The portage versions of canto-curses and canto-daemon are years out of date, unsupported and vulnerable (see #533654). I understand there is a lack of interest in maintaining these packages, but they really either need to be updated or removed completely. I emailed the devs on the Changelog for canto-curses, who suggested that I file an official bug. Reproducible: Always
Assigning to maintainer (and also CC treecleaners for the case they are not bumped to ensure the vulnerable versions are not kept)
+*canto-daemon-0.9.1 (01 May 2015) + + 01 May 2015; Sergey Popov <pinkbyte@gentoo.org> -canto-daemon-0.8.2.ebuild, + +canto-daemon-0.9.1.ebuild: + Version bump, wrt bug #548184. Drop old vulnerable version, wrt bug #533654. + Thanks to Jack Miller <jack AT codezen.org> for discovering this issue +*canto-curses-0.9.3 (01 May 2015) + + 01 May 2015; Sergey Popov <pinkbyte@gentoo.org> -canto-curses-0.8.4.ebuild, + +canto-curses-0.9.3.ebuild: + Version bump, wrt bug #548184. Drop old vulnerable version, wrt bug #533654. + Thanks to Jack Miller <jack AT codezen.org> for discovering this issue
