22:30 dougb 

As previously advertised, complete removal of vulnerable ports that
no one has stepped up to deal with:

archivers/pecl-phar             Vulnerable since 2011-01-13
comms/libsyncml                 Depends on devel/libsoup22, which is FORBIDDEN
databases/mysql323-server       Vulnerable since 2006-10-29
databases/mysql323-client       Vulnerable since 2006-10-29
databases/mysql323-scripts      Vulnerable since 2006-10-29
databases/mysql40-server        Vulnerable since 2006-10-29
databases/mysql40-client        Vulnerable since 2006-10-29
databases/mysql40-scripts       Vulnerable since 2006-10-29
databases/p5-DBD-mysql40
                Depends on databases/mysql40-server, which is FORBIDDEN
deskutils/buoh                  Depends on devel/libsoup22, which is FORBIDDEN
deskutils/libopensync-plugin-syncml
                Depends on comms/libsyncml, which is DEPRECATED
devel/libsoup22                 Vulnerable since 2011-07-28
dns/bind9-sdb-ldap              Vulnerable since 2011-06-04
dns/bind9-sdb-postgresql        Vulnerable since 2011-06-04
ftp/wgetpro                     Vulnerable since 2004-12-14
games/quake2forge               Vulnerable since 2005-01-21
graphics/linux-tiff             Vulnerable since 2004-10-13
japanese/mutt                   Vulnerable since 2007-07-29
japanese/asterisk14-sounds      Depends on net/asterisk14, which is FORBIDDEN
net/asterisk14                  Vulnerable since 2011-06-25
net/isc-dhcp31-client           Vulnerable since 2011-04-10
net/isc-dhcp31-server           Vulnerable since 2011-04-10
net/isc-dhcp31-relay            Vulnerable since 2011-04-10
net/asterisk-app-ldap           Depends on net/asterisk14, which is FORBIDDEN
net/asterisk-app-notify         Depends on net/asterisk14, which is FORBIDDEN
net/asterisk-oh323
   Depends on net/asterisk14, which is FORBIDDEN, does not compile on sparc64
net/asterisk14-addons           Depends on net/asterisk14, which is FORBIDDEN
net/astfax                      Depends on net/asterisk14, which is FORBIDDEN
net-mgmt/nagios2                Vulnerable since 2009-06-30
www/gforge                      Vulnerable since 2005-08-09
www/linux-flashplugin7          Vulnerable since at least 2008-05-30
www/opera-devel                 Vulnerable since 2010-06-25, does not fetch
www/plone3                      Vulnerable and unsupported upstream
www/serendipity-devel           Vulnerable since 2008-04-25
www/ziproxy                     Vulnerable since 2010-06-15
www/asterisk-gui                Depends on net/asterisk14, which is FORBIDDEN
x11-toolkits/linux-pango        Vulnerable since 2009-05-13

09:24 dougb 

Mark FORBIDDEN the remaining ports that are vulnerable for more than
2 weeks according to portaudit (ranging from 23 days to 7 years).
The maintainers were notified by mail that this action would be taken
on 2011-09-03. (Ports for which maintainers responded have been/will be
dealt with separately.)

Also mark DEPRECATED ports that rely on the FORBIDDEN ports, and a few
ports that rely on those DEPRECATED ports.

10:11 ale 

Switch to USERS/GROUPS.

PR:             ports/157562, ports/157591
Submitted by:   crees

12:01 ale 

Fix build with gcc 4.2.

PR:             ports/144791
Submitted by:   Andrius Morkunas <hinokind@gmail.com>
Feature safe:   yes

07:34 ade 

Sync to new bsd.autotools.mk

11:58 ale 

As announced, remove MySQL 6.0 (dead development branch) and update CONFLICTS.

19:36 mezz 

-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.
-Update libtool and libltdl to 2.2.6a.
-Remove devel/libtool15 and devel/libltdl15.
-Fix ports build with libtool22/libltdl22.
-Bump ports that depend on libltdl22 due to shared library version change.
-Explain what to do update in the UPDATING.

