From owner-freebsd-questions@FreeBSD.ORG  Wed Feb  2 15:54:53 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 6453D16A4CE
	for <freebsd-questions@freebsd.org>;
	Wed,  2 Feb 2005 15:54:53 +0000 (GMT)
Received: from rproxy.gmail.com (rproxy.gmail.com [64.233.170.207])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A1A9D43D60
	for <freebsd-questions@freebsd.org>;
	Wed,  2 Feb 2005 15:54:52 +0000 (GMT)
	(envelope-from zlatozar@gmail.com)
Received: by rproxy.gmail.com with SMTP id f1so61138rne
	for <freebsd-questions@freebsd.org>;
	Wed, 02 Feb 2005 07:54:51 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
	s=beta; d=gmail.com;
	h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:references;
	b=X5CfqO/CPQwPlKMpsfLK4JWEfrG4MZfJSXlx3KdTDwP0mB57PfABlhLgSWPmAgzEXP4AkzN9rxDOS1aUoOeQvFKA4LaxjD5rqQEvm031eLNXGt41PgzjXTt4pufyMXD23zPlKKniNtpUFFAR5OM5avNkhqSCuMAtOM591O+9U/Q=
Received: by 10.38.9.32 with SMTP id 32mr218497rni;
        Wed, 02 Feb 2005 07:54:47 -0800 (PST)
Received: by 10.38.125.31 with HTTP; Wed, 2 Feb 2005 07:54:46 -0800 (PST)
Message-ID: <6fda18720502020754405b8bda@mail.gmail.com>
Date: Wed, 2 Feb 2005 17:54:46 +0200
From: Zlatozar Zhelyazkov <zlatozar@gmail.com>
To: saravanan ganapathy <sarav_gsa@yahoo.com>
In-Reply-To: <20050202144907.18974.qmail@web51709.mail.yahoo.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
References: <4200DEF4.7080906@orchid.homeunix.org>
	 <20050202144907.18974.qmail@web51709.mail.yahoo.com>
cc: freebsd-questions@freebsd.org
Subject: Re: keeping freebsd uptodate - doubt
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: Zlatozar Zhelyazkov <zlatozar@gmail.com>
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Feb 2005 15:54:53 -0000

Here are some useful links. Read carefully!!

http://www.taosecurity.com/keeping_freebsd_applications_up-to-date.html
http://www.taosecurity.com/keeping_freebsd_up-to-date.html


On Wed, 2 Feb 2005 06:49:06 -0800 (PST), saravanan ganapathy
<sarav_gsa@yahoo.com> wrote:
> 
> --- Karol Kwiatkowski <freebsd@orchid.homeunix.org>
> wrote:
> 
> > saravanan ganapathy wrote:
> >  > I have done the above steps to update my system
> > and
> > > when I run 'portversion -v | grep -v "=" ', I am
> > > gettin g the perl package only.
> > >
> > > freebsd# portversion -v | grep -v "="
> > > perl-5.8.5      <  needs updating (port has
> > 5.8.6_1)
> > >
> > > freebsd# portupgrade perl
> > > --->  Upgrading 'perl-5.8.5' to 'perl-5.8.6_1'
> > > (lang/perl5.8)
> > > --->  Building '/usr/ports/lang/perl5.8'
> > > ===>  Cleaning for perl-5.8.6_1
> > > ===>  perl-5.8.6_1 has known vulnerabilities:
> > > => perl -- File::Path insecure file/directory
> > > permissions.
> > >    Reference:
> > >
> >
> <http://www.FreeBSD.org/ports/portaudit/c418d472-6bd1-11d9-93ca-000a95bc6fae.html>
> > > => Please update your ports tree and try again.
> > > *** Error code 1
> > >
> > > Stop in /usr/ports/lang/perl5.8.
> > > ** Command failed [exit code 1]: /usr/bin/script
> > -qa
> > > /tmp/portupgrade5864.0 make
> > > ** Fix the problem and try again.
> > > ** Listing the failed packages (*:skipped /
> > !:failed)
> > >         ! lang/perl5.8 (perl-5.8.5)     (unknown
> > build
> > > error)
> > > --->  Packages processed: 0 done, 0 ignored, 0
> > skipped
> > > and 1 failed
> > >
> > > How to solve this problem?
> >
> > Portaudit thinks perl-5.8.6_1 is not safe. It even
> > tells you where to
> > find more information:
> >
> > >
> >
> http://www.FreeBSD.org/ports/portaudit/c418d472-6bd1-11d9-93ca-000a95bc6fae.html
> >
> > If you look there it says:
> >
> > > Affects:
> > >
> > >     * perl >=0 <5.6.2
> > >     * perl >=5.8.0 <5.8.6
> >
> > Clearly, perl-5.8.6_1 is *not* affected. This leads
> > us to conclusion
> > that your portadit's database is outdated. To fetch
> > new databse simply
> > run:
> >
> > # portaudit -F
> >
> 
> The problem has been solved by updating the portaudit
> database.
> 
> What is the recommended period to update the ports?
> 
> Is there any announcements for any port update? So
> that     I can manually update the ports.
> 
> Is portupgrade contains the security patches also?
> 
> Pls guide me
> 
> Sarav
> 
> 
> __________________________________
> Do you Yahoo!?
> Yahoo! Mail - Helps protect you from nasty viruses.
> http://promotions.yahoo.com/new_mail
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
>