From owner-freebsd-questions@FreeBSD.ORG Fri Aug 4 00:32:34 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2714A16A4E7 for ; Fri, 4 Aug 2006 00:32:34 +0000 (UTC) (envelope-from freebsd.ph@gmail.com) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.186]) by mx1.FreeBSD.org (Postfix) with ESMTP id 59B4343D4C for ; Fri, 4 Aug 2006 00:32:33 +0000 (GMT) (envelope-from freebsd.ph@gmail.com) Received: by nf-out-0910.google.com with SMTP id n15so1251856nfc for ; Thu, 03 Aug 2006 17:32:32 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=FBMc240RX5RRdWdCjSvjT3ryZLhhjU5E/q+HbbaNMjidoSAlm/flOqtZLBCkoT39/NGW7osak5E3PUuMRvdXSHoXo8fQ1qYsaUgZrskc5PHUMOUsu1lJNAfFg5OEpTL763ypemyKgtjeMs4cN/hMdUFn0Ag8VewB/VKRkMjVBv0= Received: by 10.78.164.13 with SMTP id m13mr1315510hue; Thu, 03 Aug 2006 17:32:32 -0700 (PDT) Received: by 10.78.141.18 with HTTP; Thu, 3 Aug 2006 17:32:32 -0700 (PDT) Message-ID: Date: Fri, 4 Aug 2006 08:32:32 +0800 From: "jan gestre" To: Dave In-Reply-To: <000301c6b6fd$dc85b890$0200a8c0@satellite> MIME-Version: 1.0 References: <000301c6b6fd$dc85b890$0200a8c0@satellite> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: freebsd-questions@freebsd.org Subject: Re: portupgrade ruby vulnerability X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Aug 2006 00:32:34 -0000 On 8/3/06, Dave wrote: > > Hello, > I'm getting an error from ruby whenever i run a portupgrade. Checking > portaudit i see this is a vulnerability. Is there a fiix for it? > Thanks. > Dave. > > i had these warnings too, just use portupgrade or portmanager to upgrade your ports, there is a vulnerability in ruby-1.8.4_8,1 and it was fixed with ruby-1.8.4_9,1. update the portaudit database so you won't see the warning message again. HTH