Cannot nspluginwrapper problems because of linux-f8-pango vulnerability

[Boris Samorodov]

On Tue, 19 May 2009 02:30:09 -0300 Raphael Kubo da Costa wrote:

> I'm trying to get linux-f8-flashplugin10 here with FreeBSD 7.2. I've
> already installed it (which means OVERRIDE_LINUX_BASE_PORT and
> OVERRIDE_LINUX_NONBASE_PORTS are already correctly set to f8) and now
> I'm trying to install the nspluginwrapper port.

> However, it always fails with the following error while installing its
> dependencies:

> ===>   linux-f8-gtk2-2.12.8 depends on file:
> /compat/linux/usr/lib/libpango-1.0.so.0.1800.4 - not found
> ===>    Verifying install for
> /compat/linux/usr/lib/libpango-1.0.so.0.1800.4 in
> /usr/ports/x11-toolkits/linux-f8-pango
> ===>  linux-f8-pango-1.18.4 has known vulnerabilities:
> => pango -- integer overflow.
>    Reference: <http://www.FreeBSD.org/ports/portaudit/4b172278-3f46-11de-becb-001cc0377035.html>
> => Please update your ports tree and try again.
> *** Error code 1

> Stop in /usr/ports/x11-toolkits/linux-f8-pango.
> *** Error code 1

> Stop in /usr/ports/x11-toolkits/linux-f8-gtk2.
> *** Error code 1

> Stop in /usr/ports/www/nspluginwrapper.

> Looking at the reference, it says it affects linux-f8-pango < 1.24,
> but the current port is at 1.18.4 and I don't think there's an updated
> Fedora 8 package (== 1.24). Is there a way to prevent this check from
> happening?

Seems that you are using a port audit tool. Then a manual pages from
that tool may help you.


WBR
-- 
bsam