Evince fails upgrade

[Robert]

On Thu, 24 May 2012 08:50:35 -0500
Jeremy Messenger <mezz.freebsd at gmail.com> wrote:

> On Thu, May 24, 2012 at 7:35 AM, Robert <traveling08 at cox.net> wrote:
> > On Wed, 23 May 2012 22:43:51 -0700
> > Kevin Oberman <kob6558 at gmail.com> wrote:
> >
> >> On Wed, May 23, 2012 at 7:34 AM, Robert <traveling08 at cox.net>
> >> wrote:
> >> >
> >> > Hello Port readers
> >> >
> >> > I am unable to upgrade to latest evince due to following failure.
> >> > Evince now calls for www/yelp which calls for www/libxul which
> >> > has vulnerabilities.
> >> >
> >> > [robert at dell64] /usr/ports/x11/yelp% sudo make install clean
> >> >
> >> >  yelp is using libxul for gecko support, but you can
> >> >  change that by defining WITH_GECKO to the following values:
> >> >
> >> >   libxul
> >> >
> >> > ===>  License check disabled, port has not defined LICENSE
> >> > ===>  Extracting for yelp-2.30.2_2
> >> > => SHA256 Checksum OK for gnome2/yelp-2.30.2.tar.bz2.
> >> > /bin/rm -f /usr/ports/x11/yelp/work/yelp-2.30.2/data/yelp.schemas
> >> > ===>  Patching for yelp-2.30.2_2
> >> > ===>  Applying FreeBSD patches for yelp-2.30.2_2
> >> > ===>   yelp-2.30.2_2 depends on
> >> > file: /usr/local/lib/libxul/libxul.so - not found ===>
> >> >  Verifying install for /usr/local/lib/libxul/libxul.so
> >> > in /usr/ports/www/libxul ===>  libxul-1.9.2.28 has known
> >> > vulnerabilities: Affected package: libxul-1.9.2.28 Type of
> >> > problem: mozilla -- multiple vulnerabilities. Reference:
> >> > http://portaudit.FreeBSD.org/380e8c56-8e32-11e1-9580-4061862b8c22.html
> >> > => Please update your ports tree and try again. *** Error code 1
> >> >
> >> > Stop in /usr/ports/www/libxul.
> >> > *** Error code 1
> >> >
> >> > Stop in /usr/ports/www/libxul.
> >> > *** Error code 1
> >> >
> >> > Stop in /usr/ports/x11/yelp.
> >> >
> >> > I have tried to comment out the WITH_GECKO line but that fails
> >> > also. The Makefile already has
> >> >
> >> > WITH_GECKO=  libxul
> >> >
> >> > What do I need to change it to?
> >>
> >> There is nothing to change it to, as far as I know. There used to
> >> other options, but libxul is the only one left.
> >>
> >> Unfortunately, it has a vulnerability, so won't build. You can
> >> either force it by setting DISABLE_VULNERABILITIES and live with
> >> the vulnerability or wait until libxul is fixed, assuming that it
> >> is. Other ports that use GECKO have the same problem.
> >
> > Kevin
> >
> > Thanks for responding. Evince had never needed yelp or libxul before
> > the last upgrade (port revision 8). I checked the diff of the
> > Makefile with my back up from last week and the only difference was
> > a change in "run depends" adding yelp.
> >
> > I commented out that portion of run depends and evince built
> > without a problem. Evince runs perfectly as a stand alone and with
> > firefox just as before.
> 
> It does need yelp when you go to the help menu. Of course, it's only
> for people that need the help menu.
> 
> Cheers,
> Mezz
> 
I need all of the help I can get  :-)

But I guess I can do without the help menu. Thanks for the information.

Robert