After rebuilding world with USE="-vaapi" and running depclean revdep-rebuild found problem: * Checking dynamic linking consistency [ 63% ] * broken /usr/lib64/libADM5avcodec.so.53 (requires libva.so.1) [ 100% ] * Generated new 3_broken.rr * Assigning files to packages * /usr/lib64/libADM5avcodec.so.53 -> media-video/avidemux
This appears to be due to the bundled ffmpeg-0.9 (which is full of security holes). What to do?
Maybe time to remove the ebuild?
(In reply to comment #2) > Maybe time to remove the ebuild? In favour of 2.6.0 (which bundles ffmpeg-0.11.1 with no reported vulnerabilities...yet) or nuke the package entirely?
(In reply to comment #3) > (In reply to comment #2) > > Maybe time to remove the ebuild? > > In favour of 2.6.0 (which bundles ffmpeg-0.11.1 with no reported > vulnerabilities...yet) or nuke the package entirely? yeah just keep 2.6.0 for now
Mask, but keep 2.5.x in the tree please
(In reply to comment #5) > Mask, but keep 2.5.x in the tree please +1
Package is now masked: # Ben de Groot <yngwin@gentoo.org> (20 Jan 2013) # 2.5* has known security and other issues due to bundled ffmpeg, # see (bugs #446468 and #444262) # 2.6* is masked for testing, and may have unknown issues due to bundled ffmpeg # This package needs a new, dedicated maintainer. We voted for keeping it in # the tree for now, so users who are willing to accept the known issues can # still easily install it by unmasking this. media-video/avidemux
