Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 02 Oct 2011 11:21:14 -0700
From:      Doug Barton <dougb@FreeBSD.org>
To:        Cy Schubert <cy@FreeBSD.org>
Cc:        lme@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org, ports-committers@FreeBSD.org
Subject:   Re: cvs commit: ports/sysutils/syslog-ng1 Makefile
Message-ID:  <4E88AB9A.5010801@FreeBSD.org>
In-Reply-To: <201110020353.p923roLi084231@repoman.freebsd.org>
References:  <201110020353.p923roLi084231@repoman.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
FYI, in version 1.42 of the Makefile in its old location I tagged it thus:

FORBIDDEN=      Vulnerable since 2008-11-18,
http://portaudit.freebsd.org/75f2382e-b586-11dd-95f9-00e0815b8da8.html
EXPIRATION_DATE=        2011-10-14

Apparently the repo copy was done from version 1.41 (another reason that
repo copies are a pointless waste).

In any case give how long this port was vulnerable it might have made
sense to just do the upgrade, and eliminate version 1 entirely. The next
best solution would be to move the expiration date up to 2011-10-14.
Either way the port should be FORBIDDEN, not DEPRECATED.


Doug


On 10/01/2011 20:53, Cy Schubert wrote:
> cy          2011-10-02 03:53:50 UTC
> 
>   FreeBSD ports repository
> 
>   Modified files:
>     sysutils/syslog-ng1  Makefile 
>   Log:
>   Deprecate syslog-ng1 and expire on Nov 1, 2011.
>   
>   Submitted by:   Syslog-ng upline.
>   Approved by:    Maintainer
>   
>   Revision  Changes    Path
>   1.43      +3 -0      ports/sysutils/syslog-ng1/Makefile
> 
> http://www.FreeBSD.org/cgi/cvsweb.cgi/ports/sysutils/syslog-ng1/Makefile.diff?&r1=1.42&r2=1.43&f=h
> 



-- 

	Nothin' ever doesn't change, but nothin' changes much.
			-- OK Go

	Breadth of IT experience, and depth of knowledge in the DNS.
	Yours for the right price.  :)  http://SupersetSolutions.com/




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4E88AB9A.5010801>