Vulnerability question

[Roland Smith]

On Tue, Jun 30, 2009 at 06:35:04PM -0400, Gary Palmer wrote:
> > > > Are you running a linux binary of mplayer? Because a native mplayer
> > > > binary does not require linux-pango! It just uses the native pango.
> > > 
> > > In fact, it's lxdvdrip which requires linux-pango [via linux-gtk2].
> > > lxdvdrip is happy with the native mplayer.
> > 
> > Looking at the port Makefile [/usr/ports/multimedia/lxdvdrip/Makefile]
> > and Freshports entries [http://www.freshports.org/multimedia/lxdvdrip/]
> > for lxdvdrip, there is no sign of it directly requiring pango, let alone
> > the Linux version. It is mplayer that depends on pango:

> I am not the OP, however I also ran into warnings about mplayer and
> linux-pango.  I believe the problem comes from linux-realplayer
> 
> # cd /usr/ports/multimedia/mplayer
> # make run-depends-list
<snip>
> /usr/ports/multimedia/linux-realplayer
> /usr/ports/multimedia/mplayer-skins
> /usr/ports/multimedia/win32-codecs
<snip>
> # grep REAL /var/db/ports/mplayer/options 
> WITH_REALPLAYER=true

Good catch! I think that is indeed the problem. I disabled realplayer
support for mplayer ages ago, so it doesn't show up in my list. 

Harald, re-build mplayer with realplayer support disabled (if you can do
without it), and you should probably loose the dependency on
linux-pango.

> There may be more than one path to the linux-pango dependency however
> :-(

I don't think so, looking at the Makefiles of the other dependencies of
lxdvdrip. 

Roland
-- 
R.F.Smith                                   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 196 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20090701/694e7ef7/attachment.pgp