From owner-freebsd-questions@FreeBSD.ORG Mon Nov 12 22:02:33 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4A55116A41B for ; Mon, 12 Nov 2007 22:02:33 +0000 (UTC) (envelope-from yuri.pankov@gmail.com) Received: from darklight.org.ru (ipv6.darklight.org.ru [IPv6:2001:470:1f07:84::1]) by mx1.freebsd.org (Postfix) with ESMTP id F418513C48E for ; Mon, 12 Nov 2007 22:02:31 +0000 (UTC) (envelope-from yuri.pankov@gmail.com) Received: from darklight.org.ru (yuri@darklight.org.ru [IPv6:::1]) by darklight.org.ru (8.14.2/8.14.2) with ESMTP id lACM2Ju2021500; Tue, 13 Nov 2007 01:02:19 +0300 (MSK) (envelope-from yuri.pankov@gmail.com) Received: from localhost (localhost [[UNIX: localhost]]) by darklight.org.ru (8.14.2/8.14.2/Submit) id lACM2Io0021499; Tue, 13 Nov 2007 01:02:18 +0300 (MSK) (envelope-from yuri.pankov@gmail.com) X-Authentication-Warning: darklight.org.ru: yuri set sender to yuri.pankov@gmail.com using -f From: Yuri Pankov To: freebsd-questions@freebsd.org Date: Tue, 13 Nov 2007 01:02:17 +0300 User-Agent: KMail/1.9.7 References: <20071112162746.0F61.GERARD-SEIBERT@seibercom.net> In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200711130102.18050.yuri.pankov@gmail.com> Cc: Kurt Buff Subject: Re: cups-base upgrade and samba X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Nov 2007 22:02:33 -0000 On Tuesday 13 November 2007 00:53:22 Kurt Buff wrote: > On Nov 12, 2007 1:36 PM, Gerard wrote: > > On November 12, 2007 at 02:42PM Kurt Buff wrote: > > > According to my portaudit, cups-base has security problems, and I > > > can't get samba going because of it. > > > > > > http://www.FreeBSD.org/ports/portaudit/8dd9722c-8e97-11dc-b8f6-001c2514 > > >716c.html > > > > > > According to the above URL, this problem affects v1.3.4, and 1.3.3_1 > > > is the latest port, from the CVSUP I did today, and it errors out when > > > doing a 'portupgrad -aRr' > > > > > > Seems I can't get there from here. > > > > > > Any suggestions on how to move forward with this? > > > > Have you tried adding the following to your /etc/make.conf file? > > > > DISABLE_VULNERABILITIES=yes > > > > > > -- > > Gerard > > Well, that certainly seems to work, but... > > I'm out of luck on security until someone updates the port, correct? > > Kurt It is already patched, please see http://lists.freebsd.org/pipermail/cvs-ports/2007-November/137633.html http://lists.freebsd.org/pipermail/cvs-ports/2007-November/137639.html Yuri