CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2026/10/22 02:27:55
Modified files:
infrastructure/db: user.list
Log message:
remove outdated and vulnerable mail/sympa
HOMEPAGE is dead, last update to 6.2.16 and maitainer drop in 2016;
there are four security issues from 2018-2021 effecting our version:
https://www.sympa.community/security/
- Attacker can achieve XSS and so on in message archives.
- Attacker can execute any SOAP call by privileges of any Sympa accounts.
- Attacker can execute arbitrary code with root privileges.
- Possibility to create or modify files on the server filesystem.
OK ian
