22:30 dougb 

As previously advertised, complete removal of vulnerable ports that
no one has stepped up to deal with:

archivers/pecl-phar             Vulnerable since 2011-01-13
comms/libsyncml                 Depends on devel/libsoup22, which is FORBIDDEN
databases/mysql323-server       Vulnerable since 2006-10-29
databases/mysql323-client       Vulnerable since 2006-10-29
databases/mysql323-scripts      Vulnerable since 2006-10-29
databases/mysql40-server        Vulnerable since 2006-10-29
databases/mysql40-client        Vulnerable since 2006-10-29
databases/mysql40-scripts       Vulnerable since 2006-10-29
databases/p5-DBD-mysql40
                Depends on databases/mysql40-server, which is FORBIDDEN
deskutils/buoh                  Depends on devel/libsoup22, which is FORBIDDEN
deskutils/libopensync-plugin-syncml
                Depends on comms/libsyncml, which is DEPRECATED
devel/libsoup22                 Vulnerable since 2011-07-28
dns/bind9-sdb-ldap              Vulnerable since 2011-06-04
dns/bind9-sdb-postgresql        Vulnerable since 2011-06-04
ftp/wgetpro                     Vulnerable since 2004-12-14
games/quake2forge               Vulnerable since 2005-01-21
graphics/linux-tiff             Vulnerable since 2004-10-13
japanese/mutt                   Vulnerable since 2007-07-29
japanese/asterisk14-sounds      Depends on net/asterisk14, which is FORBIDDEN
net/asterisk14                  Vulnerable since 2011-06-25
net/isc-dhcp31-client           Vulnerable since 2011-04-10
net/isc-dhcp31-server           Vulnerable since 2011-04-10
net/isc-dhcp31-relay            Vulnerable since 2011-04-10
net/asterisk-app-ldap           Depends on net/asterisk14, which is FORBIDDEN
net/asterisk-app-notify         Depends on net/asterisk14, which is FORBIDDEN
net/asterisk-oh323
   Depends on net/asterisk14, which is FORBIDDEN, does not compile on sparc64
net/asterisk14-addons           Depends on net/asterisk14, which is FORBIDDEN
net/astfax                      Depends on net/asterisk14, which is FORBIDDEN
net-mgmt/nagios2                Vulnerable since 2009-06-30
www/gforge                      Vulnerable since 2005-08-09
www/linux-flashplugin7          Vulnerable since at least 2008-05-30
www/opera-devel                 Vulnerable since 2010-06-25, does not fetch
www/plone3                      Vulnerable and unsupported upstream
www/serendipity-devel           Vulnerable since 2008-04-25
www/ziproxy                     Vulnerable since 2010-06-15
www/asterisk-gui                Depends on net/asterisk14, which is FORBIDDEN
x11-toolkits/linux-pango        Vulnerable since 2009-05-13

09:24 dougb 

Mark FORBIDDEN the remaining ports that are vulnerable for more than
2 weeks according to portaudit (ranging from 23 days to 7 years).
The maintainers were notified by mail that this action would be taken
on 2011-09-03. (Ports for which maintainers responded have been/will be
dealt with separately.)

Also mark DEPRECATED ports that rely on the FORBIDDEN ports, and a few
ports that rely on those DEPRECATED ports.

07:34 ade 

Sync to new bsd.autotools.mk

11:58 ale 

As announced, remove MySQL 6.0 (dead development branch) and update CONFLICTS.

19:36 mezz 

-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.
-Update libtool and libltdl to 2.2.6a.
-Remove devel/libtool15 and devel/libltdl15.
-Fix ports build with libtool22/libltdl22.
-Bump ports that depend on libltdl22 due to shared library version change.
-Explain what to do update in the UPDATING.

It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.

With help:      marcus and kwm
Pointyhat-exp:  a few times by pav
Tested by:      pgollucci, "Romain Tartière" <romain@blogreen.org>, and
                a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by:    marcus
Approved by:    portmgr

22:41 linimon 

Move the USE_PERL5 definition for the scripts slave ports from the master
to the slave port, to move it before the inclusion of bsd.port.pre.mk.

Approved by:    maintainer

09:28 ale 

Accept all linuxthreads library major versions.

06:18 rafan 

Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk
 - Remove CONFIGURE_TARGET hack in various bsd.*.mk
 - USE_GNOME=gnometarget is now an no-op

Changes to individual ports, other than removing the CONFIGURE_TARGET hack:

= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
  - comms/gnuradio
  - science/abinit
  - science/elmer-fem
  - science/elmer-matc
  - science/elmer-meshgen2d
  - science/elmerfront
  - science/elmerpost

= use x86_64 as ARCH
  - devel/g-wrap

= other changes
  - print/magicfilter
    GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf

Total # of ports modified:  1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)

PR:             126524 (obsoletes 52917)
Submitted by:   rafan
Tested on:      two pointyhat 7-amd64 exp runs (by pav)
Approved by:    portmgr (pav)

08:36 ale 

Update CONFLICTS and remove duplicated USE_PERL5.

