r486043 is a security fix that affects 2018Q4, but has only been committed to head.
Over to ports-secteam
Despite having over a month to do so, r486043 was never merged to the now-defunct 2018Q4 branch. Close this PR unfixed.