use clang headers from llvm distfile, extracted via a :patch target in
BUILD_DEPENDS, rather than a separate packaged file which needs updating
when llvm is updated. use special internal-only flavour so that it only
extracts the relevant dir rather than all of llvm(+clang+lldb+...)
emulators/wine needs the clang headers which are removed from packaging
(see "search and remove headers that might conflict with base"). to ensure
that it uses a correct version matching the installed clang, it's going to
depend on an devel/llvm :patch target, to extract the archive. however this
would normally extract 184k files which takes quite noticeable time, so add
an internal-use flavour "headerextract" to llvm that can be used in
emulators/wine to extract just the files it needs.
"i am fine with that flavor if you think it will make life easier" robert
remove outdated and vulnerable mail/sympa
HOMEPAGE is dead, last update to 6.2.16 and maitainer drop in 2016;
there are four security issues from 2018-2021 effecting our version:
https://www.sympa.community/security/
- Attacker can achieve XSS and so on in message archives.
- Attacker can execute any SOAP call by privileges of any Sympa accounts.
- Attacker can execute arbitrary code with root privileges.
- Possibility to create or modify files on the server filesystem.
OK ian
remove outdated and vulnerable mail/sympa
HOMEPAGE is dead, last update to 6.2.16 and maitainer drop in 2016;
there are four security issues from 2018-2021 effecting our version:
https://www.sympa.community/security/
- Attacker can achieve XSS and so on in message archives.
- Attacker can execute any SOAP call by privileges of any Sympa accounts.
- Attacker can execute arbitrary code with root privileges.
- Possibility to create or modify files on the server filesystem.
OK ian
yesterday's "MFC php changes from -current, to make tomorrow's RCE CVEs
easier to handle" accidentally dropped /usr/local/bin/{php,phar,phpize}
symlinks; correct
