Re: Vulnerability question

2009-07-02 Thread Harald Weis
On Wed, Jul 01, 2009 at 11:24:20PM +0200, Roland Smith wrote: Thank you very much indeed, Roland, for your explanation. Harald ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any

Re: Vulnerability question

2009-07-01 Thread Roland Smith
On Wed, Jul 01, 2009 at 11:05:28PM +0200, Harald Weis wrote: > > > How do you do that precisely ? > > > ``WITH_REALPLAYER=no'' in /etc/make.conf ? > > > > cd /us/ports/multimedia/mplayer > > make config > > Scroll down to the "REALPLAYER Enable real player plugin" line > > to un-check the line >

Re: Vulnerability question

2009-07-01 Thread Harald Weis
On Wed, Jul 01, 2009 at 10:00:12AM -0700, Kevin Oberman wrote: > > > Good catch! I think that is indeed the problem. I disabled realplayer > > > support for mplayer ages ago, so it doesn't show up in my list. > > > > How do you do that precisely ? > > ``WITH_REALPLAYER=no'' in /etc/make.conf ?

Re: Vulnerability question

2009-07-01 Thread Kevin Oberman
> Date: Wed, 1 Jul 2009 13:14:37 +0200 > From: Harald Weis > Sender: owner-freebsd-sta...@freebsd.org > > On Wed, Jul 01, 2009 at 06:01:01AM +0200, Roland Smith wrote: > > > Good catch! I think that is indeed the problem. I disabled realplayer > > support for mplayer ages ago, so it doesn't sho

Re: Vulnerability question

2009-07-01 Thread Harald Weis
On Wed, Jul 01, 2009 at 06:01:01AM +0200, Roland Smith wrote: > Good catch! I think that is indeed the problem. I disabled realplayer > support for mplayer ages ago, so it doesn't show up in my list. How do you do that precisely ? ``WITH_REALPLAYER=no'' in /etc/make.conf ? Thanks Harald _

Re: Vulnerability question

2009-07-01 Thread Harald Weis
On Wed, Jul 01, 2009 at 06:01:01AM +0200, Roland Smith wrote: > On Tue, Jun 30, 2009 at 06:35:04PM -0400, Gary Palmer wrote: > > I am not the OP, however I also ran into warnings about mplayer and > > linux-pango. I believe the problem comes from linux-realplayer > > > > # cd /usr/ports/multime

Re: Vulnerability question

2009-06-30 Thread Roland Smith
On Tue, Jun 30, 2009 at 06:35:04PM -0400, Gary Palmer wrote: > > > > Are you running a linux binary of mplayer? Because a native mplayer > > > > binary does not require linux-pango! It just uses the native pango. > > > > > > In fact, it's lxdvdrip which requires linux-pango [via linux-gtk2]. > > >

Re: Vulnerability question

2009-06-30 Thread Gary Palmer
On Tue, Jun 30, 2009 at 07:32:37PM +0200, Roland Smith wrote: > On Tue, Jun 30, 2009 at 05:08:32PM +0200, Harald Weis wrote: > > On Mon, Jun 29, 2009 at 08:40:52PM +0200, Roland Smith wrote: > > > On Sun, Jun 28, 2009 at 10:56:54PM +0200, Harald Weis wrote: > > > > Building lxdvdrip stops because l

Re: Vulnerability question

2009-06-30 Thread Roland Smith
On Tue, Jun 30, 2009 at 05:08:32PM +0200, Harald Weis wrote: > On Mon, Jun 29, 2009 at 08:40:52PM +0200, Roland Smith wrote: > > On Sun, Jun 28, 2009 at 10:56:54PM +0200, Harald Weis wrote: > > > Building lxdvdrip stops because linux-pango has known > > > vulnerabilities. > > > > You can ignore vu

Re: Vulnerability question

2009-06-30 Thread Marian Hettwer
On Tue, 30 Jun 2009 17:08:32 +0200, Harald Weis wrote: > On Mon, Jun 29, 2009 at 08:40:52PM +0200, Roland Smith wrote: >> On Sun, Jun 28, 2009 at 10:56:54PM +0200, Harald Weis wrote: >> > Building lxdvdrip stops because linux-pango has known >> > vulnerabilities. >> >> You can ignore vulnerabili

Re: Vulnerability question

2009-06-30 Thread Harald Weis
On Mon, Jun 29, 2009 at 08:40:52PM +0200, Roland Smith wrote: > On Sun, Jun 28, 2009 at 10:56:54PM +0200, Harald Weis wrote: > > Building lxdvdrip stops because linux-pango has known > > vulnerabilities. > > You can ignore vulnerabilities by setting the environment variable > DISABLE_VULNERABILITI

Re: Vulnerability question

2009-06-29 Thread Roland Smith
On Sun, Jun 28, 2009 at 10:56:54PM +0200, Harald Weis wrote: > Building lxdvdrip stops because linux-pango has known > vulnerabilities. You can ignore vulnerabilities by setting the environment variable DISABLE_VULNERABILITIES. See ports(7). > Is there a risk if mplayer (which requires linux-pang

Vulnerability question

2009-06-28 Thread Harald Weis
Building lxdvdrip stops because linux-pango has known vulnerabilities. Is there a risk if mplayer (which requires linux-pango) is only used locally by lxdvdrip, but never on-line by firefox which would not use any mplayer plugin ? For example I could easily control this with mozplugger. Thank you