On Sat, Jul 19, 2008 at 02:13:37PM +0200, Tonnerre Lombard wrote:
> Salut, Geert,
>
> On Thu, 17 Jul 2008 11:59:43 +0200, Geert Hendrickx wrote:
> > I don't want my shell to have a dependency on perl just because of a
> > script that is included for the benefit of zsh developers only[1]...
>
> Feel free to remove it. The purpose of my patch was to fix a
> vulnerability which had been known and unaddressed for many monthes.
> You're free to remove the script entirely or whatever suits you.
The script may contain a vulnerability but AFAIK it's not installed by the
pkgsrc package so no real reason to fix it. Or at least, no reason to add
perl as a dependency right now. (I'm not opposed to the fix, I'm opposed
to the dependency on perl.)
Geert
Attachment:
pgpUIVrF7k7oJ.pgp
Description: PGP signature