From owner-freebsd-ports@FreeBSD.ORG  Mon Jan 28 11:35:05 2008
Return-Path: <owner-freebsd-ports@FreeBSD.ORG>
Delivered-To: ports@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id D0AAF16A4AB
	for <ports@FreeBSD.org>; Mon, 28 Jan 2008 11:35:05 +0000 (UTC)
	(envelope-from linimon@FreeBSD.org)
Received: from mail.droso.net (koala.ipv6.droso.net
	[IPv6:2001:6c8:6:c:20d:56ff:fe6f:f935])
	by mx1.freebsd.org (Postfix) with ESMTP id 9613A13C442
	for <ports@FreeBSD.org>; Mon, 28 Jan 2008 11:35:05 +0000 (UTC)
	(envelope-from linimon@FreeBSD.org)
Received: from koala.droso.net (localhost.droso.net [IPv6:::1])
	by mail.droso.net (Postfix) with ESMTP id CFB721CCCC
	for <ports@FreeBSD.org>; Mon, 28 Jan 2008 12:35:04 +0100 (CET)
From: linimon@FreeBSD.org
To: ports@FreeBSD.org
Message-Id: <20080128113504.CFB721CCCC@mail.droso.net>
Date: Mon, 28 Jan 2008 12:35:04 +0100 (CET)
Cc: 
Subject: FreeBSD ports which are currently marked forbidden
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 28 Jan 2008 11:35:05 -0000

As part of an ongoing effort to reduce the number of problems in the
FreeBSD ports system, we periodically notify users about
ports that are marked as "forbidden" in their Makefiles.  Often,
these ports are so marked due to security concerns, such as known
exploits.

An overview of each port, including errors seen on the build farm,
is included below.

portname:           databases/gnats
forbidden because:  Security issues
build errors:       none.
overview:           http://portsmon.FreeBSD.org/portoverview.py?category=databases&portname=gnats


portname:           french/pluxml
forbidden because:  no active development and known security
                    vulnerabilities, see
                    http://www.securityfocus.com/bid/24607/info for
                    details
build errors:       none.
overview:           http://portsmon.FreeBSD.org/portoverview.py?category=french&portname=pluxml


portname:           ftp/greed
forbidden because:  Insecure GRX file processing
build errors:       none.
overview:           http://portsmon.FreeBSD.org/portoverview.py?category=ftp&portname=greed


portname:           misc/compat3x
forbidden because:  FreeBSD-SA-03:05.xdr, FreeBSD-SA-03:08.realpath  - not
                    fixed / no lib available
build errors:       none.
overview:           http://portsmon.FreeBSD.org/portoverview.py?category=misc&portname=compat3x


portname:           net/gnu-finger
forbidden because: 
                    http://www.vuxml.org/freebsd/610bc692-a2ad-11dc-900c-000bcdc1757a.html
build errors:       none.
overview:           http://portsmon.FreeBSD.org/portoverview.py?category=net&portname=gnu-finger


portname:           www/tdiary-devel
forbidden because:  contains a vulnerability:
                    http://www.tdiary.org/20071215.html written in
                    Japanese
build errors:       none.
overview:           http://portsmon.FreeBSD.org/portoverview.py?category=www&portname=tdiary-devel


portname:           www/zope
forbidden because:  contains cross-site scripting vulnerability
                    http://VuXML.FreeBSD.org/34414a1e-e377-11db-b8ab-000c76189c4c.html
build errors:       none.
overview:           http://portsmon.FreeBSD.org/portoverview.py?category=www&portname=zope