From owner-freebsd-questions@FreeBSD.ORG Thu Sep 8 15:16:39 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3717A16A41F for ; Thu, 8 Sep 2005 15:16:39 +0000 (GMT) (envelope-from yuanjue122@gmail.com) Received: from zproxy.gmail.com (zproxy.gmail.com [64.233.162.205]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4A2E543D53 for ; Thu, 8 Sep 2005 15:16:37 +0000 (GMT) (envelope-from yuanjue122@gmail.com) Received: by zproxy.gmail.com with SMTP id z6so1036191nzd for ; Thu, 08 Sep 2005 08:16:37 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:from:organization:to:subject:date:user-agent:references:in-reply-to:cc:mime-version:content-type:content-transfer-encoding:content-disposition:message-id; b=o2uN/t1iMBE8zQc0PViN1T2SvSEq7sO3LxQGp6yF5D8w/RtkSGG1wsjo4MuqLRYmNicULXefIo080sDz0/dkM/4vaL9+J1dQntuuruoCobfNsAu+Vh+taqXoipecfAOtb9HfWLs0C4rvJrmX0pCyjYyIqv+80oAVRn7rMFXTIBw= Received: by 10.36.43.8 with SMTP id q8mr5494419nzq; Thu, 08 Sep 2005 08:16:36 -0700 (PDT) Received: from yuanjue.nc6000.org ( [59.66.138.109]) by mx.gmail.com with ESMTP id j4sm2637673nzd.2005.09.08.08.16.34; Thu, 08 Sep 2005 08:16:36 -0700 (PDT) From: Yuan Jue Organization: Tsinghua Univ. To: Chantal Rosmuller Date: Thu, 8 Sep 2005 23:09:43 +0800 User-Agent: KMail/1.8.2 References: <4320494D.6030503@antenna.nl> <200509082234.50571.yuanjue122@gmail.com> <43204E22.1010807@antenna.nl> In-Reply-To: <43204E22.1010807@antenna.nl> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200509082309.43229.yuanjue122@gmail.com> Cc: freebsd-questions@freebsd.org Subject: Re: question about zlib security patch X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Sep 2005 15:16:39 -0000 On Thursday 08 September 2005 22:43, Chantal Rosmuller wrote: > >>I was installing clamav 0.83 on a freebsd 5.4 system and I got the > >>following error: > >>clamav configure: error: The installed zlib version may contain a > >>security bug > >> > >>I want to upgrade zlib to solve this but: > >>- I don't know how I can see what version of zlib I have at the moment? > > > >use pkg_info|grep zlib > > > >>- I found the following advice on the freebsd site: > >> > >>ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:18.zlib.a > >>sc > >> > >>according to this I have to do the following: > >> > >># cd /usr/src > >># patch < /path/to/patch > >># cd /usr/src/lib/libz/ > >># make obj && make depend && make && make install > >> > >>but I have no /usr/src/lib/libz/ > > > >maybe you didn't install source code when you installed your FreeBSD. You > >still can do it using sysinstall now. > You are right I didn't install the sourcecode, the instructions make a > lot more sense now :) > one other small question, pkg_info | grep zlib > gave me the following output; > > jzlib-1.0.5_1 A re-implementation of zlib in pure Java > php4-zlib-4.3.10_2 The zlib shared extension for php > > > so no zlib? Why is that ? because I didn't install it with pkg_add? sorry, I never try clamav, so I am not sure the exact reason for that error. Maybe when you install the source code, there is no error anymore :) Or, you may need to install this port find_zlib-1.9, which can be found in /usr/ports/security/. Good luck! -- Best Regards. Yuan Jue