Re: Ports depending on FORBIDDEN ports
I'm actually doing a slight superset by looking at dependent ports of (ignore/broken/forbidden/failed) ports, now that I have updated the graph and can "see" it better. It sounds like people are already working on the misc/compat3x dependents. Most of these ports are antiques. IMHO sysutils/eject should be fixed; there is a PR for it already: 112754. We definitely need to find someone who will keep zope up to date. I have privately emailed both the maintainer and the submitter of the last N PRs. There are a few other Python ports marked NO_PACKAGE, and I have also emailed the maintainers. This affects about 80 packages. Fixing all of these would add over 100 packages to the pointyhat builds. Thanks for taking a look at all of these. mcl ___ freebsd-ports@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Ports depending on FORBIDDEN ports
Greg Lewis píše v pá 20. 07. 2007 v 23:30 -0600: > > The misc/compat3x port is unlikely to ever be fixed and therefore it would > > seem reasonable to deprecate both it and the following ports that depend > > on it: > > java/gj-jdk11Extension of the Java programming language that > > supports generic types > > Should be removed. Modern versions support generics natively. Only the jdk11 slave, or whole java/gj? > > java/jdk11 Java Development Kit 1.1 > > java/jdk12 Java Development Kit 1.2 > > Should be removed, as should all JDKs < 1.4 except for jdk13. So should I axe all the linux-*13 too? -- Pav Lucistnik <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> Quantum physics was developed in the 1930's, as a result of a bet between Albert Einstein and Niels Bohr, to see who could come up with the most ridiculous theory and still have it published. signature.asc Description: Toto je digitálně podepsaná část zprávy
Re: Ports depending on FORBIDDEN ports
G'day Peter, Thanks for summarising this. Responses for some specific ports below. On Sat, Jul 21, 2007 at 10:52:52AM +1000, Peter Jeremy wrote: > The misc/compat3x port is unlikely to ever be fixed and therefore it would > seem reasonable to deprecate both it and the following ports that depend > on it: > java/gj-jdk11Extension of the Java programming language that > supports generic types Should be removed. Modern versions support generics natively. > java/infobus Enables dynamic exchange of data between > JavaBeans(TM) Just installs a JAR, can depend on a higher version of the JDK instead. > java/jdk11 Java Development Kit 1.1 > java/jdk12 Java Development Kit 1.2 Should be removed, as should all JDKs < 1.4 except for jdk13. > java/jfc Java Foundation Classes (JFC)/Swing Should be removed. > java/jre Standard Java Platform for running Java programs Should be removed. > java/tya A ``100% unofficial'' JIT-compiler for java Should depend on jdk13 instead of jdk11. > I'm particularly concerned about the existence of 'java/jre' and it's > description as the 'Standard Java Platform for running Java programs'. > This appears to occasionally trap people who are looking for a current > JRE and attempt to install java/jre. It and anything that depends on it should be removed. -- Greg Lewis Email : [EMAIL PROTECTED] Eyes Beyond Web : http://www.eyesbeyond.com Information Technology FreeBSD : [EMAIL PROTECTED] ___ freebsd-ports@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Ports depending on FORBIDDEN ports
The following three ports are currently FORBIDDEN due to security vulnerabilities but are listed as dependencies by a number of other ports: misc/compat3x: FreeBSD-SA-03:05.xdr, FreeBSD-SA-03:08.realpath - not fixed / no lib available sysutils/eject: Setuid root and has security issues www/zope: contains cross-site scripting vulnerability http://VuXML.FreeBSD.org/34414a1e-e377-11db-b8ab-000c76189c4c.html The misc/compat3x port is unlikely to ever be fixed and therefore it would seem reasonable to deprecate both it and the following ports that depend on it: audio/mbrola MBROLA voice synthesizer databases/java-sqlrelay Java classes to access to SQL Relay emulators/vmware-guestd3 VMware time synchronization daemon for FreeBSD guest OS (for VMware 3.x) emulators/vmware-tools3 VMware tools for guest OS (for VMware 3.x, FreeBSD version) japanese/vje30 Modern intelligent Japanese input engine (purchase version) java/collections JDK1.2 Collections' API for JDK1.1 environments java/gj-jdk11Extension of the Java programming language that supports generic types java/infobus Enables dynamic exchange of data between JavaBeans(TM) java/jdk11 Java Development Kit 1.1 java/jdk12 Java Development Kit 1.2 java/jfc Java Foundation Classes (JFC)/Swing java/jre Standard Java Platform for running Java programs java/tya A ``100% unofficial'' JIT-compiler for java lang/fesiFree EcmaScript Interpreter written in Java mail/pop3vscan A transparent POP3-Proxy with virus-scanning capabilities mail/yuzuA nicer mail user agent powered by JavaMail and JFC/Swing print/acrobatviewer Viewer for the PDF files written in Java(TM) security/amavis-perl Mail Virus Scanner (uses external antivirus) security/amavisd The daemonized version of amavis-perl security/vscan Evaluation version of a DOS/Windows/Linux file virus scanner www/hotjava Sun's Hotjava web browser www/mapedit A WWW authoring tool to create clickable maps www/ssserver Adds the search capability to a Web site I'm particularly concerned about the existence of 'java/jre' and it's description as the 'Standard Java Platform for running Java programs'. This appears to occasionally trap people who are looking for a current JRE and attempt to install java/jre. sysutils/eject only has one port depending on it. eject-1.5 is nearly 7 years old and appears to be abandonware. It would therefore seem reasonable to deprecate both it and the following port that depends on it: sysutils/cdbkup Simple but full-featured backup/restore perl scripts (uses gnu tar) www/zope has a significant number of ports depending on it. This is a very old version of zope (2.7.9) and some of these ports may be able to be adapted to a newer version of zope (2.9, 2.10 or 3.3 - all of which are in ports). www/zope and any of the following ports that can't be adapted to a later version of zope should probably be deprecated: japanese/zope-ejsplitter A Japanese word splitter for searching text in Zope Products japanese/zope-jamailhost A Zope hotfix Product to send mail in Japanese www/knowledgekit A mechanism for the automatic creation/maintenance of Knowledge Bases www/squishdot A web-based news publishing and discussion product for Zope www/znavigatorA Zope product to simplify the construction of navigation bars www/zope-FileSystemSite Enable file system based sites within Zope www/zope-annotations A generic way to add information to arbitrary Zope objects www/zope-archetypes Framework for the development of new Content Types in Zope/CMF/Plone www/zope-btreefolder2 Zope product that can store many items www/zope-calendaring Calendar product for Plone www/zope-cmf The Zope Content Management Framework (CMF) www/zope-cmfactionicons CMFActionIcons product for Zope/CMF www/zope-cmfformcontrollerCMFFormController product for Zope/CMF www/zope-cmfforum A forum for ZOPE CMF with file attachments www/zope-cmfphoto CMFPhoto product for Zope/CMF www/zope-cmfphotoalbumCMFPhotoAlbum product for Zope/CMF www/zope-cmfquickinstallerCMFQuickInstaller is a product for Zope/CMF www/zope-coreblog A Zope Blog/Weblog/Web-nikki Product www/zope-epoz A cross-browser-wysiwyg-editor for Zope/CMF www/zope-exuserfolder Extensible User Folder - Custom & database authenticatoin for Zope www/zope-formulator HTML form generatation and validation system for Zope www/zope-generatorGenerator product fo
