CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

net-mgmt/nagios3.5.1_12

Powerful network monitoring system

Maintainer
ports@FreeBSD.org
Packages
nagios 3.5.1_12, nagios-monplugins 3.5.1_12
Upstream
up to date
CPE
nagios:nagios from the port
WWW
https://www.nagios.org/
Links
cgit · VuXML

Unaddressed (11) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2008-73139.8published 2017-03-31

The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796.

CVE-2014-50099.8published 2017-03-31

Snoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists due to an incomplete fix for CVE-2014-5008.

CVE-2016-95659.8published 2016-12-15

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.

CVE-2016-100897.8published 2017-02-15

Nagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on the Nagios init script file, related to CVE-2016-8641.

CVE-2016-95667.8published 2016-12-15

base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.

CVE-2013-72056.4published 2014-01-15

Off-by-one error in the process_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list, which triggers a heap-based buffer over-read.

CVE-2017-128476.3published 2017-08-23

Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for nagios.lock modification before a root script executes a "kill `cat /pathname/nagios.lock`" command.

CVE-2013-42146.3published 2013-11-23

rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache.

CVE-2018-134415.5published 2018-07-12

qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attacker to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket.

CVE-2013-71085.5published 2014-01-15

Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list to the process_cgivars function in (1) av…

CVE-2014-18785.0published 2014-02-28

Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 allows remote attackers to cause a denial of service (segmentation fault) via a long message to cmd.cgi.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Possibly backported (1) · The CVE record gives a range ending in a newer branch, check the branch changelog

This port tracks an older, still maintained branch. The CVE record only says “before X” with X in a newer branch, so it cannot tell whether this branch received the fix. This is an estimate, not a confirmation. These CVEs are not counted as unaddressed.
CVE-2008-479610.0published 2008-10-30

The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs.

Fixed (7)

VuXML entries whose affected range this version has left, plus CVEs whose record still lists this version although VuXML considers them fixed (usually a backported fix).
CVE-2013-72056.4published 2014-01-15VuXML entry

Off-by-one error in the process_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list, which triggers a heap-based buffer over-read.

CVE-2013-71085.5published 2014-01-15VuXML entry

Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list to the process_cgivars function in (1) av…

Commits (161)

Jochen Neumeister (joneum) · 3.5.1_12
*/*: Ports return to pool

Sponsored by:	Netzkommune GmbH
8824e7f507
Xavier Beaudouin (kiwi) · 3.5.1_12
net-mgmt/nagios: Add monplugins flavor

Some users asked to add a flavor to permit to have nagios already
packaged with monplugins.

PR:	283977
Sponsored by:	Klara, Inc.
Approved by:	0mp (mentor)
Approved by:	joneum (maintainer)
Differential Revision:	https://reviews.freebsd.org/D48146
0fb561611e
Muhammad Moinur Rahman (bofh) · 3.5.1_12
net-mgmt/nagios: Avoid deprecated @exec/@unexec

Utilize USES=localbase while I am here

Approved by:	portmgr (blanket)
0eae56127a
Jochen Neumeister (joneum) · 3.5.1_12
*/*nagios*: Take Maintainership

