[Bug 260334] archivers/p7zip: Add expiration date -- has known vulns and unmaintained
Date: Sat, 11 Dec 2021 08:53:07 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=260334
Bug ID: 260334
Summary: archivers/p7zip: Add expiration date -- has known
vulns and unmaintained
Product: Ports & Packages
Version: Latest
Hardware: Any
OS: Any
Status: New
Keywords: easy, patch, patch-ready
Severity: Affects Many People
Priority: ---
Component: Individual Port(s)
Assignee: ports-bugs@FreeBSD.org
Reporter: portmaster@bsdforge.com
Created attachment 230039
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=230039&action=edit
git diff for archivers/p7zip
This pr adds an expiration date for archivers/p7zip
It's currently an unmaintained port and has not been
maintained upstream for years. There are a few
unresolved CVE's as discussed in bug #228239
There was a recent alternative added as
archivers/7-zip which is a fork using the same algos
but unlike p7zip, is actively maintained. So the
(eventual) removal of p7zip should have no real
impact.
Changes
Makefile
DEPRECATED= Unmaintained for years and has known vulnerabilities
EXPIRATION_DATE=2022-01-01
That's it.
Thanks!
--Chris
--
You are receiving this mail because:
You are the assignee for the bug.