From owner-freebsd-questions@FreeBSD.ORG Wed Nov 14 22:19:45 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9D7DD16A41A for ; Wed, 14 Nov 2007 22:19:45 +0000 (UTC) (envelope-from freebsd@dfwlp.com) Received: from pollux.dfwlp.com (rrcs-64-183-212-244.sw.biz.rr.com [64.183.212.244]) by mx1.freebsd.org (Postfix) with ESMTP id 6412F13C455 for ; Wed, 14 Nov 2007 22:19:45 +0000 (UTC) (envelope-from freebsd@dfwlp.com) Received: from athena.dfwlp.com (athena.dfwlp.com [192.168.125.82]) (authenticated bits=0) by pollux.dfwlp.com (8.13.8/8.13.8) with ESMTP id lAEMJWgR062173 for ; Wed, 14 Nov 2007 16:19:32 -0600 (CST) (envelope-from freebsd@dfwlp.com) From: Jonathan Horne To: freebsd-questions@freebsd.org Date: Wed, 14 Nov 2007 16:19:42 -0600 User-Agent: KMail/1.9.7 References: <200711141539.47515.freebsd@dfwlp.com> <200711141543.27342.freebsd@dfwlp.com> <473B6F46.2070509@FreeBSD.org> In-Reply-To: <473B6F46.2070509@FreeBSD.org> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200711141619.42714.freebsd@dfwlp.com> X-Spam-Status: No, score=-4.4 required=3.6 tests=ALL_TRUSTED,BAYES_00 autolearn=ham version=3.2.3 X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on pollux.dfwlp.com Subject: Re: cups builds on one, but rejected by another? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Nov 2007 22:19:45 -0000 On Wednesday 14 November 2007 03:57:26 pm Kris Kennaway wrote: > Jonathan Horne wrote: > > On Wednesday 14 November 2007 03:39:47 pm Jonathan Horne wrote: > >> my jails server (6.2-p8) just ran portupgrade fine, and cups was one of > >> its items it updated: > >> > >> [root@canopus ~]# pkg_info | grep cups- > >> cups-base-1.3.3_2 Common UNIX Printing System > >> > >> but my 7.0-b2 desktop, refuses to build the same package: > >> > >> ===> cups-base-1.3.3_2 has known vulnerabilities: > >> => cups -- off-by-one buffer overflow. > >> Reference: > >> >>716 c.html> => Please update your ports tree and try again. > >> *** Error code 1 > >> > >> what would be the differences between the 2 systems that one would build > >> it, and the other reject the same port? ive not tweaked any port > >> security settings on either one, so this is some curious behavior to me. > >> > >> thanks, > > > > another interesting thing, when you read the portaudit page for this, it > > says: > > > > Affects: > > cups-base <1.3.3_1 > > > > but yet 1.3.3_2 still is rejected. > > One or the other has either a stale portaudit database or ports tree. > > Kris what is the method for updating the portaudit database? both have had their ports trees updated today, the 7.0 box multiple times. thanks, -- Jonathan Horne http://dfwlpiki.dfwlp.org freebsd@dfwlp.com