Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 25 Dec 2009 23:45:39 -0800
From:      Nerius Landys <nlandys@gmail.com>
To:        Aleksandr Miroslav <alexmiroslav@gmail.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: portaudit php vulnerabilities
Message-ID:  <560f92640912252345g64038989y3fba4043ef5ffba6@mail.gmail.com>
In-Reply-To: <9fa4f0760912252118q3397f90fr8891873eab0447d5@mail.gmail.com>
References:  <9fa4f0760912252118q3397f90fr8891873eab0447d5@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> For the past week or so, portaudit has been warning me that the
> installed version of php on my system (php5-5.2.11_1) has known
> vulnerabilties. Fair enough. However, I've not seen a fix in the ports
> tree since then. Is my only option to deinstall php until this gets
> fixed?

Hi.  I've been experiencing the same problem.  Apparently 5.2.12 is
not in the ports yet, but probably will be soon.

If found it necessary to do some port-related commands even though
5.2.11 is currently blacklisted by portaudit.  You can use
DISABLE_VULNERABILITIES in your commands as outlined here until there
is an updated port:

http://www.ivorde.ro/FreeBSD_force_port_installation_upgrade_even_though_portaudit_reports_vulnerability_for_it-64.html



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?560f92640912252345g64038989y3fba4043ef5ffba6>