Number of commits found: 45

As previously advertised, complete removal of vulnerable ports that
no one has stepped up to deal with:

archivers/pecl-phar             Vulnerable since 2011-01-13
comms/libsyncml                 Depends on devel/libsoup22, which is FORBIDDEN
databases/mysql323-server       Vulnerable since 2006-10-29
databases/mysql323-client       Vulnerable since 2006-10-29
databases/mysql323-scripts      Vulnerable since 2006-10-29
databases/mysql40-server        Vulnerable since 2006-10-29
databases/mysql40-client        Vulnerable since 2006-10-29
databases/mysql40-scripts       Vulnerable since 2006-10-29
databases/p5-DBD-mysql40
                Depends on databases/mysql40-server, which is FORBIDDEN
deskutils/buoh                  Depends on devel/libsoup22, which is FORBIDDEN
deskutils/libopensync-plugin-syncml

(Only the first 15 lines of the commit message are shown above )

- Mark CONFLICTS with ja-mutt-devel, mutt, mutt-devel, mutt-devel-lite,
mutt-lite and zh-mutt-devel
- Bump PORTREVISION for package change

Mark FORBIDDEN the remaining ports that are vulnerable for more than
2 weeks according to portaudit (ranging from 23 days to 7 years).
The maintainers were notified by mail that this action would be taken
on 2011-09-03. (Ports for which maintainers responded have been/will be
dealt with separately.)

Also mark DEPRECATED ports that rely on the FORBIDDEN ports, and a few
ports that rely on those DEPRECATED ports.

- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:             157936
Submitted by:   myself
Exp-runs by:    pav
Approved by:    pav

Sync to new bsd.autotools.mk

Punt autoconf267->autoconf268

Round one migration of ports from automake{19,110} to automake111

Autotools update.   Read ports/UPDATING 20100915 for details.

Approved by:    portmgr (for Mk/bsd.port.mk part)
Tested by:      Multiple -exp runs

Bounce PORTREVISION for gettext-related ports.  Have fun, ya'll.

- update to 1.4.1
Reviewed by:    exp8 run on pointyhat
Supported by:   miwi

- update to jpeg-8

Conversion from (now defunct) autoconf-2.61 to autoconf-2.62

Tested by:      exp build run (erwin)

Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)

Update to the autotools new world order.

Tested by:      numerous package build runs
Approved by:    portmgr
Thanks to:      des, kris, linimon, pav

- Fix build with GCC 4.2

Submitted by:   SHIOZAKI Takehiko <st@be.to> (maintainer)

- Welcome X.org 7.2 \o/.
- Set X11BASE to ${LOCALBASE} for recent ${OSVERSION}.
- Bump PORTREVISION for ports intalling files in ${X11BASE}.

- Remove support for deprecated cyrus-sasl
- Bump PORTREVISION

PR:             ports/111567
Submitted by:   gabor
Approved by:    SHIOZAKI Takehiko <st@be.to> (maintainer, via private mail)

- Add fix for recent IMAP buffer overflow vulnerability.

PR:             ports/99700
Submitted by:   shaun (me)
Approved by:    SHIOZAKI Takehiko <st@be.to> (maintainer),
                ahze (mentor)
Security:       VuXML d2a43243-087b-11db-bc36-0008743bf21a

Remove USE_REINPLACE from categories starting with a J

Mass-conversion to the USE_AUTOTOOLS New World Order.  The code present
in bsd.autotools.mk essentially makes this a no-op given that all the
old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in
exactly the same way as USE_AUTOTOOLS itself.

Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.

Preliminary documentation can be found at:
        http://people.FreeBSD.org/~ade/autotools.txt

which is in the process of being SGMLized before introduction into the
Porters Handbook.

Light blue touch-paper.  Run.

o Change MAINTAINER to submitter (blanket).
o Added -D_DONT_USE_CTYPE_INLINE_ to CFLAGS not to use inlined wcwidth().
o Modified pkg-plist to use %%DOCSDIR%%.

PR:             ports-jp/15003, ports/71331
Submitted by:   SHIOZAKI Takehiko <st@be.to>
Approved by:    maintainer blanket
Obtained from:  ports/71329

Sync with new bsd.autotools.mk

- Update to version 1.4.2.1

PR:             ports/65447
Submitted by:   maintainer

- Use USE_ICONV knob

Approved by:    portmgr

Whoa there, boy, that's a mighty big commit y'all have there...

Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".

For ports-in-waiting:

        USE_LIBTOOL=YES         ->      USE_LIBTOOL_VER=13
        USE_AUTOCONF=YES        ->      USE_AUTOCONF_VER=213
        USE_AUTOMAKE=YES        ->      USE_AUTOMAKE_VER=14

Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.

Sync FORBIDDEN tags with the FreeBSD VuXML database, please refer to the
individual database entries for details. Report errors and omissions in the
database to the FreeBSD Security Officer <security-officer@FreeBSD.org>

bump PORTREVISON for x11/linux-XFree86-libs, since the vulnerabilites are
fixed.

Add USE_GETTEXT and bump PORTREVISION.

Submitted by:   trevor
Tested by:      bento

Now gettext 0.12.1 is gettext-old.

- don't clobber any given LDFLAGS
  resolves conflitcs with bsd.openssl.mk
(maintainter contacted, no response yet)
Approved by:    marcus

Bump the PORTREVISION for the ports directly affected by the gettext upgrade.

Prodded by:     kris

Chase the libintl.so shared lib version.

Update to 1.4.1, and change MAINTAINER address.

PR:             ports/52530
Submitted by:   IWASHITA Yoji <iwashita@cqmail.net> (maintainer)

De-pkg-comment.

Now that AUTOCONF and friends contain slashes in them, use a separator
other than the slash for s///.  This fixes the build.

Use REINPLACE_CMD instead of PERL while I'm here.

Chase shlib rev of devel/gettext

Submitted by:   lots and lots
Pointy hat to:  ade

Update to 1.4

PR:             ports/39692
Submitted by:   maintainer

gettext upgrade uber-patch (stage 3)

- switch devel/gettext (0.11.1) on, installing full package
- flip devel/gettext-old (0.10.35) to installing only static binaries
  with a "-old" suffix -- gettext-old will have its deorbit burn
  sequence initiated just after 4.6-RELEASE
- fix up ports for the new world order

Reviewed by:    portmgr

Stage 1 of gettext update.

Move gettext (0.10.35) with gettext-old
Update gettext from gettext-devel (0.10.40)
Remove gettext-devel
Fix dependencies

Stage 2 will involve upgraded gettext to 0.11 and fixing issues
Stage 3 involves a de-orbit burn sequence for gettext-old

Reviewed by:    portmgr

o update to 1.2.5.1.   o add FETCH_BEFORE_ARGS=-A for broken httpd.    

o USE_AUTO* police sweep   - Don't hardcode, use ACLOCAL    

update MASTER/PATCH_SITES.    

Update to 1.2.5 japanese patch level 2.    

Update to 1.2.5i-jp0.    

Some minor fixes in Japanese support.    

Update to 1.2.4.j0.    

Number of commits found: 45

12 vulnerabilities affecting 17 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities