On Sat, May 30, 2026 at 12:44:29PM -0700, Mark Millard wrote:
On 5/30/26 06:15, void wrote:
On Fri, May 29, 2026 at 09:15:42AM -0700, Mark Millard wrote:
Note: the above are general comments that suggest the result may not be
surprising. I did not analyze the specifics for the timing related to
db5 and pcre .
pcre was EoL'd on 2021-06-21 going by
https://www.pcre.org/original/changelog.txt
and marked deprecated on 29 Feb 2024 in
https://www.freshports.org/devel/pcre/
db5, according to https://www.freshports.org/databases/db5/
Deprecated: EOLd, potential security issues, maybe use db18 instead
This port expired on: 2022-06-30
The builders do not change what they build until after the ports are
updated, for sure . . .
I acknowledge that it's possibly not really an issue in the hobbyist
or abstract context. In a more professional context, one would build
with options in poudriere. I was surprised to see such affected binaries on
pkg.f.o though.
--
