https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=226458

            Bug ID: 226458
           Summary: www/chromium: unbundle libvpx
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: chrom...@freebsd.org
          Reporter: jbe...@freebsd.org
                CC: chrom...@freebsd.org, k...@freebsd.org
          Assignee: chrom...@freebsd.org
             Flags: maintainer-feedback?(chrom...@freebsd.org)
             Flags: maintainer-feedback?(k...@freebsd.org),
                    maintainer-feedback?(chrom...@freebsd.org)
                CC: chrom...@freebsd.org, k...@freebsd.org

According to Mozilla v1.6.1 needs at least ports r460753 and ports r463848,
Android - ports r463910. There're probably more, so staying on anything but the
latest version is a security risk given the lack of sandboxing.

- www/chromium: bundles libvpx v1.6.1-1403-gcbe62b9c2
- www/iridium: bundles libvpx v1.6.1-263-g8121f8547
- www/qt5-webengine: bundles libvpx v1.6.0-702-g5c64c01

https://security-tracker.debian.org/tracker/source-package/libvpx

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
freebsd-chromium@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-chromium
To unsubscribe, send any mail to "freebsd-chromium-unsubscr...@freebsd.org"

Reply via email to