xdg-utils-1.0.2 (Re: [HEADSUP] Removing vulnerable packages

[Makoto Fujiwara <makoto%ki.nu@localhost>]

| From: Thomas Klausner <wiz%NetBSD.org@localhost>
| Subject: [HEADSUP] Removing vulnerable packages
| Date: Fri, 1 Apr 2011 11:47:30 +0200
| Message-ID: <20110401094730.GN1448%danbala.tuwien.ac.at@localhost>

wiz> xdg-utils-1.0.2 [will not remove, but patches welcome]

I have the patch to 1.1.0-rc1 prepared.
http://www.ki.nu/~makoto/pkgsrc/misc/xdg-utils-1.0.2
(pkglint says Looks fine).

(1) Shall I import it to wip for waiting rc1 removed, or
(2) just send-pr or
(3) extract the security patch and add to 1.0.2 ?

(3) might take a time.. :-)
---
Makoto Fujiwara
mef%NetBSD.org@localhost