11:30 linimon 

Begin planning for de-orbit burn.  This does not build with gcc4.2, and
the correct fix is to update to a modern version of MySQL.

While here, rip out obsolete 4.X cruft.

Hat:            portmgr
Approved by:    maintainer

07:45 ale 

Fix for WITH_PROC_SCOPE_PTH=yes.

PR:             ports/102899
Submitted by:   Alex <garcol@postino.it>

10:23 ale 

Remove the temporary hack to use the new USE_LDCONFIG feature.

21:41 edwin 

Remove USE_REINPLACE from all categories starting with D

16:25 ale 

Fix rcNG startup ordering for MySQL daemon.
Bump PORTREVISION for mysql-server ports.

Approved by:    portmgr (clement)

10:40 ade 

Conversion to a single libtool environment.

Approved by:    portmgr (kris)

08:57 ale 

Convert mysql-client.sh to rcNG.

06:52 ade 

Mass-conversion to the USE_AUTOTOOLS New World Order.  The code present
in bsd.autotools.mk essentially makes this a no-op given that all the
old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in
exactly the same way as USE_AUTOTOOLS itself.

Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.

Preliminary documentation can be found at:
        http://people.FreeBSD.org/~ade/autotools.txt

which is in the process of being SGMLized before introduction into the
Porters Handbook.

Light blue touch-paper.  Run.

03:26 obrien 

At Kris's request, back out the MACHINE_ARCH spelling correction until
after 5.4-RELEASE.

09:33 ale 

- Use the rcNG script to kill MySQL on deinstallation [1]
- Set the new sequence for finding my.cnf files [2]:
  /etc, ${PREFIX}/etc, ${mysql_dbdir}
  (default to: /etc/my.cnf, /usr/local/etc/my.cnf, /var/db/mysql/my.cnf)
- Add the possibility to specify additional command-line arguments
  to be passed to mysqld_safe on startup

PR:             ports/79166 [1], ports/79597 [2]
Submitted by:   Sergey Prikhodko <sergey@network-asp.biz> [1],
                Vasil Dimov <vd@datamax.bg> [2]

08:04 obrien 

Assist getting more ports working on AMD64 by obeying the
Ports Collection documentation and use 'ARCH' rather than 'MACHINE_ARCH'.

14:17 ale 

Update to 3.23.59 snapshot:
- Switch to rcNG
- Add the possibility to specify the database directory in rc.conf
- Move database creation from post-install stage into startup script

14:44 ale 

- Use MASTER_SITES_MYSQL
- Add WITHOUT_INNODB knob [1]
- Fix tcp wrappers (hopefully definitely!)
- Extend allowed linuxthreads shlib versions

Submitted by:   sobomax [1]

10:04 ale 

Fix p5-File-Temp dependency (not required for perl 5.8.x).

Spotted by:     cdine <cdine@cdine.org>

10:42 ale 

Add p5-File-Temp dependency to mysql-scripts.
Required to run mysqlhotcopy.

PR:             ports/72095
Submitted by:   Marcus Grando <marcus@corp.grupos.com.br>

16:18 ale 

- Fix mysqlhotdump vulnerability
- Fix plist (don't install .la files)
- Add optional knob WITH_PROC_SCOPE_PTH

Approved by:    portmgr (marcus)

11:37 ale 

- Replace dead MASTER_SITE [1]
- Fix mysqlbug vulnerability [2]
- Bump PORTREVISION

PR:             ports/66671 [1]
Submitted by:   Roman Neuhauser <neuhauser@chello.cz> [1],
                roam [2]

06:17 ade 

Whoa there, boy, that's a mighty big commit y'all have there...

Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".

For ports-in-waiting:

        USE_LIBTOOL=YES         ->      USE_LIBTOOL_VER=13
        USE_AUTOCONF=YES        ->      USE_AUTOCONF_VER=213
        USE_AUTOMAKE=YES        ->      USE_AUTOMAKE_VER=14

Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.

10:36 ale 

Fix a never-catched bug in mysql_install_db script.
Now the SKIP_DNS_CHECK knob is pointless.

12:38 ale 

Sync with MySQL 4.0:
- get rid of perl dependency
- enhance man pages and scripts installation
- move additional scripts in mysql-scripts port

15:25 ale 

Don't limit architectures.

