From owner-freebsd-questions@FreeBSD.ORG Sat Dec 26 05:18:57 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5D239106566C for ; Sat, 26 Dec 2009 05:18:57 +0000 (UTC) (envelope-from alexmiroslav@gmail.com) Received: from mail-fx0-f227.google.com (mail-fx0-f227.google.com [209.85.220.227]) by mx1.freebsd.org (Postfix) with ESMTP id EBEC88FC14 for ; Sat, 26 Dec 2009 05:18:56 +0000 (UTC) Received: by fxm27 with SMTP id 27so9087157fxm.3 for ; Fri, 25 Dec 2009 21:18:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type; bh=jAIkYmpVjZ6p6IwUJf5/d/UyJnywAlstvm/Cw7Jw0Fw=; b=L8WNKJ0fO7shSWwN++inm9X/gTx9ztK3IGO9zrYt8fXHVkdCrYese+gR+3oUxGTlvv /x9l9N1TZpWRcv3lh4hsG43WUgux1UUsybNk+eMcJtdXdTmJCoqYiUNDOpO9LlZAaI9f m3WU/lkRCnWJlXqHjdQhLoBT8rtYToMcz59ak= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=VukZ2M60MHv4jHwksmKAbaQ+Yn0fLWYsLkcGzoY1tXcj+iElYsKUqq26WTGLnO9/Co E4OwyJdZfC5bf+nXOBAgmcsjoKmuzspQS30Qb7G8ecTBTjhyIKrSR31ChelT+AKkkBxQ mlQCdXVr5DjJ4s5/4iSSPtk3XVPkOvxMZP+oI= MIME-Version: 1.0 Received: by 10.223.145.133 with SMTP id d5mr2852310fav.57.1261804735857; Fri, 25 Dec 2009 21:18:55 -0800 (PST) Date: Sat, 26 Dec 2009 00:18:55 -0500 Message-ID: <9fa4f0760912252118q3397f90fr8891873eab0447d5@mail.gmail.com> From: Aleksandr Miroslav To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Subject: portaudit php vulnerabilities X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Dec 2009 05:18:57 -0000 For the past week or so, portaudit has been warning me that the installed version of php on my system (php5-5.2.11_1) has known vulnerabilties. Fair enough. However, I've not seen a fix in the ports tree since then. Is my only option to deinstall php until this gets fixed?