22:30 dougb 

As previously advertised, complete removal of vulnerable ports that
no one has stepped up to deal with:

archivers/pecl-phar             Vulnerable since 2011-01-13
comms/libsyncml                 Depends on devel/libsoup22, which is FORBIDDEN
databases/mysql323-server       Vulnerable since 2006-10-29
databases/mysql323-client       Vulnerable since 2006-10-29
databases/mysql323-scripts      Vulnerable since 2006-10-29
databases/mysql40-server        Vulnerable since 2006-10-29
databases/mysql40-client        Vulnerable since 2006-10-29
databases/mysql40-scripts       Vulnerable since 2006-10-29
databases/p5-DBD-mysql40
                Depends on databases/mysql40-server, which is FORBIDDEN
deskutils/buoh                  Depends on devel/libsoup22, which is FORBIDDEN
deskutils/libopensync-plugin-syncml
                Depends on comms/libsyncml, which is DEPRECATED
devel/libsoup22                 Vulnerable since 2011-07-28
dns/bind9-sdb-ldap              Vulnerable since 2011-06-04
dns/bind9-sdb-postgresql        Vulnerable since 2011-06-04
ftp/wgetpro                     Vulnerable since 2004-12-14
games/quake2forge               Vulnerable since 2005-01-21
graphics/linux-tiff             Vulnerable since 2004-10-13
japanese/mutt                   Vulnerable since 2007-07-29
japanese/asterisk14-sounds      Depends on net/asterisk14, which is FORBIDDEN
net/asterisk14                  Vulnerable since 2011-06-25
net/isc-dhcp31-client           Vulnerable since 2011-04-10
net/isc-dhcp31-server           Vulnerable since 2011-04-10
net/isc-dhcp31-relay            Vulnerable since 2011-04-10
net/asterisk-app-ldap           Depends on net/asterisk14, which is FORBIDDEN
net/asterisk-app-notify         Depends on net/asterisk14, which is FORBIDDEN
net/asterisk-oh323
   Depends on net/asterisk14, which is FORBIDDEN, does not compile on sparc64
net/asterisk14-addons           Depends on net/asterisk14, which is FORBIDDEN
net/astfax                      Depends on net/asterisk14, which is FORBIDDEN
net-mgmt/nagios2                Vulnerable since 2009-06-30
www/gforge                      Vulnerable since 2005-08-09
www/linux-flashplugin7          Vulnerable since at least 2008-05-30
www/opera-devel                 Vulnerable since 2010-06-25, does not fetch
www/plone3                      Vulnerable and unsupported upstream
www/serendipity-devel           Vulnerable since 2008-04-25
www/ziproxy                     Vulnerable since 2010-06-15
www/asterisk-gui                Depends on net/asterisk14, which is FORBIDDEN
x11-toolkits/linux-pango        Vulnerable since 2009-05-13

06:20 ale 

Fix previouos commit.

05:58 ale 

Use the new @stopdaemon feature.

01:29 edwin 

Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtry

Approved by:    krion@
PR:             ports/88711 (related)

06:34 ale 

Update to 4.0.26 release.

09:33 ale 

- Use the rcNG script to kill MySQL on deinstallation [1]
- Set the new sequence for finding my.cnf files [2]:
  /etc, ${PREFIX}/etc, ${mysql_dbdir}
  (default to: /etc/my.cnf, /usr/local/etc/my.cnf, /var/db/mysql/my.cnf)
- Add the possibility to specify additional command-line arguments
  to be passed to mysqld_safe on startup

PR:             ports/79166 [1], ports/79597 [2]
Submitted by:   Sergey Prikhodko <sergey@network-asp.biz> [1],
                Vasil Dimov <vd@datamax.bg> [2]

10:52 ale 

Update to 4.0.24 release:
- Fix potential security vulnerabilities in the creation of temporary
  table file names and the handling of User Defined Functions (UDFs)
- Add the possibility to specify the database directory in rc.conf
- Move database creation from post-install stage into startup script

10:43 ale 

Update to 4.0.22 release:
- Switch to rcNG startup script

21:09 ale 

Update to 4.0.21 release:
- Fix mysqlhotcopy insecure temporary file creation
- Fix bug in remote connections caused by libwrap [1]

PR:             ports/70889 [1]
Submitted by:   Andreas Haakh <andreas.haakh@ib-haakh.de> [1]
Patch by:       peadar [1]
Approved by:    portmgr (marcus)

08:47 ale 

Remove lib/mysql directory, if empty.

15:30 ale 

- get rid of perl dependency [1]
- enhance man pages and scripts installation
- move additional scripts in mysql-scripts port

Requested by:   many [1]

10:42 ale 

Update to 4.0.18 release.

Approved by:    nork (mentor/implicitly)

00:59 ale 

Sync with recent mysql323 changes:
- Correctly support PTHREAD_LIBS/CFLAGS
- Use USE_GNOME=lthack
- Propagate DB_DIR in packages
- Use my @FreeBSD.org email address

Approved by:    nork (mentor/implicitly)

10:52 nork 

o Update to 4.0.17.
o Make portlint clean.

PR:             ports/60321
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

14:36 nork 

o Update to 4.0.16 release.
o Various little fixes.
o Change behaviour of BUILD_OPTIMIZED.

PR:             ports/58377
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

14:34 roam 

Update to MySQL 4.0.15 to fix the password denial-of-service problem.
Check for OVERWRITE_DB="no" in addition to just the test for its presence.

PR:             56703
Submitted by:   maintainer
Approved by:    security-officer (nectar)

17:52 nork 

Update to 4.0.13.

PR:             ports/52440
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

17:02 nork 

Update to 4.0.12.

PR:             ports/50130
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

16:02 roam 

Update to MySQL 4.0.9 after a repo-copy from the mysql323-* ports.

PR:                     45543
Submitted by:           Alex Dupre <sysadmin@alexdupre.com>
Repo-copy approved by:  portmgr (will)
Repo-copy performed by: cvs (josefk)