cvsup and portupgrade

[Zbigniew Szalbot]

Hello,

I am relatively new to FreeBSD. I use FreeBSD 6.1 stable release. I have 
enabled portaudit and as a result now get reports about known 
vulnarabilities. The problem I have encountered is this. I am trying to 
update php and python and do it by first refreshing the ports tree by 
using cvsup and then I cd to the appropriate port and issue portupgarde.

However, in both cases (php and python) I get an error. example pasted 
below:

$ sudo portupgrade
--->  Upgrading 'python-2.4.3' to 'python-2.4.3_1' (lang/python)
--->  Building '/usr/ports/lang/python'
===>  Cleaning for python-2.4.3_1
===>  python-2.4.3_1 has known vulnerabilities:
=> python -- buffer overrun in repr() for unicode strings.
    Reference: 
<http://www.FreeBSD.org/ports/portaudit/fe83eb5b-55e1-11db-a5ae-00508d6a62df.html>
=> Please update your ports tree and try again.
*** Error code 1

Stop in /usr/ports/lang/python.
** Command failed [exit code 1]: /usr/bin/script -qa 
/tmp/portupgrade.95983.0 env PORT_UPGRADE=yes make
** Fix the problem and try again.
** Listing the failed packages (*:skipped / !:failed)
         ! lang/python (python-2.4.3)    (unknown build error)
--->  Packages processed: 0 done, 0 ignored, 0 skipped and 1 failed


And this is my distinfo file from the /usr/ports/lang/python directory:

MD5 (python/Python-2.1.1.tgz) = eb34371c49b271abc74b42572883e1b4
MD5 (python/Python-2.1.2.tgz) = 4af22bded23a55f907365ed7610de8c9
MD5 (python/Python-2.1.3.tgz) = a8b04cdc822a6fc833ed9b99c7fba589
MD5 (python/Python-2.1.tgz) = 2ba2baeccd6100a4be80e6368a975054
MD5 (python/Python-2.2.1.tgz) = e7012d611602b62e36073c2fd02396a3
MD5 (python/Python-2.2.2.tgz) = 1c1067396e5aa0299978486eb5bd1a5c
MD5 (python/Python-2.2.3.tgz) = 169f89f318e252dac0c54dd1b165d229
MD5 (python/Python-2.2.tgz) = 87febf0780c8e18454022d34b2ca70a0
MD5 (python/Python-2.3.1.tgz) = a3dcbe1c7f173c8e3c7cce28495016ae
MD5 (python/Python-2.3.2.tgz) = f54d7a529d444994b4b33429bbb45479
MD5 (python/Python-2.3.3.tgz) = 4d16732b1cfccc0ed250956d41463c61
MD5 (python/Python-2.3.4.tgz) = b6cf0b19226861a38689d2fabd0931b3
MD5 (python/Python-2.3.5.tgz) = 7a1ecc1196c5c0e9d4eef90ba684c4e9
MD5 (python/Python-2.3.tgz) = 595620a4769073a812e353597585c4e8
MD5 (python/Python-2.4.1.tgz) = 7bb2416a4f421c3452d306694d3efbba
MD5 (python/Python-2.4.2.tgz) = 07cfc759546f6723bb367be5b1ce9875
MD5 (python/Python-2.4.3.tgz) = edf994473a8c1a963aaa71e442b285b7
MD5 (python/Python-2.4.tgz) = 149ad508f936eccf669d52682cf8e606
MD5 (python/Python-2.5c2.tgz) = 32b56940c90844eba605d5d2dad683d2
SHA256 (python/Python-2.1.1.tgz) = 
6a5455b2ab72642feffc060a04e8ea543de2d0671a3f9
c335b52f2e1e41edc5f
SHA256 (python/Python-2.1.2.tgz) = 
389c7badc61f9bdc50788b54dd3ffeaa4b559baf6a4de
1425bf90b9c6b4ac66e

I would really appreciate if someone told me where I go wrong and what I 
should do to upgrade both software pieces. I understand that the problem 
is somewhere around not really getting the python version I should, but 
what can I do to fix it?

Warm regards,

--
Zbigniew Szalbot