Sponsored by:	Netzkommune GmbH
fbf337b4df
Mathieu Arnold (mat) · 3.5.1_12
net-mgmt/nagios: drop maintainership
060665232e
Stefan Eßer (se) · 3.5.1_12
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 3.5.1_12
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 3.5.1_12
net-mgmt: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  @BABOLO <.@babolo.ru>
  *  Alex Samorukov, samm@freebsd.org
  *  Alexander Kriventsov <avk@vl.ru>
  *  Alexander Sulfrian <alexander@sulfrian.net>
  *  Alexander Y. Grigoryev <alexander.4mail@gmail.com>
  *  Alexandre Biancalana <ale@biancalanas.net>
  *  Alexandre Snarskii <snar@paranoia.ru>
  *  Alexandre Snarskii <snar@snar.spb.ru>
  *  Alexey Bobkov <mr.deadlystorm@gmail.com>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Alexey V. Degtyarev
  *  Anders Nordby <anders@FreeBSD.org>
  *  Anders Troback
  *  Andreas Klemm <andreas@klemm.gtn.com>
  *  Andrew 'derfi' Sidorov <derfi@vei.ru>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrew Thompson <andy@fud.org.nz>
  *  Andrew Thompson <thompsa@freebsd.org>
  *  Anton Berezin <tobez@FreeBSD.org>
  *  Anton Berezin <tobez@tobez.org>
  *  Athanasios Douitsis <aduitsis@cpan.org>
  *  Babak Farrokhi <farrokhi@FreeBSD.org>
  *  Bartlomiej Rutkowski <r@robakdesign.com>
  *  Bill Fenner <fenner@FreeBSD.org>
  *  Blaz Zupan <blaz@si.FreeBSD.org>
  *  BluePex Security Solutions <freebsd-ports@bluepex.com>
  *  Boris Samorodov <bsam@FreeBSDD.org>
  *  Brad Davis <brd@FreeBSD.org>
  *  Brad Hendrickse <bradh@uunet.co.za>
  *  Brian Somers <brian@FreeBSD.org>
  *  Bruce M Simpson <bms@FreeBSD.org>
  *  Bruce Simpson
  *  Chris S.J. Peron <maneo@bsdpro.com>
  *  Chris St Denis <chris@smartt.com>
  *  Christer Edwards <christer.edwards@gmail.com>
  *  Christopher N. Harrell <cnh@ivmg.net>
  *  Clement Laforet <sheepkiller@cultdeadsheep.org>
  *  Corey Smith <corsmith@gmail.com>
  *  Craig Boston <craig@yekse.gank.org>
  *  Dave Cottlehuber <dch@FreeBSD.org>
  *  Dave Cottlehuber <dch@skunkwerks.at>
  *  David O'Brien (obrien@NUXI.com)
  *  David Shane Holden <dpejesh@yahoo.com>
  *  David Yeske <dyeske@gmail.com>
  *  Denis Shaposhnikov <dsh@vlink.ru>
  *  Dennis Herrmann <adox@mcx2.org>
  *  Dikshie <dikshie@sfc.wide.ad.jp>
  *  Dmitry Sivachenko <demon@FreeBSD.org>
  *  Domas Mituzas <midom@dammit.lt>
  *  Douglas Fraser <doug@idmf.net>
  *  Douglas K. Rand <rand@iteris.com>
  *  Douglas K. Rand <rand@meridian-enviro.com>
  *  Edwin Groothuis <edwin@mavetju.org>
  *  El Vampiro <vampiro@rootshell.ru>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Eric F Crist <ecrist@secure-computing.net>
  *  Eric Turgeon <ericturgeon.bsd@gmail.org>
  *  Eugene Grosbein <eugen@FreeBSD.org>
  *  Fotis Zabaras <fotis@zabaras.eu>
  *  Frank Wall <freebsd@moov.de>
  *  Frank Wall <fw@moov.de>
  *  Gea-Suan Lin <gslin@gslin.org>
  *  Geoffroy Desvernay <dgeo@centrale-marseille.fr>
  *  George Reid <greid@ukug.uk.freebsd.org>
  *  Gerrit Beine <gerrit.beine@gmx.de>
  *  Henrik Brix Andersen <henrik@brixandersen.dk>
  *  Holger Lamm <holger@eit.uni-kl.de>
  *  Hsin-Han You <hhyou@cs.nctu.edu.tw>
  *  Hung-Yi Chen <gaod@hychen.org>
  *  Inacio <nacho319+freebsdZilla@gmail.com>
  *  J.R. Oldroyd <fbsd@opal.com>
  *  JJ Behrens <jj@nttmcl.com>
  *  Jake Smith <jake@xz.cx>
  *  James FitzGibbon <jfitz@FreeBSD.org>
  *  James Flemer <jflemer@acm.jhu.edu>
  *  Janos Mohacsi <janos.mohacsi@bsd.hu>
  *  Janos Mohacsi <mohacsi@niif.hu>
  *  Janos.Mohacsi@bsd.hu
  *  Janos.Mohacsi@dante.org.uk
  *  Jason Helfman <jgh@FreeBSD.org>
  *  Jeremy Chadwick <koitsu@FreeBSD.org>
  *  Jerry A! <jerry@thehutt.org>
  *  Jev Björsell <ports@ecadlabs.com>
  *  Joe Clarke <marcus@marcuscom.com
  *  Joe Clarke <marcus@marcuscom.com>
  *  Johannes Jost Meixner <johannes@FreeBSD.org>
