graphics/evince depends on vulnerable libxul19

Lowell Gilbert freebsd-ports-local at
Wed Oct 3 14:29:30 UTC 2012

Anton Shterenlikht <mexas at> writes:

> ===>  Installing for evince-2.32.0_9
> ===>   evince-2.32.0_9 depends on file: /usr/local/share/icons/gnome/index.theme - found
> ===>   evince-2.32.0_9 depends on executable: yelp - not found
> ===>    Verifying install for yelp in /usr/ports/x11/yelp
> ===>   yelp-2.30.2_4 depends on file: /usr/local/lib/libxul/ - not found
> ===>    Verifying install for /usr/local/lib/libxul/ in /usr/ports/www/libxul19
> ===>  libxul- has known vulnerabilities:
> libxul- is vulnerable:
> mozilla -- multiple vulnerabilities
> Shouldn't evince be forcing www/libxul install instead?

It's yelp which is looking for libxul19, not evince directly. And yelp
won't work with www/libxul last I heard. 

Personally, I'm just living without yelp right now. I think others are
too. The quick-and-dirty hack someone just mentioned on another thread
is to let yelp install with libxul19, then delete libxul19. Yelp won't
work, but it will be installed and other programs that want it will go
ahead and install happily. That sounds like it should work; what I did
(before I heard that advice) was to change other ports to not try to use
yelp at all.

Good luck.

More information about the freebsd-ports mailing list