multimedia/sickgear removed due to several RCEs + upstream response

[Jonathan Schleifer <js%nil.im@localhost>]

I should probably also write here: A few days ago, I deleted 
multimedia/sickgear from pkgsrc due to several remote code execution 
bugs, several things that have a strong smell like a backdoor (I can't 
say they are or they are not - it depends on what the author's webserver 
serves at which time etc.) and the upstream response to it: 
https://github.com/SickGear/SickGear/issues/1517

Since upstream actively tried to brush everything under the rug, edited 
my comments to misrepresent what I said etc. you might instead want to 
read what I let NixOS know as a courtesy:
https://github.com/SickGear/SickGear/issues/1517

tl;dr: Several files downloaded from the author's webserver with HTTPS 
verification disabled (so RCE for a MITM when using e.g. a public WiFi 
and always RCE for the author). Some heavily obfuscated files that have 
a smell etc.

pkgsrc had some of the worst parts disabled (I'm glad I patched those 
out), but the periodic downloading of alt.rar without HTTPS verification 
and then extracting it with an implementation with a symlink vuln is 
definitely affecting NetBSD.

If you had this installed, you probably want to reinstall your system.

--
Jonathan