Date: Sun, 9 Jan 2005 13:16:09 -0800 (PST) From: Joe Rhett <jrhett@meer.net> To: FreeBSD-gnats-submit@FreeBSD.org Subject: i386/76019: use RTR compilation to remove dependancy on compat3x(FORBIDDEN) Message-ID: <200501092323.j09NNH6l027048@meme.sv.meer.net> Resent-Message-ID: <200501092330.j09NUUJ4046331@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 76019 >Category: i386 >Synopsis: security patch -- use binaries from rtr instead of microsoft >Confidential: no >Severity: non-critical >Priority: high >Responsible: freebsd-i386 >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Sun Jan 09 23:30:29 GMT 2005 >Closed-Date: >Last-Modified: >Originator: Joe Rhett >Release: FreeBSD 4.10-RELEASE-p5 i386 >Organization: meer.net >Environment: System: FreeBSD meme.sv.meer.net 4.10-RELEASE-p5 FreeBSD 4.10-RELEASE-p5 #0: Wed Dec 29 18:23:27 PST 2004 meer@meme.sv.meer.net:/d/RELENG_4_10/src/sys/compile/CRYSTAL i386 >Description: The frontpage port uses the microsoft compilation, which requires compat3x, which is FORBIDDEN. The rtr-compiled frontpage binaries uses 4.x libraries and are therefore not hackable. >How-To-Repeat: Install the rtr-supplied binaries for frontpage to solve known security problem. >Fix: Use the binaries from Ready To Run (microsoft authorized) You can get the binary from RTR using either of these URLs. They work fine from fetch, but putting them in the makefile doesn't work (dunno why) http://www.rtr.com/fpsupport/cgi-bin/fp2002sr1download.cgi?email=ports@freebsd.org&First_Name=freebsd&Last_Name=ports&version=fp50.freebsd.tar.Z http://www.rtr.com/fpsupport/cgi-bin/fp2002sr1download.cgi?email=ports@freebsd.org&First_Name=freebsd&Last_Name=ports&version=fp50.freebsd.tar.gz >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200501092323.j09NNH6l027048>