Number of commits found: 6

It seems these ports are still required on 7.x

Feature safe:   yes

Remove these vulnerable ports:

2011-10-14 graphics/linux-tiff
2011-10-14 x11-toolkits/linux-pango

Feature safe:   yes

Grant graphics/linux-tiff a stay of execution

Due to the way that linux dependencies are recorded my greps for the
portname, category/portname, etc. didn't discover that on RELENG_7
this version of the port is still heavily depended on. Neither did
my building INDEX on more recent versions of FreeBSD.

So bring it back for now, with the plan to mark those ports that
depend on it BROKEN conditional on OSVERSION.

As previously advertised, complete removal of vulnerable ports that
no one has stepped up to deal with:

archivers/pecl-phar             Vulnerable since 2011-01-13
comms/libsyncml                 Depends on devel/libsoup22, which is FORBIDDEN
databases/mysql323-server       Vulnerable since 2006-10-29
databases/mysql323-client       Vulnerable since 2006-10-29
databases/mysql323-scripts      Vulnerable since 2006-10-29
databases/mysql40-server        Vulnerable since 2006-10-29
databases/mysql40-client        Vulnerable since 2006-10-29
databases/mysql40-scripts       Vulnerable since 2006-10-29
databases/p5-DBD-mysql40
                Depends on databases/mysql40-server, which is FORBIDDEN
deskutils/buoh                  Depends on devel/libsoup22, which is FORBIDDEN
deskutils/libopensync-plugin-syncml

(Only the first 15 lines of the commit message are shown above )

Rewrite.

RPM of tiff lib    

Number of commits found: 6

12 vulnerabilities affecting 17 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities