From owner-freebsd-questions@FreeBSD.ORG Wed Apr 12 20:45:22 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 614F116A401 for ; Wed, 12 Apr 2006 20:45:22 +0000 (UTC) (envelope-from tedm@toybox.placo.com) Received: from mail.freebsd-corp-net-guide.com (mail.web-strider.com [65.75.192.90]) by mx1.FreeBSD.org (Postfix) with ESMTP id B87F943D48 for ; Wed, 12 Apr 2006 20:45:21 +0000 (GMT) (envelope-from tedm@toybox.placo.com) Received: from tedwin2k (nat-rtr.freebsd-corp-net-guide.com [65.75.197.130]) by mail.freebsd-corp-net-guide.com (8.11.1/8.11.1) with SMTP id k3CKj9u68732; Wed, 12 Apr 2006 13:45:12 -0700 (PDT) (envelope-from tedm@toybox.placo.com) From: "Ted Mittelstaedt" To: , Date: Wed, 12 Apr 2006 13:45:09 -0700 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="windows-1250" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) In-Reply-To: <003f01c65e20$43368a10$dededede@avalon.lan> Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506 Cc: Subject: RE: upcoming release 6.1: old version of some core components X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Apr 2006 20:45:22 -0000 >-----Original Message----- >From: owner-freebsd-questions@freebsd.org >[mailto:owner-freebsd-questions@freebsd.org]On Behalf Of >No@SPAM@mgEDV.net >Sent: Wednesday, April 12, 2006 4:00 AM >To: freebsd-questions@freebsd.org >Subject: RE: upcoming release 6.1: old version of some core components > > > >did i ever mention "i love communities!" ;-) >well, 1st of all, thx 2 all the people who gave it a whirl and >went deeper into cvs as i would ever do (i'm definitely not a >dev ;-), btw. that was my reason for asking this on the list ) > >2nd, the thing alex brought up is very confusing, because it >seems, that security fixes which are related to zlib 1.2.3 have >been applied to 1.2.2#FREEBSD-VERSION and the rest (?whatever it >is?) of the changes have not been applied (if the're any). Maybe, maybe not. >from my point of view (compatibility and transparence come to my >mind) shouldn't be the code as close as possible to the original >developed code for any library? This is a complex answer. There are pros and cons. First, with zlib that library is used by other programs in the system. That library and those other programs all exist for one reason - so the user does not have to go to the trouble of downloading and installing them. But they don't have to be there - for example Solaris ships with a lot of these libraries and programs missing. As such the users are primariarly concerned with whether they can run a command at the prompt in an out-of-the-box installation and have it work and be secure. Most of them aren't going to be compiling software they are going to want all of it done for them when they install the system. So they don't care about new features or whatever in zlib they just care that it works. >ok, we could discuss libjpeg here, but zlib should be a standard, >and it seems for some guys it's easier to implement the fixes instead >of upgrading to the new version. >i'm again sure, that the maintainer of fbsd-zlib knows why, Right, it is to best support the kinds of users I mentioned above. applying the patch instead of reving up the software has less chance of causing side effects if the patch is small. Where the problem comes in is when the user wants to start compiling software on his system that isn't in the ports. Ted