Re: Bad VuXML check on PNG port ?

On Mon, May 03, 2004 at 07:59:31PM +0200, Artur Pydo wrote:
> Hello,
> 
> Jacques A. Vidrine wrote:
> 
> >The VuXML document needed to be updated after ache@ made the fix.
> >I've done so now.
> 
> Yes but the file located at :
> 
> ftp://ftp.freebsd.org/pub/FreeBSD/ports/local-distfiles/eik/auditfile.tbz
> 
> has not been updated and it works as the reference database for
> portaudit and, i suppose, for the pkg_install-base-devel ports.
>
> Nothing has changed for me even after updating the ports tree
> and the portaudit reference file. I know that there is a workaround
> modifying 'auditfile' by hand as it is a ascii file.

What you are describing is a problem with portaudit.  You might want
to contact eik@ to determine why the lag time.

> I suggest that in future one avoid setting vulnerable versions as > 0
> because the update fails as long as the reference file has not been
> updated with the correct vulnerable port later.
> 
> In this case it would be much more efficient to set 'png<1.2.5_3'
> from the beginning.

I guess you mean `png <= 1.2.5_3'.  That approach has its own
problems, but I do use it sometimes if I am quite certain of which
later port version will be fixed.

Cheers,
-- 
Jacques Vidrine / [e-mail] / [e-mail] / [e-mail]
_______________________________________________
[e-mail] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[e-mail]"