[MacPorts] #73945: aacgain: deprecate (orphaned, unmaintained upstream since 2010, multiple unpatched CVEs; replace with mp3rgain)

MacPorts noreply at macports.org
Sat May 2 18:32:59 UTC 2026


#73945: aacgain: deprecate (orphaned, unmaintained upstream since 2010, multiple
unpatched CVEs; replace with mp3rgain)
--------------------------+--------------------------------------
  Reporter:  M-Igashi     |      Owner:  (none)
      Type:  enhancement  |     Status:  new
  Priority:  Normal       |  Milestone:
 Component:  ports        |    Version:
Resolution:               |   Keywords:  deprecation security cve
      Port:  aacgain      |
--------------------------+--------------------------------------

Comment (by M-Igashi):

 Hi Ryan,

 The text was drafted with AI assistance for phrasing/formatting, but the
 substance → the security analysis, the Homebrew precedent, and the
 rationale for replacing aacgain,  is mine. I authored mp3rgain (merged as
 the audio-category port `mp3rgain` via https://github.com/macports
 /macports-ports/pull/32494 → also commented the issue) and wrote the
 vulnerability write-up linked in the ticket.

 Happy to rewrite the ticket in plainer prose if that's preferable, or to
 drop the proposal entirely if you'd rather handle aacgain's deprecation
 through a different process.

 Masanari

-- 
Ticket URL: <https://trac.macports.org/ticket/73945#comment:2>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list