From owner-freebsd-ports@FreeBSD.ORG  Tue Jan  6 23:13:29 2009
Return-Path: <owner-freebsd-ports@FreeBSD.ORG>
Delivered-To: freebsd-ports@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id B9A06106566B;
	Tue,  6 Jan 2009 23:13:29 +0000 (UTC)
	(envelope-from gpalmer@freebsd.org)
Received: from noop.in-addr.com (mail.in-addr.com [IPv6:2001:470:8:162::1])
	by mx1.freebsd.org (Postfix) with ESMTP id 8FD2D8FC08;
	Tue,  6 Jan 2009 23:13:29 +0000 (UTC)
	(envelope-from gpalmer@freebsd.org)
Received: from gjp by noop.in-addr.com with local (Exim 4.54 (FreeBSD))
	id 1LKL72-000HJW-64; Tue, 06 Jan 2009 18:13:28 -0500
Date: Tue, 6 Jan 2009 18:13:28 -0500
From: Gary Palmer <gpalmer@freebsd.org>
To: "Guill. Moreno-Socias" <lists.gms@gmail.com>
Message-ID: <20090106231328.GC81380@in-addr.com>
References: <a2d737650901061434s32ec826mdf0599ece40e09f6@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <a2d737650901061434s32ec826mdf0599ece40e09f6@mail.gmail.com>
Cc: gnome@freebsd.org, freebsd-ports@freebsd.org
Subject: Re: "firefox-3.0.5,1 has known vulnerabilities"
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Jan 2009 23:13:30 -0000

On Tue, Jan 06, 2009 at 11:34:08PM +0100, Guill. Moreno-Socias wrote:
>    Hello.
>    I am trying to install www/firefox3 using portupgrade.  The ports
> tree is up to date.
>    I get the following:
> 
> --->  Fresh installation of www/firefox3 started at: Tue, 06 Jan 2009
> 23:22:39 +0100
> --->  Installing 'firefox-3.0.5,1' from a port (www/firefox3)
> --->  Build of www/firefox3 started at: Tue, 06 Jan 2009 23:22:41 +0100
> --->  Building '/usr/ports/www/firefox3'
> ===>  Cleaning for firefox-3.0.5,1
> ===>  WARNING: Vulnerability database out of date, checking anyway

First thing is to make sure that you update the audit database.

portaudit -F

will fetch an up-to-date copy for you I believe.  I have firefox-3.0.5,1
installed and portaudit is not complaining about it, so I suspect the
issue is restricted to the version of the database you have.

Regards,

Gary