  *  Johannes Jost Meixner <johannes@perceivon.net>
  *  Josh Carroll <josh.carroll@gmail.com>
  *  KIKUCHI Koichiro <koichiro@rworks.jp>
  *  Kevin Hung <khung@nullaxiom.com>
  *  Kian Mohageri <kian.mohageri@gmail.com>
  *  Kimura Fuyuki <fuyuki@hadaly.org>
  *  Kirill Ponomarew <ponomarew@oberon.net>
  *  Kris Kennaway <kris@FreeBSD.org>
  *  Lars Engels <lars.engels@0x20.net>
  *  Lars Thegler <lars@thegler.dk>
  *  Lawrence Chen <beastie@tardisi.com>
  *  Lev Walkin <vlm@lionet.info>
  *  Luca Pizzamiglio <pizzamig@FreeBSD.org>
  *  Mahdi Mokhtari <mokhi63@gmail.com>
  *  Manuel Kreutz <mk@nomtec.net>
  *  Marcin Cieslak <saper@system.pl>
  *  Mark Felder <feld@FreeBSD.org>
  *  Mark Pulford <mark@kyne.com.au>
  *  Martin Jackson <mhjacks@swbell.net>
  *  Martin Matuska <mm@FreeBSD.org>
  *  Mathieu Simon <freebsd@simweb.ch>
  *  Matt Moriarity <matt@mattmoriarity.com>
  *  Matt Peterson <matt@peterson.org>
  *  Matthew Seaman <matthew@FreeBSD.org>
  *  Michael L. Hostbaek (mich@freebsdcluster.org)
  *  Michael Lyngbøl <lyngbol@wheel.dk>
  *  Michael Reifenberger <mr@FreeBSD.org>
  *  Michal Hanula <michal@hanu.la>
  *  Mike Bristow <mike@urgle.com>
  *  Mikhail T. <mi@aldan.algebra.com>
  *  Mikolaj Golub <to.my.trociny@gmail.com>
  *  Muhammad Moinur Rahman <5u623l20@gmail.com>
  *  Muhammad Moinur Rahman <bofh@FreeBSD.org>
  *  Nicholas Esborn <nick@netdot.net>
  *  Nick F <ffault@gmail.com>
  *  Nick Hilliard
  *  Nick Hilliard <nick@foobar.org>
  *  Pakhom Golynga <pg@pakhom.spb.ru>
  *  Paul Chvostek <paul@it.ca>
  *  Paul Dlug <paul@nerdlabs.com>
  *  Paul Dlug<paul@nerdlabs.com>
  *  Pavel I Volkov
  *  Peter C. Lai <cowbert@gmail.com>
  *  Phil Phillips
  *  Pierre David <pdagog@gmail.com>, Jean Benoit <jean@unistra.fr>
  *  Rihaz Jerrin <rihaz.jerrin@gmail.com>
  *  Roar Pettersen <roar@uib.no>
  *  Russell A. Jackson <rjackson@cserv62.csub.edu>
  *  Ryan Steinmetz
  *  Ryan Steinmetz <rpsfa@rit.edu>
  *  Ryan Steinmetz <zi@FreeBSD.org>
  *  Serge Maslov <serge@maslov.biz>
  *  Sergey Skvortsov <skv@protey.ru>
  *  Sevan Janiyan <venture37@geeklan.co.uk>
  *  Shaun Amott <shaun@inerd.com>
  *  Simon 'corecode' Schubert <corecode@corecode.ath.cx>
  *  Stefan Esser <se@FreeBSD.org>
  *  Stefan Lambrev <cheffo@freebsd-bg.org>
  *  Stephen J. Roznowski <sjr@home.net>
  *  Steve Wills <swills@FreeBSD.org>
  *  Steven Kreuzer <skreuzer@FreeBSD.org>
  *  Tassilo Philipp <tphilipp@potion-studios.com>
  *  Thomas Spreng <spreng@socket.ch>
  *  Tim Bishop <tdb@FreeBSD.org>
  *  Timur I. Bakeyev <bat@cpan.org>
  *  Tom Judge <tj@FreeBSD.org>
  *  Tor Halvard "Squat" Furulund <squat@squat.no>
  *  Tsung-Han Yeh <snowfly@yuntech.edu.tw>
  *  Tsung-Han Yeh <snowfly@yunteche.du.tw>
  *  Tuc <freebsd-ports@t-b-o-h.net>
  *  Vaida Bogdan
  *  Veniamin Gvozdikov <vg@FreeBSD.org>
  *  Vladimir Ermakov <samflanker@gmail.com>
  *  Vladimir Kotal <vlada@devnull.cz>
  *  Wei-chun Chao
  *  Xavier Beaudouin <kiwi@oav.net>
  *  Ying-Chieh Chen <yinjieh@csie.nctu.edu.tw>
  *  Yuan-Chung Hsiao <ychsiao@ychsiao.org>
  *  anarcat@anarcat.ath.cx
  *  arved
  *  babak@farrokhi.net
  *  brock@cotcomsol.com
  *  clement@FreeBSD.org
  *  cnh@ivmg.net
  *  dom@happygiraffe.net
  *  dpejesh@yahoo.com
  *  ecronin@gizmolabs.org
  *  ehaupt@FreeBSD.org
  *  gpalmer
  *  gslin <gslin@gslin.org>
  *  hr <holgerrepp@googlemail.com>
  *  ijliao
  *  itojun@itojun.org
  *  jabley
  *  jabley@clear.co.nz
  *  jamrich.majo@gmail.com
  *  janos.mohacsi@bsd.hu
  *  joris
  *  joseph@randomnetworks.com
  *  marck@rinet.ru
  *  mich@FreeBSD.org
  *  mich@freebsdcluster.org
  *  nbm
  *  rea-fbsd@codelabs.ru
  *  rflynn@acsalaska.net
  *  salexanov@gmail.com
  *  sanpei@FreeBSD.org
  *  steinex
  *  torstenb
  *  trevor
  *  vfom@narod.ru
  * # Created by Kevin Bowling <kbowling@FreeBSD.org>

