cups builds on one, but rejected by another?

[Jonathan Horne]

On Wednesday 14 November 2007 03:57:26 pm Kris Kennaway wrote:
> Jonathan Horne wrote:
> > On Wednesday 14 November 2007 03:39:47 pm Jonathan Horne wrote:
> >> my jails server (6.2-p8) just ran portupgrade fine, and cups was one of
> >> its items it updated:
> >>
> >> [root at canopus ~]# pkg_info | grep cups-
> >> cups-base-1.3.3_2   Common UNIX Printing System
> >>
> >> but my 7.0-b2 desktop, refuses to build the same package:
> >>
> >> ===>  cups-base-1.3.3_2 has known vulnerabilities:
> >> => cups -- off-by-one buffer overflow.
> >>    Reference:
> >> <http://www.FreeBSD.org/ports/portaudit/8dd9722c-8e97-11dc-b8f6-001c2514
> >>716 c.html> => Please update your ports tree and try again.
> >> *** Error code 1
> >>
> >> what would be the differences between the 2 systems that one would build
> >> it, and the other reject the same port?  ive not tweaked any port
> >> security settings on either one, so this is some curious behavior to me.
> >>
> >> thanks,
> >
> > another interesting thing, when you read the portaudit page for this, it
> > says:
> >
> > Affects:
> > cups-base <1.3.3_1
> >
> > but yet 1.3.3_2 still is rejected.
>
> One or the other has either a stale portaudit database or ports tree.
>
> Kris

what is the method for updating the portaudit database?  both have had their 
ports trees updated today, the 7.0 box multiple times.

thanks,
-- 
Jonathan Horne
http://dfwlpiki.dfwlp.org
freebsd at dfwlp.com