FreeBSD ports which are currently marked forbidden

linimon at FreeBSD.org linimon at FreeBSD.org
Sun Aug 17 11:38:38 UTC 2008


As part of an ongoing effort to reduce the number of problems in the
FreeBSD ports system, we periodically notify users about
ports that are marked as "forbidden" in their Makefiles.  Often,
these ports are so marked due to security concerns, such as known
exploits.

An overview of each port, including errors seen on the build farm,
is included below.

portname:           databases/gnats
forbidden because:  Security issues
build errors:       none.
overview:           http://portsmon.FreeBSD.org/portoverview.py?category=databases&portname=gnats


portname:           dns/bind9-dlz
forbidden because:  vulnerable to cache poisioning if recursive lookup
                    enabled
build errors:       none.
overview:           http://portsmon.FreeBSD.org/portoverview.py?category=dns&portname=bind9-dlz


portname:           misc/compat3x
forbidden because:  FreeBSD-SA-03:05.xdr, FreeBSD-SA-03:08.realpath  - not
                    fixed / no lib available
build errors:       none.
overview:           http://portsmon.FreeBSD.org/portoverview.py?category=misc&portname=compat3x


portname:           net-p2p/peercast
forbidden because:  arbitrary code execution,
                    http://www.vuxml.org/freebsd/402ae710-26a2-11dd-ae05-825f4c35000a.html
build errors:       none.
overview:           http://portsmon.FreeBSD.org/portoverview.py?category=net-p2p&portname=peercast


portname:           www/tdiary-devel
forbidden because:  contains a vulnerability:
                    http://www.tdiary.org/20071215.html written in
                    Japanese
build errors:       none.
overview:           http://portsmon.FreeBSD.org/portoverview.py?category=www&portname=tdiary-devel


portname:           www/zope
forbidden because:  contains cross-site scripting vulnerability
                    http://VuXML.FreeBSD.org/34414a1e-e377-11db-b8ab-000c76189c4c.html
build errors:       none.
overview:           http://portsmon.FreeBSD.org/portoverview.py?category=www&portname=zope


More information about the freebsd-ports mailing list