Number of commits found: 20

As previously advertised, complete removal of vulnerable ports that
no one has stepped up to deal with:

archivers/pecl-phar             Vulnerable since 2011-01-13
comms/libsyncml                 Depends on devel/libsoup22, which is FORBIDDEN
databases/mysql323-server       Vulnerable since 2006-10-29
databases/mysql323-client       Vulnerable since 2006-10-29
databases/mysql323-scripts      Vulnerable since 2006-10-29
databases/mysql40-server        Vulnerable since 2006-10-29
databases/mysql40-client        Vulnerable since 2006-10-29
databases/mysql40-scripts       Vulnerable since 2006-10-29
databases/p5-DBD-mysql40
                Depends on databases/mysql40-server, which is FORBIDDEN
deskutils/buoh                  Depends on devel/libsoup22, which is FORBIDDEN
deskutils/libopensync-plugin-syncml

(Only the first 15 lines of the commit message are shown above )

- Get Rid MD5 support

- Update to 4.0.27

PR:             97502
Approved by:    maintainer timeout (security bypass by mnag with secteam hat)
Security:       CVE-2006-1516, CVE-2006-1517

SHA256ify

Approved by:    krion@

Update to 4.0.26 release.

Update to 4.0.25 release.

Update to 4.0.24 release:
- Fix potential security vulnerabilities in the creation of temporary
  table file names and the handling of User Defined Functions (UDFs)
- Add the possibility to specify the database directory in rc.conf
- Move database creation from post-install stage into startup script

Update to 4.0.23a release [1]:
- Use MASTER_SITES_MYSQL
- Add WITHOUT_INNODB knob [2]
- Fix tcp wrappers (hopefully definitely!)

PR:             ports/75598 [1]
Submitted by:   Marcus Grando <marcus@corp.grupos.com.br> [1],
                sobomax [2]

Update to 4.0.22 release:
- Switch to rcNG startup script

Update to 4.0.21 release:
- Fix mysqlhotcopy insecure temporary file creation
- Fix bug in remote connections caused by libwrap [1]

PR:             ports/70889 [1]
Submitted by:   Andreas Haakh <andreas.haakh@ib-haakh.de> [1]
Patch by:       peadar [1]
Approved by:    portmgr (marcus)

- Update to 4.0.20 release
- Add experimental WITH_PROC_SCOPE_PTH knob to use process scope
  threads instead of system scope threads with libpthread

Update to 4.0.18 release.

Approved by:    nork (mentor/implicitly)

o Update to 4.0.17.
o Make portlint clean.

PR:             ports/60321
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

o Update to 4.0.16 release.
o Various little fixes.
o Change behaviour of BUILD_OPTIMIZED.

PR:             ports/58377
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

Update to MySQL 4.0.15 to fix the password denial-of-service problem.
Check for OVERWRITE_DB="no" in addition to just the test for its presence.

PR:             56703
Submitted by:   maintainer
Approved by:    security-officer (nectar)

update databases/mysql40-server: 4.0.13 -> 4.0.14

PR:             54780
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

Update to 4.0.13.

PR:             ports/52440
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

Update to 4.0.12.

PR:             ports/50130
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

Update to 4.0.10.
Fix configure on -current.

PR:             ports/47902
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

Update to MySQL 4.0.9 after a repo-copy from the mysql323-* ports.

PR:                     45543
Submitted by:           Alex Dupre <sysadmin@alexdupre.com>
Repo-copy approved by:  portmgr (will)
Repo-copy performed by: cvs (josefk)

Number of commits found: 20

12 vulnerabilities affecting 17 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities