[aur-requests] [PRQ#34683] Deletion Request for libav-no-libs

notify at aur.archlinux.org notify at aur.archlinux.org
Tue May 17 00:40:23 UTC 2022


MarsSeed [1] filed a deletion request for libav-no-libs [2]:

I recommend to delete this orphaned package
for the discontinued libav fork project.

Last tagged release was in 2018.
(Last repo commit was in 2019.)
Project bugzilla got shut down.

Code contains dozens of unfixed vulnerabilities:
https://www.cvedetails.com/vulnerability-
list/vendor_id-11428/product_id-20944/Libav-Libav.html

Project maintainer clarified in 2020 that
the project is 'dead':
https://lists.libav.org/pipermail/libav-devel/2020-April/086589.html

From build(), it does not seem like
this is a "no-libs" package, as none of the
source-built-in libraries are disabled with configure. (Which, if
true, would mean that
this package *might* conflict with ffmpeg libs.
Also, most unpached vulnerabimities are in the codec
libraries.)

There are no user comments for this package.

Nothing requires this on AUR as a mandatory
dependency. Safe to delete.

[1] https://aur.archlinux.org/account/MarsSeed/
[2] https://aur.archlinux.org/pkgbase/libav-no-libs/


More information about the aur-requests mailing list