portdowngrade/portupgrade question

[Par Leijonhufvud]

Torfinn Ingolfsen <torfinn.ingolfsen at broadpark.no> [2007.01.17] wrote:
> On Wed, 17 Jan 2007 06:24:23 +0100
> Par Leijonhufvud <par at hunter-gatherer.org> wrote:
> 
> > How do I tell portupgrade that I *know*, just go ahead anyway?
> 
> Is it 'portupgrade -f <portname>' you want?

Nope, that does not do it, what it did was remove the old (6.3.6)
version and fail to install the new version. I also tried going to
/usr/ports/mail/fetchmail and doing a "make install". Pretty much same
error ("fetchmail -- TLS enforcement problem/MITM attack/password
exposure[...] Please update your ports tree and try again").

What have I missed?

/Par

# portupgrade -f fetchmail
--->  Downgrading 'fetchmail-6.3.6' to 'fetchmail-6.3.5' (mail/fetchmail)
--->  Building '/usr/ports/mail/fetchmail'
===>  Cleaning for pkg_install-20060113
===>  Cleaning for openssl-0.9.8d
===>  Cleaning for gmake-3.81_1
===>  Cleaning for gettext-0.14.5_2
===>  Cleaning for ca-roots-1.2
===>  Cleaning for rc_subr-1.31_1
===>  Cleaning for libtool-1.5.22_2
===>  Cleaning for expat-2.0.0_1
===>  Cleaning for libiconv-1.9.2_2
===>  Cleaning for ldconfig_compat-1.0_8
===>  Cleaning for fetchmail-6.3.5
===>  fetchmail-6.3.5 has known vulnerabilities:
=> fetchmail -- crashes when refusing a message bound for an MDA.
   Reference: <http://www.FreeBSD.org/ports/portaudit/37e30313-9d8c-11db-858b-0060084a00e5.html>
=> fetchmail -- TLS enforcement problem/MITM attack/password exposure.
   Reference: <http://www.FreeBSD.org/ports/portaudit/5238ac45-9d8c-11db-858b-0060084a00e5.html>
=> Please update your ports tree and try again.
*** Error code 1

Stop in /usr/ports/mail/fetchmail.
--->  Backing up the old version
--->  Uninstalling the old version
--->  Deinstalling 'fetchmail-6.3.6'
pkg_delete: unable to completely remove directory '/usr/local/share/doc/fetchmail'
pkg_delete: couldn't entirely delete package (perhaps the packing list is
incorrectly specified?)
[Updating the pkgdb <format:bdb1_btree> in /var/db/pkg ... - 309 packages found (-1 +0) (...) done]
--->  Installing the new version via the port
===>  fetchmail-6.3.5 has known vulnerabilities:
=> fetchmail -- crashes when refusing a message bound for an MDA.
   Reference: <http://www.FreeBSD.org/ports/portaudit/37e30313-9d8c-11db-858b-0060084a00e5.html>
=> fetchmail -- TLS enforcement problem/MITM attack/password exposure.
   Reference: <http://www.FreeBSD.org/ports/portaudit/5238ac45-9d8c-11db-858b-0060084a00e5.html>
=> Please update your ports tree and try again.
*** Error code 1

Stop in /usr/ports/mail/fetchmail.
*** Error code 1

Stop in /usr/ports/mail/fetchmail.
Stop in /usr/ports/mail/fetchmail.
===>  Cleaning for pkg_install-20060113
===>  Cleaning for openssl-0.9.8d
===>  Cleaning for gmake-3.81_1
===>  Cleaning for gettext-0.14.5_2
===>  Cleaning for ca-roots-1.2
===>  Cleaning for rc_subr-1.31_1
===>  Cleaning for libtool-1.5.22_2
===>  Cleaning for expat-2.0.0_1
===>  Cleaning for libiconv-1.9.2_2
===>  Cleaning for ldconfig_compat-1.0_8
===>  Cleaning for fetchmail-6.3.5
--->  Cleaning out obsolete shared libraries


--