From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.43) id 1EHyJB-00056C-4r for garchives@archives.gentoo.org; Wed, 21 Sep 2005 06:42:21 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.5/8.13.5) with SMTP id j8L6YtHc007405; Wed, 21 Sep 2005 06:34:55 GMT Received: from ihug-mail.icp-qv1-irony2.iinet.net.au (mail-iinet.icp-qv1-irony2.iinet.net.au [203.59.1.196]) by robin.gentoo.org (8.13.5/8.13.5) with ESMTP id j8L6YqdG010783 for ; Wed, 21 Sep 2005 06:34:54 GMT Received: from 203-59-88-73.dyn.iinet.net.au (HELO moriah.localdomain) ([203.59.88.73]) by ihug-mail.icp-qv1-irony2.iinet.net.au with ESMTP; 21 Sep 2005 14:26:13 +0800 Received: from localhost (localhost [127.0.0.1]) by moriah.localdomain (Postfix) with ESMTP id 3499312C09D for ; Wed, 21 Sep 2005 14:26:12 +0800 (WST) Received: from moriah.localdomain ([127.0.0.1]) by localhost (moriah [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 08597-03 for ; Wed, 21 Sep 2005 14:26:02 +0800 (WST) Received: from localhost (localhost [127.0.0.1]) by moriah.localdomain (Postfix) with ESMTP id 5E7CD12B082 for ; Wed, 21 Sep 2005 14:26:02 +0800 (WST) Subject: Re: [gentoo-server] glsa-check and unused packages From: "W.Kenworthy" To: gentoo-server@lists.gentoo.org In-Reply-To: References: <43232AC3.9030706@munat.com> <1126381452.17265.4.camel@spider.hotmonkeyporn.com> Content-Type: text/plain Date: Wed, 21 Sep 2005 14:26:01 +0800 Message-Id: <1127283961.16000.70.camel@localhost> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-server@gentoo.org Reply-to: gentoo-server@lists.gentoo.org Mime-Version: 1.0 X-Mailer: Evolution 2.2.3 Content-Transfer-Encoding: 7bit X-Virus-Scanned: amavisd-new at localdomain X-Archives-Salt: 8dff29ad-a4ed-4eb5-865f-8c9c8ca567e3 X-Archives-Hash: e796f319feb3cb5e4442d2ae5ae7cb8c Try etcat -v, query l and qpkg -l: each seems to work via a different aspect of portage and I have found, particularly on older systems that one or more, but not always all will show discrepancies. I found equery the least reliable when things are not right. Surprisingly, glsa-check seems to to always (that I can remember) pick up that the bad version does exist and is installed - believe it! Billk On Wed, 2005-09-21 at 01:20 -0400, A. Khattri wrote: > On Sat, 10 Sep 2005, Owen Ford wrote: > > > On Sat, 2005-09-10 at 11:49 -0700, Ben Munat wrote: > > > First, glsa-check claims that I'm vulnerable to 200412-02 and 200505-01. The first is > > > pdflib and the second is various horde packages. However, I have the current versions of > > > these installed -- the versions that the glsa says I need to solve the vulnerability. So, > > > why would glsa-check say I'm vulnerable when I'm not? > > > > There are probably versions of those packages slotted. I use emerge -Cp > > package to see which are installed. > > I have a similar problem - the recent changes in Apache coupled with some > updates meant rebuilding mod_php, mod_ssl and apache. glsa-check says Im > still vulnerable despite the updates. I dont have any slotting going on > either so Im still scratching my head. > > > -- > -- gentoo-server@gentoo.org mailing list