I have run up against a brick wall here and i'm not sure where to turn next.
I tried to install openoffice and limewire from a freshly updated ports tree (fresh for openoffice = yesterday, fresh for limewire = 5 minutes ago) as well as gnome2. I get a very similar message at the end of each, just different package failures. The limewire message is below: ===> Verifying reinstall for /usr/X11R6/lib/libXm.so in /usr/ports/x11-toolkits/open-motif ===> open-motif-2.2.3 has known vulnerabilities: >> xpm -- image decoding vulnerabilities. Reference: <http://www.FreeBSD.org/ports/portaudit/ef253f8b-0727-11d9-b45d-000c41e2cdad.html> >> Please update your ports tree and try again. *** Error code 1 Stop in /usr/ports/x11-toolkits/open-motif. *** Error code 1 Stop in /usr/ports/x11-toolkits/open-motif. *** Error code 1 Stop in /usr/ports/java/jdk14. *** Error code 1 Stop in /usr/ports/java/jdk14. *** Error code 1 Stop in /usr/ports/net/limewire. *** Error code 1 Stop in /usr/ports/net/limewire. ** Command failed [exit code 1]: /usr/bin/script -qa /tmp/portinstall71119.18 make reinstall ** Fix the installation problem and try again. ** Listing the failed packages (*:skipped / !:failed) ! net/limewire (install error) ---> Packages processed: 0 done, 18 ignored, 0 skipped and 1 failed The package that had a vulnerability for oo and gnome2 was of course xpdf. I have known about the exploits so it was no surprise but i DID update my ports tree. I also visited the supplied link and read up about updating to X11R6.8.1 but i don't see even how to do this. I searched the /usr/ports directory recursively for X11R and all i got was the following: ./java/jdk14/work/j2se/src/solaris/classes/sun/awt/X11Renderer.java ./java/jdk14/work/j2se/src/solaris/classes/sun/awt/motif/X11RemoteOffScreenImage.java ./java/jdk14/work/j2se/src/solaris/native/sun/awt/X11RemoteOffScreenImage.c ./java/jdk14/work/j2se/src/solaris/native/sun/awt/X11Renderer.c ./java/jdk14/work/j2se/src/solaris/native/sun/awt/X11RemoteOffScreenImage.c.orig ./www/gnuinfo/files/gnuinfo.X11R6 ./distfiles/xorg/X11R6.7.0-src1.tar.gz ./distfiles/xorg/X11R6.7.0-src3.tar.gz Does this mean that the fixed version is not there and until it is..no matter what these packages won't build? Would this work if i just went to the /usr/ports/x11/gnome2/ directory and did a make install? if yes, why? The last time portinstall/portupgrade was brought up as a way to install ports there was a discussion on why or why not to use it..i'm not looking for that. I use it because i like it and i can specify to make the up and downstream dependencies and i'm new to freebsd. That said..... Any advice would be great. Thanks, Aaron
signature.asc
Description: This is a digitally signed message part
