Re: git: 307e28238343 - main - sysutils/screen49: Fix fetch
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Tue, 13 May 2025 17:31:28 UTC
The vuxml mechanism can be used to warn about CVEs while keeping the pkg available. Regards, Ronald. Van: Cy Schubert <Cy.Schubert@cschubert.com> Datum: 13 mei 2025 16:54 Aan: Alexey Dokuchaev <danfe@freebsd.org> CC: Cy Schubert <Cy.Schubert@cschubert.com>, Daniel Engberg <diizzy@freebsd.org>, Cy Schubert <cy@freebsd.org>, ports-committers@freebsd.org, dev-commits-ports-all@freebsd.org, dev-commits-ports-main@freebsd.org Onderwerp: Re: git: 307e28238343 - main - sysutils/screen49: Fix fetch > > > In message , Alexey Dokuchaev writes: > > On Mon, May 12, 2025 at 03:48:27PM -0700, Cy Schubert wrote: > > > In message , Daniel Engbe > > rg writes: > > > > ... > > > > > > > > Please undo this hack as upstream provides a tarball since 2023-08-17 > > > > > > Their tarball doesn't include security patches. Security patches are > > > included in their 4.9.1 branch but not in the tarball. > > > > > > Do you still want me to undo and mark the port FORBIDDEN? > > > > Please don't, it's okay. I use this port and have no intention to move > > to 5.x branch. Thanks! > > It suffers multiple CVEs. I don't see upstream releasing tagging 4.9.2. Are > we willing to have a virtually unmaintained (by upstream) screen in ports? > > > > > > ./danfe > > > -- > Cheers, > Cy Schubert > FreeBSD UNIX: Web: https://FreeBSD.org > NTP: Web: https://nwtime.org > > e^(i*pi)+1=0 > > > > > >