A ports freeze means that commits will be few and far between and only by approval.

Number of commits found: 65

. Update to tzupdater 1.3.9-2008g.

. Update to tzupdater 1.3.6.

PR:             125469
Submitted by:   Wayne Sierke <ws@au.dyndns.ws>

. Update to tzupdater 1.3.5.  This patch is based on that submitted in the
  PR but also fixes the path to tzupdater and bumps PORTREVISION.

PR:             123189
Submitted by:   Greg Larkin

- Remove unneeded dependency from gtk12/gtk20 [1]
- Remove USE_XLIB/USE_X_PREFIX/USE_XPM in favor of USE_XORG
- Remove X11BASE support in favor of LOCALBASE or PREFIX
- Use USE_LDCONFIG instead of INSTALLS_SHLIB
- Remove unneeded USE_GCC 3.4+

Thanks to all Helpers:
        Dmitry Marakasov, Chess Griffin, beech@, dinoex, rafan, gahr,
        ehaupt, nox, itetcu, flz, pav

PR:             116263
Tested on:      pointyhat
Approved by:    portmgr (pav)

. Update to tzupdater 1.3.3.

. Update to tzupdater 1.3.0 to fix the default build (the previous version
  of tzupdater is no longer available).

Approved by:    portmgr (linimon)

. Explicitly pull in X dependencies instead of depending on the open-motif
  dependency to implicitly pull in the X libraries we need.

Requested by:   linimon

. Update to tzupdater 1.2.2.

. Mark this as BROKEN for gcc 4.2.  The HotSpot C++ code needs some work
  to be made gcc 4.2 compliant.

. Update to tzupdater 1.2.1.

PR:     113248

- Welcome X.org 7.2 \o/.
- Set X11BASE to ${LOCALBASE} for recent ${OSVERSION}.
- Bump PORTREVISION for ports intalling files in ${X11BASE}.

. Add JAIL as an option, the Makefile already supported it as an
  environment variable.

PR:             110049

. Update to tzupdater 1.1.0-2007c.
. Clean up old zoneinfo files after tzupdater has run.

. Add a TZUPDATE option, defaulting to on, which will update the time zone
  data for the JDK using Sun's tzupdater. [1]
. Some simplification of the convoluted logic around telling the user
  which files to download.  In particular, don't care if we've already
  told them to download a file.
. Bump PORTREVISION since many North American users will need to pick up
  the time zone changes.

Collaboration with:     Tim Zingelman <zingelman@fnal.gov> [1]

. Replace some hardwired /usr/X11R6 instances with X11BASE. [1]
. Small Makefile restructure to keep related variables in one place.
. Trim the ancient bootstrapping options.
. Add ipv6 to CATEGORIES if its enabled. [2]

PR:             106129 [2]
Submitted by:   Janos Mohacsi <janos.mohacsi@bsd.hu> [2]
Pointed out by: pointyhat (via kris) [1]

. The IPV6_ONLY option is unnecessary as IPV6_V6ONLY is defined in
  /usr/include/netinet6/in6.h.

Submitted by:   ume@

. Add support for installing the JCE policy files. [1]
. OPTIONify. [1]
. Add a knob for IPV6_V6ONLY.
. Bump PORTREVISION.

PR:             103920
Submitted by:   lioux@

Remove USE_REINPLACE from categories starting with a J

Reassign these ports from inactive maintainer to glewis, who has been doing
most of the work over the past year.

Hat:    portmgr

. Link with the system libz instead of building the our own internal
  copy.  This should have the following effects:

  . Fix problems experienced by programmes that dynamically create their
    own copy of the JVM and are linked against the system's zlib (e.g.,
    eclipse).
  . Reduce the potential for zlib based security problems
    affecting the JDK.

  This is similar to the patch in the PR, but was actually backported from
  the patches for the jdk15 port, so its a touch different.

PR:             92459

. Update to patchset 8.

- fix build in JAILS
failed to build the jdk14 port in a jail under FreeBSD 5.4
FreeBSD 4.11 works.

The problem is that mount don't list the linprocfs,
and this make the selfcheck fail.

maintainer emailed:
So  6 Nov 2005 11:21:20 CET

Approved by:    (maintainer timeout)

. Tell the user all the files they will need up front, instead of telling
  lies about what they have and prompting them one file at a time.  This
  is a slight rewording of the submitted patch.

PR:             84644
Submitted by:   fenner

. Make pkg-install install a symbolic link for the browser plugin if a
  valid one doesn't currently exist.
. Add a pkg-deinstall which removes the symbolic link if this port owns it.
. Produce pkg-install and pkg-deinstall with SUB_FILES and SUB_LIST rather
  than manually using ${SED} ourselves.

