I'm still receiving the following ruby update error when using portupgrade ...
Is there any reason for me not to upgrade to Ruby 2.0 and if it is okay what's the best way to upgrade it ?
Code:
===> ruby-1.9.3_1,1 has known vulnerabilities:
ruby-1.9.3_1,1 is vulnerable:
ruby -- Unintentional file creation caused by inserting an illegal NUL character
CVE: CVE-2012-4522
WWW: http://portaudit.FreeBSD.org/3decc87d-2498-11e2-b0c7-000d601460a4.html
ruby-1.9.3_1,1 is vulnerable:
ruby -- DoS vulnerability in REXML
WWW: http://portaudit.FreeBSD.org/844cf3f5-9259-4b3e-ac9e-13ca17333ed7.html
ruby-1.9.3_1,1 is vulnerable:
Ruby -- XSS exploit of RDoc documentation generated by rdoc
CVE: CVE-2013-0256
WWW: http://portaudit.FreeBSD.org/d3e96508-056b-4259-88ad-50dc8d1978a6.html
ruby-1.9.3_1,1 is vulnerable:
ruby -- $SAFE escaping vulnerability about Exception#to_s/NameError#to_s
CVE: CVE-2012-4466
CVE: CVE-2012-4464
WWW: http://portaudit.FreeBSD.org/2a093853-2495-11e2-b0c7-000d601460a4.html
ruby-1.9.3_1,1 is vulnerable:
Ruby -- Denial of Service and Unsafe Object Creation Vulnerability in JSON
CVE: CVE-2013-0269
WWW: http://portaudit.FreeBSD.org/c79eb109-a754-45d7-b552-a42099eb2265.html
=> Please update your ports tree and try again.
*** [check-vulnerable] Error code 1
Stop in /usr/ports/lang/ruby19.
*** [build] Error code 1
Stop in /usr/ports/lang/ruby19.
** Command failed [exit code 1]: /usr/bin/script -qa /tmp/portupgrade20140221-49108-1ftwlxv env UPGRADE_TOOL=portupgrade UPGRADE_PORT=ruby-1.9.3,1 UPGRADE_PORT_VER=1.9.3,1 make
** Fix the problem and try again.
** Listing the failed packages (-:ignored / *:skipped / !:failed)
! lang/ruby19 (ruby-1.9.3,1) (unknown build error)
Is there any reason for me not to upgrade to Ruby 2.0 and if it is okay what's the best way to upgrade it ?