FreeBSD php5-posix-5.2.6已知漏洞错误在/usr/ports/sysutils/php5-posix中停止。

时间:2020-01-09 10:38:41  来源:igfitidea点击:

问题描述:运行php5-extensions端口的make install clean时,报错:

/usr/ports/sysutils/php5-posix
php5-posix-5.2.6 has known vulnerabilities:
php — input validation error in posix_access function.
Reference: < http://www.FreeBSD.org/ports/portaudit/ee6fa2bd-406a-11dd-936a-0015af872849.html >
Please update your ports tree and try again.
*** Error code 1

Stop in /usr/ports/sysutils/php5-posix.
*** Error code 1

Stop in /usr/ports/lang/php5-extensions.
*** Error code 1

Stop in /usr/ports/lang/php5-extensions.

如何解决此错误?

解决方法:尝试通过执行以下命令来升级端口树:

# portsnap fetch update
# portaudit -Fda

如果仍然看到错误,请通过向/etc/make.conf文件中添加以下代码来暂时禁用错误:

# get around php5-posix error 
.if !empty(.CURDIR:M*sysutils/php5-posix*)
DISABLE_VULNERABILITIES=yes
.endif

保存并关闭文件。
尝试再次重建端口:

# cd /usr/ports/lang/php5-extensions
# make install clean

另一个选择是构建/usr/ports/lang/php5-extensions端口,而无需查看VULNERABILITIES:

# make -DDISABLE_VULNERABILITIES install

根据FreeBSD安全团队的说法:

应该注意的是,由于safe_mode和open_basedir在设计上是不安全的,因此不应被FreeBSD安全团队视为严重漏洞。