It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.

With help:      marcus and kwm
Pointyhat-exp:  a few times by pav
Tested by:      pgollucci, "Romain Tartière" <romain@blogreen.org>, and
                a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by:    marcus
Approved by:    portmgr

14:04 mm 

- Mark MAKE_JOBS_SAFE for SMP compilation

Approved by:    ale (maintainer, private e-mail)

22:41 linimon 

Move the USE_PERL5 definition for the scripts slave ports from the master
to the slave port, to move it before the inclusion of bsd.port.pre.mk.

Approved by:    maintainer

09:28 ale 

Accept all linuxthreads library major versions.

06:18 rafan 

Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk
 - Remove CONFIGURE_TARGET hack in various bsd.*.mk
 - USE_GNOME=gnometarget is now an no-op

Changes to individual ports, other than removing the CONFIGURE_TARGET hack:

= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
  - comms/gnuradio
  - science/abinit
  - science/elmer-fem
  - science/elmer-matc
  - science/elmer-meshgen2d
  - science/elmerfront
  - science/elmerpost

= use x86_64 as ARCH
  - devel/g-wrap

= other changes
  - print/magicfilter
    GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf

Total # of ports modified:  1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)

PR:             126524 (obsoletes 52917)
Submitted by:   rafan
Tested on:      two pointyhat 7-amd64 exp runs (by pav)
Approved by:    portmgr (pav)

08:36 ale 

Update CONFLICTS and remove duplicated USE_PERL5.

07:55 ale 

Re-enable build on FreeBSD >= 7, using gcc 3.4, since someone
still prefers this EOL release.

PR:             ports/124102
Submitted by:   Tom Evans <tevans.uk@googlemail.com>

15:07 ale 

Begin planning for de-orbit burn.  This does not build with gcc4.2, and
the correct fix is to update to a modern version of MySQL.

While here, rip out obsolete 4.X cruft.

09:22 ale 

Fix dependencies.

10:23 ale 

Remove the temporary hack to use the new USE_LDCONFIG feature.

03:18 mnag 

- Update to 4.0.27

PR:             97502
Approved by:    maintainer timeout (security bypass by mnag with secteam hat)
Security:       CVE-2006-1516, CVE-2006-1517

21:41 edwin 

Remove USE_REINPLACE from all categories starting with D

16:25 ale 

Fix rcNG startup ordering for MySQL daemon.
Bump PORTREVISION for mysql-server ports.

Approved by:    portmgr (clement)

10:40 ade 

Conversion to a single libtool environment.

Approved by:    portmgr (kris)

08:57 ale 

Convert mysql-client.sh to rcNG.

06:52 ade 

Mass-conversion to the USE_AUTOTOOLS New World Order.  The code present
in bsd.autotools.mk essentially makes this a no-op given that all the
old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in
exactly the same way as USE_AUTOTOOLS itself.

Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.

Preliminary documentation can be found at:
        http://people.FreeBSD.org/~ade/autotools.txt

which is in the process of being SGMLized before introduction into the
Porters Handbook.

Light blue touch-paper.  Run.

06:34 ale 

Update to 4.0.26 release.

10:35 ale 

Update to 4.0.25 release.

03:26 obrien 

At Kris's request, back out the MACHINE_ARCH spelling correction until
after 5.4-RELEASE.

09:33 ale 

- Use the rcNG script to kill MySQL on deinstallation [1]
- Set the new sequence for finding my.cnf files [2]:
  /etc, ${PREFIX}/etc, ${mysql_dbdir}
  (default to: /etc/my.cnf, /usr/local/etc/my.cnf, /var/db/mysql/my.cnf)
- Add the possibility to specify additional command-line arguments
  to be passed to mysqld_safe on startup

PR:             ports/79166 [1], ports/79597 [2]
Submitted by:   Sergey Prikhodko <sergey@network-asp.biz> [1],
                Vasil Dimov <vd@datamax.bg> [2]

08:04 obrien 

Assist getting more ports working on AMD64 by obeying the
Ports Collection documentation and use 'ARCH' rather than 'MACHINE_ARCH'.

