What's up with updating tiff?

I try pkg_add -u tiff and get this: Package tiff-4.0.3p2 found, matching insecure tiff-4.0.4beta Does that mean there is an update, but that it's being held back because of an unfixed vulnerability? -- Joel Rees

Re: What's up with updating tiff?

On Mon, Jun 15, 2015 at 07:27:13PM +0900, Joel Rees wrote: I try pkg_add -u tiff and get this: Package tiff-4.0.3p2 found, matching insecure tiff-4.0.4beta Does that mean there is an update, but that it's being held back because of an unfixed vulnerability? pkg_add -uv on

Re: What's up with updating tiff?

On 6/15/2015 6:27 AM, Joel Rees wrote: Package tiff-4.0.3p2 found, matching insecure tiff-4.0.4beta If you're using openup, try making sure https://stable.mtier.org/updates/$(uname -r)/$(arch -s) appears before the OpenBSD one in PKG_PATH. I had a similar issue with php dependencies when