From owner-freebsd-ports@FreeBSD.ORG Wed Oct 3 11:31:45 2012 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id F071E106566B for ; Wed, 3 Oct 2012 11:31:44 +0000 (UTC) (envelope-from jamie@kode5.net) Received: from kontrol.kode5.net (kontrol.kode5.net [80.229.5.32]) by mx1.freebsd.org (Postfix) with ESMTP id 5AA598FC08 for ; Wed, 3 Oct 2012 11:31:43 +0000 (UTC) Received: from kontrol.kode5.net (localhost [127.0.0.1]) by kontrol.kode5.net (8.14.5/8.14.5) with ESMTP id q93BVaDi062274 for ; Wed, 3 Oct 2012 12:31:36 +0100 (BST) (envelope-from jamie@kode5.net) Received: (from jamie@localhost) by kontrol.kode5.net (8.14.5/8.14.5/Submit) id q93BVa0U062273 for freebsd-ports@freebsd.org; Wed, 3 Oct 2012 12:31:36 +0100 (BST) (envelope-from jamie@kode5.net) X-Authentication-Warning: kontrol.kode5.net: jamie set sender to jamie@kode5.net using -f Date: Wed, 3 Oct 2012 12:31:36 +0100 From: Jamie Paul Griffin To: freebsd-ports@freebsd.org Message-ID: <20121003113136.GB58568@kontrol.kode5.net> Mail-Followup-To: freebsd-ports@freebsd.org References: <201210030748.q937mcku094210@mech-cluster241.men.bris.ac.uk> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <201210030748.q937mcku094210@mech-cluster241.men.bris.ac.uk> x-operating-system: FreeBSD 9.1-PRERELEASE amd64 x-pgp-fingerprint: A4B9 E875 A18C 6E11 F46D B788 BEE6 1251 1D31 DC38 x-pgp-key: 1D31DC38 User-Agent: Mutt/1.5.21 (2010-09-15) X-Virus-Scanned: clamav-milter 0.97.6 at kontrol.kode5.net X-Virus-Status: Clean Subject: Re: graphics/evince depends on vulnerable libxul19 X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Oct 2012 11:31:45 -0000 [ Anton Shterenlikht wrote on Wed 3.Oct'12 at 8:48:38 +0100 ] > ===> Installing for evince-2.32.0_9 > ===> evince-2.32.0_9 depends on file: /usr/local/share/icons/gnome/index.theme - found > ===> evince-2.32.0_9 depends on executable: yelp - not found > ===> Verifying install for yelp in /usr/ports/x11/yelp > ===> yelp-2.30.2_4 depends on file: /usr/local/lib/libxul/libxul.so - not found > ===> Verifying install for /usr/local/lib/libxul/libxul.so in /usr/ports/www/libxul19 > ===> libxul-1.9.2.28_1 has known vulnerabilities: > libxul-1.9.2.28_1 is vulnerable: > mozilla -- multiple vulnerabilities > > Shouldn't evince be forcing www/libxul install instead? > > Anton The same is true for java/icedtea-web - i'd like to install that port but it also wants libxul-1.9.x as a build dependency.