Date: Thu, 25 Jun 2009 09:37:52 +0300 From: "Sergey V. Dyatko" <sergey.dyatko@gmail.com> To: Scott Bennett <bennett@cs.niu.edu> Cc: freebsd-ports@freebsd.org Subject: Re: next abort of perl upgrade encountered--linux-pango security problem :-( Message-ID: <20090625093752.5719bb39@tiger.minsk.domain> In-Reply-To: <200906250621.n5P6LJfC015754@mp.cs.niu.edu> References: <200906250621.n5P6LJfC015754@mp.cs.niu.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
В Thu, 25 Jun 2009 01:21:19 -0500 (CDT) Scott Bennett <bennett@cs.niu.edu> пишет: SB> The saga of failures in the perl upgrade continues with the SB> following: SB> SB> ===> linux-gtk2-2.6.10_3 depends on SB> file: /compat/linux/usr/lib/libpango-1.0.so.0.1001.1 - not found SB> ===> Verifying install SB> for /compat/linux/usr/lib/libpango-1.0.so.0.1001.1 SB> in /usr/ports/x11-toolkits/linux-pango ===> linux-pango-1.10.2_3 SB> has known vulnerabilities: => pango -- integer overflow. Reference: SB> <http://www.FreeBSD.org/ports/portaudit/4b172278-3f46-11de-becb-001cc0377035.html>; SB> => Please update your ports tree and try again. *** Error code 1 [skipped] SB> SB> There doesn't seem to be a more recent version of the SB> x11-toolkits/linux-pango port available. What is the best way to SB> proceed? Will a "portmaster -fv x11-toolkits/linux-pango" do the SB> job for now? (I'm not too worried about the security bug for the SB> moment. Although I use mplayer to play files, they don't generally SB> involve .png files, and I don't use mplayer to play streaming SB> files.) Please copy me in on responses, otherwise I won't see them SB> till the next freebsd-ports digest is sent out. Thanks! SB> SB> SB> Scott Bennett, Comm. ASMELG, CFIAG 1) deinstall portaudit 2) upgrate all ports 3) install portaudit if you need it or 1)rm /var/db/portaudit/auditfile.tbz 2) upgrate all ports 3) portaudit -F -- wbr, tiger
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20090625093752.5719bb39>