Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 19 Aug 2005 14:16:20 -0700
From:      Brooks Davis <brooks@one-eyed-alien.net>
To:        Hiroki Sato <hrs@freebsd.org>
Cc:        dejan.lesjak@ijs.si, freebsd-ports@freebsd.org, kris@obsecurity.org
Subject:   Re: Needed: compat5x package
Message-ID:  <20050819211620.GB17019@odin.ac.hmc.edu>
In-Reply-To: <20050820.060710.101601176.hrs@allbsd.org>
References:  <20050820.044946.21925501.hrs@allbsd.org> <200508192250.46012.dejan.lesjak@ijs.si> <20050820.060710.101601176.hrs@allbsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--GRPZ8SYKNexpdSJ7
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, Aug 20, 2005 at 06:07:10AM +0900, Hiroki Sato wrote:
> Dejan Lesjak <dejan.lesjak@ijs.si> wrote
>   in <200508192250.46012.dejan.lesjak@ijs.si>:
>=20
> de> One thing to consider is how to get these libraries. If they are take=
n from
> de> 5.4 release tarballs then there is problem with locale above and at l=
east
> de> problem with libz and FreeBSD-SA-05:18.zlib vulnerability. One possib=
le thing
> de> to do is to build RELENG_5_4 with the change to paths.h above and take
> de> libraries from there and generate tarballs (which is what I did for t=
his
> de> sample except I took RELENG_5). If that makes sense I can do it for a=
lpha,
> de> amd64, i386 and sparc64.
>=20
>  True.  These libraries have to be built with vulnerability fixes.
>  I took them from 5.4-RELEASE as you pointed out.  Building from
>  the RELENG_5_4 source looks reasonable to me.
>=20
>  I am wondering if misc/localedata can be used---were the LC_* files
>  architecture dependent at that time?  I thought this incompatibility
>  was needed to making them architecture independent.
>  Do I misunderstand?

Another option might be to ask Colin if he has them from freebsd-update
builds.  Those are as close to official as you're going to get.  I'm not
sure which versions he supports at the moment though.

-- Brooks

--=20
Any statement of the form "X is the one, true Y" is FALSE.
PGP fingerprint 655D 519C 26A7 82E7 2529  9BF0 5D8E 8BE9 F238 1AD4

--GRPZ8SYKNexpdSJ7
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQFDBkwkXY6L6fI4GtQRAp9/AKCjMFzsZYcPU7K61LV8AFcktg77+QCghAQv
OP61N8jZ5BRb69R5wiSKhuo=
=puCh
-----END PGP SIGNATURE-----

--GRPZ8SYKNexpdSJ7--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050819211620.GB17019>