From owner-freebsd-questions@FreeBSD.ORG Fri Sep 9 00:08:47 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9A59416A41F for ; Fri, 9 Sep 2005 00:08:47 +0000 (GMT) (envelope-from yuanjue122@gmail.com) Received: from zproxy.gmail.com (zproxy.gmail.com [64.233.162.198]) by mx1.FreeBSD.org (Postfix) with ESMTP id 294C243D45 for ; Fri, 9 Sep 2005 00:08:47 +0000 (GMT) (envelope-from yuanjue122@gmail.com) Received: by zproxy.gmail.com with SMTP id z31so3013183nzd for ; Thu, 08 Sep 2005 17:08:46 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:from:organization:to:subject:date:user-agent:references:in-reply-to:cc:mime-version:content-type:content-transfer-encoding:content-disposition:message-id; b=RXvo/IpyFfNf+awx65n4DLU8kh9KsT3WqU/Eru3rY3U+BtmR0xAbX0vIMTZYH7wOi3+fA2K72UEu9/zjtYNXyQ6BjRWBbxFFecP+2UbFbNNOKHnaEB3xidQNG32oESzKZd4D+ZZwoH9v0Q3l29uxXikpqBfe3GKvBZQZcuAXxN4= Received: by 10.36.146.6 with SMTP id t6mr69353nzd; Thu, 08 Sep 2005 17:08:46 -0700 (PDT) Received: from yuanjue.nc6000.org ( [59.66.138.109]) by mx.gmail.com with ESMTP id 15sm9466551nzn.2005.09.08.17.08.45; Thu, 08 Sep 2005 17:08:46 -0700 (PDT) From: Yuan Jue Organization: Tsinghua Univ. To: Kris Kennaway Date: Fri, 9 Sep 2005 08:13:06 +0800 User-Agent: KMail/1.8.2 References: <4320494D.6030503@antenna.nl> <200509082309.43229.yuanjue122@gmail.com> <20050908173948.GE49084@xor.obsecurity.org> In-Reply-To: <20050908173948.GE49084@xor.obsecurity.org> MIME-Version: 1.0 Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200509090813.06887.yuanjue122@gmail.com> Cc: freebsd-questions@freebsd.org Subject: Re: question about zlib security patch X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Sep 2005 00:08:47 -0000 On Friday 09 September 2005 01:39, Kris Kennaway wrote: > > > >>I was installing clamav 0.83 on a freebsd 5.4 system and I got the > > > >>following error: > > > >>clamav configure: error: The installed zlib version may contain a > > > >>security bug > > > >> > > > >>I want to upgrade zlib to solve this but: > > > >>- I don't know how I can see what version of zlib I have at the > > > >> moment? > > > > > > > >use pkg_info|grep zlib > > > > > > > >>- I found the following advice on the freebsd site: > > > >> > > > >>ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:18.zl > > > >>ib.a sc > > > >> > > > >>according to this I have to do the following: > > > >> > > > >># cd /usr/src > > > >># patch < /path/to/patch > > > >># cd /usr/src/lib/libz/ > > > >># make obj && make depend && make && make install > > > >> > > > >>but I have no /usr/src/lib/libz/ > > > > > > > >maybe you didn't install source code when you installed your FreeBSD. > > > > You still can do it using sysinstall now. > > > > > > You are right I didn't install the sourcecode, the instructions make a > > > lot more sense now :) > > > one other small question, pkg_info | grep zlib > > > gave me the following output; > > > > > > jzlib-1.0.5_1 A re-implementation of zlib in pure Java > > > php4-zlib-4.3.10_2 The zlib shared extension for php > > > > > > > > > so no zlib? Why is that ? because I didn't install it with pkg_add? > > > > sorry, I never try clamav, so I am not sure the exact reason for that > > error. Maybe when you install the source code, there is no error anymore > > :) > > The advice was bogus, zlib is not a package on FreeBSD. > > > Or, you may need to install this port find_zlib-1.9, which can be found > > in /usr/ports/security/. > > That does something else again..please try not to give bad advice :-) I apologize for that. Thanks for your reminding. -- Best Regards. Yuan Jue