Re: portaudit false positive

[email protected] (Dag-Erling Smørgrav) Wed, 08 Sep 2004 08:36:40 +0200
Newsgroups gmane.os.freebsd.devel.audit
Message-ID <[email protected]>
kerochan ii <[email protected]> writes:
> portaudit started warning me about a vulnerability in the cvs server
> in the base system.
> It reports that the affected package is FreeBSD-502010.
> I realised that this is actually a vulnerability fixed months ago, and
> because i'm tracking RELENG_5_2 and thus running 5.2.1-p9, it was
> fixed on my system before portaudit even reported vulnerabilities in
> base.

No.  For various reasons, this vulnerability still hasn't been fixed
in RELENG_5_2 or RELENG_4_10.

DES
--=20
Dag-Erling Sm=F8rgrav - [email protected]
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-audit
To unsubscribe, send any mail to "[email protected]"