With hat:	portmgr
43ac3e28ab
Stefan Eßer (se) · 3.5.1_12
*/*: Remove redundant '-*' from CONFLICTS definitions

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Approved by: portmgr (blanket)
04b9da4140
Mathieu Arnold (mat) · 3.5.1_12
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 3.5.1_12
Remove # $FreeBSD$ from Makefiles.
305f148f48
Dirk Meyer (dinoex) · 3.5.1_12
- update libgd to 2.3.0 - new option RAQM - resurrect deprecated gdlib-config - bump dependend ports
eff60e5ddb
Mathieu Arnold (mat) · 3.5.1_11
Fix a few redirects to https in my ports.
ec441d76cc
Mathieu Arnold (mat) · 3.5.1_11
Update the rest of my ports to UCL pkg-message.
2ce0cb26fa
Palle Girgensohn (girgen) · 3.5.1_11
Help nagios cope with php-7

split has been replaced with explode

PR:	224509
a7efdfb5dd
Dirk Meyer (dinoex) · 3.5.1_10
- update libgd to 2.2.2 - new MASTER_SITES - add security patch PR:		210913 Submitted by:	Piotr Kubaj MFH:		2016Q3 Security: CVE-2015-8874 Security: CVE-2016-3074 Security: http://www.openwall.com/lists/oss-security/2016/07/12/4
3561a46f28
Mathieu Arnold (mat) · 3.5.1_9
Convert USE_PHP*=yes into USES=php*

PR:		210529
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D6936
dca255c3ce
Mathieu Arnold (mat) · 3.5.1_9
Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.

With hat:	portmgr
Sponsored by:	Absolight
8d6597e0bb
Mathieu Arnold (mat) · 3.5.1_9
Don't say there is a documentation installed.

PR:		207267
Sponsored by:	Absolight
2981dfe17c
Tijl Coosemans (tijl) · 3.5.1_8
converters/libiconv: - Remove const qualifier from iconv(3) to match POSIX:   http://pubs.opengroup.org/onlinepubs/9699919799/functions/iconv.html - Patch iconv.h to expose more GNU extensions when LIBICONV_PLUG is   defined because the base system iconv supports these extensions too.

Add/remove patches to/from ports to call iconv with non-const arguments.

This breaks some ports on FreeBSD 10 because base system iconv.h still has
the const qualifier.  Fix this by letting USES=iconv add a build dependency
on converters/libiconv so ports can use its iconv.h (with LIBICONV_PLUG
defined) instead of the base system iconv.h.

