Number of commits found: 28

Remove expired linux_base-6 port.

I lost the bits that made rev 1.82 work.  So don't do rev 1.82.

Forbid due to two more security bugs (an updated ncurses package
is available).  Set an expiration date four months hence.

Properly set owner of yp.conf.

Fix issue in last commit.

Remove useless "do-patch: NADA" -- the lack of patch-* files is sufficient.

These ports should be using 'ARCH' rather than 'MACHINE_ARCH'.

Submitted by:   kris

Correct the DEPRECATED string.

PR:             75388
Approved by:    kris

Mark DEPRECATED due to bash local DoS (RHSA-2000-117) and due to
the sheer age of this software.

Update CONFLICTS.

PR:             75283
Submitted by:   linimon

Set NO_LATEST_LINK.

Requested by:   kris

Fix CONFLICTS lines, as requested by eik then petef:

        I think it's a bug that linux_base thinks it conflicts with itself.

--petef

        The problem occurs if you do
          make install; make install FORCE_PKG_REGISTER=yes
        which is somewhat supported, although [seldom] (never?) used.

--eik

Also record conflicts with cle_base.

Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.

(Part 2)

Make glib-1.2.6-2.i386.rpm fetchable (it comes from the updates to
Red Hat 6.1).

found by:       fenner's survey

ECHO -> ECHO_MSG
(ECHO_CMD for deskutils/notebook)

PR:             ports/56767-56770,56772-56774,56776-56784
Submitted by:   KATO Tsuguru <tkato@prontomail.com>

This port is scheduled for removal on Nov 7 2003 if it is still broken at
that time and no PRs have been submitted to fix it.  If you are interested
in saving this port, please send your patches to the maintainer.  If the
maintainer is unresponsive or the port has no maintainer, then please
submit them via send-pr.

Register conflicts among linux_base ports.

For i386, update glibc and for the Alpha, mark forbidden due to
remotely exploitable RPC bug (Red Hat advisory RHSA-2003-089 and
CERT advisory CA-2003-10).

According to <URL:http://www.redhat.com/apps/support/errata/>, "all
errata support for Alpha products, Sparc products, and Powertools
products have reached end of life."

I didn't do any run-time testing of this, but it packages and
deinstalls cleanly.

De-pkg-comment.

Increment PORTREVISION for glibc update (and add another dunce cap
to my collection).

Update glibc to 2.1.3-28 in order to correct buffer overflow in
resolver.  This also makes the port fetchable again.  Advisories
are at <URL:https://rhn.redhat.com/errata/RHSA-2002-197.html> and
<URL:http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-1146>.

N.B. I only tested this on -CURRENT/i386.

Add GTK+ 1.2.6-7 from Red Hat 6.2.  This is needed by Mozilla and
by Netscape 6 and 7.  With all of those (so far), Java only works
with this version of linux_base.  The linux-gtk port is no longer
compatible with linux_base-6.  Increment PORTREVISION.

Correct "script failed" installation error introduced in the last commit.

Update XFree86 libraries to 3.3.6-29, to avoid multiple security
bugs.

Update glibc to 2.1.3-26 to avoid resolver and RPC security bugs.
Keep forbidden because of security bugs in X11 libraries.

These should have the resolver bug too.

Forbid because of XDR security bug.

Use MASTER_SITE_REDHAT_LINUX.

Number of commits found: 28

12 vulnerabilities affecting 17 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities