On Fri, 4 Mar 2005, W.Kenworthy wrote:

> The usual problem is that the version it is complaining about is really
> installed.  Because of slots and other peculiarities, there can be
> multiple versions installed that may not show on some utilties when you
> check.  Use equery l packagename, and qpkg -v packagename to check.
> Note that on older, crufty systems I often have problems digging out the
> version thats being complained about.
>
> Easiest fix is just run "glsa-check -f [glsa number]" in most cases
>
> Does it ever get it wrong? - not so far on my systems that I have
> noticed.

It doesn't really handle version numbering very well. I run Apache 1.x on
my machines and it still reports an Apache 2.x security problem. I also
run gentoo-dev-sources but I get reports about other (more esoteric)
kernels...

-- 
A.
--
[email protected] mailing list

Reply via email to