This exposed some ports that link with libiconv when it is available instead
of using libc iconv.  In these cases one of the following changes has been
made:
- patch configure scripts to test for libc iconv first
- add ac_cv_lib_iconv_libiconv=no or similar to CONFIGURE_ARGS to disable
  some configure tests
- converters/wkhtmltopdf: this includes Qt4 so add a patch from devel/qt4
- lang/gcc5-aux: respect CFLAGS and friends during configure such that
  LIBICONV_PLUG is defined in the iconv test, also switch to external
  gettext
- mail/gnarwl: replace patches with CPPFLAGS/LIBS
- multimedia/ffmpeg2theora: remove iconv test from SConstruct and use
  ICONV_LIB in port Makefile instead, also fix a bug in subtitles.c
- net-im/licq: finish conversion to cmake
- net-mgmt/bandwidthd, net-mgmt/icinga, net-mgmt/nagios, net-mgmt/nagios4:
  don't need iconv
- textproc/p5-XML-TinyXML: finish conversion to USES=perl5

Other changes:
- databases/qdbm and slaves: respect CFLAGS and friends, also enable bzip2
  and lzo support
- games/ldmud: respect CFLAGS and friends
- graphics/inventor: replace some patches with MAKE_ARGS/MAKE_ENV to respect
  CFLAGS and friends, also remove FreeBSD/alpha patch and add missing xorg
  dependencies

PR:		199099
Exp-run by:	antoine
Approved by:	portmgr (antoine)
074ea5282a
Mathieu Arnold (mat) · 3.5.1_7
Add CPE.

Sponsored by:	Absolight
723d568e7a
Mathieu Arnold (mat) · 3.5.1_7
Pet check-plist.

PR:		195572
Submitted by:	ohauer
Sponsored by:	Absolight
84528a233d
Mathieu Arnold (mat) · 3.5.1_7
Fix packaging as a user.

Sponsored by:	Absolight
e7b5460ee1
Mathieu Arnold (mat) · 3.5.1_6
Don't use autotools any more.

Sponsored by:	Absolight
85ebaf0245
Tijl Coosemans (tijl) · 3.5.1_6
Replace USE_AUTOTOOLS=libltdl with an ordinary LIB_DEPENDS in all ports. There are only 60 such ports so there doesn't need to be a separate keyword or USES for this.

Approved by:	portmgr (bapt)
15c4a5ecf3
Lars Engels (lme) · 3.5.1_6
- Add OPTIONS to either depend on plugins from nagios-plugins.org, monitoring-plugins.org or neither at all - Bump PORTREVISION

Approved by:	mat (implicit)
383100cfc7
Tijl Coosemans (tijl) · 3.5.1_5
Support LIBS like LDFLAGS.

- Add LIBS="${LIBS}" to MAKE_ENV and CONFIGURE_ENV.
- Add an option helper for LIBS.
- Adjust all ports that already use LIBS.  Also remove references to
  PTHREAD_CFLAGS and PTHREAD_LIBS while here.
- Some ports did not support having a LIBS environment variable and
  required additional patches.

Somewhat simplified a linker command line looks like:

${CC} ${src_LDFLAGS} ${LDFLAGS} ${src_LIBS} ${LIBS}

where src_LDFLAGS and src_LIBS are controlled by upstream and LDFLAGS and
LIBS can be controlled by us.  If possible -L and -l flags need to be
added to LIBS to make sure they appear after any -L and -l flags set by
upstream.  Many ports currently add -L${LOCALBASE}/lib to LDFLAGS but this
may appear too early on the command line causing installed libraries to
be linked in instead of freshly built ones.

Additional changes:
benchmarks/netio: Replace WITH_IPV6 with an IPV6 option.
comms/gnokii: Replace some patches with USES=pathfix.  Also remove -fPIC.
graphics/gimageview: USES=libtool and install desktop file in DESKTOPDIR.
graphics/visionworkbench: Remove FreeBSD 7 support.
multimedia/libmovtar: New LIB_DEPENDS syntax.
multimedia/opencinematools: Use standard do-build.
net/siproxd: USES=libtool:keepla (port actually needs .la files for plugins)
net-mgmt/nagios: Remove -fPIC.
net-mgmt/nagios4: Remove -fPIC.
print/cups-base: Only add -lssp_nonshared on i386 and OSVERSION < 1000036.
security/p11-kit: Replace PTHREAD_LIBS in CONFIGURE_ENV with
ac_cv_func_pthread_mutexattr_init=no in CONFIGURE_ARGS.  This skips a test
in configure that falsely detects pthread_mutexattr_init in our libc.
sysutils/dar: Fix iconv detection.
x11/rxvt-unicode: Remove -lstdc++ and patch configure to remove a FreeBSD
hack and use $CXX as linker as on other platforms.

