CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2026/10/22 02:25:38
Modified files:
mail : Makefile
devel/quirks : Makefile
devel/quirks/files: Quirks.pm
Removed files:
mail/sympa : Makefile distinfo
mail/sympa/patches: patch-configure
patch-src_etc_script_sympa_in
mail/sympa/pkg : DESCR PLIST README UNMESSAGE sympa.rc
wwsympa.rc
Log message:
remove outdated and vulnerable mail/sympa
HOMEPAGE is dead, last update to 6.2.16 and maitainer drop in 2016;
there are four security issues from 2018-2021 effecting our version:
https://www.sympa.community/security/
- Attacker can achieve XSS and so on in message archives.
- Attacker can execute any SOAP call by privileges of any Sympa accounts.
- Attacker can execute arbitrary code with root privileges.
- Possibility to create or modify files on the server filesystem.
OK ian
