portupgrade deleting pacakges

[barbara]

I was upgrading some of my ports after the upgrade of gnutls using portupgrade.
I wasn't doing it using what's recommended in /usr/ports/UPDATING, but with a script I've done which computes dependencies and track upgraded packages and then run portupgrade -fp on one port at a time. That's because the upgrade of gdm always caused me troubles on the currently running session and stopping it wasn't a option at that moment.
Then I noticed some problem with pkgdb and then I realized that portupgrade refused to upgrade firefox because of portaudit entry, but it nonetheless removed the installed version leaving inconsistencies.
IMHO this should never happen.
You can try it by yourself fetching the last portaudit db with portaudit -aF and then running portupgrade -f www/firefox.

This is what's happening:
# portupgrade -f www/firefox
--->  Reinstalling 'firefox-2.0.0.20_9,1' (www/firefox)
--->  Building '/usr/ports/www/firefox' with make flags: WITH_OPTIMIZED_CFLAGS=1
===>  Cleaning for firefox-2.0.0.20_9,1
===>  firefox-2.0.0.20_9,1 has known vulnerabilities:
=> mozilla -- multiple vulnerabilities.
   Reference: <http://portaudit.FreeBSD.org/49e8f2ee-8147-11de-a994-0030843d3802.html>
=> Please update your ports tree and try again.
*** Error code 1

Stop in /usr/ports/www/firefox.
*** Error code 1

Stop in /usr/ports/www/firefox.
--->  Backing up the old version
--->  Uninstalling the old version
--->  Deinstalling 'firefox-2.0.0.20_9,1'
pkg_delete: package 'firefox-2.0.0.20_9,1' is required by these other packages
and may not be deinstalled (but I'll delete it anyway):
alacarte-0.12.1_1
compiz-0.8.2_1
compiz-fusion-0.8.2
compiz-plugins-extra-0.8.2_1
compiz-plugins-main-0.8.2_1
emerald-0.8.2_1
eog-2.26.3_1
epiphany-2.26.3_3
file-roller-2.26.3_1,1
gdm-2.26.1_6
gegl-0.0.22_6
gimp-2.6.6,2
gimp-app-2.6.6_3,1
gnome-applets-2.26.3_1
gnome-control-center-2.26.0_2
gnome-netstatus-2.26.0_1
gnome-panel-2.26.3_1
gnome-system-monitor-2.26.2_1
gnome-system-tools-2.22.2_1
gnome-utils-2.26.0_2,1
gnome2-lite-2.26.3
librsvg2-2.26.0_1
meld-1.3.0_1
mplayerplug-in-3.55_3
nautilus-2.26.3_1
nautilus-cd-burner-2.24.0_2
netspeed_applet-0.15.2_1
py26-gnome-desktop-2.26.0_1
swt-devel-3.5.m6_1,1
totem-2.26.3_1
vuze-4.2.0.2_1
yelp-2.26.0_1
[Updating the pkgdb <format:bdb_btree> in /var/db/pkg ... - 752 packages found (-1 +0) (...) done]
--->  Installing the new version via the port with make flags: WITH_OPTIMIZED_CFLAGS=1
===>  firefox-2.0.0.20_9,1 has known vulnerabilities:
=> mozilla -- multiple vulnerabilities.
   Reference: <http://portaudit.FreeBSD.org/49e8f2ee-8147-11de-a994-0030843d3802.html>
=> Please update your ports tree and try again.
*** Error code 1

Stop in /usr/ports/www/firefox.
*** Error code 1

Stop in /usr/ports/www/firefox.
*** Error code 1

Stop in /usr/ports/www/firefox.
===>  Cleaning for firefox-2.0.0.20_9,1
--->  Cleaning out obsolete shared libraries
# pkg_info -Ix firefox
firefox-3.5.2,1     Web browser based on the browser portion of Mozilla

As you can see,firefox-2.0.0.20_9,1 is now gone.

Thanks
Barbara