From owner-freebsd-questions@FreeBSD.ORG Thu Mar 27 01:51:09 2014 Return-Path: Delivered-To: questions@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 06EE1B4B for ; Thu, 27 Mar 2014 01:51:09 +0000 (UTC) Received: from mail-qa0-x230.google.com (mail-qa0-x230.google.com [IPv6:2607:f8b0:400d:c00::230]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id BDBDFAD4 for ; Thu, 27 Mar 2014 01:51:08 +0000 (UTC) Received: by mail-qa0-f48.google.com with SMTP id m5so3146208qaj.21 for ; Wed, 26 Mar 2014 18:51:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=w5Hr59aXlqVoL6v3VO15gx6D0xbj2JOAVhtyhWtKh7Q=; b=ADMDMSu5dolEJwAUuj9CEUrcocCYDF6IpJs9EwNSbpSETvyIbvgNfFM/Z/g22m/XK0 lgMsszQ4xZGfY4aZH9fksG/+y1U4LNpuxni9f5Qd38vgC7EffEUWtxdOgUg8FCvCF/o5 grlvWbhuzGgUwk8C6xkKVlDekkr3H0Co0N9CsWqNb3CPIPaO5hUGchyHbNaja3h0C/TG uoV+PzZeDUUnnl2KyVx3uidFMCMGNL3hdZZZiiWbj+mwIuavGWzmnnqP3FCos3swnmC2 NVhzevrc5lqCjNVLYNuVFRiaIET6LdW+snbOHA/IxoFGK0HqgHUbPC89T3EMtDkqpIlQ 58YA== MIME-Version: 1.0 X-Received: by 10.140.42.9 with SMTP id b9mr19711131qga.87.1395885067940; Wed, 26 Mar 2014 18:51:07 -0700 (PDT) Received: by 10.96.88.195 with HTTP; Wed, 26 Mar 2014 18:51:07 -0700 (PDT) Date: Thu, 27 Mar 2014 09:51:07 +0800 Message-ID: Subject: pkg upgrade, how to ? From: Val She To: questions@FreeBSD.org Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Mar 2014 01:51:09 -0000 *uname -a* FreeBSD my_computer 9.1-RELEASE FreeBSD 9.1-RELEASE #0 r243825: Tue Dec 4 09:23:10 UTC 2012 root@farrell.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC amd64 *pkg audit* apache24-2.4.6 is vulnerable: apache -- several vulnerabilities WWW: http://portaudit.FreeBSD.org/91ecb546-b1e6-11e3-980f-20cf30e32f6d.html pkg-1.0.11 is vulnerable: libyaml heap overflow resulting in possible code execution WWW: http://portaudit.FreeBSD.org/111f1f84-1d14-4ff2-a9ea-cf07119c0d3b.html 2 problem(s) in your installed packages found. *pkg update* Updating repository catalogue pkg: http://pkgbeta.FreeBSD.org/freebsd:9:x86:64/latest/repo.txz: Not Found here http://lists.freebsd.org/pipermail/freebsd-pkg/2013-October/000107.htmlsay that i need pkg > 1.1.4.8 my *pkg -v* 1.0.11 *cd /usr/ports/ports-mnmt/pkg/* &&*make clean install* ===> Cleaning for pkg-1.2.7 /!\ WARNING /!\ pkg_install EOL is scheduled for 2014-09-01. Please consider migrating to pkgng http://blogs.freebsdish.org/portmgr/2014/02/03/time-to-bid-farewell-to-the-old-pkg_-tools/ If you do not want to see this message again set NO_WARNING_PKG_INSTALL_EOL=yes in your make.conf ===> pkg-1.2.7 has known vulnerabilities: New pkg tools detected: found 65 installed packages. The portaudit tool is now obsolete, please remove portaudit and use the command 'pkg audit' instead. See man pkg-audit(8) for more information. Running /usr/local/sbin/pkg-static audit -F: Audit file up-to-date. apache24-2.4.6 is vulnerable: apache -- several vulnerabilities WWW: http://portaudit.FreeBSD.org/91ecb546-b1e6-11e3-980f-20cf30e32f6d.html pkg-1.0.11 is vulnerable: libyaml heap overflow resulting in possible code execution WWW: http://portaudit.FreeBSD.org/111f1f84-1d14-4ff2-a9ea-cf07119c0d3b.html 2 problem(s) in your installed packages found. => Please update your ports tree and try again. *** [check-vulnerable] Error code 1 Stop in /usr/ports/ports-mgmt/pkg. *portsnap fetch* Looking up portsnap.FreeBSD.org mirrors... 7 mirrors found. Fetching snapshot tag from ec2-eu-west-1.portsnap.freebsd.org... done. Fetching snapshot metadata... done. Updating from Wed Mar 26 17:13:23 IRKT 2014 to Thu Mar 27 10:18:56 IRKT 2014. Fetching 4 metadata patches... done. Applying metadata patches... done. Fetching 0 metadata files... done. Fetching 92 patches.....10....20....30....40....50....60....70....80....90. done. Applying patches... done. Fetching 0 new ports or files... done. Help solve this quest, thanks.