As mentioned in the title, databases/mariadb100-server and databases/mariadb100-client are not updated to the latest release 10.0.22 in the quarterly branch of the ports tree. There is a CVE affecting these outdated versions: https://www.vuxml.org/freebsd/851a0eea-88aa-11e5-90e7-b499baebfeaf.html Please also make sure future updates with security issues reach the quarterly branches.
Thanks for reporting! Fixed.
A commit references this bug: Author: brnrd Date: Wed Dec 9 20:01:49 UTC 2015 New revision: 403431 URL: https://svnweb.freebsd.org/changeset/ports/403431 Log: MFH: r401058 databases/mariadb100-server: Update to 10.0.22 * Update server and (slave) client port * Alphabetic ordering of CONFLICTS * Consistent globbing of CONFLICTS * Alphabetical ordering of USES * Add LGPL21 for MySQL client C/Java libs PR: 205159 Reviewed by: koobs (mentor) Approved by: ports-secteam (feld), koobs (mentor) Security: 851a0eea-88aa-11e5-90e7-b499baebfeaf Differential Revision: https://reviews.freebsd.org/D4100 Changes: _U branches/2015Q4/ branches/2015Q4/databases/mariadb100-client/Makefile branches/2015Q4/databases/mariadb100-server/Makefile branches/2015Q4/databases/mariadb100-server/distinfo