Number of commits found: 24

As previously advertised, complete removal of vulnerable ports that
no one has stepped up to deal with:

archivers/pecl-phar             Vulnerable since 2011-01-13
comms/libsyncml                 Depends on devel/libsoup22, which is FORBIDDEN
databases/mysql323-server       Vulnerable since 2006-10-29
databases/mysql323-client       Vulnerable since 2006-10-29
databases/mysql323-scripts      Vulnerable since 2006-10-29
databases/mysql40-server        Vulnerable since 2006-10-29
databases/mysql40-client        Vulnerable since 2006-10-29
databases/mysql40-scripts       Vulnerable since 2006-10-29
databases/p5-DBD-mysql40
                Depends on databases/mysql40-server, which is FORBIDDEN
deskutils/buoh                  Depends on devel/libsoup22, which is FORBIDDEN
deskutils/libopensync-plugin-syncml

(Only the first 15 lines of the commit message are shown above )

Convert mysql-client.sh to rcNG.

Update to 3.23.59 snapshot:
- Switch to rcNG
- Add the possibility to specify the database directory in rc.conf
- Move database creation from post-install stage into startup script

- Fix mysqlhotdump vulnerability
- Fix plist (don't install .la files)
- Add optional knob WITH_PROC_SCOPE_PTH

Approved by:    portmgr (marcus)

Sync with MySQL 4.0:
- get rid of perl dependency
- enhance man pages and scripts installation
- move additional scripts in mysql-scripts port

- Completely restructure the port to follow other mysql* ports
  (too many improvements to be listed here)
- Correctly support PTHREAD_LIBS/CFLAGS
- Use USE_GNOME=lthack
- Propagate DB_DIR in package [1]
- Use my @FreeBSD.org email address
- Bump PORTREVISION

PR:             ports/24749 [1]
Submitted by:   Tom Pavel <pavel@networkphysics.com> [1]
Approved by:    nork (mentor/implicitly)

Destroy pkg-comment for some of the stranger uses in the tree,
pending the final semi-automatic purge.

Approved by:    portmgr (implicitly)

Convert COMMENT to COMMENTFILE until these ports can be converted.

Submitted by:   lioux

Upgrade to 3.23.54.

This fixes a security hole which is remotely exploitable.

See http://security.e-matters.de/advisories/042002.html for details.

Submitted by:   sobomax
Approved by:    sobomax

Bump PORTVERSION for CXX=${CC} in mysql323-server.

Upgrade to 3.23.52.

- remove CXX=${CC} this doesn't work with -CURRENT ${CC} any longer.
- add patch to use correct prototypes for libwrap

Upgrade to 3.23.47.    

Bump PORTREVISION here, too, because CXX="${CC}" in master port   also affects
slave port.    

Simplify PORTNAME.    

Add dependency to p5-Mysql for the server part. mysql_convert_table_format,  
mysql_setpermission and mysqlhotcopy need the perl module.    

Upgrade to 3.23.33.    

Install mysql-client.sh as 00mysql-client.sh so the included   ldconfig is run
earlier.    

Add support for BerkeleyDB table type.    

Upgrade to 3.23.32.    

Switch from mysql322-{client,server} to mysql323-{client,server}.    

Upgrade to 3.23.31.    

Override PORTREVISION from master port.    

Upgrade to MySQL-3.23.24 after repository copy from mysql322-client   and
mysql322-server.    

Number of commits found: 24

14 vulnerabilities affecting 116 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last updated:
2018-06-16 15:43:50