From owner-freebsd-questions@FreeBSD.ORG Mon May 19 17:15:01 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id B00DDFE0 for ; Mon, 19 May 2014 17:15:01 +0000 (UTC) Received: from plane.gmane.org (plane.gmane.org [80.91.229.3]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 6DBF320A6 for ; Mon, 19 May 2014 17:15:00 +0000 (UTC) Received: from list by plane.gmane.org with local (Exim 4.69) (envelope-from ) id 1WmR9D-0005WG-LG for freebsd-questions@freebsd.org; Mon, 19 May 2014 19:14:47 +0200 Received: from 86.21.186.149 ([86.21.186.149]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Mon, 19 May 2014 19:14:47 +0200 Received: from walterhurry by 86.21.186.149 with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Mon, 19 May 2014 19:14:47 +0200 X-Injected-Via-Gmane: http://gmane.org/ To: freebsd-questions@freebsd.org From: Walter Hurry Subject: Can't reinstall linux-f10-openldap Date: Mon, 19 May 2014 17:14:28 +0000 (UTC) Lines: 20 Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: 86.21.186.149 User-Agent: Pan/0.139 (Sexual Chocolate; GIT bf56508 git://git.gnome.org/pan2) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 May 2014 17:15:01 -0000 I'm trying to reinstall net/linux-f10-openldap, but am being prevented from doing so. ------------------------------------------------------------ ===> linux-f10-openldap-2.4.12_1 has known vulnerabilities: linux-f10-openldap-2.4.12_1 is vulnerable: OpenLDAP -- incorrect handling of NULL in certificate Common Name CVE: CVE-2009-3767 WWW: http://portaudit.FreeBSD.org/abad20bf-c1b4-11e3- a5ac-001b21614864.html => Please update your ports tree and try again. *** [check-vulnerable] Error code 1 Stop in /usr/ports/net/linux-f10-openldap. ------------------------------------------------------------ The portaudit web page says that there is indeed a vulnerability in this version, but it is the latest version available in the ports tree. Is there any way around this?