PR:		190592
Exp-run by:	antoine
Approved by:	portmgr (antoine)
9f8b4bcde3
Mathieu Arnold (mat) · 3.5.1_5
Fix a segfault when using livestatus, downtime and logrotate.

Issue:		http://tracker.nagios.org/view.php?id=455
Sponsored by:	Absolight
1b6a0aa634
Mathieu Arnold (mat) · 3.5.1_4
Use @sample for my port, cleanup an etc/PORTNAME into ETCDIR.

Sponsored by:	Absolight
cc30f48479
Mathieu Arnold (mat) · 3.5.1_4
Pet portscout.

Sponsored by:	Absolight
11e1e53534
Mathieu Arnold (mat) · 3.5.1_4
Add nagios4, the next version of the nagios monitoring system.

While there, garbage collect the UID/GID in nagios.

Sponsored by:	Absolight
0253032ea5
Mathieu Arnold (mat) · 3.5.1_3
* Add a patch from upstream fixing a cgi vulnerability[1] * Cleanup COMMENT * Rename patches to follow make makepatch naming * Incorporate a sed into already patched files.

Poked by:	ohauer [1]
Security:	CVE-2013-7108 CVE-2013-7205
121dea5a9c
Mathieu Arnold (mat) · 3.5.1_2
Take that, will work on the main issue today.
22e13304f8
Dmitry Sivachenko (demon) · 3.5.1_2
Drop maintainership, I have no enoght time now.
152a0456ac
Mathieu Arnold (mat) · 3.5.1_2
- Actually make nagios work with staging - Make the index.php patch respect the possible corewindow parameter
8ba3edb0ee
Dmitry Sivachenko (demon) · 3.5.1_1
Fix tac.cgi location for people with redefined $cgi_base_url in config.inc.php.

Submitted by:	mat
78873ed8a4
Dmitry Sivachenko (demon) · 3.5.1_1
Replace meaningless startpage with tactical overview.

Submitted by:	ohauer
b18fcf42b6
Dmitry Sivachenko (demon) · 3.5.1_1
Bump portrevision because of recent changes.

Requested by:	mat
25de3d6ce6
Dmitry Sivachenko (demon) · 3.5.1
Do not overwrite config.inc.php; Convert to staging; Use new LIB_DEPENDS format.

PR:		185187
Submitted by:	mat
3036971e90
Baptiste Daroussin (bapt) · 3.5.1
Add NO_STAGE all over the place in preparation for the staging support (cat: net-mgmt)
985b201424
Baptiste Daroussin (bapt) · 3.5.1
Convert to new perl framework

Submitted by:	az
46c6877a4a
Dmitry Sivachenko (demon) · 3.5.1
Update to 3.5.1.
01067bb348
Dirk Meyer (dinoex) · 3.5.0_1
- update libdg to 2.1.0
b83d7bf933
Dmitry Sivachenko (demon) · 3.5.0
Take maintainership.
535cd21d53
Frederic Culot (culot) · 3.5.0
- Reassign to the heap

PR:		ports/180754
Submitted by:	Jarrod Sayers <jarrod@downtools.com.au> (maintainer)
a9acc27919
Marcus von Appen (mva) · 3.5.0
- Convert USE_ICONV=yes to USES=iconv - Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig while here

Reviewed by:	zeising
a3a0715f38
Ruslan Makhmatkhanov (rm) · 3.5.0
- update to 3.5.0

changelog:
http://www.nagios.org/projects/nagioscore/history/core-3x

PR:		177304
Submitted by:	Jarrod Sayers <jarrod@downtools.com.au> (maintainer)
e5f328ef87
Ruslan Makhmatkhanov (rm) · 3.4.4
- update to 3.4.4 - remove patch, applied upstream

changelog:
http://www.nagios.org/projects/nagioscore/history/core-3x

PR:		176188
Submitted by:	Jarrod Sayers <jarrod@downtools.com.au> (maintainer)
8f206379d8
Alex Kozlov (ak) · 3.4.3_1
- Fix all cases of 'No newline at end of file' in ports tree

Approved by: portmgr (bapt)
05a9235c98
Ruslan Makhmatkhanov (rm) · 3.4.3_1
- add upstream patch for CVE-2012-6096

PR:		175196
Submitted by:	Jarrod Sayers <jarrod@mail.downtools.com.au> (maintainer)
Security:	97c22a94-5b8b-11e2-b131-000c299b62e1
faa190fb03