12:07 ale 

Remove obsolate knob description.

10:52 ale 

Update to 4.0.24 release:
- Fix potential security vulnerabilities in the creation of temporary
  table file names and the handling of User Defined Functions (UDFs)
- Add the possibility to specify the database directory in rc.conf
- Move database creation from post-install stage into startup script

14:13 ale 

Extend allowed linuxthreads shlib versions.

13:40 ale 

Move pre-configure in the common part.

Spotted by:     Maxim Maximov <mcsi@mcsi.pp.ru>

22:05 ale 

Share post-extract target with all three subports.

Spotted by:     Jose Alonso Cardenas Marquez <acardenas@bsdperu.org>

13:20 ale 

Update to 4.0.23a release [1]:
- Use MASTER_SITES_MYSQL
- Add WITHOUT_INNODB knob [2]
- Fix tcp wrappers (hopefully definitely!)

PR:             ports/75598 [1]
Submitted by:   Marcus Grando <marcus@corp.grupos.com.br> [1],
                sobomax [2]

10:04 ale 

Fix p5-File-Temp dependency (not required for perl 5.8.x).

Spotted by:     cdine <cdine@cdine.org>

10:42 ale 

Add p5-File-Temp dependency to mysql-scripts.
Required to run mysqlhotcopy.

PR:             ports/72095
Submitted by:   Marcus Grando <marcus@corp.grupos.com.br>

10:43 ale 

Update to 4.0.22 release:
- Switch to rcNG startup script

21:09 ale 

Update to 4.0.21 release:
- Fix mysqlhotcopy insecure temporary file creation
- Fix bug in remote connections caused by libwrap [1]

PR:             ports/70889 [1]
Submitted by:   Andreas Haakh <andreas.haakh@ib-haakh.de> [1]
Patch by:       peadar [1]
Approved by:    portmgr (marcus)

10:59 ale 

- Update to 4.0.20 release
- Add experimental WITH_PROC_SCOPE_PTH knob to use process scope
  threads instead of system scope threads with libpthread

06:17 ade 

Whoa there, boy, that's a mighty big commit y'all have there...

Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".

For ports-in-waiting:

        USE_LIBTOOL=YES         ->      USE_LIBTOOL_VER=13
        USE_AUTOCONF=YES        ->      USE_AUTOCONF_VER=213
        USE_AUTOMAKE=YES        ->      USE_AUTOMAKE_VER=14

Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.

10:27 ale 

Fix a never-catched bug in mysql_install_db script.
Now the SKIP_DNS_CHECK knob is pointless.

10:50 ale 

Move mysql.info installation in do-install stage.

23:55 ale 

Fix plist (remove not installed man page).

15:30 ale 

- get rid of perl dependency [1]
- enhance man pages and scripts installation
- move additional scripts in mysql-scripts port

Requested by:   many [1]

10:42 ale 

Update to 4.0.18 release.

Approved by:    nork (mentor/implicitly)

15:25 ale 

Don't limit architectures.

Noticed by:     Petri Helenius <pete@he.iki.fi>
Approved by:    nork (mentor/implicitly)

12:44 ale 

Use unique LATEST_LINK.

Reported by:    kris
Approved by:    nork (mentor/implicitly)

00:59 ale 

Sync with recent mysql323 changes:
- Correctly support PTHREAD_LIBS/CFLAGS
- Use USE_GNOME=lthack
- Propagate DB_DIR in packages
- Use my @FreeBSD.org email address

Approved by:    nork (mentor/implicitly)

16:56 nork 

o Add CONFLICTS sections.
o Fix packages dependencies.
o portlint clean
o Correct typo in MASTER_SITES, Fix non-optimized build.

