributions of source code (VuXML) must retain the above
-   copyright notice, this list of conditions and the following
-   disclaimer as the first lines of this file unmodified.
-2. Redistributions in compiled form (transformed to other DTDs,
-   published online in any format, converted to PDF, PostScript,
-   RTF and other formats) must reproduce the above copyright
-   notice, this list of conditions and the following disclaimer
-   in the documentation and/or other materials provided with the
-   distribution.
-
-THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
-BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
-OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
-OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
-BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
-OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,
-EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-  $FreeBSD$
--->
-
   <vuln vid="751823d4-f189-11de-9344-00248c9b4be7">
     <topic>drupal -- multiple cross-site scripting</topic>
     <affects>
diff --git a/security/vuxml/vuln-2010.xml b/security/vuxml/vuln-2010.xml
index 457e867c003b..d3a8f569873e 100644
--- a/security/vuxml/vuln-2010.xml
+++ b/security/vuxml/vuln-2010.xml
@@ -1,34 +1,3 @@
-<!--
-Copyright 2003-2021 Jacques Vidrine and contributors
-
-Redistribution and use in source (VuXML) and 'compiled' forms (SGML,
-HTML, PDF, PostScript, RTF and so forth) with or without modification,
-are permitted provided that the following conditions are met:
-1. Redistributions of source code (VuXML) must retain the above
-   copyright notice, this list of conditions and the following
-   disclaimer as the first lines of this file unmodified.
-2. Redistributions in compiled form (transformed to other DTDs,
-   published online in any format, converted to PDF, PostScript,
-   RTF and other formats) must reproduce the above copyright
-   notice, this list of conditions and the following disclaimer
-   in the documentation and/or other materials provided with the
-   distribution.
-
-THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
-BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
-OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
-OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
-BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
-OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,
-EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-  $FreeBSD$
--->
-
   <vuln vid="06a12e26-142e-11e0-bea2-0015f2db7bde">
     <topic>webkit-gtk2 -- Multiple vulnerabilities</topic>
     <affects>
diff --git a/security/vuxml/vuln-2011.xml b/security/vuxml/vuln-2011.xml
index 8fbb27faac06..6247a20e1ee6 100644
--- a/security/vuxml/vuln-2011.xml
+++ b/security/vuxml/vuln-2011.xml
@@ -1,34 +1,3 @@
-<!--
-Copyright 2003-2021 Jacques Vidrine and contributors
-
-Redistribution and use in source (VuXML) and 'compiled' forms (SGML,
-HTML, PDF, PostScript, RTF and so forth) with or without modification,
-are permitted provided that the following conditions are met:
-1. Redistributions of source code (VuXML) must retain the above
-   copyright notice, this list of conditions and the following
-   disclaimer as the first lines of this file unmodified.
-2. Redistributions in compiled form (transformed to other DTDs,
-   published online in any format, converted to PDF, PostScript,
-   RTF and other formats) must reproduce the above copyright
-   notice, this list of conditions and the following disclaimer
-   in the documentation and/or other materials provided with the
-   distribution.
-
-THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
-BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
-OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
-OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
-BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
-OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,
-EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-  $FreeBSD$
--->
-
   <vuln vid="810df820-3664-11e1-8fe3-00215c6a37bb">
     <topic>WordPress -- cross site scripting vulnerability</topic>
     <affects>
diff --git a/security/vuxml/vuln-2012.xml b/security/vuxml/vuln-2012.xml
index 53754e059174..5de258b56e1c 100644
--- a/security/vuxml/vuln-2012.xml
+++ b/security/vuxml/vuln-2012.xml
@@ -1,34 +1,3 @@
-<!--
-Copyright 2003-2021 Jacques Vidrine and contributors
-
-Redistribution and use in source (VuXML) and 'compiled' forms (SGML,
-HTML, PDF, PostScript, RTF and so forth) with or without modification,
-are permitted provided that the following conditions are met:
-1. Redistributions of source code (VuXML) must retain the above
-   copyright notice, this list of conditions and the following
-   disclaimer as the first lines of this file unmodified.
-2. Redistributions in compiled form (transformed to other DTDs,
-   published online in any format, converted to PDF, PostScript,
-   RTF and other formats) must reproduce the above copyright
-   notice, this list of conditions and the following disclaimer
-   in the documentation and/or other materials provided with the
-   distribution.
