Bug 269768
| Summary: | www/apache24: broken dependency / potential security issue | ||
|---|---|---|---|
| Product: | Ports & Packages | Reporter: | sec |
| Component: | Package Infrastructure | Assignee: | freebsd-apache (Nobody) <apache> |
| Status: | Closed FIXED | ||
| Severity: | Affects Many People | CC: | brnrd, grahamperrin |
| Priority: | --- | Keywords: | security |
| Version: | Latest | ||
| Hardware: | Any | ||
| OS: | Any | ||
current apache24 pkg for FreeBSD-13 tries to install the deprecated/EOLd db5 package: ice:#pkg upgrade Updating FreeBSD repository catalogue... FreeBSD repository is up to date. All repositories are up to date. Checking for upgrades (5 candidates): 100% Processing candidates (5 candidates): 100% The following 3 package(s) will be affected (of 0 checked): New packages to be INSTALLED: db5: 5.3.28_9 Installed packages to be REINSTALLED: apache24-2.4.55 (required shared library changed) apr-1.7.0.1.6.1_2 (direct dependency changed: db5) The db5 package is marked as deprecated: ice:/#grep DEPRECATED /usr/ports/databases/db5/Makefile DEPRECATED= EOLd, potential security issues, maybe use db18 instead