Number of commits found: 68

Un-set FORBIDDEN as the port is not actually vulnerable for a long time,
version specification in vuln.xml was just too broad.

Mark FORBIDDEN the remaining ports that are vulnerable for more than
2 weeks according to portaudit (ranging from 23 days to 7 years).
The maintainers were notified by mail that this action would be taken
on 2011-09-03. (Ports for which maintainers responded have been/will be
dealt with separately.)

Also mark DEPRECATED ports that rely on the FORBIDDEN ports, and a few
ports that rely on those DEPRECATED ports.

- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:             157936
Submitted by:   myself
Exp-runs by:    pav
Approved by:    pav

Update to 2.99.4.

Update to 2.99.2.

Update to 2.11.6.

Update to 2.11.5.

PR:             154137 (based on)
Submitted by:   Fumiyuki Shimizu <fumifumi@abacustech.jp>
Feature safe:   yes

Sync to new bsd.autotools.mk

Chase security/libgcrypt shlib bump.

PR:             ports/148755
Submitted by:   Hirohisa Yamaguchi <umq@ueo.co.jp>

Update to 2.11.0.

Bounce PORTREVISION for gettext-related ports.  Have fun, ya'll.

Update to 2.9.10.

-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.
-Update libtool and libltdl to 2.2.6a.
-Remove devel/libtool15 and devel/libltdl15.
-Fix ports build with libtool22/libltdl22.
-Bump ports that depend on libltdl22 due to shared library version change.
-Explain what to do update in the UPDATING.

It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.

With help:      marcus and kwm
Pointyhat-exp:  a few times by pav
Tested by:      pgollucci, "Romain Tartière" <romain@blogreen.org>, and
                a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by:    marcus
Approved by:    portmgr

Update to 2.9.1.

Update to 2.7.8.

Uodate to 2.7.6.

Update to 2.7.5.

Chase libtasn1 shared library version bump.

Re-add gnutls-devel port at version 2.7.4.

Remove security/gnutls-devel for a time while the experimental branch
is not active.

Update to 2.3.14.

Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)

Update to 2.3.8.

Update to 2.3.7.

- Update to 2.3.3
- Remove INGORE line since the port is up-to-date now

Chase libgcrypt library version

gnutls-devel is now older than gnutls, so in order not to update or delete it
during the freeze, mark it IGNORE.

Approved by:    portmgr (linimon)

Update to 1.7.19.

Update to 1.7.18.

Update to 1.7.16.

- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script
  supports them.  This is determined by running ``configure --help'' in
  do-configure target and set the shell variable _LATE_CONFIGURE_ARGS
  which is then passed to CONFIGURE_ARGS.
- Remove --mandir and --infodir in ports' Makefile where applicable
  Few ports use REINPLACE_CMD to achieve the same effect, remove them too.
- Correct some manual pages location from PREFIX/man to MANPREFIX/man
- Define INFO_PATH where necessary
- Document that .info files are installed in a subdirectory relative to
  PREFIX/INFO_PATH and slightly change add-plist-info to use INFO_PATH and
  subdirectory detection.

PR:             ports/111470
Approved by:    portmgr
Discussed with: stas (Mk/*), gerald (info related stuffs)
Tested by:      pointyhat exp run

Update to 1.7.15.

Update to 1.7.14.

Update to 1.7.11.

Update to 1.7.8.

Update to 1.7.7.

Track libgpg-error shlib version change.

Update to 1.7.6.

Chase security/opencdk update.

Update to 1.7.5.

Update to 1.7.1.

Update to 1.5.4.

- Update to 1.5.2
- Add WITHOUT_CXX knob to disable C++ wrapper library

Update to 1.5.1.

- Chase libgpg-error version bump [1]
- Add explicit version to libgpg-error dependency where missing [2]
- Bump PORTREVISION [1]

Approved by:    maintainers (arved, lofi, novel,
                ports at mcdermottroe dot com) [1]
Suggested by:   novel, lofi [2]

GnuTLS is a portable ANSI C based library which implements the TLS 1.0 and
SSL 3.0 protocols. The library does not include any patented algorithms and
is available under the GNU Lesser GPL license.

