On Fri, 09 Nov 2007 15:18:20 +0000 Adam J Richardson <[EMAIL PROTECTED]> wrote:
> Aryeh M. Friedman wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > Can some tell me what this means and how to fix it: > > > > ===> cups-pstoraster-8.15.4_1 depends on shared library: cups.2 - > > not found > > ===> Verifying install for cups.2 in /usr/ports/print/cups-base > > ===> cups-base-1.3.3 is forbidden: remote execution of arbitrary code. > > *** Error code 1 > > > > Stop in /FreeBSD/FreeBSD-current/ports/print/cups-base. > > *** Error code 1 > > > > Stop in /FreeBSD/FreeBSD-current/ports/print/cups-pstoraster. > > *** Error code 1 > > > > Stop in /FreeBSD/FreeBSD-current/ports/print/cups. > > > > Hi Aryeh, > > I can't tell you about the error, but: > > %pkg_info | grep cups > cups-base-1.3.3 Common UNIX Printing System > cups-pstoraster-8.15.4_1 Postscript interpreter for CUPS printing to > non-PS printers > > Looks like the same versions. They do build ok. Perhaps a "make clean > distclean" will shake out the bugs? > > 'Remote execution' is interesting. Do you use some sort of load balancer? The print/cups-base was marked FORBIDDEN due remote execution of arbitrary code on 2007-11-08, see: http://docs.freebsd.org/cgi/mid.cgi?200711081832.lA8IWv3T075088 You can read more about the vulnerability at: http://www.freebsd.org/ports/portaudit/8dd9722c-8e97-11dc-b8f6-001c2514716c.html If you decide that your risk is acceptable you still wish to install/update at this time, you can comment ( # ) the particular line in the ports/print/cups-base/Makefile: #FORBIDDEN= remote execution of arbitrary code I would presume that cups-base-1.3.4 is going to be committed shortly since there are quite a few ports that depend on it. HTH, Randy -- _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
