CVS commit: pkgsrc/multimedia

["Jonathan Schleifer" <js%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   js
Date:           Mon Aug 31 20:51:05 UTC 2026

Modified Files:
        pkgsrc/multimedia: Makefile
Removed Files:
        pkgsrc/multimedia/sickgear: DESCR Makefile PLIST distinfo
        pkgsrc/multimedia/sickgear/files: sickgear
        pkgsrc/multimedia/sickgear/patches: patch-sickgear.py
            patch-sickgear_version_checker.py

Log Message:
Remove multimedia/sickgear for catastrophic security issues (backdoor?)

It is doing the equivalent of downloading code from a wiki page and
executing it. But even if this would not be editable by everybody by
leaking the deploy token, it would still be a potential backdoor for the
developers.

See https://github.com/SickGear/SickGear/issues/1517 for details.

The patches in pkgsrc neutered this a bit, but I still urge everybody
who has this installed to *immediately* uninstall it.


To generate a diff of this commit:
cvs rdiff -u -r1.362 -r1.363 pkgsrc/multimedia/Makefile
cvs rdiff -u -r1.1 -r0 pkgsrc/multimedia/sickgear/DESCR
cvs rdiff -u -r1.21 -r0 pkgsrc/multimedia/sickgear/Makefile
cvs rdiff -u -r1.7 -r0 pkgsrc/multimedia/sickgear/PLIST
cvs rdiff -u -r1.12 -r0 pkgsrc/multimedia/sickgear/distinfo
cvs rdiff -u -r1.1 -r0 pkgsrc/multimedia/sickgear/files/sickgear
cvs rdiff -u -r1.4 -r0 pkgsrc/multimedia/sickgear/patches/patch-sickgear.py
cvs rdiff -u -r1.1 -r0 \
    pkgsrc/multimedia/sickgear/patches/patch-sickgear_version_checker.py

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/multimedia/Makefile
diff -u pkgsrc/multimedia/Makefile:1.362 pkgsrc/multimedia/Makefile:1.363
--- pkgsrc/multimedia/Makefile:1.362    Wed Aug 12 03:46:41 2026
+++ pkgsrc/multimedia/Makefile  Mon Aug 31 20:51:04 2026
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.362 2026/08/12 03:46:41 ryoon Exp $
+# $NetBSD: Makefile,v 1.363 2026/08/31 20:51:04 js Exp $
 #
 
 COMMENT=       Multimedia utilities
@@ -187,7 +187,6 @@ SUBDIR+=    ruby-gstreamer
 SUBDIR+=       ruby-ming
 SUBDIR+=       schroedinger
 SUBDIR+=       sfml
-SUBDIR+=       sickgear
 SUBDIR+=       smpeg
 SUBDIR+=       smpeg2
 SUBDIR+=       ssr