Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 19 May 2014 16:53:52 -0400
From:      Lowell Gilbert <freebsd-questions-local@be-well.ilk.org>
To:        Walter Hurry <walterhurry@gmail.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Can't reinstall linux-f10-openldap
Message-ID:  <447g5hqylb.fsf@lowell-desk.lan>
In-Reply-To: <lldllk$4se$1@ger.gmane.org> (Walter Hurry's message of "Mon, 19 May 2014 19:22:28 %2B0000 (UTC)")
References:  <llde5k$v9g$1@ger.gmane.org> <44k39h7ja3.fsf@lowell-desk.lan> <lldllk$4se$1@ger.gmane.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Walter Hurry <walterhurry@gmail.com> writes:

> On Mon, 19 May 2014 13:47:16 -0400, Lowell Gilbert wrote:
>
>> Walter Hurry <walterhurry@gmail.com> writes:
>> 
>>> I'm trying to reinstall net/linux-f10-openldap, but am being prevented
>>> from doing so.
>>>
>>> ------------------------------------------------------------
>>> ===>  linux-f10-openldap-2.4.12_1 has known vulnerabilities:
>>> linux-f10-openldap-2.4.12_1 is vulnerable:
>>> OpenLDAP -- incorrect handling of NULL in certificate Common Name CVE:
>>> CVE-2009-3767 WWW: http://portaudit.FreeBSD.org/abad20bf-c1b4-11e3-
>>> a5ac-001b21614864.html => Please update your ports tree and try again.
>>> *** [check-vulnerable] Error code 1
>>>
>>> Stop in /usr/ports/net/linux-f10-openldap.
>>> ------------------------------------------------------------
>>>
>>> The portaudit web page says that there is indeed a vulnerability in
>>> this version, but it is the latest version available in the ports tree.
>>>
>>> Is there any way around this?
>> 
>> The only options are the obvious ones:
>> 
>>  1) Override the vulnerability warning and install anyway.
> <snip>
>
> Thanks for the reply. How do I implement option 1? Sorry, but there are 
> huge gaps in my FreeBSD knowledge.

You set an environment variable, DISABLE_VULNERABILITIES. It's listed in
the manual for ports(7), although I think the reference to the portaudit
port is no longer applicable.

> This is FreeBSD 9.2 (amd64), and I was using 'portupgrade -f'. 

portupgrade may have its own settings for that; I don't have it
installed at the moment, so I can't easily check.

Good luck.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?447g5hqylb.fsf>