climm package still relies on the vulnerable libotr3
Igor Roshchin
nospamstr at komkon.org
Sun Mar 13 03:30:25 UTC 2016
Dear Johan,
climm port depends on libotr3 which has been announced as vulnerable
just a few days ago. It looks like libotr3 will not be fixed, as
libotr-4... is recommended.
I am not sure how different the api is for the new version, and how
difficult it would be to update the dependency.
I am just letting you know in case you missed it.
https://vuxml.freebsd.org/freebsd/c2b1652c-e647-11e5-85be-14dae9d210b8.html
Regards,
Igor
More information about the freebsd-ports
mailing list