22:30 dougb 

As previously advertised, complete removal of vulnerable ports that
no one has stepped up to deal with:

archivers/pecl-phar             Vulnerable since 2011-01-13
comms/libsyncml                 Depends on devel/libsoup22, which is FORBIDDEN
databases/mysql323-server       Vulnerable since 2006-10-29
databases/mysql323-client       Vulnerable since 2006-10-29
databases/mysql323-scripts      Vulnerable since 2006-10-29
databases/mysql40-server        Vulnerable since 2006-10-29
databases/mysql40-client        Vulnerable since 2006-10-29
databases/mysql40-scripts       Vulnerable since 2006-10-29
databases/p5-DBD-mysql40
                Depends on databases/mysql40-server, which is FORBIDDEN
deskutils/buoh                  Depends on devel/libsoup22, which is FORBIDDEN
deskutils/libopensync-plugin-syncml
                Depends on comms/libsyncml, which is DEPRECATED
devel/libsoup22                 Vulnerable since 2011-07-28
dns/bind9-sdb-ldap              Vulnerable since 2011-06-04
dns/bind9-sdb-postgresql        Vulnerable since 2011-06-04
ftp/wgetpro                     Vulnerable since 2004-12-14
games/quake2forge               Vulnerable since 2005-01-21
graphics/linux-tiff             Vulnerable since 2004-10-13
japanese/mutt                   Vulnerable since 2007-07-29
japanese/asterisk14-sounds      Depends on net/asterisk14, which is FORBIDDEN
net/asterisk14                  Vulnerable since 2011-06-25
net/isc-dhcp31-client           Vulnerable since 2011-04-10
net/isc-dhcp31-server           Vulnerable since 2011-04-10
net/isc-dhcp31-relay            Vulnerable since 2011-04-10
net/asterisk-app-ldap           Depends on net/asterisk14, which is FORBIDDEN
net/asterisk-app-notify         Depends on net/asterisk14, which is FORBIDDEN
net/asterisk-oh323
   Depends on net/asterisk14, which is FORBIDDEN, does not compile on sparc64
net/asterisk14-addons           Depends on net/asterisk14, which is FORBIDDEN
net/astfax                      Depends on net/asterisk14, which is FORBIDDEN
net-mgmt/nagios2                Vulnerable since 2009-06-30
www/gforge                      Vulnerable since 2005-08-09
www/linux-flashplugin7          Vulnerable since at least 2008-05-30
www/opera-devel                 Vulnerable since 2010-06-25, does not fetch
www/plone3                      Vulnerable and unsupported upstream
www/serendipity-devel           Vulnerable since 2008-04-25
www/ziproxy                     Vulnerable since 2010-06-15
www/asterisk-gui                Depends on net/asterisk14, which is FORBIDDEN
x11-toolkits/linux-pango        Vulnerable since 2009-05-13

09:24 dougb 

Mark FORBIDDEN the remaining ports that are vulnerable for more than
2 weeks according to portaudit (ranging from 23 days to 7 years).
The maintainers were notified by mail that this action would be taken
on 2011-09-03. (Ports for which maintainers responded have been/will be
dealt with separately.)

Also mark DEPRECATED ports that rely on the FORBIDDEN ports, and a few
ports that rely on those DEPRECATED ports.

08:52 netchild 

Update linux-f10-pango to 1.28.3 (+ bump portrevision of dependend ports).
This fixes a security warning from portaudit.

Security:       CVE-2009-1194
VuXML:          4b172278-3f46-11de-becb-001cc0377035
Thanks to:      Luchesar V. ILIEV <luchesar.iliev@gmail.com> (F10+rpmbuild info)

16:55 sunpoet 

- Use canonical format for FreeBSD.org MAINTAINER addresses
- Remove obsolete MD5 checksum while I'm here

PR:             ports/152844
Submitted by:   sunpoet (myself)
Approved by:    miwi (with portmgr hat)

06:47 dinoex 

- update to 1.4.1
Reviewed by:    exp8 run on pointyhat
Supported by:   miwi

11:46 dinoex 

- update to jpeg-8

00:18 skreuzer 

Change maintainer to emulation@

PR:             ports/134049
Submitted by:   Jamie Landeg Jones <jamie@bishopston.net>
Approved by:    wxs (mentor)

14:07 edwin 

Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)

13:12 mnag 

- Update to 7.0r73

PR:             119053
Submitted by:   Tsurutani Naoki <turutani___scphys.kyoto-u.ac.jp>
Security:      
http://www.vuxml.org/freebsd/562cf6c4-b9f1-11dc-a302-000102cc8983.html
Approved by:    maintainer timeout (7 days, bypass by mnag with secteam hat)

03:00 edwin 

[PATCH]: www/* use {} vs () consistently

        Fix all occurrences of this that are not part of REPLACE_CMD commands.

