From owner-freebsd-ports@FreeBSD.ORG Tue Oct 10 17:51:05 2006 Return-Path: X-Original-To: freebsd-ports@freebsd.org Delivered-To: freebsd-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 15E3916A403 for ; Tue, 10 Oct 2006 17:51:05 +0000 (UTC) (envelope-from matcraig@nmsu.edu) Received: from ccserver2.nmsu.edu (ccserver2.nmsu.edu [128.123.34.53]) by mx1.FreeBSD.org (Postfix) with ESMTP id 96D1043D67 for ; Tue, 10 Oct 2006 17:51:04 +0000 (GMT) (envelope-from matcraig@nmsu.edu) Received: from ccserver2.nmsu.edu (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 775733F8104 for ; Tue, 10 Oct 2006 11:51:05 -0600 (MDT) Received: from [127.0.0.1] (insolence.NMSU.Edu [128.123.194.253]) by ccserver2.nmsu.edu (Postfix) with ESMTP id 7F7E83F80FA for ; Tue, 10 Oct 2006 11:51:04 -0600 (MDT) Message-ID: <452BDD83.9060804@nmsu.edu> Date: Tue, 10 Oct 2006 11:50:59 -0600 From: Matt Craig Organization: NMSU ICT Networking User-Agent: Thunderbird 1.5.0.7 (Windows/20060909) MIME-Version: 1.0 To: freebsd-ports@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Antivirus: avast! (VPS 0641-0, 10/10/2006), Outbound message X-Antivirus-Status: Clean X-PMX-Version: 5.2.1.279297, Antispam-Engine: 2.4.0.264935, Antispam-Data: 2006.10.10.101943 X-PerlMx-Spam: Gauge=IIIIIII, Probability=7%, Report='__CP_URI_IN_BODY 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __FRAUD_419_REFNUM 0, __HAS_MSGID 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0, __SANE_MSGID 0, __USER_AGENT 0' Subject: php4 update fails X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Oct 2006 17:51:05 -0000 Running FreeBSD 6.1 stable I tried to update php4 this morning and the update fails. I can't find out exactly why and I have been unable to fix it. Here is the command used and the complete output: ------------------------------------------------------------------------------------------------------------------------ # portupgrade -p php4 [Updating the pkgdb in /var/db/pkg ... - 337 packages found (-1 +0) (...) done] ---> Installing 'php4-4.4.4' from a port (lang/php4) ---> Building '/usr/ports/lang/php4' ===> Cleaning for apache-1.3.37_1 ===> Cleaning for autoconf-2.59_2 ===> Cleaning for perl-5.8.8 ===> Cleaning for expat-2.0.0_1 ===> Cleaning for m4-1.4.4 ===> Cleaning for help2man-1.36.4_1 ===> Cleaning for gmake-3.81_1 ===> Cleaning for p5-gettext-1.05_1 ===> Cleaning for gettext-0.14.5_2 ===> Cleaning for libtool-1.5.22_2 ===> Cleaning for libiconv-1.9.2_2 ===> Cleaning for php4-4.4.4 ===> php4-4.4.4 has known vulnerabilities: => php -- open_basedir Race Condition Vulnerability. Reference: => Please update your ports tree and try again. *** Error code 1 Stop in /usr/ports/lang/php4. ** Command failed [exit code 1]: /usr/bin/script -qa /tmp/portupgrade.25156.0 env make DEPENDS_TARGET=package ** Fix the problem and try again. ** Listing the failed packages (*:skipped / !:failed) ! lang/php4 (unknown build error) ---> Packages processed: 0 done, 0 ignored, 0 skipped and 1 failed ------------------------------------------------------------------------------------------------------------------------ I also tried portupgrade Nfp, removing the package with pkg_delete php4 and adding it back again with pkg_add -r php4, and I get the same thing. Doing a make install yields the same results as well. I also get the same thing after updating the ports tree with cvsup. Is it possible that php4 will not update because of the open_basedir Race Condition Vulnerability? If so it fails to mention that.