Re: Installing jdk on 7-Release: Has known vulnerabilities from 2005?

2008-07-23 Thread Kris Kennaway

Torgeir Hoffmann wrote:

Hi,

when I try to install linux-sun-jdk16 from ports I get:

===  linux-sun-jdk-1.6.0.07 has known vulnerabilities:
= jdk -- jar directory traversal vulnerability.
   Reference:
http://www.FreeBSD.org/ports/portaudit/18e5428f-ae7c-11d9-837d-000e0c2e438a.html
= Please update your ports tree and try again.
*** Error code 1

This refers to a vulnerability from 2005 (!). I get the same thing with
the 1.5 port.
I desperately want to avoid building the native version due to the fact
that I have a not that sporty laptop, and the packages from the freebsd
foundation is not available yet.

I have the latest portsnap port snapshot.


Update your portaudit database.

Kris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Installing jdk on 7-Release: Has known vulnerabilities from 2005?

2008-07-23 Thread Torgeir Hoffmann
Hi again!

 when I try to install linux-sun-jdk16 from ports I get:

 ===  linux-sun-jdk-1.6.0.07 has known vulnerabilities:
 = jdk -- jar directory traversal vulnerability.
Reference:
 http://www.FreeBSD.org/ports/portaudit/18e5428f-ae7c-11d9-837d-000e0c2e438a.html
 = Please update your ports tree and try again.
 *** Error code 1

 This refers to a vulnerability from 2005 (!). I get the same thing with
 the 1.5 port.
 I desperately want to avoid building the native version due to the fact
 that I have a not that sporty laptop, and the packages from the freebsd
 foundation is not available yet.

 I have the latest portsnap port snapshot.

 Update your portaudit database.

I did that.

portaudit -Fda

Still, same thing. Thought this was very strange as well.

Anything else that I should have done? (It's probably right in front of me!)

Many thanks,

Torgeir

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Installing jdk on 7-Release: Has known vulnerabilities from 2005?

2008-07-23 Thread Kris Kennaway

Torgeir Hoffmann wrote:

Hi again!


when I try to install linux-sun-jdk16 from ports I get:

===  linux-sun-jdk-1.6.0.07 has known vulnerabilities:
= jdk -- jar directory traversal vulnerability.
   Reference:
http://www.FreeBSD.org/ports/portaudit/18e5428f-ae7c-11d9-837d-000e0c2e438a.html
= Please update your ports tree and try again.
*** Error code 1

This refers to a vulnerability from 2005 (!). I get the same thing with
the 1.5 port.
I desperately want to avoid building the native version due to the fact
that I have a not that sporty laptop, and the packages from the freebsd
foundation is not available yet.

I have the latest portsnap port snapshot.

Update your portaudit database.


I did that.

portaudit -Fda

Still, same thing. Thought this was very strange as well.

Anything else that I should have done? (It's probably right in front of me!)


Talk to the port maintainer if you think the vulnerability no longer 
exists, or build with DISABLE_VULNERABILITIES if you choose to override 
the warning.


Kris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]