sysutils/cfs

Chris Rees utisoft at gmail.com
Mon Sep 5 17:32:02 UTC 2011


On 5 Sep 2011 18:15, "Mikhail T." <mi+thun at aldan.algebra.com> wrote:
>
> On -10.01.-28163 14:59, Chris Rees wrote:
>>>
>>> I've had to deprecate sysutils/cfs -- there's a confirmed issue with
>>> failing locks [1] which has been open for two years with no fix.
>>>
>>
>> Whoops, also missed a CVE -- buffer overflows can cause a DoS.
>> Expiration date altered to 1 month accordingly.
>
>
> Is this the only vulnerability you are talking about?
>>
>> http://www.debian.org/security/2006/dsa-1138
>
> Does not seem hard to fix at all... Listing all of the fatal problems
would be helpful...
>>
>> -mi

If it's not that hard to fix then do it. If you're not going to fix it, why
are you even commenting?

More noise. Stop whining and do something about it.

I saw a port that is:

- broken
- vulnerable
- unmaintained
- dead upstream
- has been removed by other distributions

I don't use it, you don't use it, why do you care?

Chris


More information about the freebsd-ports mailing list