The following three ports are currently FORBIDDEN due to security vulnerabilities but are listed as dependencies by a number of other ports: misc/compat3x: FreeBSD-SA-03:05.xdr, FreeBSD-SA-03:08.realpath - not fixed / no lib available sysutils/eject: Setuid root and has security issues www/zope: contains cross-site scripting vulnerability http://VuXML.FreeBSD.org/34414a1e-e377-11db-b8ab-000c76189c4c.html
The misc/compat3x port is unlikely to ever be fixed and therefore it would seem reasonable to deprecate both it and the following ports that depend on it: audio/mbrola MBROLA voice synthesizer databases/java-sqlrelay Java classes to access to SQL Relay emulators/vmware-guestd3 VMware time synchronization daemon for FreeBSD guest OS (for VMware 3.x) emulators/vmware-tools3 VMware tools for guest OS (for VMware 3.x, FreeBSD version) japanese/vje30 Modern intelligent Japanese input engine (purchase version) java/collections JDK1.2 Collections' API for JDK1.1 environments java/gj-jdk11 Extension of the Java programming language that supports generic types java/infobus Enables dynamic exchange of data between JavaBeans(TM) java/jdk11 Java Development Kit 1.1 java/jdk12 Java Development Kit 1.2 java/jfc Java Foundation Classes (JFC)/Swing java/jre Standard Java Platform for running Java programs java/tya A ``100% unofficial'' JIT-compiler for java lang/fesi Free EcmaScript Interpreter written in Java mail/pop3vscan A transparent POP3-Proxy with virus-scanning capabilities mail/yuzu A nicer mail user agent powered by JavaMail and JFC/Swing print/acrobatviewer Viewer for the PDF files written in Java(TM) security/amavis-perl Mail Virus Scanner (uses external antivirus) security/amavisd The daemonized version of amavis-perl security/vscan Evaluation version of a DOS/Windows/Linux file virus scanner www/hotjava Sun's Hotjava web browser www/mapedit A WWW authoring tool to create clickable maps www/ssserver Adds the search capability to a Web site I'm particularly concerned about the existence of 'java/jre' and it's description as the 'Standard Java Platform for running Java programs'. This appears to occasionally trap people who are looking for a current JRE and attempt to install java/jre. sysutils/eject only has one port depending on it. eject-1.5 is nearly 7 years old and appears to be abandonware. It would therefore seem reasonable to deprecate both it and the following port that depends on it: sysutils/cdbkup Simple but full-featured backup/restore perl scripts (uses gnu tar) www/zope has a significant number of ports depending on it. This is a very old version of zope (2.7.9) and some of these ports may be able to be adapted to a newer version of zope (2.9, 2.10 or 3.3 - all of which are in ports). www/zope and any of the following ports that can't be adapted to a later version of zope should probably be deprecated: japanese/zope-ejsplitter A Japanese word splitter for searching text in Zope Products japanese/zope-jamailhost A Zope hotfix Product to send mail in Japanese www/knowledgekit A mechanism for the automatic creation/maintenance of Knowledge Bases www/squishdot A web-based news publishing and discussion product for Zope www/znavigator A Zope product to simplify the construction of navigation bars www/zope-FileSystemSite Enable file system based sites within Zope www/zope-annotations A generic way to add information to arbitrary Zope objects www/zope-archetypes Framework for the development of new Content Types in Zope/CMF/Plone www/zope-btreefolder2 Zope product that can store many items www/zope-calendaring Calendar product for Plone www/zope-cmf The Zope Content Management Framework (CMF) www/zope-cmfactionicons CMFActionIcons product for Zope/CMF www/zope-cmfformcontroller CMFFormController product for Zope/CMF www/zope-cmfforum A forum for ZOPE CMF with file attachments www/zope-cmfphoto CMFPhoto product for Zope/CMF www/zope-cmfphotoalbum CMFPhotoAlbum product for Zope/CMF www/zope-cmfquickinstaller CMFQuickInstaller is a product for Zope/CMF www/zope-coreblog A Zope Blog/Weblog/Web-nikki Product www/zope-epoz A cross-browser-wysiwyg-editor for Zope/CMF www/zope-exuserfolder Extensible User Folder - Custom & database authenticatoin for Zope www/zope-formulator HTML form generatation and validation system for Zope www/zope-generator Generator product for Zope www/zope-groupuserfolder GroupUserFolder product for Zope www/zope-guf A roll-your-own user folder product for Zope www/zope-i18nlayer I18NLayer product for Zope www/zope-kupu A 'document-centric' client-side editor for Mozilla/IE www/zope-mimetypesregistry MimetypesRegistry product for Zope/CMF www/zope-mindmapbbs A Zope product to create graphical BBS based on Mind Map www/zope-mysqluserfolder A Zope user folder which uses MySQL database to store user information www/zope-parsedxml Access and manipulate XML documents within Zope www/zope-placelesstranslationservice PlacelessTranslationService product for Zope/CMF www/zope-plonelanguagetool PloneLanguageTool product for Zope www/zope-portaltransforms PortalTransforms product for Zope/CMF www/zope-proxyindex Plugin catalog index using TALES instead attribute lookup/call www/zope-silva Web application (CMS) to manage/edit structured documents www/zope-silvaviews A component used by Silva to attach views to objects www/zope-ttwtype TTWType product for CMF/Plone www/zope-validation Validation product for Zope www/zope-xmlmethods Provides methods to apply to Zope objects for XML/XSLT processing www/zope-xmlwidgets XMLWidgets - dynamic translations of ParsedXML to HTML pages www/zope-zmysqlda MySQL Database Adapter for the Zope web application framework www/zope-zsyncer Allows multiple Zopes to be synchronized via xmlrpc www/zope-zwiki A WikiWikiWeb product for Zope (colaborative web site system) All relevant maintainers are copied. -- Peter Jeremy
pgpXZzMld9Z0Y.pgp
Description: PGP signature
