keeping freebsd uptodate - doubt

[Karol Kwiatkowski]

saravanan ganapathy wrote:
 > I have done the above steps to update my system and
> when I run 'portversion -v | grep -v "=" ', I am
> gettin g the perl package only.
> 
> freebsd# portversion -v | grep -v "="
> perl-5.8.5      <  needs updating (port has 5.8.6_1)
> 
> freebsd# portupgrade perl
> --->  Upgrading 'perl-5.8.5' to 'perl-5.8.6_1'
> (lang/perl5.8)
> --->  Building '/usr/ports/lang/perl5.8'
> ===>  Cleaning for perl-5.8.6_1
> ===>  perl-5.8.6_1 has known vulnerabilities:
> => perl -- File::Path insecure file/directory
> permissions.
>    Reference:
> <http://www.FreeBSD.org/ports/portaudit/c418d472-6bd1-11d9-93ca-000a95bc6fae.html>
> => Please update your ports tree and try again.
> *** Error code 1
> 
> Stop in /usr/ports/lang/perl5.8.
> ** Command failed [exit code 1]: /usr/bin/script -qa
> /tmp/portupgrade5864.0 make
> ** Fix the problem and try again.
> ** Listing the failed packages (*:skipped / !:failed)
>         ! lang/perl5.8 (perl-5.8.5)     (unknown build
> error)
> --->  Packages processed: 0 done, 0 ignored, 0 skipped
> and 1 failed
> 
> How to solve this problem?

Portaudit thinks perl-5.8.6_1 is not safe. It even tells you where to
find more information:

> http://www.FreeBSD.org/ports/portaudit/c418d472-6bd1-11d9-93ca-000a95bc6fae.html

If you look there it says:

> Affects:
> 
>     * perl >=0 <5.6.2
>     * perl >=5.8.0 <5.8.6

Clearly, perl-5.8.6_1 is *not* affected. This leads us to conclusion
that your portadit's database is outdated. To fetch new databse simply
run:

# portaudit -F


oh, btw. I forgot to include in previous post: before upgrading ports
always read /usr/ports/UPDATING. It can save you some headaches ;)


Cheers,

Karol


-- 
Karol Kwiatkowski  <freebsd at orchid dot homeunix dot org>