Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 11 Dec 2021 08:53:07 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 260334] archivers/p7zip: Add expiration date -- has known vulns and unmaintained
Message-ID:  <bug-260334-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D260334

            Bug ID: 260334
           Summary: archivers/p7zip: Add expiration date -- has known
                    vulns and unmaintained
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Keywords: easy, patch, patch-ready
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs@FreeBSD.org
          Reporter: portmaster@bsdforge.com

Created attachment 230039
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D230039&action=
=3Dedit
git diff for archivers/p7zip

This pr adds an expiration date for archivers/p7zip
It's currently an unmaintained port and has not been
maintained upstream for years. There are a few
unresolved CVE's as discussed in bug #228239
There was a recent alternative added as
archivers/7-zip which is a fork using the same algos
but unlike p7zip, is actively maintained. So the
(eventual) removal of p7zip should have no real
impact.

Changes
Makefile
DEPRECATED=3D     Unmaintained for years and has known vulnerabilities
EXPIRATION_DATE=3D2022-01-01

That's it.

Thanks!

--Chris

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-260334-7788>