textproc/jq and oniguruma5
Xavi Garcia
xavi.garcia at gmail.com
Thu Jul 13 10:47:39 UTC 2017
Dear all,
jq depends on oniguruma5 but this library has quite a few vulnerabilities
and it doesn't seem to be maintained.
https://vuxml.freebsd.org/freebsd/b396cf6c-62e6-11e7-9def-b499baebfeaf.html
Would it be possible to change the dependencies in textproc/jq
from devel/oniguruma5 to devel/oniguruma6?
There's already a bug report but no action has been taken yet.
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220586
Kind regards,
Xavier Garcia
More information about the freebsd-ports
mailing list