From owner-cvs-ports@FreeBSD.ORG Sun Oct 2 18:21:14 2011 Return-Path: Delivered-To: cvs-ports@FreeBSD.org Received: from mx2.freebsd.org (mx2.freebsd.org [IPv6:2001:4f8:fff6::35]) by hub.freebsd.org (Postfix) with ESMTP id B53F9106564A; Sun, 2 Oct 2011 18:21:14 +0000 (UTC) (envelope-from dougb@FreeBSD.org) Received: from 172-17-198-245.globalsuite.net (hub.freebsd.org [IPv6:2001:4f8:fff6::36]) by mx2.freebsd.org (Postfix) with ESMTP id 5AAA6151BA6; Sun, 2 Oct 2011 18:21:14 +0000 (UTC) Message-ID: <4E88AB9A.5010801@FreeBSD.org> Date: Sun, 02 Oct 2011 11:21:14 -0700 From: Doug Barton Organization: http://SupersetSolutions.com/ User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:7.0.1) Gecko/20111001 Thunderbird/7.0.1 MIME-Version: 1.0 To: Cy Schubert References: <201110020353.p923roLi084231@repoman.freebsd.org> In-Reply-To: <201110020353.p923roLi084231@repoman.freebsd.org> X-Enigmail-Version: undefined OpenPGP: id=1A1ABC84 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: lme@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org, ports-committers@FreeBSD.org Subject: Re: cvs commit: ports/sysutils/syslog-ng1 Makefile X-BeenThere: cvs-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 02 Oct 2011 18:21:14 -0000 FYI, in version 1.42 of the Makefile in its old location I tagged it thus: FORBIDDEN= Vulnerable since 2008-11-18, http://portaudit.freebsd.org/75f2382e-b586-11dd-95f9-00e0815b8da8.html EXPIRATION_DATE= 2011-10-14 Apparently the repo copy was done from version 1.41 (another reason that repo copies are a pointless waste). In any case give how long this port was vulnerable it might have made sense to just do the upgrade, and eliminate version 1 entirely. The next best solution would be to move the expiration date up to 2011-10-14. Either way the port should be FORBIDDEN, not DEPRECATED. Doug On 10/01/2011 20:53, Cy Schubert wrote: > cy 2011-10-02 03:53:50 UTC > > FreeBSD ports repository > > Modified files: > sysutils/syslog-ng1 Makefile > Log: > Deprecate syslog-ng1 and expire on Nov 1, 2011. > > Submitted by: Syslog-ng upline. > Approved by: Maintainer > > Revision Changes Path > 1.43 +3 -0 ports/sysutils/syslog-ng1/Makefile > > http://www.FreeBSD.org/cgi/cvsweb.cgi/ports/sysutils/syslog-ng1/Makefile.diff?&r1=1.42&r2=1.43&f=h > -- Nothin' ever doesn't change, but nothin' changes much. -- OK Go Breadth of IT experience, and depth of knowledge in the DNS. Yours for the right price. :) http://SupersetSolutions.com/