-
-THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
-BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
-OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
-OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
-BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
-OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,
-EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-  $FreeBSD$
--->
-
   <vuln vid="101f0aae-52d1-11e2-87fe-f4ce46b9ace8">
     <topic>puppet -- multiple vulnerabilities</topic>
     <affects>
diff --git a/security/vuxml/vuln-2013.xml b/security/vuxml/vuln-2013.xml
index 93cc12587e09..f46442c6e179 100644
--- a/security/vuxml/vuln-2013.xml
+++ b/security/vuxml/vuln-2013.xml
@@ -1,34 +1,3 @@
-<!--
-Copyright 2003-2021 Jacques Vidrine and contributors
-
-Redistribution and use in source (VuXML) and 'compiled' forms (SGML,
-HTML, PDF, PostScript, RTF and so forth) with or without modification,
-are permitted provided that the following conditions are met:
-1. Redistributions of source code (VuXML) must retain the above
-   copyright notice, this list of conditions and the following
-   disclaimer as the first lines of this file unmodified.
-2. Redistributions in compiled form (transformed to other DTDs,
-   published online in any format, converted to PDF, PostScript,
-   RTF and other formats) must reproduce the above copyright
-   notice, this list of conditions and the following disclaimer
-   in the documentation and/or other materials provided with the
-   distribution.
-
-THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
-BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
-OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
-OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
-BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
-OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,
-EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-  $FreeBSD$
--->
-
   <vuln vid="3e33a0bb-6b2f-11e3-b042-20cf30e32f6d">
     <topic>OpenX -- SQL injection vulnerability</topic>
     <affects>
diff --git a/security/vuxml/vuln-2014.xml b/security/vuxml/vuln-2014.xml
index 1bdf1eb96554..6b1f1c8cce16 100644
--- a/security/vuxml/vuln-2014.xml
+++ b/security/vuxml/vuln-2014.xml
@@ -1,34 +1,3 @@
-<!--
-Copyright 2003-2021 Jacques Vidrine and contributors
-
-Redistribution and use in source (VuXML) and 'compiled' forms (SGML,
-HTML, PDF, PostScript, RTF and so forth) with or without modification,
-are permitted provided that the following conditions are met:
-1. Redistributions of source code (VuXML) must retain the above
-   copyright notice, this list of conditions and the following
-   disclaimer as the first lines of this file unmodified.
-2. Redistributions in compiled form (transformed to other DTDs,
-   published online in any format, converted to PDF, PostScript,
-   RTF and other formats) must reproduce the above copyright
-   notice, this list of conditions and the following disclaimer
-   in the documentation and/or other materials provided with the
-   distribution.
-
-THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
-BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
-OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
-OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
-BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
-OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,
-EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-  $FreeBSD$
--->
-
   <vuln vid="c3d43001-8064-11e4-801f-0022156e8794">
     <topic>mutt -- denial of service via crafted mail message</topic>
     <affects>
diff --git a/security/vuxml/vuln-2015.xml b/security/vuxml/vuln-2015.xml
index 84672a2aac58..36997bebdfe4 100644
--- a/security/vuxml/vuln-2015.xml
+++ b/security/vuxml/vuln-2015.xml
@@ -1,34 +1,3 @@
-<!--
-Copyright 2003-2021 Jacques Vidrine and contributors
-
-Redistribution and use in source (VuXML) and 'compiled' forms (SGML,
-HTML, PDF, PostScript, RTF and so forth) with or without modification,
-are permitted provided that the following conditions are met:
-1. Redistributions of source code (VuXML) must retain the above
-   copyright notice, this list of conditions and the following
-   disclaimer as the first lines of this file unmodified.
-2. Redistributions in compiled form (transformed to other DTDs,
-   published online in any format, converted to PDF, PostScript,
-   RTF and other formats) must reproduce the above copyright
-   notice, this list of conditions and the following disclaimer
-   in the documentation and/or other materials provided with the
-   distribution.
-
-THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
-BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
-OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
-OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
-BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
-OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,
-EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-  $FreeBSD$
--->
-
   <vuln vid="4b3a7e70-afce-11e5-b864-14dae9d210b8">
     <topic>mono -- DoS and code execution</topic>
     <affects>
diff --git a/security/vuxml/vuln-2016.xml b/security/vuxml/vuln-2016.xml
index 8c1eb6bf02b5..5fe4fdc4bf1b 100644
--- a/security/vuxml/vuln-2016.xml
+++ b/security/vuxml/vuln-2016.xml
@@ -1,34 +1,3 @@
-<!--
-Copyright 2003-2021 Jacques Vidrine and contributors
-
-Redistribution and use in source (VuXML) and 'compiled' forms (SGML,
-HTML, PDF, PostScript, RTF and so forth) with or without modification,
-are permitted provided that the following conditions are met:
-1. Redistributions of source code (VuXML) must retain the above
-   copyright notice, this list of conditions and the following
-   disclaimer as the first lines of this file unmodified.
