From owner-freebsd-ports@FreeBSD.ORG Fri Oct 7 06:32:07 2011 Return-Path: Delivered-To: ports@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 48D801065696 for ; Fri, 7 Oct 2011 06:32:07 +0000 (UTC) (envelope-from linimon@FreeBSD.org) Received: from koala.droso.net (koala.droso.net [IPv6:2001:6c8:130:400::6]) by mx1.freebsd.org (Postfix) with ESMTP id EB2858FC16 for ; Fri, 7 Oct 2011 06:32:06 +0000 (UTC) Received: from koala.droso.net (localhost.droso.net [127.0.0.1]) by koala.droso.net (8.14.4/8.14.4) with ESMTP id p976W6po060546 for ; Fri, 7 Oct 2011 08:32:06 +0200 (CEST) (envelope-from linimon@FreeBSD.org) Date: Fri, 7 Oct 2011 08:32:06 +0200 (CEST) Message-Id: <201110070632.p976W6po060546@koala.droso.net> From: linimon@FreeBSD.org To: ports@FreeBSD.org Cc: Subject: FreeBSD ports which are currently marked forbidden X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: portmgr-feedback@FreeBSD.org List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Oct 2011 06:32:07 -0000 As part of an ongoing effort to reduce the number of problems in the FreeBSD ports system, we periodically notify users about ports that are marked as "forbidden" in their Makefiles. Often, these ports are so marked due to security concerns, such as known exploits. An overview of each port, including errors seen on the build farm, is included below. portname: archivers/pecl-phar forbidden because: Vulnerable since 2011-01-13, http://portaudit.freebsd.org/da3d381b-0ee6-11e0-becc-0022156e8794.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=archivers&portname=pecl-phar portname: databases/gnats forbidden because: Security issues build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=databases&portname=gnats portname: databases/mysql323-client forbidden because: Vulnerable since 2006-10-29, http://portaudit.freebsd.org/a0e92718-6603-11db-ab90-000e35fd8194.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=databases&portname=mysql323-client portname: databases/mysql323-scripts forbidden because: Vulnerable since 2006-10-29, http://portaudit.freebsd.org/a0e92718-6603-11db-ab90-000e35fd8194.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=databases&portname=mysql323-scripts portname: databases/mysql323-server forbidden because: Vulnerable since 2006-10-29, http://portaudit.freebsd.org/a0e92718-6603-11db-ab90-000e35fd8194.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=databases&portname=mysql323-server portname: databases/mysql40-client forbidden because: Vulnerable since 2006-10-29, http://portaudit.freebsd.org/a0e92718-6603-11db-ab90-000e35fd8194.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=databases&portname=mysql40-client portname: databases/mysql40-scripts forbidden because: Vulnerable since 2006-10-29, http://portaudit.freebsd.org/a0e92718-6603-11db-ab90-000e35fd8194.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=databases&portname=mysql40-scripts portname: databases/mysql40-server forbidden because: Vulnerable since 2006-10-29, http://portaudit.freebsd.org/a0e92718-6603-11db-ab90-000e35fd8194.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=databases&portname=mysql40-server portname: devel/libsoup22 forbidden because: Vulnerable since 2011-07-28, http://portaudit.freebsd.org/30cb4522-b94d-11e0-8182-485d60cb5385.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=devel&portname=libsoup22 portname: dns/bind9-sdb-ldap forbidden because: Vulnerable since 2011-06-04, http://portaudit.freebsd.org/1e1421f0-8d6f-11e0-89b4-001ec9578670.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=dns&portname=bind9-sdb-ldap portname: dns/bind9-sdb-postgresql forbidden because: Vulnerable since 2011-06-04, http://portaudit.freebsd.org/1e1421f0-8d6f-11e0-89b4-001ec9578670.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=dns&portname=bind9-sdb-postgresql portname: ftp/wgetpro forbidden because: Vulnerable since 2004-12-14, http://portaudit.freebsd.org/06f142ff-4df3-11d9-a9e7-0001020eed82.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=ftp&portname=wgetpro portname: games/quake2forge forbidden because: Vulnerable since 2005-01-21, http://portaudit.freebsd.org/2c25e762-6bb9-11d9-93db-000a95bc6fae.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=games&portname=quake2forge portname: graphics/linux-tiff forbidden because: Vulnerable since 2004-10-13, http://portaudit.freebsd.org/8816bf3a-7929-11df-bcce-0018f3e2eb82.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=graphics&portname=linux-tiff portname: japanese/mutt forbidden because: Vulnerable since 2007-07-29, http://portaudit.freebsd.org/863f95d3-3df1-11dc-b3d3-0016179b2dd5.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=japanese&portname=mutt portname: net-mgmt/nagios2 forbidden because: Vulnerable since 2009-06-30, http://portaudit.freebsd.org/3ebd4cb5-657f-11de-883a-00e0815b8da8.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=net-mgmt&portname=nagios2 portname: net/asterisk14 forbidden because: Vulnerable since 2011-06-25, http://portaudit.freebsd.org/40544e8c-9f7b-11e0-9bec-6c626dd55a41.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=net&portname=asterisk14 portname: net/isc-dhcp31-client forbidden because: Vulnerable since 2011-04-10, http://portaudit.freebsd.org/7e69f00d-632a-11e0-9f3a-001d092480a4.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=net&portname=isc-dhcp31-client portname: security/gnutls-devel forbidden because: Vulnerable since 2009-08-17, http://portaudit.freebsd.org/856a6f84-8b30-11de-8062-00e0815b8da8.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=security&portname=gnutls-devel portname: sysutils/syslog-ng1 forbidden because: Vulnerable since 2008-11-18, http://portaudit.freebsd.org/75f2382e-b586-11dd-95f9-00e0815b8da8.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=sysutils&portname=syslog-ng1 portname: www/gforge forbidden because: Vulnerable since 2005-08-09, http://portaudit.freebsd.org/d7cd5015-08c9-11da-bc08-0001020eed82.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=www&portname=gforge portname: www/linux-flashplugin7 forbidden because: Vulnerable since at least 2008-05-30, http://portaudit.freebsd.org/04c6187d-2d8f-11dd-98c9-00163e000016.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=www&portname=linux-flashplugin7 portname: www/opera-devel forbidden because: Vulnerable since 2010-06-25, http://portaudit.freebsd.org/77b9f9bc-7fdf-11df-8a8d-0008743bf21a.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=www&portname=opera-devel portname: www/plone3 forbidden because: vulnerable and unsupported upstream build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=www&portname=plone3 portname: www/seamonkey2 forbidden because: several security vulnerabilities build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=www&portname=seamonkey2 portname: www/serendipity-devel forbidden because: Vulnerable since 2008-04-25, http://portaudit.freebsd.org/9c133aa0-12bd-11dd-bab7-0016179b2dd5.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=www&portname=serendipity-devel portname: www/ziproxy forbidden because: Vulnerable since 2010-06-15, http://portaudit.freebsd.org/25673e6e-786b-11df-a921-0245fb008c0b.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=www&portname=ziproxy portname: x11-toolkits/linux-pango forbidden because: Vulnerable since 2009-05-13, http://portaudit.freebsd.org/4b172278-3f46-11de-becb-001cc0377035.html build errors: none. overview: http://portsmon.FreeBSD.org/portoverview.py?category=x11-toolkits&portname=linux-pango