我正在运行 FreeBSD:
# uname -a
FreeBSD f9.XXX.org 9.0-RELEASE-p3 FreeBSD 9.0-RELEASE-p3 #0: Tue Jun 12 02:52:29 UTC 2012 [email protected]:/usr/obj/usr/src/sys/GENERIC amd64
#
我收到以下信息:
# portaudit | head -3
Affected package: sudo-1.8.3_1
Type of problem: sudo -- Authentication bypass when clock is reset.
Reference: http://portaudit.FreeBSD.org/764344fb-8214-11e2-9273-902b343deec9.html
#
有没有一种简单的方法来更新此软件包,而无需(重新)构建它(没有 /usr/ports)。我通过它安装了它pkg_add
(这很容易)。
* 更新 *
# pkg_delete sudo-1.8.3_1 && pkg_add -r sudo
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-9.0-release/Latest/sudo.tbz... Done.
#
# portaudit | head -7
Affected package: sudo-1.8.3_1
Type of problem: sudo -- Authentication bypass when clock is reset.
Reference: http://portaudit.FreeBSD.org/764344fb-8214-11e2-9273-902b343deec9.html
Affected package: sudo-1.8.3_1
Type of problem: sudo -- Potential bypass of tty_tickets constraints.
Reference: http://portaudit.FreeBSD.org/82cfd919-8213-11e2-9273-902b343deec9.html
#
答案1
pkg_delete sudo-1.8.3_1 && pkg_add -r sudo
pkg_delete 不应删除已从其默认值更改的配置文件。如果配置文件的格式已更改,您可能需要手动更新它。
对于此过程的任何自动化版本,请安装portupgrade
或其他类似的实用程序之一。运行portupgrade -P sudo-1.8.3_1
将完成相同的操作。