From owner-freebsd-ports@FreeBSD.ORG  Thu Jun 21 08:29:55 2012
Return-Path: <owner-freebsd-ports@FreeBSD.ORG>
Delivered-To: ports@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 3C85D106567D
	for <ports@FreeBSD.org>; Thu, 21 Jun 2012 08:29:55 +0000 (UTC)
	(envelope-from linimon@FreeBSD.org)
Received: from portsmonj.FreeBSD.org (portsmonj.freebsd.org [69.147.83.46])
	by mx1.freebsd.org (Postfix) with ESMTP id 7F47F8FC20
	for <ports@FreeBSD.org>; Thu, 21 Jun 2012 08:29:53 +0000 (UTC)
Received: from portsmonj.freebsd.org (portsmonj.freebsd.org [69.147.83.46])
	by portsmonj.FreeBSD.org (8.14.5/8.14.4) with ESMTP id q5L8Tr17085195
	for <ports@FreeBSD.org>; Thu, 21 Jun 2012 08:29:53 GMT
	(envelope-from linimon@FreeBSD.org)
Date: Thu, 21 Jun 2012 08:29:53 GMT
Message-Id: <201206210829.q5L8Tr17085195@portsmonj.FreeBSD.org>
From: linimon@FreeBSD.org
To: ports@FreeBSD.org
Cc: 
Subject: FreeBSD ports which are currently marked forbidden
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: portmgr-feedback@FreeBSD.org
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Jun 2012 08:29:55 -0000

As part of an ongoing effort to reduce the number of problems in the
FreeBSD ports system, we periodically notify users about
ports that are marked as "forbidden" in their Makefiles.  Often,
these ports are so marked due to security concerns, such as known
exploits.

An overview of each port, including errors seen on the build farm,
is included below.

portname:           graphics/linux-tiff
forbidden because:  Vulnerable since 2004-10-13,
                    http://portaudit.freebsd.org/8816bf3a-7929-11df-bcce-0018f3e2eb82.html
build errors:       none.
overview:           http://portsmon.FreeBSD.org/portoverview.py?category=graphics&portname=linux-tiff


portname:           mail/squirreloutlook
forbidden because:  Based on a vulnerable version of mail/squirrelmail
build errors:       none.
overview:           http://portsmon.FreeBSD.org/portoverview.py?category=mail&portname=squirreloutlook


portname:           mail/sympa5
forbidden because:  Multiple vulnerabilities have been discovered in Sympa
                    archive management that allow to skip the
                    scenario-based authorization mechanisms. 
                    http://www.sympa.org/security_advisories
build errors:       none.
overview:           http://portsmon.FreeBSD.org/portoverview.py?category=mail&portname=sympa5


portname:           www/linux-f10-flashplugin10
forbidden because:  insecure version - use flashplugin11
build errors:       none.
overview:           http://portsmon.FreeBSD.org/portoverview.py?category=www&portname=linux-f10-flashplugin10


portname:           x11-toolkits/linux-pango
forbidden because:  Vulnerable since 2009-05-13,
                    http://portaudit.freebsd.org/4b172278-3f46-11de-becb-001cc0377035.html
build errors:       none.
overview:           http://portsmon.FreeBSD.org/portoverview.py?category=x11-toolkits&portname=linux-pango