I just needed to put a line in /usr/local/etc/portaudit.conf and regenerate portaudit db. from portaudit.conf: # this vulnerability has been fixed in your FreeBSD version portaudit_fixed="edabe438-542f-11db-a5ae-00508d6a62df" and then: portaudit -Fda && portupgrade php4 Done :) I found solution at: http://ezine.daemonnews.org/200501/freebsd_apps.html Thanks anyway, Dominik