[MacPorts] #73945: aacgain: deprecate (orphaned, unmaintained upstream since 2010, multiple unpatched CVEs; replace with mp3rgain)
MacPorts
noreply at macports.org
Sat May 2 18:32:59 UTC 2026
#73945: aacgain: deprecate (orphaned, unmaintained upstream since 2010, multiple
unpatched CVEs; replace with mp3rgain)
--------------------------+--------------------------------------
Reporter: M-Igashi | Owner: (none)
Type: enhancement | Status: new
Priority: Normal | Milestone:
Component: ports | Version:
Resolution: | Keywords: deprecation security cve
Port: aacgain |
--------------------------+--------------------------------------
Comment (by M-Igashi):
Hi Ryan,
The text was drafted with AI assistance for phrasing/formatting, but the
substance → the security analysis, the Homebrew precedent, and the
rationale for replacing aacgain, is mine. I authored mp3rgain (merged as
the audio-category port `mp3rgain` via https://github.com/macports
/macports-ports/pull/32494 → also commented the issue) and wrote the
vulnerability write-up linked in the ticket.
Happy to rewrite the ticket in plainer prose if that's preferable, or to
drop the proposal entirely if you'd rather handle aacgain's deprecation
through a different process.
Masanari
--
Ticket URL: <https://trac.macports.org/ticket/73945#comment:2>
MacPorts <https://www.macports.org/>
Ports system for macOS
More information about the macports-tickets
mailing list