Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 02 Feb 2005 15:08:52 +0100
From:      Karol Kwiatkowski <freebsd@orchid.homeunix.org>
To:        saravanan ganapathy <sarav_gsa@yahoo.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: keeping freebsd uptodate - doubt
Message-ID:  <4200DEF4.7080906@orchid.homeunix.org>
In-Reply-To: <20050202135728.22036.qmail@web51703.mail.yahoo.com>
References:  <20050202135728.22036.qmail@web51703.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
saravanan ganapathy wrote:
 > I have done the above steps to update my system and
> when I run 'portversion -v | grep -v "=" ', I am
> gettin g the perl package only.
> 
> freebsd# portversion -v | grep -v "="
> perl-5.8.5      <  needs updating (port has 5.8.6_1)
> 
> freebsd# portupgrade perl
> --->  Upgrading 'perl-5.8.5' to 'perl-5.8.6_1'
> (lang/perl5.8)
> --->  Building '/usr/ports/lang/perl5.8'
> ===>  Cleaning for perl-5.8.6_1
> ===>  perl-5.8.6_1 has known vulnerabilities:
> => perl -- File::Path insecure file/directory
> permissions.
>    Reference:
> <http://www.FreeBSD.org/ports/portaudit/c418d472-6bd1-11d9-93ca-000a95bc6fae.html>;
> => Please update your ports tree and try again.
> *** Error code 1
> 
> Stop in /usr/ports/lang/perl5.8.
> ** Command failed [exit code 1]: /usr/bin/script -qa
> /tmp/portupgrade5864.0 make
> ** Fix the problem and try again.
> ** Listing the failed packages (*:skipped / !:failed)
>         ! lang/perl5.8 (perl-5.8.5)     (unknown build
> error)
> --->  Packages processed: 0 done, 0 ignored, 0 skipped
> and 1 failed
> 
> How to solve this problem?

Portaudit thinks perl-5.8.6_1 is not safe. It even tells you where to
find more information:

> http://www.FreeBSD.org/ports/portaudit/c418d472-6bd1-11d9-93ca-000a95bc6fae.html

If you look there it says:

> Affects:
> 
>     * perl >=0 <5.6.2
>     * perl >=5.8.0 <5.8.6

Clearly, perl-5.8.6_1 is *not* affected. This leads us to conclusion
that your portadit's database is outdated. To fetch new databse simply
run:

# portaudit -F


oh, btw. I forgot to include in previous post: before upgrading ports
always read /usr/ports/UPDATING. It can save you some headaches ;)


Cheers,

Karol


-- 
Karol Kwiatkowski  <freebsd at orchid dot homeunix dot org>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4200DEF4.7080906>