Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 15 May 2007 12:14:27 +0200
From:      Karol Kwiatkowski <>
To:        Victor Engmark <>
Cc:        FreeBSD Questions <>
Subject:   Re: Can't upgrade ports collection
Message-ID:  <>
In-Reply-To: <>
References:  <>	 <> <>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
Hash: SHA256

Victor Engmark wrote:
> On 5/15/07, Karol Kwiatkowski <> wrote:
>> Victor Engmark wrote:
>> > I'm getting reports that some of the packages I've installed have
>> > vulnerabilities when running
>> > portaudit -Fda
>> >
>> > I've tried to update the ports tree running
>> > cd /usr/ports && portsnap update
>> > , but it tells me the tree is already up to date.
>> > What am I doing wrong?
>> Nothing, the ports tree is frozen right know - virtually nothing will be
>> updated until xorg 7.2 gets tested and imported[1].
> Cool stuff, but do you recommend I uninstall the problematic packages?

That depends on lot of factors and, unfortunately, you can only answer
yourself. I've got some vulnerable packages on _my desktop_ right now,
but that's not a problem for me. YMMV.

Another option is to patch ports manually - there's a waiting patch for
php5 port for example:

> Also,
> aren't security patches normally shipped quickly to the ports tree?

That depends on the maintainer but usually yes. It's just unfortunate
time right now :)



- --
Karol Kwiatkowski   <karol.kwiat at gmail dot com>
OpenPGP 0x06E09309
Version: GnuPG v1.4.7 (FreeBSD)
Comment: Using GnuPG with Mozilla -


Want to link to this message? Use this URL: <>