Important features of the GnuTLS library include:
- Thread safety
- Support for both TLS 1.0 and SSL 3.0 protocols
- Support for both X.509 and OpenPGP certificates
- Support for basic parsing and verification of certificates
- Support for SRP for TLS authentication
- Support for TLS Extension mechanism
- Support for TLS Compression Methods

Additionaly GnuTLS provides an emulation API for the widely used
OpenSSL library, to ease integration with existing applications.

WWW:    http://www.gnutls.org/

Remove gnutls-devel since the development version of gnutls is not
active yet.

Move opencdk and libtasn1 detection to after bsd.port.pre.mk so they can
be properly detected if already installed.

Update to 1.3.5.

Chase security/libtasn1 shlib version bump.

- Chase libgpg-error shlib version bump (.1 -> .2)
- Bump PORTREVISION

Conversion to a single libtool environment.

Approved by:    portmgr (kris)

Update to 1.3.4 - a security release which fixes bugs in
libtasn1's DER decoder.

Update to 1.3.3.

- Update to 1.3.2
- Search for makeinfo in LOCALBASE, not in PREFIX
- Put http://josefsson.org/gnutls/ on the top of MASTER_SITES (announce
  states it is the only working site right now)

Fix distinfo.

Reported by:    pointyhat via kris

Add gnutls-devel - development version of gnutls.

- Remove gnutls-devel port: this development version of GnuTLS library
  is no longer being released upstream since 1.2.0 update of the stable
  branch. Thus, it does not make sense that we keep it anymore.

At Kris's request, back out the MACHINE_ARCH spelling correction until
after 5.4-RELEASE.

Assist getting more ports working on AMD64 by obeying the
Ports Collection documentation and use 'ARCH' rather than 'MACHINE_ARCH'.

Update libgcrypt to 1.2.1. Changes:
        * made the code try to lock secure memory pool not only when running as
          root,
        * fixed type usage in Serpent,
        * made the code mix the PID into the entropy pool for better protection
          after a fork,
        * fixed memory leak in RSA.
        * fixed alignment problems in Rijndael,
        * fixed memory leak in gcry_pk_sign(),
        * fixed broken pointer access in gcry_ac_open(),
        * updated the documentation,
        * fixed several other bugs.
Chase Shared library version and bump PORTREVISION of affected ports.

Apply a big libtool patch to allow porters to use the libtool installed by
the libtoolX ports instead of the one included with each port.  Ports that
set USE_LIBTOOL_VER=X will now use the ports version of libtool instead of
the included version.  To restore previous behavior, use the new macro,
USE_INC_LIBTOOL_VER.  Both macros accept the same argument: a libtool version.

For example, to use the ports version of libtool-1.5, add the following to
your Makefile:

USE_LIBTOOL_VER=        15

To use the included version of libtool with extra hacks provided by
libtool-1.5, add the following to your Makefile:

USE_INC_LIBTOOL_VER=    15

With this change, ports that had to add additional libtool hacks to prevent
.la files from being installed or to fix certain threading issues can now
delete those hacks (after appropriate testing, of course).

PR:             63944
Based on work by:eik and marcus
Approved by:    ade (autotools maintainer)
Tested by:      kris on pointyhat
Bound to be hidden problems:    You bet

- Update to 1.1.9 (latest development version)
- Switch to libtool-1.5

Update libgcrypt to the new stable version 1.2.0
Retire libgcrypt-devel

Switch back to security/libgcrypt and bump PORTREVISION for
- gnutls
- gnutls-devel
- gsasl
- opencdk
- vpnc

libggz:
- Remove dependency on libgcrypt, because the port does not yet
work with the new libgcrypt

libksba:

(Only the first 15 lines of the commit message are shown above )

- Unbreak by correcting LIB_DEPENDS: gcrypt.10 is security/libgcrypt-devel,
  not security/libgcrypt. Thanks to Kris for spotting this.
- Bump PORTREVISION

BROKEN: Inconsistent dependencies (depends on two versions of libgcrypt)

Whoa there, boy, that's a mighty big commit y'all have there...

Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".

For ports-in-waiting:

        USE_LIBTOOL=YES         ->      USE_LIBTOOL_VER=13
        USE_AUTOCONF=YES        ->      USE_AUTOCONF_VER=213
        USE_AUTOMAKE=YES        ->      USE_AUTOMAKE_VER=14

Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.

- Update to the latest development version (1.1.6)
  after repocopy from security/gnutls

Number of commits found: 68

15 vulnerabilities affecting 34 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities