portupgrade refusin to upgrade a port .. when it shouldn't imho

[martinko]

Kris Kennaway wrote:
> On Wed, Dec 06, 2006 at 10:55:40PM +0100, martinko wrote:
>> Hello,
>>
>> According to freshports.org the newest multimedia/win32-codecs port
>> (3.1.0.r1,1) is not vulnerable.  I'm trying to upgrade version
>> win32-codecs-3.1.0.p8,1 on my system but portupgrade + portaudit refuse
>> me to do so:
>>
>> ** Port marked as IGNORE: multimedia/win32-codecs:
>>         is forbidden: Remote code execution:
>> http://vuxml.FreeBSD.org/24f6b1eb-43d5-11db-81e1-000e0c2e438a.html
>>
>> Isn't this behaviour flawed ??  Or am I missing something ?
> 
> Did you update your portaudit database?
> 
> Kris

Sure thing:

mb-aw1n-bsd[/root]# portaudit -Fda
New database installed.
Database created: Thu Dec  7 01:10:04 CET 2006
Affected package: win32-codecs-3.1.0.p8,1
Type of problem: win32-codecs -- multiple vulnerabilities.
Reference:
<http://www.FreeBSD.org/ports/portaudit/24f6b1eb-43d5-11db-81e1-000e0c2e438a.html>

1 problem(s) in your installed packages found.

You are advised to update or deinstall the affected package(s) immediately.
mb-aw1n-bsd[/root]# portupgrade -if win32-codecs
--->  Session started at: Thu, 07 Dec 2006 01:24:42 +0100
** Port marked as IGNORE: multimedia/win32-codecs:
        is forbidden: Remote code execution:
http://vuxml.FreeBSD.org/24f6b1eb-43d5-11db-81e1-000e0c2e438a.html
--->  ** Upgrade tasks 1: 0 done, 1 ignored, 0 skipped and 0 failed
--->  Listing the results (+:done / -:ignored / *:skipped / !:failed)
        - multimedia/win32-codecs (win32-codecs-3.1.0.p8,1)
--->  Packages processed: 0 done, 1 ignored, 0 skipped and 0 failed
--->  Session ended at: Thu, 07 Dec 2006 01:24:43 +0100 (consumed 00:00:01)