PR:             ports/117051
Submitted by:   "Philip M. Gollucci" <pgollucci@p6m7g8.com>

10:48 edwin 

www/linux-flashplugin7 distfile not fetchable

        The linux-flashplugin7 port distfile is no longer fetchable
        from adobe's website as specified in the port, plus all
        occurrences in ports/distfiles on all FreeBSD mirrors seem
        to have been removed.

        Many people still prefer v7 over v9 due to stability problems
        with the latter.

PR:             ports/116478
Submitted by:   Callum Gibson <callumgibson@optusnet.com.au>

22:50 pav 

- Record CONFLICTS

Requested by:   mezz

16:27 laszlof 

Update of www/linuxflashplugin7 from 7.0r68 to 7.0r69
Make fetchable again.

PR:             ports/106433
Submitted by:   Jamie Jones <jamie@bishopston.net> (maintainer)

13:19 nork 

Update to 7.0r68.

Pointed out by: mi
Approved by:    maintainer timeout (about 1 week)

20:34 simon 

Mark FORBIDDEN due to arbitrary code execution vulnerabilities.

Security:      
http://vuxml.FreeBSD.org/7c75d48c-429b-11db-afae-000c6ec775d9.html
With hat:       secteam

08:19 sat 

- Add support for NPAPI infrastructure
- Reflect Macromedia->Adobe change
- Move plist to Makefile
- Update pkg-descr

Approved by:    Jamie Jones <jamie@bishopston.net> (maintainer)

21:48 edwin 

Bring back www/linux-flashplugin7

[Maintainer update] www/linux-flashplugin7 - to be restored from attic

        port www/linux-flashplugin7 was deleted to the attic, due
        to a licensing issue that has now been resolved. Therefore
        the port can be restored.

 | From: Service <service@macromedia.com>
 | Date: Apr 24, 2006 5:55 PM
 | Subject: Macromedia Customer Service Request [8542731]
 | To: Chad Gross <avatar4d@gmail.com>
 |
 |
 | Hi Chad,
 |
 | Thank you for contacting Customer Service at Macromedia, now part of
 | Adobe Systems.
 |
 | I understand your feedback on the compatibility of Flash Player on BSD.
 |
 | Please note that Flash Player is not supported in FreeBSD, thus it not
 | mentioned on the End User License Agreement that Flash Player can be
 | downloaded and installed on the operating system.  It is not that the
 | web player is prohibited in FreeBSD, but the operating system itself
 | is not compatible with Player.
 |
 | Please note that it is your option whether to install Flash Player on
 | your FreeBSD; however, please note that we cannot provide you with any
 | technical support, warranties or remedies for the software, although
 | it is clearly stated on the End User License Agreement, the only
 | authorized operating systems where you may download and install Flash
 | Player.
 |
 | To view the System Requirements of Flash Player, you may go to:
 |
 | http://www.macromedia.com/software/flashplayer/productinfo/systemreqs/
 |
 | In connection with this, if you would like to make suggestions or
 | comments on how we can improve future versions of our software, or to
 | report possible "bugs" in our current versions, please visit:
 |
 | http://www.macromedia.com/support/email/wishform/
 |
 | Your comments, suggestions, and ideas for improvements are very
 | important to us. We appreciate you taking the time to send us this
 | information.
 |
 | I hope this helps.
 |
 | Should you have further concerns, feel free to write us back.
 |
 | Regards,
 |
 | Astrid C. Villanueva
 | Customer Service
 | Macromedia, now part of Adobe Systems

PR:             ports/96374
Submitted by:   Jamie Jones <jamie@bishopston.net>
distinfo pkg-descr pkg-plist CVS:
----------------------------------------------------------------------

01:20 hrs 

Remove www/linux-flashplugin* ports because of license problem.
The EULA says:

 You may not use the Software on ... (D) any operating system that
 is not an Authorized Operating System.

and FreeBSD is not an Authorized Operating System which it defines.

