Date: Thu, 13 Jul 2017 12:47:37 +0200 From: Xavi Garcia <xavi.garcia@gmail.com> To: freebsd-ports@freebsd.org Subject: textproc/jq and oniguruma5 Message-ID: <CAPonemxGc9aKay2HYskcoP%2BaHM0b8ZQtUt=AB6tAg9cmr9z54w@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
Dear all, jq depends on oniguruma5 but this library has quite a few vulnerabilities and it doesn't seem to be maintained. https://vuxml.freebsd.org/freebsd/b396cf6c-62e6-11e7-9def-b499baebfeaf.html Would it be possible to change the dependencies in textproc/jq from devel/oniguruma5 to devel/oniguruma6? There's already a bug report but no action has been taken yet. https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220586 Kind regards, Xavier Garcia
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAPonemxGc9aKay2HYskcoP%2BaHM0b8ZQtUt=AB6tAg9cmr9z54w>