-2. Redistributions in compiled form (transformed to other DTDs,
-   published online in any format, converted to PDF, PostScript,
-   RTF and other formats) must reproduce the above copyright
-   notice, this list of conditions and the following disclaimer
-   in the documentation and/or other materials provided with the
-   distribution.
-
-THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
-BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
-OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
-OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
-BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
-OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,
-EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-  $FreeBSD$
--->
-
   <vuln vid="d0b12952-cb86-11e6-906f-0cc47a065786">
     <topic>h2o -- Use-after-free vulnerability</topic>
     <affects>
diff --git a/security/vuxml/vuln-2017.xml b/security/vuxml/vuln-2017.xml
index bca4b7f1e162..042ca4a18394 100644
--- a/security/vuxml/vuln-2017.xml
+++ b/security/vuxml/vuln-2017.xml
@@ -1,34 +1,3 @@
-<!--
-Copyright 2003-2021 Jacques Vidrine and contributors
-
-Redistribution and use in source (VuXML) and 'compiled' forms (SGML,
-HTML, PDF, PostScript, RTF and so forth) with or without modification,
-are permitted provided that the following conditions are met:
-1. Redistributions of source code (VuXML) must retain the above
-   copyright notice, this list of conditions and the following
-   disclaimer as the first lines of this file unmodified.
-2. Redistributions in compiled form (transformed to other DTDs,
-   published online in any format, converted to PDF, PostScript,
-   RTF and other formats) must reproduce the above copyright
-   notice, this list of conditions and the following disclaimer
-   in the documentation and/or other materials provided with the
-   distribution.
-
-THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
-BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
-OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
-OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
-BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
-OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,
-EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-  $FreeBSD$
--->
-
   <vuln vid="cebd05d6-ed7b-11e7-95f2-005056925db4">
     <topic>OTRS -- Multiple vulnerabilities</topic>
     <affects>
diff --git a/security/vuxml/vuln-2018.xml b/security/vuxml/vuln-2018.xml
index df9b671b6800..f7070bce36c7 100644
--- a/security/vuxml/vuln-2018.xml
+++ b/security/vuxml/vuln-2018.xml
@@ -1,34 +1,3 @@
-<!--
-Copyright 2003-2021 Jacques Vidrine and contributors
-
-Redistribution and use in source (VuXML) and 'compiled' forms (SGML,
-HTML, PDF, PostScript, RTF and so forth) with or without modification,
-are permitted provided that the following conditions are met:
-1. Redistributions of source code (VuXML) must retain the above
-   copyright notice, this list of conditions and the following
-   disclaimer as the first lines of this file unmodified.
-2. Redistributions in compiled form (transformed to other DTDs,
-   published online in any format, converted to PDF, PostScript,
-   RTF and other formats) must reproduce the above copyright
-   notice, this list of conditions and the following disclaimer
-   in the documentation and/or other materials provided with the
-   distribution.
-
-THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
-BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
-OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
-OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
-BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
-OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,
-EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-  $FreeBSD$
--->
-
   <vuln vid="29d34524-0542-11e9-a444-080027fee39c">
     <topic>gitea -- privilege escalation, XSS</topic>
     <affects>
diff --git a/security/vuxml/vuln-2019.xml b/security/vuxml/vuln-2019.xml
index 4917d18c0858..c506c424fb6b 100644
--- a/security/vuxml/vuln-2019.xml
+++ b/security/vuxml/vuln-2019.xml
@@ -1,34 +1,3 @@
-<!--
-Copyright 2003-2021 Jacques Vidrine and contributors
-
-Redistribution and use in source (VuXML) and 'compiled' forms (SGML,
-HTML, PDF, PostScript, RTF and so forth) with or without modification,
-are permitted provided that the following conditions are met:
-1. Redistributions of source code (VuXML) must retain the above
-   copyright notice, this list of conditions and the following
-   disclaimer as the first lines of this file unmodified.
-2. Redistributions in compiled form (transformed to other DTDs,
-   published online in any format, converted to PDF, PostScript,
-   RTF and other formats) must reproduce the above copyright
-   notice, this list of conditions and the following disclaimer
-   in the documentation and/or other materials provided with the
-   distribution.
-
-THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
-BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
-OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
-OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
-BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
-OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,
-EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-  $FreeBSD$
--->
-
   <vuln vid="66e4dc99-28b3-11ea-8dde-08002728f74c">
     <topic>rack -- information leak / session hijack vulnerability</topic>
     <affects>