neon, which comes included in the gnu-arch source has serveral format string vulnerabilitys, see http://vuxml.freebsd.org/84237895-8f39-11d8-8b29-0020ed76ef5a.html Fix from neon CVS. I mailed the port maintainer on saturday 19:00 UTC.
Responsible Changed From-To: freebsd-ports-bugs->seanc Over to maintainer.
State Changed From-To: open->closed Committed, thanks!