PR:             ports/60559
Submitted by:   Alex Dupre <sysadmin@alexdupre.com>

10:52 nork 

o Update to 4.0.17.
o Make portlint clean.

PR:             ports/60321
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

15:26 nork 

Move CXXFLAGS out of BUILD_OPTIMIZED section, since they
are always recommended.

PR:             ports/58509
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

12:05 ijliao 

utilize SITE_PERL

PR:             58166
Submitted by:   Cheng-Lung Sung <clsung@dragon2.net>

14:36 nork 

o Update to 4.0.16 release.
o Various little fixes.
o Change behaviour of BUILD_OPTIMIZED.

PR:             ports/58377
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

16:10 roam 

Protect against accidentally defining USE_MYSQL in the environment or
on the make(1) command line[1].
Unbreak mysql40-server's building on -CURRENT (-pthread)[2].

PR:             56252[1], 56925[2]
Submitted by:   Clement Laforet <sheepkiller@cultdeadsheep.org> [1],
                Alex Dupre <sysadmin@alexdupre.com> (maintainer) [2]

14:34 roam 

Update to MySQL 4.0.15 to fix the password denial-of-service problem.
Check for OVERWRITE_DB="no" in addition to just the test for its presence.

PR:             56703
Submitted by:   maintainer
Approved by:    security-officer (nectar)

05:32 daichi 

update databases/mysql40-server: 4.0.13 -> 4.0.14

PR:             54780
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

23:15 mbr 

We finally have a threadsafe realpath(3) in 4.x and 5.x.
Remove problematic HAVE_BROKEN_REALPATH define, now we
have a fixed version. This allows usage of symlinks for
database paths again which was previously broken.

Bump portrevision.

17:52 nork 

Update to 4.0.13.

PR:             ports/52440
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

05:21 nork 

o Move USE_PERL5_RUN into server part.
o Switch from p5-Mysql to p5-DBD-mysql.
o Add MySQL 4 support (and set it as default) to p5-DBD-mysql.
o Bump PORTREVISION accordingly.

PR:             ports/50315
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (mysql40 maintainer)
Approved by:    skv (p5-DBD-myql maintainer)

23:27 mbr 

Under FreeBSD 5.X, libstdc++ and libsupc++ in /usr/lib use FreeBSD
native (libc_r style) mutexes, thus some of the linked application
might indirectly try to pass native style mutexes to linuxthreads
pthread functions, either hanging at program startup or overwriting
data following the native style mutex. <tegge>

Reviewed by:    tegge

23:39 nork 

o Build thread-safe libs by default.
o Fix pkg-plist.
o Bump PORTREVISION accordingly.

PR:             ports/50293
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

17:02 nork 

Update to 4.0.12.

PR:             ports/50130
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

19:23 ade 

Destroy pkg-comment for some of the stranger uses in the tree,
pending the final semi-automatic purge.

Approved by:    portmgr (implicitly)

00:33 mbr 

FreeBSD 5.X does have lthread.3, FreeBSD 4.X lthread.2

15:08 mbr 

Add WITH_LINUXTHREADS option to build with linuxthreads.

11:15 knu 

De-pkg-comment.

15:34 nork 

o Definitely fix building on -current.
o Really overwrite databases when OVERWRITE_DB is set.
o Automatically skip installing databases if they already exist
  (unless OVERWRITE_DB is set).

PR:             ports/47945
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

14:13 nork 

Update to 4.0.10.
Fix configure on -current.

PR:             ports/47902
Submitted by:   Alex Dupre <sysadmin@alexdupre.com> (maintainer)

16:02 roam 

Update to MySQL 4.0.9 after a repo-copy from the mysql323-* ports.

PR:                     45543
Submitted by:           Alex Dupre <sysadmin@alexdupre.com>
Repo-copy approved by:  portmgr (will)
Repo-copy performed by: cvs (josefk)