Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 24 Jul 2008 02:57:02 +0200 (CEST)
From:      "Torgeir Hoffmann" <twhoffma@student.matnat.uio.no>
To:        "Kris Kennaway" <kris@FreeBSD.org>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Installing jdk on 7-Release: Has known vulnerabilities from  2005?
Message-ID:  <49448.80.202.85.78.1216861022.squirrel@webmail.uio.no>
In-Reply-To: <4887AFD4.9000106@FreeBSD.org>
References:  <48764.80.202.85.78.1216849881.squirrel@webmail.uio.no> <4887AFD4.9000106@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi again!

>> when I try to install linux-sun-jdk16 from ports I get:
>>
>> ===>  linux-sun-jdk-1.6.0.07 has known vulnerabilities:
>> => jdk -- jar directory traversal vulnerability.
>>    Reference:
>> <http://www.FreeBSD.org/ports/portaudit/18e5428f-ae7c-11d9-837d-000e0c2e438a.html>;
>> => Please update your ports tree and try again.
>> *** Error code 1
>>
>> This refers to a vulnerability from 2005 (!). I get the same thing with
>> the 1.5 port.
>> I desperately want to avoid building the native version due to the fact
>> that I have a not that sporty laptop, and the packages from the freebsd
>> foundation is not available yet.
>>
>> I have the latest portsnap port snapshot.
>
> Update your portaudit database.

I did that.

portaudit -Fda

Still, same thing. Thought this was very strange as well.

Anything else that I should have done? (It's probably right in front of me!)

Many thanks,

Torgeir




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?49448.80.202.85.78.1216861022.squirrel>