Solved libvpx upgrade

[Dams]

Hello,

Since 2 or 3 days I'm trying to upgrade libvpx to 1.4.0.488.

But I've got a message :

libvpx-1.4.0.488 is vulnerable:
libvpx -- multiple buffer overflows

So portmaster don't want to upgrade it.

I've got some port depending on it that I cannot upgrade as well. Firefox in particular.

I look on freshport, and the upgrade to 1.4.0.488 was correcting vulnerabilities. I don't see any another vulnerabilities write there.

Do I have to wait for another version?

Or do I did something wrong with portmaster?

 

[talsamon]

Try: portmaster -m -DDISABLE_VULNERABILITIES multimedia/libvpx.

 

[kpa]

Run # pkg audit -F once and try again.

 

[wblock@]

Try: portmaster -m -DDISABLE_VULNERABILITIES multimedia/libvpx.

Please, if you recommend this, explain that it is dangerous. It disables protection against known vulnerabilities, and should not be used or recommended without a warning.

 

[Dams]

Run # pkg audit -F once and try again.

Thank you. I did this and after portmaster(8) did the upgrade.