portaudit false positive
kerochan ii <[email protected]> Tue, 7 Sep 2004 20:40:44 -0400
| Newsgroups | gmane.os.freebsd.devel.audit |
|---|---|
| Message-ID | <[email protected]> |
portaudit started warning me about a vulnerability in the cvs server in the base system. It reports that the affected package is FreeBSD-502010. I realised that this is actually a vulnerability fixed months ago, and because i'm tracking RELENG_5_2 and thus running 5.2.1-p9, it was fixed on my system before portaudit even reported vulnerabilities in base. So please make it check if the base system is patched (uname -m) and only let it report problems if they really exist. Thank you in advance... _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-audit To unsubscribe, send any mail to "[email protected]"