On 10/21/26 8:44 PM, Klemens Nanni wrote:
HOMEPAGE is dead, last update to 6.2.16 and maitainer drop in 2016;
there are four security issues from 2018-2021 effecting our version:
https://www.sympa.community/security/
- Attacker can achieve XSS and so on in message archives.
- Attacker can execute any SOAP call by privileges of any Sympa accounts.
- Attacker can execute arbitrary code with root privileges.
- Possibility to create or modify files on the server filesystem.
We obviously stopped caring a decade ago.
OK to remove?
Information for
https://ftp.hostserver.de/pub/OpenBSD/snapshots/packages/amd64/sympa-6.2.16p6.tgz
Comment:
mailing list manager with web interface
Description:
SYMPA is an electronic mailing list manager. It is used to automate list
management functions such as subscription, moderation and management of
archives. SYMPA also manages sending of messages to the lists, and makes
it possible to reduce the load on the system. Provided that you have
enough memory on your system, Sympa is especially well adapted for big
lists.
Maintainer: The OpenBSD ports mailing-list <[email protected]>
WWW: http://www.sympa.org
...
We obviously stopped caring a decade ago.
OK to remove?
I have no "sympathy" for this corpse. OK to dump it over the stern.
