FreeBSD php5-posix-5.2.6已知漏洞错误在/usr/ports/sysutils/php5-posix中停止。
时间:2020-01-09 10:38:41 来源:igfitidea点击:
问题描述:运行php5-extensions端口的make install clean时,报错:
/usr/ports/sysutils/php5-posix php5-posix-5.2.6 has known vulnerabilities: php — input validation error in posix_access function. Reference: < http://www.FreeBSD.org/ports/portaudit/ee6fa2bd-406a-11dd-936a-0015af872849.html > Please update your ports tree and try again. *** Error code 1 Stop in /usr/ports/sysutils/php5-posix. *** Error code 1 Stop in /usr/ports/lang/php5-extensions. *** Error code 1 Stop in /usr/ports/lang/php5-extensions.
如何解决此错误?
解决方法:尝试通过执行以下命令来升级端口树:
# portsnap fetch update # portaudit -Fda
如果仍然看到错误,请通过向/etc/make.conf文件中添加以下代码来暂时禁用错误:
# get around php5-posix error .if !empty(.CURDIR:M*sysutils/php5-posix*) DISABLE_VULNERABILITIES=yes .endif
保存并关闭文件。
尝试再次重建端口:
# cd /usr/ports/lang/php5-extensions # make install clean
另一个选择是构建/usr/ports/lang/php5-extensions端口,而无需查看VULNERABILITIES:
# make -DDISABLE_VULNERABILITIES install
根据FreeBSD安全团队的说法:
应该注意的是,由于safe_mode和open_basedir在设计上是不安全的,因此不应被FreeBSD安全团队视为严重漏洞。