FreeBSD ports that you maintain which are currently marked forbidden
linimon at FreeBSD.org
linimon at FreeBSD.org
Thu Aug 19 22:58:42 PDT 2004
Dear FreeBSD port maintainer:
As part of an ongoing effort to reduce the number of problems in the
FreeBSD ports system, we are attempting to notify maintainers of
ports that are marked as "forbidden" in their Makefiles. Often,
these ports are so marked due to security concerns, such as known
exploits.
An overview of the port, including errors seen on the build farm, is
included below.
portname: mail/cyrus
forbidden because: remote exploitable buffer overflow: US-CERT VU#740169,
SecurityFocus BID 6298
build errors: none.
overview: http://portsmon.firepipe.net/portoverview.py?category=mail&portname=cyrus
portname: misc/compat22
forbidden because: FreeBSD-SA-03:05.xdr, FreeBSD-SA-03:08.realpath - not
fixed
build errors: none.
overview: http://portsmon.firepipe.net/portoverview.py?category=misc&portname=compat22
portname: misc/compat3x
forbidden because: FreeBSD-SA-03:05.xdr, FreeBSD-SA-03:08.realpath - not
fixed / no lib available
build errors: none.
overview: http://portsmon.firepipe.net/portoverview.py?category=misc&portname=compat3x
portname: net/sup
forbidden because: Unmaintained, potential security issues
(CAN-2004-0451)
build errors: none.
overview: http://portsmon.firepipe.net/portoverview.py?category=net&portname=sup
portname: security/ssh
forbidden because: OpenSSH is a superior version of SSH which has been
included in the FreeBSD base system since 4.0-RELEASE.
This port is now deprecated. To override this warning
set the REALLY_WANT_SSH environment variable and
rebuild.
build errors: none.
overview: http://portsmon.firepipe.net/portoverview.py?category=security&portname=ssh
portname: textproc/xerces-c
forbidden because: Does not respect PTHREAD_{CFLAGS,LIBS}
build errors: none.
overview: http://portsmon.firepipe.net/portoverview.py?category=textproc&portname=xerces-c
portname: www/phpnuke
forbidden because: SQL injection vulnerability in Php-Nuke <= 7.1.0
build errors: none.
overview: http://portsmon.firepipe.net/portoverview.py?category=www&portname=phpnuke
If this problem is one that you are already aware of, please accept
our apologies and ignore this message. On the other hand, if you no
longer wish to maintain this port (or ports), please reply with a
message stating that, and accept our thanks for your efforts in the
past.
Thanks for your efforts to help improve FreeBSD.
More information about the freebsd-ports
mailing list