Chlamydia lost php-5.2.0?

[Mischa Peters]

Trying to install php5 from pkgsrc (chlamydia), which failed.
It seems that php-5.2.0.tgz is no longer there.
Any package that has at least 1 open security advisory against it  
at the
time of building gets put in /vulnerable instead of /All, so that you
can't accidentally install software that may have a security problem
because it's a dependency of something else.

http://chlamydia.fs.ei.tum.de/pub/DragonFly/packages/RELEASE/i386/ 
vulnerable/
What is the reason that it's available on packages.stura.uni-rostock.de?

Just trying to understand.

Mischa