I have a strange situation, pkg audit indicates that my system has vulnerable packages:
However pkg upgrade says that there is nothing to upgrade.
I have checked on freshport and there exists a more recent version of these packages. I have also tried to upgrade specific packages but it stills find no update. Of course I have not mixed packages and ports. I have 71 packages installed:
Any idea of what I should try to be able to upgrade my packages again.
Code:
#pkg audit
expat-2.2.6_1 is vulnerable:
expat2 -- Fix extraction of namespace prefixes from XML names
WWW: https://vuxml.FreeBSD.org/freebsd/c5bd8a25-99a6-11e9-a598-f079596b62f9.html
expat-2.2.6_1 is vulnerable:
expat2 -- Fix extraction of namespace prefixes from XML names
WWW: https://vuxml.FreeBSD.org/freebsd/6856d798-d950-11e9-aae4-f079596b62f9.html
curl-7.65.1 is vulnerable:
curl -- multiple vulnerabilities
CVE: CVE-2019-5482
CVE: CVE-2019-5481
WWW: https://vuxml.FreeBSD.org/freebsd/9fb4e57b-d65a-11e9-8a5f-e5c82b486287.html
3 problem(s) in 2 installed package(s) found.
However pkg upgrade says that there is nothing to upgrade.
Code:
# pkg upgrade
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking for upgrades (0 candidates): 100%
Processing candidates (0 candidates): 100%
Checking integrity... done (0 conflicting)
Your packages are up to date.
I have checked on freshport and there exists a more recent version of these packages. I have also tried to upgrade specific packages but it stills find no update. Of course I have not mixed packages and ports. I have 71 packages installed:
Code:
# pkg info | wc -l
71
Any idea of what I should try to be able to upgrade my packages again.