Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 22 Jan 2016 19:35:32 -0500
From:      Phil Eaton <philneaton95@gmail.com>
To:        =?UTF-8?Q?Ren=C3=A9_Ladan?= <rene@freebsd.org>
Cc:        chromium@freebsd.org
Subject:   Re: current chromium version in ports tree giving vulnerabilities warnings
Message-ID:  <CAByiw%2BqkSEK=3T%2BOtxDYxv%2BCngSEL6wW3tdJo7USUJ0c3qeANQ@mail.gmail.com>
In-Reply-To: <CADL2u4gVG20eXMivvkDBtNjjW_EwkpMbr2=MraSc7Mgo%2BKimEw@mail.gmail.com>
References:  <CAByiw%2BoTU-39Wdm391oDSDHfmdwHcLyw8ZkWgstEiWQzDE%2B1=w@mail.gmail.com> <CADL2u4gVG20eXMivvkDBtNjjW_EwkpMbr2=MraSc7Mgo%2BKimEw@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Great, thanks!

Phil

On Fri, Jan 22, 2016 at 7:00 PM, Ren=C3=A9 Ladan <rene@freebsd.org> wrote:

>
> Op 23 jan. 2016 00:39 schreef "Phil Eaton" <philneaton95@gmail.com>:
> >
> > Hi,
> >
> > I just tried to update chromium but the build is failing with a number =
of
> > vulnerabilities. I understand that I can build and ignore these
> > vulnerabilities, but I wanted to report this anyway. Here is the result
> of
> > make install:
> >
> This is correct, the new version should be in the tree this weekend.
>
> > To build Chromium, you should have around 2 GB of memory
> > and a fair amount of free diskspace (~ 3.7GB).
> >
> > Make sure you have Python build with the SEM option ON
> > (default in python27-2.7.8 since r361735)
> > =3D=3D=3D>  chromium-47.0.2526.111 has known vulnerabilities:
> > chromium-47.0.2526.111 is vulnerable:
> > chromium -- multiple vulnerabilities
> > CVE: CVE-2016-1620
> > CVE: CVE-2016-1619
> > CVE: CVE-2016-1618
> > CVE: CVE-2016-1617
> > CVE: CVE-2016-1616
> > CVE: CVE-2016-1615
> > CVE: CVE-2016-1614
> > CVE: CVE-2016-1613
> > CVE: CVE-2016-1612
> > WWW:
> >
> https://vuxml.FreeBSD.org/freebsd/371bbea9-3836-4832-9e70-e8e928727f8c.ht=
ml
> >
> > 1 problem(s) in the installed packages found.
> > =3D> Please update your ports tree and try again.
> > =3D> Note: Vulnerable ports are marked as such even if there is no upda=
te
> > available.
> > =3D> If you wish to ignore this vulnerability rebuild with 'make
> > DISABLE_VULNERABILITIES=3Dyes'
> > *** Error code 1
> >
> > Stop.
> > make[1]: stopped in /usr/ports/www/chromium
> > *** Error code 1
> >
> > Stop.
> > make: stopped in /usr/ports/www/chromium
> >
> Regards,
> Ren=C3=A9
>
>


--=20
Phil Eaton



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAByiw%2BqkSEK=3T%2BOtxDYxv%2BCngSEL6wW3tdJo7USUJ0c3qeANQ>