maintainer-feedback requested: [Bug 226458] www/chromium: unbundle libvpx

[bugzilla-noreply at freebsd.org]

Jan Beich <jbeich at FreeBSD.org> has asked kde at FreeBSD.org for
maintainer-feedback:
Bug 226458: www/chromium: unbundle libvpx
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=226458



--- Description ---
According to Mozilla v1.6.1 needs at least ports r460753 and ports r463848,
Android - ports r463910. There're probably more, so staying on anything but the
latest version is a security risk given the lack of sandboxing.

- www/chromium: bundles libvpx v1.6.1-1403-gcbe62b9c2
- www/iridium: bundles libvpx v1.6.1-263-g8121f8547
- www/qt5-webengine: bundles libvpx v1.6.0-702-g5c64c01

https://security-tracker.debian.org/tracker/source-package/libvpx