From owner-freebsd-questions@FreeBSD.ORG Fri Oct 17 08:12:41 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 59E3C1065693 for ; Fri, 17 Oct 2008 08:12:41 +0000 (UTC) (envelope-from glyn@millingtons.org) Received: from smtpout.karoo.kcom.com (smtpout.karoo.kcom.com [212.50.160.34]) by mx1.freebsd.org (Postfix) with ESMTP id EAE048FC15 for ; Fri, 17 Oct 2008 08:12:40 +0000 (UTC) (envelope-from glyn@millingtons.org) Received: from unknown (HELO glynthebearded.millingtons.org) ([82.152.120.109]) by smtpout.karoo.kcom.com with ESMTP; 17 Oct 2008 09:12:39 +0100 Received: by glynthebearded.millingtons.org (Postfix, from userid 1001) id 5FABC5CDC; Fri, 17 Oct 2008 09:08:56 +0100 (BST) To: Colin Brace References: <20028504.post@talk.nabble.com> Organization: Central Church, Torquay, U.K. X-Now-Playing: There's a deathly hush in the close tonight! X-Liturgical-Date: Memorial: Saint Ignatius of Antioch, bishop and martyr, A.D. 2008 From: Glyn Millington Date: Fri, 17 Oct 2008 09:08:56 +0100 In-Reply-To: <20028504.post@talk.nabble.com> (Colin Brace's message of "Fri\, 17 Oct 2008 01\:01\:09 -0700 \(PDT\)") Message-ID: <86od1jprs7.fsf@nowhere.org> User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: freebsd-questions@freebsd.org Subject: Re: updating a port with problems (libxml2) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: glyn@millingtons.org List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Oct 2008 08:12:41 -0000 Colin Brace writes: > Hi all, > > I use portsnap to keep the port tree of my FreeBSD 7 box up to date. > According to portaudit, which I run nightly, there is a problem with the > current version of libxml2. So, as usual, I run "sudo portsnap fetch && > sudo portsnap update", and then: > > $ cd /usr/ports/textproc/libxml2 > $ sudo make deinstall > $ sudo make reinstall clean > > But this last command results in an error: > > ===> libxml2-2.6.32 has known vulnerabilities: > => libxml2 -- two vulnerabilities. > Reference: > > => Please update your ports tree and try again. > > It would appear that the port has not yet been updated. Is this some > temporary glitch? Otherwise, the approach I use is not very robust, since I > have now managed to deinstall a library upon which a dozen or so programs > depend. However, this is the first time this has happened. > > Comments, suggestions most welcome. Hi Colin, I hit a similar difficulty with cups-base a few days ago. Matthew Seaman suggested this as a way of getting the dodgy port to install, which I used because I *really* needed to print something:- portupgrade -m "DISABLE_VULNERABILITIES=yes" cups-base Lo and behold, within 6 hours of my re-installing the vulnerable port, the port was fixed and I upgraded to that hth Glyn