Re: CVS commit: pkgsrc/lang/pear

[Takahiro Kambe <taca%NetBSD.org@localhost>]

Hi,

In message <20190207102337.GH21757%joyent.com@localhost>
        on Thu, 7 Feb 2019 10:23:37 +0000,
        Jonathan Perkin <jperkin%joyent.com@localhost> wrote:
>> lang/pear: update Archive_Tar pear package to 1.4.6
> 
> This is broken as download.pear.php.net is offline, apparently due to
> a security breach.  As such this is now the top failure in my bulk
> builds.
I've checked with Archive_Tar 1.4.5 but forgot to check with 1.4.6.

> Could you take a look at moving it to using the GitHub releases if
> that's suitable?  I'm not sure we can trust any distfiles that were
> downloaded from the php.net site.
Github release is not the same content from pear.php.net.  So, I'll
commit these change soon.

* Make Archive_Tar to 1.4.5.
* Upload Archive_Tar-1.4.5.tgz to MASTER_SITE_LOCAL.
* Add patch to update Archive/Tar.php to 1.4.6.

I'm sorry to your inconvenience.

-- 
Takahiro Kambe <taca%NetBSD.org@localhost>