From owner-freebsd-ports@FreeBSD.ORG Wed Sep 24 08:31:54 2003 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 59F5C16A4B3; Wed, 24 Sep 2003 08:31:54 -0700 (PDT) Received: from mx2.fillmore-labs.com (lima.fillmore-labs.com [62.138.193.83]) by mx1.FreeBSD.org (Postfix) with ESMTP id E4ADB43F85; Wed, 24 Sep 2003 08:31:52 -0700 (PDT) (envelope-from eikemeier@fillmore-labs.com) Received: from p5080b843.dip.t-dialin.net ([80.128.184.67] helo=fillmore-labs.com ident=kttm1wnyjosukqde) by mx2.fillmore-labs.com with asmtp (TLSv1:AES256-SHA:256) (Exim 4.24; FreeBSD 4.9) id 1A2BcK-000KDN-Tw; Wed, 24 Sep 2003 17:31:49 +0200 Message-ID: <3F71B8E2.4040402@fillmore-labs.com> Date: Wed, 24 Sep 2003 17:31:46 +0200 From: Oliver Eikemeier MIME-Version: 1.0 To: FreeBSD Ports , Lachlan O'Dea Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: quoted-printable X-Authenticated-Sender: eikemeier@fillmore-labs.com User-Agent: KMail/1.5.9 Organization: Fillmore Labs GmbH X-Complaints-To: abuse@fillmore-labs.com cc: Karl Dietz cc: Domas Mituzas cc: Sheldon Hearn cc: =?UTF-8?B?TcOhcmlvIFPDqXJnaW8gRg==?= =?UTF-8?B?dWppa2F3YSBGZXJyZWlyYQ==?= Subject: removal of port net/openldap12 X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: FreeBSD Ports List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Sep 2003 15:31:54 -0000 Hi ports, OpenLDAP 1.2 is ancient, unsupported by the OpenLDAP security team and has potential security issues: http://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCAN-2002-1378 http://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCAN-2002-1379 http://www.securityfocus.com/bid/6328 I think we should mark as broken: net/openldap12 Lachlan O'Dea This affects the following ports: mail/exim-ldap Sheldon Hearn mail/qmail-ldap M=C3=A1rio S=C3=A9rgio Fujikawa Ferreira mail/smunge Domas Mituzas net/eudc-emacs20 FreeBSD Ports net/py-ldap1 FreeBSD Ports www/web500gw Karl Dietz Any objections? Oliver