Discussed with: maintainer (jamie at bishopston dot net),
                portmgr (kris and krion)

15:47 pav 

- Update to 7.0r63
- Unforbid

PR:             ports/94455
Submitted by:   Jamie Jones <jamie@bishopston.net> (maintainer)
Security:       http://secunia.com/advisories/19218/

09:23 simon 

Mark FORBIDDEN due to arbitrary code execution vulnerability.

Security:      
http://vuxml.FreeBSD.org/83421018-b3ef-11da-a32d-000c6ec775d9.html
With hat:       secteam

02:18 mnag 

Update to 7.0r61

PR:             88511
Submitted by:   Jamie Jones <jamie@bishopston.net> (maintainer)

22:59 netchild 

Mega-patch to cleanup the ports infrastructure regarding our linux bits:
  - USE_LINUX now implies NO_FILTER_SHLIBS=yes. It also doesn't use FreeBSD
    tools to strip binaries anymore, so it's not neccesary anymore to override
    STRIP and STRIP_CMD.
  - USE_LINUX_PREFIX implies NO_MTREE now.
  - In the USE_LINUX case, USE_XLIB now depends upon the linux X11 libraries
    instead upon the native FreeBSD libraries.
  - The variable LINUX_BASE_PORT contains a string which is suitable as an
    item in *_DEPENDS, so if a port BATCH_DEPENDS or FETCH_DEPENDS upon the
    default (or overriden) linux base, ${LINUX_BASE_PORT} should be used
    instead of a hardcoded reference.
  - Change all ports to comply to the "new world order".
  - The Ports Collection now allows to override the default linux_base port.
    Specify e.g. OVERRIDE_LINUX_BASE_PORT=rh-9 in /etc/make.conf to use
    ${PORTSDIR}/emulators/linux_base-rh-9 (the logic is to use
    ${PORTSDIR}/emulators/linux_base-${OVERRIDE_LINUX_BASE_PORT}).
  - If USE_LINUX or OVERRIDE_LINUX_BASE doesn't point to an existing linux_base
    port and if USE_LINUX isn't set to "yes" (case insensitive), the port will
    be marked as IGNORE. [1]
  - Readd USE_LINUX knobs into several ports and make several uses of a
    conditional dependency ("USE_LINUX?=") into an unconditional one
    ("USE_LINUX=") which where removed/changed by Trevor to allow the use of
    alternative linux_base ports. While this is a nice goal, the implementation
    resulted in missing dependencies. The OVERRIDE_LINUX_BASE_PORT knob
    in this commit is supposed to fix the problem while keeping the feature.
    Basicaly this includes a backout of Trevor's commit, to prevent confusion
    I mention it here explicitely.
  - Use the correct prefix (X11- instead of LOCAL- or LINUX-) for some ports.
    Chase dependencies for this.
  - Changes to make linux_devtools installable on amd64, remove some stray
    device nodes (they don't work on recent OS versions and aren't really
    needed).
  - Make linux_base-8 PREFIX clean and remove some stray device nodes.
    Additionally tell a little bit more about how to setup NIS/YP [2].
  - Update the PGSQL dependency in the linux-opengroupware port to a recent
    version (the old one isn't available anymore), I don't know if this
    works (at least it isn't more broken than before).
  - Use PREFIX/usr/share/doc instead of PREFIX/usr/doc in the divx4linux
    ports, the former path exists already and gets populated by other
    packages too (PREFIX=LINUXPREFIX!).
  - Fix some obvious (non-linuxolator) bugs in some linux ports while being
    there.
  - Bump PORTREVISION where neccesary.

Requested by:   portmgr (linimon) [1]
Submittted by:  Gerrit Kuehn <gerrit_huehn@gruft.fido.de [2]
Approved by:    portmgr (kris, linimon), maintainers (or maintainer timeout)
Tested on:      ports cluster (kris)
Reviewed by:    silence on emulation@
Superseedes PR: 69997

Maintainer approval from:
        chris@chrisburkert.de
        cracauer@cons.org
        des
        girgen
        jamie@bishopston.net
        mezz
        mi
        nivit@users.sf.net
        pat
        simond@irrelevant.org
        riggs@rrr.de
        Udo.Schweigert@Siemens.com

11:36 pav 

- This works on amd64

PR:             ports/81332
Reported by:    Damian Gerow <dgerow@afflictions.org>

21:51 trevor 

Respect the user's USE_LINUX setting.

