06:17 trevor 

Update to 7.3.

Do not touch /compat/linux/dev/ but instead leave that up to the
user (addresses PR 54970).

Take maintainership.

18:29 trevor 

SIZEify.

00:09 trevor 

For i386, use latest glibc and XFree86-libs, and increment PORTREVISION.
Advisories are at <URL:https://rhn.redhat.com/errata/RHSA-2003-286.html>
and <URL:https://rhn.redhat.com/errata/RHSA-2003-325.html>.
Hewlett-Packard has not issued updates for Red Hat 7.2/Alpha.

01:39 marcus 

Remove the two checksums for redhat-release-7.1-1.noarch.rpm from each
distinfo file, and instead fetch this one from from the i386 directory for
both Alpha and i386 architectures.  Based on the previous commit that
duplicated these entries in the plist, these files should be more or
less identical. Note: ftp-master will be updated soon with the correct
distfile. [1]

Also, remove redundant slashes from the jail message. [2]

PR:             61660 [1]
                61697 [2]
Submitted by:   Linh Pham <question@closedsrc.org> [2]

16:16 trevor 

Update to the latest XFree86-libs packages.  The security problems
listed in RHSA-2003-064 do not pertain to us AFAICT.  I only tested
this on i386.

08:23 trevor 

security update:

        The function gzprintf within zlib, when called with a string
        longer than Z_PRINTF_BUFZISE (= 4096 bytes), can overflow
        without giving a warning.  zlib-1.1.4 and earlier exhibit
        this behavior. There are no known exploits of the gzprintf
        overrun, and only a few programs, including rpm2html and
        gimp-print, are known to use the gzprintf function.  The
        problem has been fixed by checking the length of the output
        string within gzprintf.

--<URL:http://rhn.redhat.com/errata/RHSA-2003-079.html>

21:22 trevor 

For i386, update glibc and for the Alpha, mark forbidden due to
remotely exploitable RPC bug (Red Hat advisory RHSA-2003-089 and
CERT advisory CA-2003-10).

According to <URL:http://www.redhat.com/apps/support/errata/>, "all
errata support for Alpha products, Sparc products, and Powertools
products have reached end of life."

I didn't do proper run-time testing of this, but "make package
deinstall" leaves a clean /compat/linux/ behind.

03:04 marcel 

Duplicate the two different MD5 checksums for redhat-release-*.rpm
in both distinfo files. The alpha and i386 versions are identical
except for some meta-data.

Requested by: trevor

06:27 marcel 

Fix both alpha and i386. The major change is that glibc has been
updated.

Reviewed by: kris

16:21 trevor 

The redhat-release-7.1-1.noarch.rpm from Red Hat 7.1/Alpha has a
different MD5 hash from the corresponding package from 7.1/i386.
The contained etc/redhat-release files have the same contents but
different time stamps.  By having both hashes in both distinfo
files, installation can proceed for users who share the same distfile
cache for both architectures.

11:43 trevor 

Update glibc to 2.2.4-29, to avoid resolver and RPC security bugs.

02:35 obrien 

Upgrade to Red Hat 7.x support.  Many binary-only packages are now requiring
Red Hat 7.x to run.

13:44 trevor 

Update for zlib "double free" security bug
(http://www.redhat.com/support/errata/RHSA-2002-026.html).  I only
tested this on i386.