A ports freeze means that commits will be few and far between and only by approval.

Number of commits found: 24

- Remove systuils/cfengine2 port - superceded by re-born sysutils/cfengine

- Update to 2.1.20
- Utilize USE_BDB infrastructure instead of using home-grown autodetection
  mechanism
- Remove unneeded USE_REINPLACE

- Update to 2.1.17
- Remove patch-CAN-2005-2960 - the vulnerable contrib/vicf script
  is no longer included in the distribution
- Remove two patches that fix build errors on 4.x in the previous version -
  both patches were integrated upstream

- Add patch to fix security vulnerability

Obtained from:  Debian
Security:       CAN-2005-2960
VuXML ID:       8688d5cd-328c-11da-a263-0001020eed82

- Update to 2.1.16
- Beat the port to respect NOPORTDOCS
- Add patches to fix compilation errors under 4.x (to be submitted upstream)
- A patch to fix security vulnerability will be committed separately

- Take maintainership

Change .error to IGNORE so index building doesn't fail for unsupported
WITH_BDB_VER settings.

- Update to 2.1.15
- Resign maintainership

PR:             ports/83096
Submitted by:   Soren Klintrup <skl@telmore.dk>
Approved by:    Paul Dlug <paul@aps.org> (maintainer)

At Kris's request, back out the MACHINE_ARCH spelling correction until
after 5.4-RELEASE.

Assist getting more ports working on AMD64 by obeying the
Ports Collection documentation and use 'ARCH' rather than 'MACHINE_ARCH'.

BROKEN on 4.x: Does not compile

- Update to 2.1.13
- Minor Makefile tweaks
- This is the default version of cfengine now since sysutils/cfengine
  (1.6.3) has been marked DEPRECATED

PR:             ports/77859
Submitted by:   sergei
Approved by:    Paul Dlug (maintainer)

- Update to 2.1.10
- Allow various version of BDB

PR:             ports/72066
Submitted by:   Kevin Way <kevin@insidesystems.net>
Based on work by: maintainer

Update to 2.1.5.

PR:             ports/65867
Submitted by:   Paul Dlug <paul@aps.org> (maintainer)

- Update to 2.1.3

PR:             ports/63447
Submitted by:   Paul Dlug <paul@aps.org> (maintainer)

- Update to 2.1.1
- Patch to fix missing paren in src/filedir.c
- Patch for case insensitive hostname matching removed
  (now the default as of this version)

While I'm here:
- Respect hier(7): install examples into ${EXAMPLESDIR},
  docs into ${DOCSDIR}

PR:             61602
Submitted by:   maintainer

- Include patches from Bob Van Valzah <Bob@VanValzah.Com>
  which fix problems with mixed case hostnames and fully qualified
  domain names.  In some cases cfengine appears to bind only to
  the ipv6 address with mixed case hostnames.
- Bump PORTREVISION
- Assign mantainership to the submitter at his request

While I'm here:
- Supply a proper CONFIGURE_TARGET to GNU_CONFIGURE
- Teach the port that ${LOCALBASE} is not always /usr/local

PR:             60061
Submitted by:   Paul Dlug <paul@aps.org>

- Update to 2.1.0p1
- Moved info pages to Makefile from pkg-plist

PR:             59421
Submitted by:   Paul Dlug <paul@ridge.aps.org>
Approved by:    marcus (mentor)

Remove the "FORBIDDEN", I believe it was fixed with the last commit.

The attached diff updates cfengine2 to 2.0.8p1 which includes new features,
performance enhancements for file copies and security patches.

PR:             56710
Submitted By:   Paul Dlug <paul@aps.org>

Reset maintainer of ports owned by inactive committers who were just retired.

Mark this port forbidden due to a stack overflow which may lead to
arbitrary code execution.

Advisories:
http://www.securityfocus.com/archive/1/339083
http://packetstormsecurity.nl/0309-advisories/cfengine.txt
http://www.securityfocus.com/bid/8699/
http://mail.gnu.org/archive/html/bug-cfengine/2003-08/msg00014.html

PR:             57470

Clear moonlight beckons.
Requiem mors pacem pkg-comment,
And be calm ports tree.

E Nomini Patri, E Fili, E Spiritu Sancti.

New port for cfengine-2.0.3 after repo-copy from the cfengine-1.x port.

PR:             35037
Approved by:    will

Number of commits found: 24

14 vulnerabilities affecting 30 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities