[Bug 226458] www/chromium: unbundle libvpx

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=226458

            Bug ID: 226458
           Summary: www/chromium: unbundle libvpx
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: chromium at FreeBSD.org
          Reporter: jbeich at FreeBSD.org
                CC: chromium at FreeBSD.org, kde at FreeBSD.org
          Assignee: chromium at FreeBSD.org
             Flags: maintainer-feedback?(chromium at FreeBSD.org)
             Flags: maintainer-feedback?(kde at FreeBSD.org),
                    maintainer-feedback?(chromium at FreeBSD.org)
                CC: chromium at FreeBSD.org, kde at FreeBSD.org

According to Mozilla v1.6.1 needs at least ports r460753 and ports r463848,
Android - ports r463910. There're probably more, so staying on anything but the
latest version is a security risk given the lack of sandboxing.

- www/chromium: bundles libvpx v1.6.1-1403-gcbe62b9c2
- www/iridium: bundles libvpx v1.6.1-263-g8121f8547
- www/qt5-webengine: bundles libvpx v1.6.0-702-g5c64c01

https://security-tracker.debian.org/tracker/source-package/libvpx

-- 
You are receiving this mail because:
You are on the CC list for the bug.