Number of commits found: 11

It seems these ports are still required on 7.x

Feature safe:   yes

Remove these vulnerable ports:

2011-10-14 graphics/linux-tiff
2011-10-14 x11-toolkits/linux-pango

Feature safe:   yes

x11-toolkits/linux-pango also needs a reprieve ala graphics/linux-tiff
till dependant ports can be marked BROKEN on RELENG_7.

As previously advertised, complete removal of vulnerable ports that
no one has stepped up to deal with:

archivers/pecl-phar             Vulnerable since 2011-01-13
comms/libsyncml                 Depends on devel/libsoup22, which is FORBIDDEN
databases/mysql323-server       Vulnerable since 2006-10-29
databases/mysql323-client       Vulnerable since 2006-10-29
databases/mysql323-scripts      Vulnerable since 2006-10-29
databases/mysql40-server        Vulnerable since 2006-10-29
databases/mysql40-client        Vulnerable since 2006-10-29
databases/mysql40-scripts       Vulnerable since 2006-10-29
databases/p5-DBD-mysql40
                Depends on databases/mysql40-server, which is FORBIDDEN
deskutils/buoh                  Depends on devel/libsoup22, which is FORBIDDEN
deskutils/libopensync-plugin-syncml

(Only the first 15 lines of the commit message are shown above )

- Update MASTER_SITES
- Remove MD5 sums while here

Discussed with: netchild (emulation)

- Update to 1.10.2

Reviewed by:    netchild, emulation

1. Upgrade linux infrostructure ports from FC3 to FC4.
2. Introduce gtk2-engines into x11-toolkits/linux-gtk2.     [1]

Requested by:   netchild [1]
Approved by:    netchild (mentor, implicit)

- convert to use bsd.linux-rpm.mk (get rid of include of linux-gtk/Makefile) [1]
- use fixed plists [1]
- category "linux" added to those ports without it [1]
- update some ports to a recent FC3 one [1]

- remove plists/... for Alpha (there's no support since linux_base-8 for
  Alpha anymore)
- don't hardcode version numbers in some plists, use PLIST_SUB instead
  (any errors are mine, don't keep them, send them to me)

Regarding linux-ungif I declare a maintainer timeout (one month, Boris tried
to contact the maintainer) and also pull the "sweeping commit"-card (the
port which it uses as some kind of master port can not be used for this
anymore). Besides this, I don't think he will be upset when other people
do the work instead of adding an entry to his TODO list. :-)

(Only the first 15 lines of the commit message are shown above )

Update to 1.6.0.

Tested with:    acroread7

SIZEify.

new Linux/i386 binary port of Pango

Number of commits found: 11

12 vulnerabilities affecting 17 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities