02:59 kris 

Despite trevor commits 7 weeks ago the ports remained broken and trevor
has again been unresponsive to reports of the problem.  Honour the original
expiration date and remove the ports.

Approved by:    portmgr (self)

18:53 bsam 

Revert back previous commit of removing deleted ports from
CONFLICTS variable. Give happy users just another chance to
update their systems.

Pointed out by:         infofarmer, kris

15:32 bsam 

Remove deleted linux_base-* and linux_locale* ports from CONFLICTS variable
of the remaining linux ports.

Reviewed by:    netchild (agreed in principle)

06:12 trevor 

Use updated RPMs (all descriptions are taken verbatim from the INDEX
file provided by Novell):

glibc-2.3.4-23.4
 This update fixes a problem when debugging threaded programs using gdb.
 The symptom would be that 'info threads' returns empty in every case.
 Everyone who debugs should update.

coreutils-5.3.0-10.2
 Fix a bug in the cp and mv utilities that cause them to terminate with
 a segmentation fault when copying extended attributes fails.

libtiff-3.7.1-7.8,
 This update of libtiff is the result of a source-code audit done by
 Tavis Ormandy. It fixes various bugs that can lead to denial-of-service
 conditions as well as to remote code execution while parsing a tiff image.
 (CVE-2006-3459, CVE-2006-3460, CVE-2006-3461, CVE-2006-3462, CVE-2006-3463,
 CVE-2006-3464, CVE-2006-3465)

giflib-4.1.3-5.2
 This update fixes the following security issues:

 - specially crafted GIF files could crash applications
   (CVE-2005-2974).

 - specially crafted GIF files could overwrite memory which
   potentially allowed to execute arbitrary code (CVE-2005-3350).

freetype2-2.1.9-4.4
 This security update fixes crashes in the PCF handling of freetype2
 which might be used to crash freetype2 using applications or even
 to execude code in them.

 This issue is tracked by the Mitre CVE ID CVE-2006-3467.

gtk2-2.6.4-6.3
 This update fixes the following security problem: a heap overflow in the XPM
 reader allowed attackers to execute arbitrary code via specially crafted XPM
 images (CVE-2005-3186, CVE-2005-2976).

kdelibs3-3.4.0-20.10
 This update contain a fix for kdelibs3.
 The package contained libraries or applications having an internal empty
 rpath / runpath.  This problem leads to programs searching shared libaries
 in the current directory.

arts-1.4.0-10.2
 The KDE soundserver aRts lacked checks around some setuid() calls.  This
 could potentially be used by a local attacker to gain root
 privileges. (CVE-2006-2916)

Add linux_base-8 to CONFLICTS.

Set PORTREVISION to 4.

Remove deprecation.

09:28 netchild 

Mark deprecated and set expiration time for various reasons:
 - superseeded
 - outdated/EOL
 - no maintainer
 - bitrod

While I'm here add some more conflicts.

21:03 netchild 

Reset maintainership to ports@ after ~4 months without any response to any
PR.

Thanks for contributing.

Since the acroread7 port is a somewhat important port for our users, I
will hand it over to emulation@ if no _active_ *committer* takes it
before the ports freeze.

While I'm here:
 - fix a little nit in the csound port (I think the intention was to
   create no backup file instead of creating one with a "-e" extension)
 - set ARCH to i386 in the amd64 case for the acroread7 port. This
   is a work-around to be able to install everything when a dependency
   is not already installed (ARCH is read-only in sub-makes, so the
   dependencies can't change it). This should be removed when the
   dependencies are fixed or converted to use bsd.linux-rpm.mk. [1]

Not objected to by:     portmgr (explicit: krion; silence: rest)
Maintainer timeout:     ~4 months
Submitted by:           Sangwoo Shim <sangwoos@gmail.com> [1]
PR:                     87985 [1]

05:12 trevor 

Use updated kdelibs3 package.

Security:  CAN-2005-1920

01:11 trevor 

Update zlib.

Submitted by:   Mayer
Security:       CAN-2005-1849

16:42 trevor 

new Linux base port with packages from SUSE 9.3