Noticed by:     Petri Helenius <pete@he.iki.fi>
Approved by:    nork (mentor/implicitly)

12:44 ale 

Use unique LATEST_LINK.

Reported by:    kris
Approved by:    nork (mentor/implicitly)

12:47 ale 

- Completely restructure the port to follow other mysql* ports
  (too many improvements to be listed here)
- Correctly support PTHREAD_LIBS/CFLAGS
- Use USE_GNOME=lthack
- Propagate DB_DIR in package [1]
- Use my @FreeBSD.org email address
- Bump PORTREVISION

PR:             ports/24749 [1]
Submitted by:   Tom Pavel <pavel@networkphysics.com> [1]
Approved by:    nork (mentor/implicitly)

07:04 linimon 

In a followup to ports/60559, Alex admitted to being the maintainer of all
the other mysql-(server|client) ports, and thus found himself volunteered
for this one as well.  Of course, it may well be that he didn't run away
fast enough ... or that this release is probably the last in the 3.x series.

16:56 nork 

o Add CONFLICTS sections.
o Fix packages dependencies.
o portlint clean
o Correct typo in MASTER_SITES, Fix non-optimized build.

PR:             ports/60559
Submitted by:   Alex Dupre <sysadmin@alexdupre.com>

14:13 fjoe 

Use INFO.

14:45 trevor 

Use the FIND and XARGS macros introduced in bsd.port.mk 1.391.

12:05 ijliao 

utilize SITE_PERL

PR:             58166
Submitted by:   Cheng-Lung Sung <clsung@dragon2.net>

16:10 roam 

Protect against accidentally defining USE_MYSQL in the environment or
on the make(1) command line[1].
Unbreak mysql40-server's building on -CURRENT (-pthread)[2].

PR:             56252[1], 56925[2]
Submitted by:   Clement Laforet <sheepkiller@cultdeadsheep.org> [1],
                Alex Dupre <sysadmin@alexdupre.com> (maintainer) [2]

00:05 edwin 

Update port: databases/mysql323-server

        - ECHO -> ECHO_MSG
        - pre-fetch -> pre-everything

PR:             ports/56775
Submitted by:   KATO Tsuguru <tkato@prontomail.com>

14:47 mbr 

Security update to 3.23.58.

Fixed buffer overflow in password handling which could potentially
be exploited by MySQL users with ALTER privilege on the mysql.user
table to execute random code or to gain shell access with the UID
of the mysqld process.

The complete changelog can be found at:
http://www.mysql.com/doc/en/News-3.23.58.html

Approved by:    marcus (portsmgr)

17:29 marcus 

With my portmgr hat on, apply a fix discussed on current@ to fix the
build on -CURRENT.  Also, reset maintainer to ports@ since dirk@ has been
inactive since 2003-02-06.

09:39 nork 

Update to 3.23.57.

PR:             ports/53982
Submitted by:   Xin LI <delphij@freebsdchina.org>

23:15 mbr 

We finally have a threadsafe realpath(3) in 4.x and 5.x.
Remove problematic HAVE_BROKEN_REALPATH define, now we
have a fixed version. This allows usage of symlinks for
database paths again which was previously broken.

Bump portrevision.

23:27 mbr 

Under FreeBSD 5.X, libstdc++ and libsupc++ in /usr/lib use FreeBSD
native (libc_r style) mutexes, thus some of the linked application
might indirectly try to pass native style mutexes to linuxthreads
pthread functions, either hanging at program startup or overwriting
data following the native style mutex. <tegge>

Reviewed by:    tegge

22:17 mbr 

Upgrade to 3.23.56.

Maintainer timeout. I successfully run this package
on ~ 10 servers since Mar 19.

19:23 ade 

Destroy pkg-comment for some of the stranger uses in the tree,
pending the final semi-automatic purge.

Approved by:    portmgr (implicitly)

00:33 mbr 

FreeBSD 5.X does have lthread.3, FreeBSD 4.X lthread.2

16:30 dirk 

Upgrade to 3.23.55.

13:08 dirk 

mysql-server compiles and runs fine on sparc64.

Submitted by:   Joao Pedras <jpedras@webvolution.net>

16:00 dirk 

Upgrade to 3.23.54.

This fixes a security hole which is remotely exploitable.

See http://security.e-matters.de/advisories/042002.html for details.

Submitted by:   sobomax
Approved by:    sobomax

11:28 sobomax 

Mark as FORBIDDEN - multiple security vulnerabilities exist. See
http://security.e-matters.de/advisories/042002.html

Submitted by:   Constantin Deribin <deribin@portaone.com>

21:04 dirk 

Fix MASTER_SITES.

15:58 dirk 

WITH_XCHARSET is independent of WITH_CHARSET.