18:24 netchild 

Say hello to the linux mega patch, it consolidates our linux bits a
little bit and allows to proceed to a more recent linux_base from
a stable (read as: the major bugs should be ironed out or identified
and most linux ports build just fine) source.

It also allows to ship 4.11 with a working linuxolator (the EOLed
linux_base is marked forbidden because of a security hole).

This is a major update, please read UPDATING (and CHANGES if you
develop linux ports).

Changes:
 - change the default linux_base from v7 to v8
 - add a newer freetype to linux_base-8 for nicer fonts display [1]
 - don't let cpio use hardlinks in the linux_base-8 port to quiet some
   warnings in some cases [2]
 - fix a cut&past error in the linux_base-8 pkg-install script [3]
 - convert the binary knob "USE_LINUX" to a version specifier, e.g.
   USE_LINUX=<value> specifies a dependency upon
   emulators/linux_base-<value>, exceptions are a value of "7" (which
   does what you want and adds a dependency to linux_base) and any
   value without a corresponding port in
   PORTSDIR/emulators/linux_base-<value> (which adds a dependency to
   the default linux_base)
 - don't implicitly add USE_LINUX with the USE_LINUX_PREFIX knob,
   this allows us to use the USE_LINUX_PREFIX knob for linux_base and
   paves the way for splitting up future linux base ports into
   individual pieces
 - remove RESTRICTED from some GPL licensed ports, even when we only
   distribute binaries, we get them from official linux sites, so
   anyone can grab them there if he needs to
 - add a dependency upon the linux X11 bits where necessary (based upon
   guesswork)
 - don't use USE_X_PREFIX in some linux ports since it adds a dependency
   to the FreeBSD X11 libs, as a workaround use PREFIX?= (the clean
   solution would be to remove the implicit USE_XLIB from USE_X_PREFIX)
 - bump the portrevision of the linux ports ("better safe than sorry"
   algorithm)
 - pass maintainership of the important linux infrastructure to a
   mailinglist, hijack freebsd-emulation@ for this purpose (if somebody
   doesn't like this: tell us your bikeshed color at freebsd-emulation@,
   my color would be "linuxolator@" in case someone cares...)
 - add a pkg-install script for linux-fontconfig, but don't use it;
   everything should work without it (the FreeBSD fc-cache program should
   do all the work), but in case we need it we just need to decomment the
   pkg-install part in the Makefile
 - fix some dependencies
 - fix some bugs
 - add some static plists
 - unbreak the ports with dependecies to more than one linux_base

This also fixes some ports which are marked BROKEN because of dependencies
to v7 and v8 of linux_base at the same time.

Known bugs:
 - the linux-mesa and linux-devtools ports install libGL*.so symlinks
 - some "minor" plist bugs (e.g. ld.so.{conf,cache} are modified by
   the linux X11 port, so linx_Base-8 moans at deinstall time)

Future work (interested souls should coordinate with freebsd-emulation@):
 - add some kind of USE_LINUX_X11 knob to streamline the X11 dependencies,
   or modify the behavior of USE_XLIB in the USE_LINUX case
   AFAIK trevor has some patches.
 - make USE_XLIB and USE_X_PREFIX orthogonal to be able to get rid of
   the PREFIX?= workaround in some linux ports
   Should be discussed/coordinated on/with x11@.
 - move the RPM bits from x11-toolkits/linux-gtk/Makefile to PORTSDIR/Mk/
 - update to a more recent linux base

PR:                     69997, 70539 (and maybe others)
Discussed with/on:      java@, x11@, trevor, portmgr
Tested by:              mezz, portmgr, pointyhat
RPM hunted down by:     Joseph Gelinas <scirocco@tasam.com> [1]
Requested by:           portmgr [2]
Submitted by:           kris [3]
Approved by:            portmgr

04:39 nork 

Remove extra symlink to ${PREFIX}(/usr/local)/linux-mozilla/plugins.

Submitted by:   mezz

04:04 nork 

[Forced commit]
Repo copied by: marcus (cvs)
Approved by:    marcus (portmgr)

03:54 nork 

Add linux-flashplugin7 7.0r25, the official Macromedia Flash Player
for Linux Mozilla and Netscape 6+.

PR:             ports/67300
Submitted by:   Jamie Jones <jamie@bishopston.net>