Subject: Re: about ticket 26865 (pkgsrc/xv)
To: Ronald van der Pol <Ronald.vanderPol@rvdp.org>
From: Thomas Klausner <wiz@NetBSD.org>
List: pkgsrc-bugs
Date: 03/15/2005 16:17:54
On Tue, Mar 15, 2005 at 04:11:08PM +0100, Ronald van der Pol wrote:
> I tried to install graphics/xv. It failed because of a vulnerability.
> There is a ticket (26865) which has been open since september 2004.
> Looking at its website, I notice that you have to pay for xv now.

That's not news, xv has been shareware all the time.

> I didn't know that. I guess this is the reason that pkgsrc/xv is
> not updated. But it seems wrong to leave pkgsrc/xv in the tree in
> the state it is now.

No, the reason is that there are a lot of possible security problems
in xv, and I don't think there's a complete patch set for all of them
yet.
 Thomas