Approved by:    maintainer timeout

. Fix javaws.
. Bump PORTREVISION.

PR:             81176
Submitted by:   "Thomas M. Hermann" <__tmh@yahoo.com>

. Use ${PTHREAD_LIBS} when compiling the testos programme rather than
  inventing our own version.

Approved by:    phantom (maintainer)

. Ensure that when files are extracted that their fully resolved path lies
  in or below the current working directory.  Fixes a security problem with
  jar(1).

  This fix may change to be compatible with whatever fix Sun applies when
  they release a fixed version of 1.5.
. Bump PORTREVISION for this fix.

Approved by:    maintainer timeout
Security: http://vuxml.FreeBSD.org/18e5428f-ae7c-11d9-837d-000e0c2e438a.html

. Unbreak the packing list by adding explicit PLIST_FILES/PLIST_DIRS for
  files that are generated by the post-install script (which runs after
  the dynamic packing list has been generated).

Approved by:    portmgr (krion), phantom (maintainer)

. Move the invocation of unregistervm to the top of the packing list.
  This ensures that this command is run before the files in the package
  are deleted (which is necessary for it to correctly delete the symbolic
  links created by registervm).

Approved by:    phantom (maintainer)

Add support for picking up of motif includes and libraries via newly
added open-motif-jdk port.  It's controlled via WITH_OPENMOTIF_JDK
knob and currently disabled by default (it still requires additional
testing and checking)

Unbreak plist generation

Autogenerate PLIST while installing

. Update to patchset 7.
. Fix a permissions problem with the plugins directory.

Approved by:    phantom (maintainer)

. Backport parts of the 1.5 plugin to address plugin vulnerabilities.
. Bump PORTVERSION.

Submitted by:   Kurt Miller <truk@optonline.net>

. Mark FORBIDDEN when building with the browser plugin due to the
  vulnerabilities discussed in:

  http://sunsolve.sun.com/search/document.do?assetkey=1-26-57591-1
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1029

The BSD patchset for the Sun JDK modeled its thread behavior mostly after
existing the Solaris base, and similarly to what happened with NSPR, made
a bad assumption on undefined behavior.  This broke locking in various
places in Java, for example, causing the the debugging support to be
totally broken.  It is worth someone who knows the Java codebase taking
a look to see what other things could have been broken by this on
FreeBSD 5.x+.

The assumption is that pthread_mutex_trylock(3) on a default-type
mutex will fail with EBUSY.  This assumption is wrong for our
libpthread, which returns EDEADLK if the owner thread is trying to
acquire the mutex again with trylock.  The behavior of performing a
locking operation on a self-locked default-type mutex is explicitly
undefined for pthread_mutex_lock(3).

(Only the first 15 lines of the commit message are shown above )

. Bump PORTREVISION for the recent fixes.

. The changes to make in -CURRENT to use MAKEFLAGS make us unable to
  override the MAKEFLAGS ARCH value in the main HotSpot Makefile.  Fix
  this by passing in a blank MAKEFLAGS up front so there is nothing to
  (try to) override.

Submitted by:   truckman
Requested by:   kris

. Set LATEST_LINK [1]

. Fix rare NULL pointer de-reference bug in plugin code [2]

. Use better chinese fonts [3]

. Bump PORTREVISION

Requested by:   kris [1]
Submitted by:   Georg-W. Koltermann <gwk@rahn-koltermann.de> [2],
                Clive Lin <clive@tongi.org> [3]

Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.

(Part 2)

1. Switch 5.x version of jdk14 back to libc_r as default threading library.
   We switched FreeBSD-5.x port to libkse as default threading library before
   releasing of patchset 6, but users who has most of stuff linked against
   libc_r and attempted to use jdk linked against libkse got into local hell
   of threading libraries mix.  So, rollback to libc_r by default and add
   PTHREAD_LIBS support for this port.

   IMPORTANT: In order to use libkse as threading library for jdk14 you
   have to use rtld's libmap feature or recompile your ports stuff (like
   mozilla) with libkse.

   NOTE: libkse still has issues with java debug support, so if you're going
   to use debuging (JVMDI) stuff - leave with libc_r for now.

2. Disable IPv6 support by default.  Unfortunatelly due to security reasons

(Only the first 15 lines of the commit message are shown above )

Use LS macro.

Use the CPIO macro defined in bsd.port.mk.

Use the SORT macro from bsd.port.mk.

. Check the return value of stat(2) when trying to read the javaws
  configuration file and behave appropriately if its -1.  Fixes a SEGV
  caused by ignoring the return value and just carrying on.
. Bump PORTREVISION.

