Hi, On Monday, August 28, 2017 03:11 CEST, Jeremy Evans <jer...@openbsd.org> wrote:
> puppet-dashboard is one of the only remaining ports still depending on > ruby 1.8. > > Embeds Rails 2.3.17, released in Feburary 2013, and many other ruby > libraries of similar vintage. I'm not sure it's actually vulnerable to > any of the many Rails vulnerabilities announced since, but it wouldn't > surprise me. > > Port doesn't actually build anything, it basically just untars and > retars the distfile, other than fixing shebang lines and changing > some hardcoded paths. I think removing it using the following quirk > makes sense: > > "web application with no benefit being packaged" > > OKs to remove? IIRC, I asked quite some time ago, but at thta time, someone was still using it. But removing it is fine with me, puppetboard is a nice alternative ;) Sebastian > > Thanks, > Jeremy
