Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 13 Feb 2007 16:41:29 -0600
From:      Paul Schmehl <pauls@utdallas.edu>
To:        freebsd-questions@freebsd.org
Subject:   Re: Forcing a portupgrade?
Message-ID:  <BE10B4684C6890C58F1EA982@utd59514.utdallas.edu>
In-Reply-To: <45D23AD3.4060506@makeworld.com>
References:  <20070213172123.620e32b3@tania.servebbs.org> <45D23AD3.4060506@makeworld.com>

next in thread | previous in thread | raw e-mail | index | archive | help
--==========E00057E1502C20360719==========
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

--On Tuesday, February 13, 2007 16:25:23 -0600 Chris <racerx@makeworld.com> =

wrote:

> Bob wrote:
>> # portupgrade mozilla
>> --->  Upgrading 'mozilla-1.7.12_5,2' to
>> 'mozilla-1.7.13_2,2' (www/mozilla)
>>
>> [...]
>>
>> =3D=3D=3D>  mozilla-1.7.13_2,2 has known vulnerabilities:
>> =3D> mozilla -- multiple vulnerabilities.
>>    Reference:
>> <http://www.FreeBSD.org/ports/portaudit/e6296105-449b-11db-ba89-000c6ec7
>> 75d9.html> =3D> mozilla -- multiple vulnerabilities. Reference:
>> <http://www.FreeBSD.org/ports/portaudit/e2a92664-1d60-11db-88cf-000c6ec7
>> 75d9.html> =3D> Please update your ports tree and try again. *** Error
>> code 1
>>
>> My ports tree IS up to date, and I have a copy of mozilla-1.7.13_2,2
>> in /usr/ports/distfiles, but obviously there is no current fix for the
>> vulnerability(s). I would still like to upgrade Mozilla to 1.7.13_2,2.
>> Is there a way to force the upgrade despite the port-vulnerability stop?
>>
>> Bob
>>
>
> An easy fix - remove the database portaudit uses. Loog somewhere in
> /var/db ....
>
> Then rerun your portupgrade

Yikes!  That's a bit drastic.  What's wrong with make=20
DISABLE_VULNERABILITIES install?

Paul Schmehl (pauls@utdallas.edu)
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/

--==========E00057E1502C20360719==========--




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?BE10B4684C6890C58F1EA982>