up to date ports...portinstall/portupgrade won't work

Wed Nov 3 09:31:31 PST 2004

I have run up against a brick wall here and i'm not sure where to turn
next.

I tried to install openoffice and limewire from a freshly updated ports
tree  (fresh for openoffice = yesterday, fresh for limewire = 5 minutes
ago) as well as gnome2.  I get a very similar message at the end of
each, just different package failures.  The limewire message is below:

===>    Verifying reinstall for /usr/X11R6/lib/libXm.so in
/usr/ports/x11-toolkits/open-motif
===>  open-motif-2.2.3 has known vulnerabilities:
>> xpm -- image decoding vulnerabilities.
   Reference:
<http://www.FreeBSD.org/ports/portaudit/ef253f8b-0727-11d9-b45d-000c41e2cdad.html>
>> Please update your ports tree and try again.
*** Error code 1

Stop in /usr/ports/x11-toolkits/open-motif.
*** Error code 1

Stop in /usr/ports/java/jdk14.
*** Error code 1

Stop in /usr/ports/net/limewire.
*** Error code 1

Stop in /usr/ports/net/limewire.
** Command failed [exit code 1]: /usr/bin/script -qa
/tmp/portinstall71119.18 make reinstall
** Fix the installation problem and try again.
** Listing the failed packages (*:skipped / !:failed)
        ! net/limewire  (install error)
--->  Packages processed: 0 done, 18 ignored, 0 skipped and 1 failed

The package that had a vulnerability for oo and gnome2 was of course
xpdf.  I have known about the exploits so it was no surprise but i DID
update my ports tree.  I also visited the supplied link and read up
about updating to X11R6.8.1 but i don't see even how to do this.  I
searched the /usr/ports directory recursively for X11R and all i got was
the following:

./java/jdk14/work/j2se/src/solaris/classes/sun/awt/X11Renderer.java
./java/jdk14/work/j2se/src/solaris/classes/sun/awt/motif/X11RemoteOffScreenImage.java
./java/jdk14/work/j2se/src/solaris/native/sun/awt/X11RemoteOffScreenImage.c
./java/jdk14/work/j2se/src/solaris/native/sun/awt/X11Renderer.c
./java/jdk14/work/j2se/src/solaris/native/sun/awt/X11RemoteOffScreenImage.c.orig
./www/gnuinfo/files/gnuinfo.X11R6
./distfiles/xorg/X11R6.7.0-src1.tar.gz
./distfiles/xorg/X11R6.7.0-src3.tar.gz

Does this mean that the fixed version is not there and until it is..no
matter what these packages won't build?  

Would this work if i just went to the /usr/ports/x11/gnome2/ directory
and  did a make install?  if yes, why?

The last time portinstall/portupgrade was brought up as a way to install
ports there was a discussion on why or why not to use it..i'm not
looking for that.  I use it because i like it and i can specify to make
the up and downstream dependencies and i'm new to freebsd.  That
said.....

Any advice would be great.

Thanks,

Aaron
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20041103/7880976f/attachment.bin