PR:             ports/45173
Submitted by:   ITO Tsuyoshi <tsuyoshi@is.s.u-tokyo.ac.jp>

10:38 dirk 

-STABLE exits with signal 11 while connecting via TCP/IP if empty
prototypes are used. -CURRENT needs empty prototypes to build. Use
__FreeBSD_version to differentiate.

Set CXX to $CC on -STABLE again to get around stability problems
under heavy load.

22:22 dirk 

FreeBSD has broken realpath(3), too.

PR:             ports/44784
Submitted by:   Adrian Filipi-Martin <adrian@ubergeeks.com>

21:47 dirk 

Set limits from user mysql before starting mysqld.

Submitted by:   Denis Shaposhnikov <dsh@neva.vlink.ru>

20:24 dirk 

Only kill mysqld we started. Don't kill all mysqld.

Submitted by:   sobomax (modified by me a bit)

09:22 dirk 

Last commit was actually:

Upgrade to 3.23.53

09:04 dirk 

Upgrade to 3.23.52.

21:31 dirk 

Don't restrict InnoDB to i386. Works on alpha, too.

PR:             ports/42337

13:27 dirk 

Upgrade to 3.23.52.

20:21 dirk 

- remove CXX=${CC} this doesn't work with -CURRENT ${CC} any longer.
- add patch to use correct prototypes for libwrap

19:58 dirk 

Bump PORTREVISION after fixing startup script.

19:48 dirk 

Back out last commit. It was unapproved and inappropriate since it
breaks existing installations (very clever!).

An appropriate "fix" for this "problem" would be to look in both /etc
and ${PREFIX}/etc.

21:06 anders 

Look for my.cnf in ${PREFIX}/etc rather than /etc.

Silence by:     dirk

14:47 dirk 

Upgrade to 3.23.51.

11:16 dirk 

Upgrade to 3.23.49.    

22:11 dirk 

Add knob for --enable-thread-safe-client (THREAD_SAFE_CLIENT)    

11:39 dirk 

Fix argument for chmod (00mysql-client.sh -> 000.mysql-client.sh)    

13:35 dirk 

- upgrade to 3.23.48   - install mysql-client.sh as 000.mysql-client.sh.     The
000. prefix seems to be more common, now.    

10:33 dirk 

Upgrade to 3.23.47.    

20:31 dirk 

Add support for InnoDB tables.    

22:51 dirk 

Forgot to mention the following change in last commit:    

22:41 dirk 

- remove -fno-omit-frame-pointer from CFLAGS if BUILD_OPTIMIZED is set   - add a
warning for BUILD_OPTIMIZED    

22:50 dirk 

- CXX=${CC} to get rid of libstdc++ in order to improve stability     under
heavy load    

11:18 dirk 

Upgrade to 3.23.46.    

12:54 dirk 

Upgrade to 3.23.45.    

20:30 dirk 

Update to 3.23.44.    

20:15 dirk 

Upgrade to 3.23.43.    

17:13 dirk 

Upgrade to 3.23.42.    

22:57 dirk 

Add dependency to p5-Mysql for the server part. mysql_convert_table_format,  
mysql_setpermission and mysqlhotcopy need the perl module.    

23:08 dirk 

Upgrade to 3.23.41.    

22:50 dirk 

Cleanup:    

13:01 dirk 

Add two new Makefile variables: SKIP_INSTALL_DB, INSTALL_DB_FORCE   (see
Makefile for explanation).    

22:10 dirk 

Upgrade to 3.23.40.    

09:25 dirk 

Upgrade to 3.23.39.    

21:26 dirk 

Add option for linuxthreads (WITH_LINUXTHREADS).    

15:43 dirk 

Upgrade to 3.23.38.    

12:26 dirk 

Upgrade to 3.23.37.    

14:15 dirk 

Fix typo (Latin1 -> latin1).    

13:43 dirk 

Upgrade to 3.23.36.    

10:35 dirk 

Upgrade to 3.23.35.    

13:02 dirk 

Add ${MASTER_SITE_SOURCEFORGE} to MASTER_SITES and remove www.mysql.net   which
seems not to be a MySQL mirror anylonger.    

07:06 dirk 

Upgrade to 3.23.34a.    

18:50 dirk 

BDB doesn't compile on alpha.    

09:20 dirk 

Upgrade to 3.23.33.    

23:02 dirk 

Install mysql-client.sh as 00mysql-client.sh so the included   ldconfig is run
earlier.    

01:03 dirk 

Add options for alternate charsets (WITH_CHARSET and WITH_XCHARSET).    

00:44 dirk 

Add support for BerkeleyDB table type.    

22:46 dirk 

Upgrade to 3.23.32.