climm package still relies on the vulnerable libotr3

Igor Roshchin nospamstr at komkon.org
Sun Mar 13 03:30:25 UTC 2016



Dear Johan,

climm port depends on libotr3  which has been announced as vulnerable 
just a few days ago. It looks like libotr3 will not be fixed, as 
libotr-4... is recommended.
I am not sure how different the api is for the new version, and how 
difficult it would be to update the dependency.

I am just letting you know in case you missed it.
https://vuxml.freebsd.org/freebsd/c2b1652c-e647-11e5-85be-14dae9d210b8.html

Regards,

Igor



More information about the freebsd-ports mailing list