next abort of perl upgrade encountered--linux-pango security problem :-(

[Sergey V. Dyatko]

В Thu, 25 Jun 2009 01:21:19 -0500 (CDT)
Scott Bennett <bennett at cs.niu.edu> пишет:

SB>      The saga of failures in the perl upgrade continues with the
SB> following:
SB> 
SB> ===>   linux-gtk2-2.6.10_3 depends on
SB> file: /compat/linux/usr/lib/libpango-1.0.so.0.1001.1 - not found
SB> ===>    Verifying install
SB> for /compat/linux/usr/lib/libpango-1.0.so.0.1001.1
SB> in /usr/ports/x11-toolkits/linux-pango ===>  linux-pango-1.10.2_3
SB> has known vulnerabilities: => pango -- integer overflow. Reference:
SB> <http://www.FreeBSD.org/ports/portaudit/4b172278-3f46-11de-becb-001cc0377035.html>
SB> => Please update your ports tree and try again. *** Error code 1
[skipped]
SB> 
SB>      There doesn't seem to be a more recent version of the
SB> x11-toolkits/linux-pango port available.  What is the best way to
SB> proceed? Will a "portmaster -fv x11-toolkits/linux-pango" do the
SB> job for now?  (I'm not too worried about the security bug for the
SB> moment.  Although I use mplayer to play files, they don't generally
SB> involve .png files, and I don't use mplayer to play streaming
SB> files.) Please copy me in on responses, otherwise I won't see them
SB> till the next freebsd-ports digest is sent out.  Thanks!
SB> 
SB> 
SB>                                   Scott Bennett, Comm. ASMELG, CFIAG
1) deinstall portaudit
2) upgrate all ports
3) install portaudit if you need it

or

1)rm /var/db/portaudit/auditfile.tbz
2) upgrate all ports
3) portaudit -F


--
wbr, tiger