A ports freeze means that commits will be few and far between and only by approval.

Number of commits found: 44

Conversion from (now defunct) autoconf-2.61 to autoconf-2.62

Tested by:      exp build run (erwin)

Rename manual "test" target to "regression-test" so that it will
be automatically run on the package build cluster.

Suggested by Pedro <pfgshield-freebsd@yahoo.com>.

Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)

- Revert previous workaround, 8.0-CURRENT has grown fdopendir(3).

- Update to 1.20.
  Notable changes: This release adds support for lzma compression
  and the -a option to select the compression algorithm based on
  the suffix of the archive file name.

Work around the assumption that openat() implies the existence of
fdopendir().  FreeBSD 8 has the former, but not the latter.

PR:             122433

Update to 1.19.  Changes in this releases:
* new option --exclude-vcs
* miscellaneous bug fixes

Fix directory traversal vulnerability.

PR:             115914
Submitted by:   Nick Barkas <snb@threerings.net>
Security:      
http://www.vuxml.org/freebsd/d944719e-42f4-4864-89ed-f045b541919f.html

Update to 1.18.  Switched to GPLv3, no user visible changes.

PR:             115548
Submitted by:   rafan

- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script
  supports them.  This is determined by running ``configure --help'' in
  do-configure target and set the shell variable _LATE_CONFIGURE_ARGS
  which is then passed to CONFIGURE_ARGS.
- Remove --mandir and --infodir in ports' Makefile where applicable
  Few ports use REINPLACE_CMD to achieve the same effect, remove them too.
- Correct some manual pages location from PREFIX/man to MANPREFIX/man
- Define INFO_PATH where necessary
- Document that .info files are installed in a subdirectory relative to
  PREFIX/INFO_PATH and slightly change add-plist-info to use INFO_PATH and
  subdirectory detection.

PR:             ports/111470
Approved by:    portmgr
Discussed with: stas (Mk/*), gerald (info related stuffs)
Tested by:      pointyhat exp run

Fix message catalog directories.

Submitted by:   kris    (pointyhat)

Update to 1.17.  Changes in this release:
* Fix archivation of sparse files in posix mode.
* Fix operation of --verify --listed-incremental.
* Fix --occurrence.
* Scope of --transform and --strip-components options.
* End-of-volume script can send the new volume name to tar.

Update to 1.16.1.  User-visible changes:
* New option --exclude-tag allows to specify "exclusion tag files".
* The --exclude-cache option now excludes the directories themselves, too.
* Support for reading ustar type 'N' logical records has been removed.
* Race conditions around 'tar -x --same-owner' have been fixed.

Fix GNUTYPE_NAMES directory traversal vulnerability by not extracting
these entries.  Support for GNUTYPE_NAMES will be dropped completely
in 1.16.1.

Notified by sem@

Security:       VuXML 3dd7eb58-80ae-11db-b4ec-000854d03344

dirrmtry some directories which will be leftover on deinstall.

Notified by:    My tinderbox

Update to 1.16.  User-visible changes:

Incompatible changes:
* No globbing by default when extracting from or listing an archive.
* -l is now an alias of --check-links

Miscellaneous new options and bug fixes.  For a complete list, see
http://lists.gnu.org/archive/html/bug-tar/2006-10/msg00031.html

Fix a buffer overflow, caused by improper bounds checking of the
PAX extended headers.  By tricking a user into processing a specially
crafted tar archive, this could be exploited to execute arbitrary
code with the privileges of the user.

Security:       CVE-2006-0300
Approved by:    portmgr (erwin)
Obtained from:  Ubuntu

Fix command line parsing.

Submitted by:   Jiri Pridal <jiri.pridal@jmk.izscr.cz>
Obtained from:  GNU CVS

Update to 1.15.1.  Notable changes:
- Compressed archives are now recognized automatically.
- Numerous bug fixes.

Add a target "test" to run the included regression test suite.

Remove USE_GETTEXT

Support WITHOUT_NLS

Update to 1.14, the first new official release in almost five years.
No user-visible changes from the last alpha version.

Update to 1.13.94 and jettison private FreeBSD modifications.

Notable changes in this release:
- Support for POSIX.1-2001 and ustar archive formats.
- Various option flag changes.
- New message translations.
- Bug fixes.

Add USE_GETTEXT and bump PORTREVISION.

Submitted by:   trevor
Tested by:      bento

Now gettext 0.12.1 is gettext-old.

introduce MASTER_SITE_GNU_ALPHA

Bump the PORTREVISION for the ports directly affected by the gettext upgrade.

Prodded by:     kris

Chase the libintl.so shared lib version.

Utilize INFO and bump PORTREVISION.

IGNORE while this is identical to the base system tar.

Suggested by:   kuriyama

pkg-comment -> COMMENT

Removed stale master_site, informed maintainer.
Noticed by: portsurvey.

Fix a security bug that allows extracted filenames to contain ".." and
bump PORTREVISION.

Submitted by:   naddy

Chase shlib rev of devel/gettext

Submitted by:   lots and lots
Pointy hat to:  ade

Sync with src/contrib/tar - re-enable --same-owner for uid 0.

Sync with src/contrib/tar - don't assume that user with uid 0 doesn't really
care about umask(2).

Stage 1 of system GNU tar upgrade to a modern version:

Merge all applicable bugfixes, local hacks and new features from the ancient
base system tar into the port, so those two are interchangeable.

Bump PORTREVISION.

gettext upgrade uber-patch (stage 3)

- switch devel/gettext (0.11.1) on, installing full package
- flip devel/gettext-old (0.10.35) to installing only static binaries
  with a "-old" suffix -- gettext-old will have its deorbit burn
  sequence initiated just after 4.6-RELEASE
- fix up ports for the new world order

Reviewed by:    portmgr

Stage 1 of gettext update.

Move gettext (0.10.35) with gettext-old
Update gettext from gettext-devel (0.10.40)
Remove gettext-devel
Fix dependencies

Stage 2 will involve upgraded gettext to 0.11 and fixing issues
Stage 3 involves a de-orbit burn sequence for gettext-old

Reviewed by:    portmgr

Update to 1.13.25:   * New option --overwrite-dir.   * Fixes for buffer overrun,
porting, and copyright notice problems.   * Add Korean message catalog.    

- Fix "gtar --version" segfault on -STABLE reported by Jason R. Mastaler.   -
Bump the port revision.   - Move PKGNAMEPREFIX to where portlint wants it.    

Update my MAINTAINER address.    

Update to 1.13.23    

Update to 1.13.22.    

change category to archivers.    

Number of commits found: 44

19 vulnerabilities affecting 36 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities