portaudit 0.5.17 ports-mgmt =143

Checks installed ports against a list of security vulnerabilities
Maintained by: secteam@FreeBSD.org
Port Added: 05 Feb 2007 01:09:12
Also Listed In: security
License: not specified in port

---

---

portaudit provides a system to check if installed ports are listed in a 
database of published security vulnerabilities.

After installation it will update this security database automatically and 
include its reports in the output of the daily security run.

If you have found a vulnerability not listed in the database, please contact 
the FreeBSD Security Officer <security-officer@FreeBSD.org>. Refer to

  http://www.freebsd.org/security/#sec

for more information.

WWW: http://people.freebsd.org/~eik/portaudit/

Oliver Eikemeier <eik@FreeBSD.org>

CVSWeb : Sources : Main Web Site : Distfiles Availability : PortsMonThere are no ports dependent upon this port

---

To install the port: cd /usr/ports/ports-mgmt/portaudit/ && make install clean
To add the package: pkg_add -r portaudit

---

Configuration Options

     No options to configure

---

Master Sites:

ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/

Add some improvements via Doug:

This patch changes the order in which the conf file is read vs.
when the default variable assignments are made in order to provide
the ability to override them in the conf file. It also adds the
ability to include a conf file in the same directory as the script.

The patch also changes some of the = assignments to := where
having a null setting by mistake would be fatal.

The use case for these changes is the ability to "package" all
of the elements together in one place for use on multiple systems
that can all mount the same central location.

PR:             154518
Submitted by:   dougb
Hat:            secteam
Feature safe:   yes

Don't enclose URLs in <>, it makes them harder to copy&paste and URLs are
not email addresses.

PR:             ports/127214 (first half)
Reviewed by:    simon
Feature safe:   yes

Prefer using base system binaries.

Reported by:    Paul Hoffman <phoffman proper com>
With hat:       secteam

Forgot to bump version.

Prodded by:     antoine

Fix unmatched quote.

PR:             ports/139810
Submitted by:   bf <bf1783 at gmail dot com>

Download portaudit database from http://portaudit.FreeBSD.org/ instead
of http://www.FreeBSD.org/ports/portaudit/.

This is primarily done to work around bug in lighttpd on www.FreeBSD.org
where If-Modified-Since isn't handled correctly possibly resulting in
users behind web proxies getting an outdated version of the portaudit
database.

Bump portaudit version number.

Big thanks to the reporter for the detailed PR with good information
about reproducing the issue.

PR:             www/134505
Reported by:    Christian Ullrich <chris@chrullrich.net>
Prodding by:    remko, Christian Ullrich

- Fix portaudit -Fq to actually be quiet. [1]
- Remove support for FreeBSD older than 4.11 and 5.3.
- Remove conditional dependency on bzip2 which I can't really see how
  could be activated automatically.

Reported by:    "J. Martin Petersen" <jmp@alvorlig.dk> [1]
PR:             ports/117845 [1]
With hat:       maintainer / secteam

Add security to CATEGORIES

"Sounds like a good idea":      simon

Correct URL to the VuXML pages for FreeBSD. Also bump modification date.

PR:             ports/104813
Submitted by:   Alan Amesbury <amesbury at umn dot edu>

Populate a new ports-mgmt category. List of moved ports:

  devel/portcheckout -> ports-mgmt/portcheckout
  devel/portlint -> ports-mgmt/portlint
  devel/portmk -> ports-mgmt/portmk
  devel/porttools -> ports-mgmt/porttools
  misc/instant-tinderbox -> ports-mgmt/instant-tinderbox
  misc/porteasy -> ports-mgmt/porteasy
  misc/portell -> ports-mgmt/portell
  misc/portless -> ports-mgmt/portless
  misc/tinderbox -> ports-mgmt/tinderbox
  security/jailaudit -> ports-mgmt/jailaudit
  security/portaudit -> ports-mgmt/portaudit
  security/portaudit-db -> ports-mgmt/portaudit-db
  security/vulnerability-test-port -> ports-mgmt/vulnerability-test-port

17 vulnerabilities affecting 41 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities