From owner-freebsd-questions@FreeBSD.ORG Mon May 24 10:06:17 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8C46E1065679 for ; Mon, 24 May 2010 10:06:17 +0000 (UTC) (envelope-from frank@esperance-linux.co.uk) Received: from asmtp2.iomartmail.com (asmtp2.iomartmail.com [62.128.201.249]) by mx1.freebsd.org (Postfix) with ESMTP id 15CB28FC32 for ; Mon, 24 May 2010 10:06:16 +0000 (UTC) Received: from asmtp2.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp2.iomartmail.com (8.13.8/8.13.8) with ESMTP id o4O8Ud3i022580; Mon, 24 May 2010 09:30:39 +0100 Received: from orange.esperance-linux.co.uk (77-44-105-82.xdsl.murphx.net [77.44.105.82]) (authenticated bits=0) by asmtp2.iomartmail.com (8.13.8/8.13.8) with ESMTP id o4O8UcKG022564; Mon, 24 May 2010 09:30:38 +0100 Received: by orange.esperance-linux.co.uk (Postfix, from userid 1001) id EF54F33C1F; Mon, 24 May 2010 09:30:37 +0100 (BST) Date: Mon, 24 May 2010 09:30:37 +0100 From: Frank Shute To: Luca Renaud Message-ID: <20100524083037.GA11667@orange.esperance-linux.co.uk> Mail-Followup-To: Luca Renaud , freebsd-questions@freebsd.org References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.3i X-Face: *}~{PHnDTzvXPe'wl_-f%!@+r5; VLhb':*DsX%wEOPg\fDrXWQJf|2\,92"DdS%63t*BHDyQ|OWo@Gfjcd72eaN!4%NE{0]p)ihQ1MyFNtWL X-Operating-System: FreeBSD 8.0-STABLE amd64 X-Organisation: 'shute.org.uk' Cc: freebsd-questions@freebsd.org Subject: Re: Vulnerability Database,Compile ports under Security Warnings. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Frank Shute List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 May 2010 10:06:17 -0000 On Sun, May 23, 2010 at 10:29:45PM +0100, Luca Renaud wrote: > > Krb5-1.8.1 is object of a security warning,and I am not able to compile > it.It tells me to update the ports tree > and try again,which I have done several times but the same warning stands. > Is this port not yet security updated with a security patch? It sounds like it. > Is there a way to compile without the security updated/patched tree? # make DISABLE_VULNERABILITIES=yes install clean Before doing that, make sure that the vulnerability portaudit reports isn't going to leave you open to compromise. Portaudit should give you a URL to visit to check. Regards, -- Frank Contact info: http://www.shute.org.uk/misc/contact.html