PR:             61392

. Update to 1.4.2 patchset 6.
. Install the cacerts file from Sun's 1.4.2_03 release to avoid some
  problems associated with expired root certificates described in:

  http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F57436

Hopefully not objected to by:   phantom

Don't use patch release number while setting up BUILD_DEPENDS for
linux-sun-jdk.

USE_REINPLACE need be defined only when REINPLACE_CMD is used.

Fix bootstrap jdk detection process, so it work in case if no valid jdk
installed.  Previously BUILD_DEPENDS was not set correctly.

Add all possible choices for 1.4.1/1.4.2 JDKs while auto-detecting.

Update to 1.4.2p5.

Important changes since last patchset:

. jdk14 port is now JDK 1.4.2 based!
. JavaWS distributing with jdk
. Runway problem fixed (fork() is no more problem for java apps)
. Sound support updated
. IPv6 support overhauled
. Drag'n'Drop support fixed (require open-motif mods)

As for now there's no more outstanding issues with this port!

FreeBSD port is also got a important of changes:

. optimized setup is now default (to get debuging bins/libs use WITH_DEBUG)

. bootstrap jdk autodetection.  If WITH_LINUX_BOOTSTRAP is not set, then
  it checks all known to work JDKs installed.  If nothing found, forces
  to install of linux-sun-jdk14

. Because of above change there's no NATIVE_BOOTSTRAP option anymore.  If
  native jdk14 is installed, it will be used by default.

Don't redefine ECHO_MSG to echo explicitly.  It b0rked IGNORE messages.

PR:             java/58902
Reported by:    Linh Pham <question@closedsrc.org>

. Add fix for "runaway process" problem.  It should fix of stalled
  processes problem for people who use Runtime.getRuntime.exec() method
  and related things.  Least five people reported that this patch fixed
  problem for them.

  IMPORTANT: I'd also suggested to all jdk14 users who runs FreeBSD 4.x
  and use libc_r at FreeBSD 5.x to upgrade.

. Stop removing "src.zip" from installation bundle.  Since -p4 it builds
  correctly and there's no reason to forbit people to use it.

. Bump PORTREVISION.

. Sort PTHREAD_FILES.
. Add j2se/ext/plugin/build/solaris/GNUmakefile to PTHREAD_FILES.  Should
  fix plugin compilation on -CURRENT.  Mea culpa.

PR:             58269
Submitted by:   Scott Dodson <sdodson@sdodson.com>

. Add a missing BUILD_DEPENDS on NSPR so the plugin builds.

Forgotten by:   glewis

. Override PKGINSTALL to place it in WRKDIR, which is writeable, rather
  than PORTSDIR, which may not be.

Submitted by:   kris

. Update to 1.4.1p4.
. Use ${PTHREAD_LIBS} rather than -pthread or -lc_r.
. Install system preferences to avoid annoying and constant error messages.

Approved by:    phantom (the update, anyway)

. Sync with the change to linux-sun-jdk14 (it now installs in
  /usr/local/linux-sun-jdk1.4.2) so this port will bootstrap.

Update linux jdk location after recent linux-sun-jdk update to 1.4.2_01

Warn users about requirement of having linprocfs mounted in order to
start native JDK port build.  linprocfs mounted become pre-requisite of
build after Linux SUN JDK port was updated to 1.4.2.

Add run-time (pre-build) check for linprocfs mounted as well.

Bump space requirements note about disk space required for build of
whole JDK 1.4.1 port and package to more appropriate value (as reported
by many people).

Now expects bootstrap JDK in ${LOCALBASE}/linux-sun-jdk1.4.2.

Approved by:    MAINTAINER

Add runtime test to check of required libc_r functionality.  I.e. warn
people about requirement of libc_r updates as early as possible.

Bump PORTREVISION

Approved by:    portmgr (kris) (implicitly)

Add notice about amount of disk space required

Make sure that demo/jfc/SwingSet2/resources does not exists (it should not,
but sometimes leaves in)

Bump PORTREVISION

I am pleased to announce first public -beta patchset of FreeBSD/Java port
for JDK 1.4.1.  This is complete and close to production quality
native JDK with both working client and server native JVMs.  Local micro
benchmarks shown very little difference between Linux and FreeBSD JVMs in
speed.

One of important points of this patchset that it marks point when we are
very close to passing of Sun TCK tests.  Currently about 20 of >27000 tests
are known to be broken (tests were run at -STABLE).  If testing of this
patchset will be smooth and founding of this work will be continued we
may expect to have binary distribution of JDK 1.4.1 in April or begining
of May.

BUT, don't forget that even TCK tests can't cover all possible problems
and this is -beta patchset.  Keep your eyes open and report your problems

(Only the first 15 lines of the commit message are shown above )

Number of commits found: 65

13 vulnerabilities affecting 33 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities