freebsd package update / upgrade

[Bernt Hansson]

2012-02-22 04:56, alexus skrev:

> all I want is to update these
>
> f9# portaudit -a
> Affected package: python27-2.7.2_3
> Type of problem: Python -- DoS via malformed XML-RPC / HTTP POST request.
> Reference: http://portaudit.FreeBSD.org/b4f8be9e-56b2-11e1-9fb7-003067b2972c.html

portupgrade -iR (use p also if you want to build a package) python27

> Affected package: sudo-1.8.3_1
> Type of problem: sudo -- format string vulnerability.
> Reference: http://portaudit.FreeBSD.org/7c920bb7-4b5f-11e1-9f47-00e0815b8da8.html

portupgrade -iR(p) sudo

> Affected package: ruby-1.8.7.352_2,1
> Type of problem: Multiple implementations -- DoS via hash algorithm collision.
> Reference: http://portaudit.FreeBSD.org/91be81e7-3fea-11e1-afc7-2c4138874f7d.html

portupgrade -iR(p) ruby

> 3 problem(s) in your installed packages found.
>
> You are advised to update or deinstall the affected package(s) immediately.
> f9#
>
> P.S. why is it pkg_add installing vulnerable versions at the first
> place? i just installed ruby and already is a problem??

Because pakages are built for *-RELEASE