textproc/jq and oniguruma5

Xavi Garcia xavi.garcia at gmail.com
Thu Jul 13 10:47:39 UTC 2017

Dear all,

jq depends on oniguruma5 but this library has quite a few vulnerabilities
and it doesn't seem to be maintained.


Would it be possible to change the dependencies in textproc/jq
from devel/oniguruma5 to devel/oniguruma6?

There's already a bug report but no action has been taken yet.


Kind regards,

Xavier Garcia

More information about the freebsd-ports mailing list