[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[HEADSUP] Removing vulnerable packages
The packages listed below were marked as vulnerable on January 1, 2010
and still marked as vulnerable on April 1, 2011, while having no version
number updates (except for PKGREVISION bumps) in the meantime.
Please speak up if you are currently using one of them.
If you speak up, please think about providing patches to fix the
security issues (though it's not a requirement).
I'll remove packages for which noone spoke up after the branch is cut,
but at the earliest two weeks from now.
This might also cause the removal of dependencies if the package
contains a library or is a dependency for another reason.
automake14-1.4.6 [will not remove, still used by too much, patches welcome]
kdegraphics-3.5.10 [will not remove, but patches welcome]
kdelibs-3.5.10 [will not remove, but patches welcome]
xdg-utils-1.0.2 [will not remove, but patches welcome]
P.S. Please reply to pkgsrc-users only (reply-to set)
 In rare cases, they might currently be affected by a different
unfixed vulnerability than they were in 2010.
Main Index |
Thread Index |