From owner-freebsd-gecko@FreeBSD.ORG Wed Oct 3 14:29:30 2012 Return-Path: Delivered-To: freebsd-gecko@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 3CDD41065670 for ; Wed, 3 Oct 2012 14:29:30 +0000 (UTC) (envelope-from freebsd-ports-local@be-well.ilk.org) Received: from asbnvacz-mailrelay01.megapath.net (asbnvacz-mailrelay01.megapath.net [207.145.128.243]) by mx1.freebsd.org (Postfix) with ESMTP id 0A4008FC14 for ; Wed, 3 Oct 2012 14:29:29 +0000 (UTC) Received: from mail6.sea5.speakeasy.net (mail6.sea5.speakeasy.net [69.17.117.50]) by asbnvacz-mailrelay01.megapath.net (Postfix) with ESMTP id 20E4CA71639 for ; Wed, 3 Oct 2012 10:29:28 -0400 (EDT) Received: (qmail 18814 invoked from network); 3 Oct 2012 14:29:27 -0000 Received: by simscan 1.4.0 ppid: 25936, pid: 21622, t: 0.1682s scanners: clamav: 0.88.2/m:52/d:10739 Received: from unknown (HELO be-well.ilk.org) ([66.92.78.145]) (envelope-sender ) by mail6.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP for ; 3 Oct 2012 14:29:27 -0000 Received: by be-well.ilk.org (Postfix, from userid 1147) id D4F8933C25; Wed, 3 Oct 2012 10:29:26 -0400 (EDT) From: Lowell Gilbert To: mexas@bristol.ac.uk References: <201210030748.q937mcku094210@mech-cluster241.men.bris.ac.uk> Date: Wed, 03 Oct 2012 10:29:26 -0400 In-Reply-To: <201210030748.q937mcku094210@mech-cluster241.men.bris.ac.uk> (Anton Shterenlikht's message of "Wed, 3 Oct 2012 08:48:38 +0100 (BST)") Message-ID: <44obkj39yx.fsf@be-well.ilk.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.2 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain Cc: freebsd-gecko@freebsd.org, freebsd-ports@freebsd.org Subject: Re: graphics/evince depends on vulnerable libxul19 X-BeenThere: freebsd-gecko@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Gecko Rendering Engine issues List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Oct 2012 14:29:30 -0000 Anton Shterenlikht writes: > ===> Installing for evince-2.32.0_9 > ===> evince-2.32.0_9 depends on file: /usr/local/share/icons/gnome/index.theme - found > ===> evince-2.32.0_9 depends on executable: yelp - not found > ===> Verifying install for yelp in /usr/ports/x11/yelp > ===> yelp-2.30.2_4 depends on file: /usr/local/lib/libxul/libxul.so - not found > ===> Verifying install for /usr/local/lib/libxul/libxul.so in /usr/ports/www/libxul19 > ===> libxul-1.9.2.28_1 has known vulnerabilities: > libxul-1.9.2.28_1 is vulnerable: > mozilla -- multiple vulnerabilities > > Shouldn't evince be forcing www/libxul install instead? It's yelp which is looking for libxul19, not evince directly. And yelp won't work with www/libxul last I heard. Personally, I'm just living without yelp right now. I think others are too. The quick-and-dirty hack someone just mentioned on another thread is to let yelp install with libxul19, then delete libxul19. Yelp won't work, but it will be installed and other programs that want it will go ahead and install happily. That sounds like it should work; what I did (before I heard that advice) was to change other ports to not try to use yelp at all. Good luck.