https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=226458

            Bug ID: 226458
           Summary: www/chromium: unbundle libvpx
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: [email protected]
          Reporter: [email protected]
                CC: [email protected], [email protected]
          Assignee: [email protected]
             Flags: maintainer-feedback?([email protected])
             Flags: maintainer-feedback?([email protected]),
                    maintainer-feedback?([email protected])
                CC: [email protected], [email protected]

According to Mozilla v1.6.1 needs at least ports r460753 and ports r463848,
Android - ports r463910. There're probably more, so staying on anything but the
latest version is a security risk given the lack of sandboxing.

- www/chromium: bundles libvpx v1.6.1-1403-gcbe62b9c2
- www/iridium: bundles libvpx v1.6.1-263-g8121f8547
- www/qt5-webengine: bundles libvpx v1.6.0-702-g5c64c01

https://security-tracker.debian.org/tracker/source-package/libvpx

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Reply via email to