linux_base

[Warner Joseph]

Thanks Kris, unless I've misunderstood...am I at risk
by using linux_base-6 and if so how can I correct this?

#portupgrade -rR linux_base doesn't do anything and
because of hardware limitations I can't upgrade to a major
release.

-Joe


#-----Original Message-----
#From: Kris Kennaway [mailto:kris at obsecurity.org]
#Sent: Friday, January 07, 2005 12:53 PM
#To: Warner Joseph
#Cc: 'freebsd-questions at freebsd.org'
#Subject: Re: linux_base
#
#
#On Fri, Jan 07, 2005 at 02:44:39PM -0500, Warner Joseph wrote:
#> 
#> Hi,
#> 
#> I'm running 4.8-RELEASE-p27 and had a question
#> regarding my current install of linux_base
#> 
#> #portupgrade -l "<" doesn't reveal this package needs upgrading
#> but portaudit -a says:
#> 
#> Affected package: linux_base-6.1_6
#> Type of problem: xpm -- image decoding vulnerabilities.
#> Reference:
#> 
#<http://www.FreeBSD.org/ports/portaudit/ef253f8b#-0727-11d9-b45d
#-000c41e2cdad
#> .html>
#> 
#> I've followed that url, googled and searched the -questions archive
#> but can't find any information regarding how to correct this.
#> 
#> Can anyone point me in the right direction?
#
#linux_base-6 will never have the security vulnerability fixed because
#it's not supported by redhat.  linux_base contains redhat 8.x which is
#also out of support, but does not currently have security problems.
#It will be updated to something more modern after 4.11-RELEASE.
#
#Kris
#
#

-------------------------------------------------------------------------------
This message and any included attachments are from Siemens Medical Solutions 
USA, Inc. and are intended only for the addressee(s).  
The information contained herein may include trade secrets or privileged or 
otherwise confidential information.  Unauthorized review, forwarding, printing, 
copying, distributing, or using such information is strictly prohibited and may 
be unlawful.  If you received this message in error, or have reason to believe 
you are not authorized to receive it, please promptly delete this message and 
notify the sender by e-mail with a copy to Central.SecurityOffice at shs.siemens.com 

Thank you