22:30 dougb 

As previously advertised, complete removal of vulnerable ports that
no one has stepped up to deal with:

archivers/pecl-phar             Vulnerable since 2011-01-13
comms/libsyncml                 Depends on devel/libsoup22, which is FORBIDDEN
databases/mysql323-server       Vulnerable since 2006-10-29
databases/mysql323-client       Vulnerable since 2006-10-29
databases/mysql323-scripts      Vulnerable since 2006-10-29
databases/mysql40-server        Vulnerable since 2006-10-29
databases/mysql40-client        Vulnerable since 2006-10-29
databases/mysql40-scripts       Vulnerable since 2006-10-29
databases/p5-DBD-mysql40
                Depends on databases/mysql40-server, which is FORBIDDEN
deskutils/buoh                  Depends on devel/libsoup22, which is FORBIDDEN
deskutils/libopensync-plugin-syncml
                Depends on comms/libsyncml, which is DEPRECATED
devel/libsoup22                 Vulnerable since 2011-07-28
dns/bind9-sdb-ldap              Vulnerable since 2011-06-04
dns/bind9-sdb-postgresql        Vulnerable since 2011-06-04
ftp/wgetpro                     Vulnerable since 2004-12-14
games/quake2forge               Vulnerable since 2005-01-21
graphics/linux-tiff             Vulnerable since 2004-10-13
japanese/mutt                   Vulnerable since 2007-07-29
japanese/asterisk14-sounds      Depends on net/asterisk14, which is FORBIDDEN
net/asterisk14                  Vulnerable since 2011-06-25
net/isc-dhcp31-client           Vulnerable since 2011-04-10
net/isc-dhcp31-server           Vulnerable since 2011-04-10
net/isc-dhcp31-relay            Vulnerable since 2011-04-10
net/asterisk-app-ldap           Depends on net/asterisk14, which is FORBIDDEN
net/asterisk-app-notify         Depends on net/asterisk14, which is FORBIDDEN
net/asterisk-oh323
   Depends on net/asterisk14, which is FORBIDDEN, does not compile on sparc64
net/asterisk14-addons           Depends on net/asterisk14, which is FORBIDDEN
net/astfax                      Depends on net/asterisk14, which is FORBIDDEN
net-mgmt/nagios2                Vulnerable since 2009-06-30
www/gforge                      Vulnerable since 2005-08-09
www/linux-flashplugin7          Vulnerable since at least 2008-05-30
www/opera-devel                 Vulnerable since 2010-06-25, does not fetch
www/plone3                      Vulnerable and unsupported upstream
www/serendipity-devel           Vulnerable since 2008-04-25
www/ziproxy                     Vulnerable since 2010-06-15
www/asterisk-gui                Depends on net/asterisk14, which is FORBIDDEN
x11-toolkits/linux-pango        Vulnerable since 2009-05-13

12:54 miwi 

- Get Rid MD5 support

03:18 mnag 

- Update to 4.0.27

PR:             97502
Approved by:    maintainer timeout (security bypass by mnag with secteam hat)
Security:       CVE-2006-1516, CVE-2006-1517

08:23 edwin 

SHA256ify

Approved by:    krion@

06:34 ale 

Update to 4.0.26 release.

10:35 ale 

Update to 4.0.25 release.

10:52 ale 

Update to 4.0.24 release:
- Fix potential security vulnerabilities in the creation of temporary
  table file names and the handling of User Defined Functions (UDFs)
- Add the possibility to specify the database directory in rc.conf
- Move database creation from post-install stage into startup script

13:20 ale 

Update to 4.0.23a release [1]:
- Use MASTER_SITES_MYSQL
- Add WITHOUT_INNODB knob [2]
- Fix tcp wrappers (hopefully definitely!)

PR:             ports/75598 [1]
Submitted by:   Marcus Grando <marcus@corp.grupos.com.br> [1],
                sobomax [2]

10:43 ale 

Update to 4.0.22 release:
- Switch to rcNG startup script

21:09 ale 

Update to 4.0.21 release:
- Fix mysqlhotcopy insecure temporary file creation
- Fix bug in remote connections caused by libwrap [1]

PR:             ports/70889 [1]
Submitted by:   Andreas Haakh <andreas.haakh@ib-haakh.de> [1]
Patch by:       peadar [1]
Approved by:    portmgr (marcus)

10:59 ale 

- Update to 4.0.20 release
- Add experimental WITH_PROC_SCOPE_PTH knob to use process scope
  threads instead of system scope threads with libpthread

10:42 ale 

Update to 4.0.18 release.

Approved by:    nork (mentor/implicitly)

10:52 nork 

o Update to 4.0.17.
o Make portlint clean.

PR:             ports/60321
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

14:36 nork 

o Update to 4.0.16 release.
o Various little fixes.
o Change behaviour of BUILD_OPTIMIZED.

PR:             ports/58377
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

14:34 roam 

Update to MySQL 4.0.15 to fix the password denial-of-service problem.
Check for OVERWRITE_DB="no" in addition to just the test for its presence.

PR:             56703
Submitted by:   maintainer
Approved by:    security-officer (nectar)

05:32 daichi 

update databases/mysql40-server: 4.0.13 -> 4.0.14

PR:             54780
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

17:52 nork 

Update to 4.0.13.

PR:             ports/52440
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

17:02 nork 

Update to 4.0.12.

PR:             ports/50130
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

14:13 nork 

Update to 4.0.10.
Fix configure on -current.

PR:             ports/47902
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

16:02 roam 

Update to MySQL 4.0.9 after a repo-copy from the mysql323-* ports.

PR:                     45543
Submitted by:           Alex Dupre <sysadmin@alexdupre.com>
Repo-copy approved by:  portmgr (will)
Repo-copy performed by: cvs (josefk)