Portaudit inhibits updating to mysql-client-4.0.20

Randy Pratt rpratt1950 at earthlink.net
Tue May 18 20:47:35 PDT 2004


I see where the mysql bug has been fixed in CVS:

  http://docs.freebsd.org/cgi/mid.cgi?200405181150.i4IBowxX087508

but portupgrade refused to update to the fixed version:

  ===>  Cleaning for mysql-client-4.0.20
  ===>  mysql-client-4.0.20 has known vulnerabilities:
  >> MySQL insecure temporary file creation (mysqlbug).
 Reference:<http://people.freebsd.org/~eik/portaudit/2e129846-8fbb-11d8-8b29-0020ed76ef5a.html>
  >> Please update your ports tree and try again.

I did update the (portaudit -F) database before portupgrade.  I just
went ahead and disabled portaudit to do the update.
# portupgrade -m DISABLE_VULNERABILITIES=yes mysql-client-4.0.18_1

Is portaudit always going to be lagging behind the vuln.xml ?

Thanks,

Randy
-- 


More information about the freebsd-ports mailing list