keeping freebsd uptodate - doubt

[Zlatozar Zhelyazkov]

Here are some useful links. Read carefully!!

http://www.taosecurity.com/keeping_freebsd_applications_up-to-date.html
http://www.taosecurity.com/keeping_freebsd_up-to-date.html


On Wed, 2 Feb 2005 06:49:06 -0800 (PST), saravanan ganapathy
<sarav_gsa at yahoo.com> wrote:
> 
> --- Karol Kwiatkowski <freebsd at orchid.homeunix.org>
> wrote:
> 
> > saravanan ganapathy wrote:
> >  > I have done the above steps to update my system
> > and
> > > when I run 'portversion -v | grep -v "=" ', I am
> > > gettin g the perl package only.
> > >
> > > freebsd# portversion -v | grep -v "="
> > > perl-5.8.5      <  needs updating (port has
> > 5.8.6_1)
> > >
> > > freebsd# portupgrade perl
> > > --->  Upgrading 'perl-5.8.5' to 'perl-5.8.6_1'
> > > (lang/perl5.8)
> > > --->  Building '/usr/ports/lang/perl5.8'
> > > ===>  Cleaning for perl-5.8.6_1
> > > ===>  perl-5.8.6_1 has known vulnerabilities:
> > > => perl -- File::Path insecure file/directory
> > > permissions.
> > >    Reference:
> > >
> >
> <http://www.FreeBSD.org/ports/portaudit/c418d472-6bd1-11d9-93ca-000a95bc6fae.html>
> > > => Please update your ports tree and try again.
> > > *** Error code 1
> > >
> > > Stop in /usr/ports/lang/perl5.8.
> > > ** Command failed [exit code 1]: /usr/bin/script
> > -qa
> > > /tmp/portupgrade5864.0 make
> > > ** Fix the problem and try again.
> > > ** Listing the failed packages (*:skipped /
> > !:failed)
> > >         ! lang/perl5.8 (perl-5.8.5)     (unknown
> > build
> > > error)
> > > --->  Packages processed: 0 done, 0 ignored, 0
> > skipped
> > > and 1 failed
> > >
> > > How to solve this problem?
> >
> > Portaudit thinks perl-5.8.6_1 is not safe. It even
> > tells you where to
> > find more information:
> >
> > >
> >
> http://www.FreeBSD.org/ports/portaudit/c418d472-6bd1-11d9-93ca-000a95bc6fae.html
> >
> > If you look there it says:
> >
> > > Affects:
> > >
> > >     * perl >=0 <5.6.2
> > >     * perl >=5.8.0 <5.8.6
> >
> > Clearly, perl-5.8.6_1 is *not* affected. This leads
> > us to conclusion
> > that your portadit's database is outdated. To fetch
> > new databse simply
> > run:
> >
> > # portaudit -F
> >
> 
> The problem has been solved by updating the portaudit
> database.
> 
> What is the recommended period to update the ports?
> 
> Is there any announcements for any port update? So
> that     I can manually update the ports.
> 
> Is portupgrade contains the security patches also?
> 
> Pls guide me
> 
> Sarav
> 
> 
> __________________________________
> Do you Yahoo!?
> Yahoo! Mail - Helps protect you from nasty viruses.
> http://promotions.yahoo.com/new_mail
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
>