Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 14 Nov 2007 22:57:26 +0100
From:      Kris Kennaway <kris@FreeBSD.org>
To:        Jonathan Horne <freebsd@dfwlp.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: cups builds on one, but rejected by another?
Message-ID:  <473B6F46.2070509@FreeBSD.org>
In-Reply-To: <200711141543.27342.freebsd@dfwlp.com>
References:  <200711141539.47515.freebsd@dfwlp.com> <200711141543.27342.freebsd@dfwlp.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Jonathan Horne wrote:
> On Wednesday 14 November 2007 03:39:47 pm Jonathan Horne wrote:
>> my jails server (6.2-p8) just ran portupgrade fine, and cups was one of its
>> items it updated:
>>
>> [root@canopus ~]# pkg_info | grep cups-
>> cups-base-1.3.3_2   Common UNIX Printing System
>>
>> but my 7.0-b2 desktop, refuses to build the same package:
>>
>> ===>  cups-base-1.3.3_2 has known vulnerabilities:
>> => cups -- off-by-one buffer overflow.
>>    Reference:
>> <http://www.FreeBSD.org/ports/portaudit/8dd9722c-8e97-11dc-b8f6-001c2514716
>> c.html> => Please update your ports tree and try again.
>> *** Error code 1
>>
>> what would be the differences between the 2 systems that one would build
>> it, and the other reject the same port?  ive not tweaked any port security
>> settings on either one, so this is some curious behavior to me.
>>
>> thanks,
> 
> another interesting thing, when you read the portaudit page for this, it says:
> 
> Affects:
> cups-base <1.3.3_1
> 
> but yet 1.3.3_2 still is rejected.

One or the other has either a stale portaudit database or ports tree.

Kris



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?473B6F46.2070509>