diff options
author | Doug Barton <dougb@FreeBSD.org> | 2011-10-14 22:30:49 +0000 |
---|---|---|
committer | Doug Barton <dougb@FreeBSD.org> | 2011-10-14 22:30:49 +0000 |
commit | 4eb5b88d9eb1a88094ac3ae85f20e29e7510e97b (patch) | |
tree | 07820ebb6104ca954e4d94f3a2fdb93d78912435 /www/ziproxy/files | |
parent | Add doulos-compact 4.110, Doulos SIL TrueType font collection, compact (diff) |
As previously advertised, complete removal of vulnerable ports that
no one has stepped up to deal with:
archivers/pecl-phar Vulnerable since 2011-01-13
comms/libsyncml Depends on devel/libsoup22, which is FORBIDDEN
databases/mysql323-server Vulnerable since 2006-10-29
databases/mysql323-client Vulnerable since 2006-10-29
databases/mysql323-scripts Vulnerable since 2006-10-29
databases/mysql40-server Vulnerable since 2006-10-29
databases/mysql40-client Vulnerable since 2006-10-29
databases/mysql40-scripts Vulnerable since 2006-10-29
databases/p5-DBD-mysql40
Depends on databases/mysql40-server, which is FORBIDDEN
deskutils/buoh Depends on devel/libsoup22, which is FORBIDDEN
deskutils/libopensync-plugin-syncml
Depends on comms/libsyncml, which is DEPRECATED
devel/libsoup22 Vulnerable since 2011-07-28
dns/bind9-sdb-ldap Vulnerable since 2011-06-04
dns/bind9-sdb-postgresql Vulnerable since 2011-06-04
ftp/wgetpro Vulnerable since 2004-12-14
games/quake2forge Vulnerable since 2005-01-21
graphics/linux-tiff Vulnerable since 2004-10-13
japanese/mutt Vulnerable since 2007-07-29
japanese/asterisk14-sounds Depends on net/asterisk14, which is FORBIDDEN
net/asterisk14 Vulnerable since 2011-06-25
net/isc-dhcp31-client Vulnerable since 2011-04-10
net/isc-dhcp31-server Vulnerable since 2011-04-10
net/isc-dhcp31-relay Vulnerable since 2011-04-10
net/asterisk-app-ldap Depends on net/asterisk14, which is FORBIDDEN
net/asterisk-app-notify Depends on net/asterisk14, which is FORBIDDEN
net/asterisk-oh323
Depends on net/asterisk14, which is FORBIDDEN, does not compile on sparc64
net/asterisk14-addons Depends on net/asterisk14, which is FORBIDDEN
net/astfax Depends on net/asterisk14, which is FORBIDDEN
net-mgmt/nagios2 Vulnerable since 2009-06-30
www/gforge Vulnerable since 2005-08-09
www/linux-flashplugin7 Vulnerable since at least 2008-05-30
www/opera-devel Vulnerable since 2010-06-25, does not fetch
www/plone3 Vulnerable and unsupported upstream
www/serendipity-devel Vulnerable since 2008-04-25
www/ziproxy Vulnerable since 2010-06-15
www/asterisk-gui Depends on net/asterisk14, which is FORBIDDEN
x11-toolkits/linux-pango Vulnerable since 2009-05-13
Notes
Notes:
svn path=/head/; revision=283540
Diffstat (limited to 'www/ziproxy/files')
-rw-r--r-- | www/ziproxy/files/patch-ziproxy.conf | 119 | ||||
-rw-r--r-- | www/ziproxy/files/pkg-message.in | 2 | ||||
-rw-r--r-- | www/ziproxy/files/ziproxy.in | 41 |
3 files changed, 0 insertions, 162 deletions
diff --git a/www/ziproxy/files/patch-ziproxy.conf b/www/ziproxy/files/patch-ziproxy.conf deleted file mode 100644 index d4c2936545ae..000000000000 --- a/www/ziproxy/files/patch-ziproxy.conf +++ /dev/null @@ -1,119 +0,0 @@ ---- etc/ziproxy/ziproxy.conf.orig 2010-09-04 06:06:15.000000000 +0400 -+++ etc/ziproxy/ziproxy.conf 2010-09-10 00:52:13.000000000 +0400 -@@ -12,12 +12,12 @@ - ## If you have more than one network interface, - ## it's useful for restricting to which interface you want to bind to. - ## By default Ziproxy binds to all interfaces. --# Address = "127.0.0.1" -+Address = "127.0.0.1" - - ## Accepts conections only from that address. - ## WARNING: Remember to restrict the access to Ziproxy - ## if your machine is directly connected to the Internet. --# OnlyFrom = "127.0.0.1" -+OnlyFrom = "127.0.0.1" - - ## Limits the number of simultaneous active user connections. - ## This does not affect the connection queue (see: SOMAXCONN). -@@ -120,7 +120,7 @@ - ## In order to match a whole site: "http://www.examplehost.xyz/*" - ## - ## Default: none --# TOSMarkAsDiffURL = "/etc/ziproxy/change_tos.list" -+# TOSMarkAsDiffURL = "%%PREFIX%%/etc/ziproxy/change_tos.list" - - ## This is the content-type list of data that should - ## have their traffic "differentiated" -@@ -279,7 +279,7 @@ - ## - ## Default: (undefined) - ## See also: AuthMode --# AuthPasswdFile = "/etc/ziproxy/http.passwd" -+# AuthPasswdFile = "%%PREFIX%%/etc/ziproxy/http.passwd" - - ## Path to Ziproxy's SASL configuration file, where - ## a file named "ziproxy.conf" (not related to this one) -@@ -288,7 +288,7 @@ - ## - ## Default: (default SASL setting, OS-dependent, may be /etc/sasl2/) - ## See also: AuthMode --# AuthSASLConfPath = "/etc/ziproxy/sasl/" -+# AuthSASLConfPath = "%%PREFIX%%/etc/ziproxy/sasl/" - - ## Forward everything to another proxy server. - ## Modifications/compression is still applied. -@@ -330,7 +330,7 @@ - ## This option has no effect if BindOutgoing is not used. - ## Default: empty, no hosts are exempted. - ## See also: BindOutgoingExAddr --# BindOutgoingExList="/etc/ziproxy/bo_exception.list" -+# BindOutgoingExList="%%PREFIX%%/etc/ziproxy/bo_exception.list" - - ## Defines a specific IP to be bound to for hosts specified in BindOutgoingExList. - ## As with BindOutgoing, this IP must be a local IP from the server running Ziproxy. -@@ -702,7 +702,7 @@ - ## *** THIS IS NOT SUPPOSED TO BE A DEFINITIVE SOLUTION TO INCOMPATIBILITIES *** - ## - ## Default: empty (no file specified, inactive) --# URLNoProcessing = "/etc/ziproxy/noprocess.list" -+# URLNoProcessing = "%%PREFIX%%/etc/ziproxy/noprocess.list" - - ## This option specifies a file containing a list of URLs which its - ## data should be intercepted and replaced by another. -@@ -721,7 +721,7 @@ - ## - ## Default: empty (no file specified, inactive) - ## See also: URLReplaceDataCT --# URLReplaceData = "/etc/ziproxy/replace.list" -+# URLReplaceData = "%%PREFIX%%/etc/ziproxy/replace.list" - - ## Same as URLReplaceData, except it will only replace the data - ## from matching URLs if the content-type matches -@@ -735,7 +735,7 @@ - ## - ## Default: empty (no file specified, inactive) - ## See also: URLReplaceDataCTList, URLReplaceData --# URLReplaceDataCT = "/etc/ziproxy/replace_ct.list" -+# URLReplaceDataCT = "%%PREFIX%%/etc/ziproxy/replace_ct.list" - - ## List of content-types to use with the URLReplaceDataCT option. - ## This option is required by URLReplaceDataCT. -@@ -761,7 +761,7 @@ - ## A "access denied" 403 error will be returned when trying to access - ## one of those URLs. - ## Default: empty (no file specified, inactive) --# URLDeny = "/etc/ziproxy/deny.list" -+# URLDeny = "%%PREFIX%%/etc/ziproxy/deny.list" - - ## Custom HTTP Error Messages - ## Define here the full path to the HTML file which should be -@@ -769,21 +769,21 @@ - ## Note: The internal defaults give more precise error messages. - ## - ## 400 - Bad request (malformed URL, or unknown URL type) --# CustomError400="/var/ziproxy/error/400.html" -+# CustomError400="%%DATADIR%%/error/400.html" - ## 403 - Forbidden --# CustomError403="/var/ziproxy/error/403.html" -+# CustomError403="%%DATADIR%%/error/403.html" - ## 404 - Unknown host (Ziproxy will not issue 'page not found' errors itself) --# CustomError404="/var/ziproxy/error/404.html" -+# CustomError404="%%DATADIR%%/error/404.html" - ## 407 - Proxy Authentication Required --# CustomError407="/var/ziproxy/error/407.html" -+# CustomError407="%%DATADIR%%/error/407.html" - ## 408 - Request timed out --# CustomError408="/var/ziproxy/error/408.html" -+# CustomError408="%%DATADIR%%/error/408.html" - ## 409 - Conflict --# CustomError409="/var/ziproxy/error/409.html" -+# CustomError409="%%DATADIR%%/error/409.html" - ## 500 - Internal error (or empty response from server) --# CustomError500="/var/ziproxy/error/500.html" -+# CustomError500="%%DATADIR%%/error/500.html" - ## 503 - Connection refused (or service unavailable) --# CustomError503="/var/ziproxy/error/503.html" -+# CustomError503="%%DATADIR%%/error/503.html" - - - diff --git a/www/ziproxy/files/pkg-message.in b/www/ziproxy/files/pkg-message.in deleted file mode 100644 index 4989f0ae8c4d..000000000000 --- a/www/ziproxy/files/pkg-message.in +++ /dev/null @@ -1,2 +0,0 @@ -By default ziproxy is configured to accept connections on localhost only. -Edit %%PREFIX%%/etc/ziproxy/ziproxy.conf to allow remote access. diff --git a/www/ziproxy/files/ziproxy.in b/www/ziproxy/files/ziproxy.in deleted file mode 100644 index 0777a8bb7af1..000000000000 --- a/www/ziproxy/files/ziproxy.in +++ /dev/null @@ -1,41 +0,0 @@ -#!/bin/sh - -# PROVIDE: ziproxy -# REQUIRE: DAEMON -# -# Add the following lines to /etc/rc.conf.local or /etc/rc.conf -# to enable this service: -# -# ziproxy_enable (bool): Set to NO by default. -# Set it to YES to enable ziproxy. -# ziproxy_config (path): Set to %%PREFIX%%/etc/ziproxy/ziproxy.conf -# by default. -# - -. /etc/rc.subr - -name="ziproxy" -rcvar=${name}_enable - -command=%%PREFIX%%/bin/${name} -pidfile=/var/run/${name}.pid - -start_precmd="start_precmd" -stop_postcmd="stop_postcmd" - -load_rc_config $name - -: ${ziproxy_enable="NO"} -: ${ziproxy_config="%%PREFIX%%/etc/ziproxy/ziproxy.conf"} - -command_args="-d -c ${ziproxy_config} --pid-file ${pidfile}" - -start_precmd() { - rm -f ${pidfile} -} - -stop_postcmd() { - rm -f ${pidfile} -} - -run_rc_command "$1" |