Bug 237107 - www/palemoon: update or remove port
Summary: www/palemoon: update or remove port
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: freebsd-ports-bugs (Nobody)
URL:
Keywords: needs-patch
Depends on:
Blocks:
 
Reported: 2019-04-08 13:15 UTC by Jan Beich
Modified: 2019-07-03 09:44 UTC (History)
4 users (show)

See Also:
lichray: maintainer-feedback+


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jan Beich freebsd_committer freebsd_triage 2019-04-08 13:15:48 UTC
27.* branch is no longer supported upstream and lacks many many security fixes. Can you update the port?

https://www.palemoon.org/releasenotes.shtml
Comment 1 Jan Beich freebsd_committer freebsd_triage 2019-04-08 13:21:59 UTC
portmgr, should the port be marked FORBIDDEN until VuXML is populated? Note, it'd prevent build on the package cluster.

Providing vulnerable packages with very large attack surface is irresponsible.
Comment 2 lichray 2019-04-08 16:59:00 UTC
I think I will need 2 weeks to update it.  My current employer causes me to not using FreeBSD at daily basis (in contrast, contributing to another package manager called vcpkg), so I could not priorities things on FreeBSD.

Meanwhile, if someone else would like to upgrade it and/or take the maintainership, you are welcome.
Comment 3 commit-hook freebsd_committer freebsd_triage 2019-07-03 07:31:04 UTC
A commit references this bug:

Author: tobik
Date: Wed Jul  3 07:30:02 UTC 2019
New revision: 505729
URL: https://svnweb.freebsd.org/changeset/ports/505729

Log:
  www/palemoon: Reset maintainer

  The current maintainer no longer has time to update this port.  An
  update is sorely needed though since it is now almost a year out
  of date.

  PR:		237107

Changes:
  head/www/palemoon/Makefile
Comment 4 commit-hook freebsd_committer freebsd_triage 2019-07-03 09:43:51 UTC
A commit references this bug:

Author: mat
Date: Wed Jul  3 09:43:46 UTC 2019
New revision: 505740
URL: https://svnweb.freebsd.org/changeset/ports/505740

Log:
  Remove www/palemoon, it is not maintained and full of security holes.

  PR:		237107

Changes:
  head/MOVED
  head/www/Makefile
  head/www/palemoon/
Comment 5 Mathieu Arnold freebsd_committer freebsd_triage 2019-07-03 09:44:16 UTC
Port has been removed.