Date: Thu, 07 Dec 2006 01:26:08 +0100 From: martinko <gamato@users.sf.net> To: freebsd-ports@freebsd.org Cc: freebsd-questions@freebsd.org Subject: Re: portupgrade refusin to upgrade a port .. when it shouldn't imho Message-ID: <45775FA0.7020206@users.sf.net> In-Reply-To: <20061206233232.GA72778@xor.obsecurity.org> References: <el7e8s$9ak$1@sea.gmane.org> <20061206233232.GA72778@xor.obsecurity.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Kris Kennaway wrote: > On Wed, Dec 06, 2006 at 10:55:40PM +0100, martinko wrote: >> Hello, >> >> According to freshports.org the newest multimedia/win32-codecs port >> (3.1.0.r1,1) is not vulnerable. I'm trying to upgrade version >> win32-codecs-3.1.0.p8,1 on my system but portupgrade + portaudit refuse >> me to do so: >> >> ** Port marked as IGNORE: multimedia/win32-codecs: >> is forbidden: Remote code execution: >> http://vuxml.FreeBSD.org/24f6b1eb-43d5-11db-81e1-000e0c2e438a.html >> >> Isn't this behaviour flawed ?? Or am I missing something ? > > Did you update your portaudit database? > > Kris Sure thing: mb-aw1n-bsd[/root]# portaudit -Fda New database installed. Database created: Thu Dec 7 01:10:04 CET 2006 Affected package: win32-codecs-3.1.0.p8,1 Type of problem: win32-codecs -- multiple vulnerabilities. Reference: <http://www.FreeBSD.org/ports/portaudit/24f6b1eb-43d5-11db-81e1-000e0c2e438a.html> 1 problem(s) in your installed packages found. You are advised to update or deinstall the affected package(s) immediately. mb-aw1n-bsd[/root]# portupgrade -if win32-codecs ---> Session started at: Thu, 07 Dec 2006 01:24:42 +0100 ** Port marked as IGNORE: multimedia/win32-codecs: is forbidden: Remote code execution: http://vuxml.FreeBSD.org/24f6b1eb-43d5-11db-81e1-000e0c2e438a.html ---> ** Upgrade tasks 1: 0 done, 1 ignored, 0 skipped and 0 failed ---> Listing the results (+:done / -:ignored / *:skipped / !:failed) - multimedia/win32-codecs (win32-codecs-3.1.0.p8,1) ---> Packages processed: 0 done, 1 ignored, 0 skipped and 0 failed ---> Session ended at: Thu, 07 Dec 2006 01:24:43 +0100 (consumed 00:00:01)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?45775FA0.7020206>