From owner-freebsd-i386@FreeBSD.ORG Sun Jan 9 23:30:30 2005 Return-Path: Delivered-To: freebsd-i386@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B370616A4CE for ; Sun, 9 Jan 2005 23:30:30 +0000 (GMT) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 72E6E43D4C for ; Sun, 9 Jan 2005 23:30:30 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.1/8.13.1) with ESMTP id j09NUU2R046344 for ; Sun, 9 Jan 2005 23:30:30 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.1/8.13.1/Submit) id j09NUUJ4046331; Sun, 9 Jan 2005 23:30:30 GMT (envelope-from gnats) Resent-Date: Sun, 9 Jan 2005 23:30:30 GMT Resent-Message-Id: <200501092330.j09NUUJ4046331@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-i386@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Joe Rhett Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D296E16A4CE for ; Sun, 9 Jan 2005 23:23:18 +0000 (GMT) Received: from outbound0.sv.meer.net (outbound0.sv.meer.net [205.217.152.13]) by mx1.FreeBSD.org (Postfix) with ESMTP id ABE8743D31 for ; Sun, 9 Jan 2005 23:23:18 +0000 (GMT) (envelope-from jrhett@meer.net) Received: from mail.meer.net (mail.meer.net [209.157.152.14]) j09NNIwN059940 for ; Sun, 9 Jan 2005 15:23:18 -0800 (PST) (envelope-from jrhett@meer.net) Received: from meme.sv.meer.net (meme.sv.meer.net [205.217.152.18]) by mail.meer.net (8.12.10/8.12.10/meer) with ESMTP id j09NNHsM027558 for ; Sun, 9 Jan 2005 15:23:17 -0800 (PST) (envelope-from jrhett@meer.net) Received: (from meer@localhost) by meme.sv.meer.net (8.12.11/8.12.11) id j09NNH6l027048; Sun, 9 Jan 2005 15:23:17 -0800 (PST) (envelope-from meer) Message-Id: <200501092323.j09NNH6l027048@meme.sv.meer.net> Date: Sun, 9 Jan 2005 13:16:09 -0800 (PST) From: Joe Rhett To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Subject: i386/76019: use RTR compilation to remove dependancy on compat3x(FORBIDDEN) X-BeenThere: freebsd-i386@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: I386-specific issues for FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 09 Jan 2005 23:30:30 -0000 >Number: 76019 >Category: i386 >Synopsis: security patch -- use binaries from rtr instead of microsoft >Confidential: no >Severity: non-critical >Priority: high >Responsible: freebsd-i386 >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Sun Jan 09 23:30:29 GMT 2005 >Closed-Date: >Last-Modified: >Originator: Joe Rhett >Release: FreeBSD 4.10-RELEASE-p5 i386 >Organization: meer.net >Environment: System: FreeBSD meme.sv.meer.net 4.10-RELEASE-p5 FreeBSD 4.10-RELEASE-p5 #0: Wed Dec 29 18:23:27 PST 2004 meer@meme.sv.meer.net:/d/RELENG_4_10/src/sys/compile/CRYSTAL i386 >Description: The frontpage port uses the microsoft compilation, which requires compat3x, which is FORBIDDEN. The rtr-compiled frontpage binaries uses 4.x libraries and are therefore not hackable. >How-To-Repeat: Install the rtr-supplied binaries for frontpage to solve known security problem. >Fix: Use the binaries from Ready To Run (microsoft authorized) You can get the binary from RTR using either of these URLs. They work fine from fetch, but putting them in the makefile doesn't work (dunno why) http://www.rtr.com/fpsupport/cgi-bin/fp2002sr1download.cgi?email=ports@freebsd.org&First_Name=freebsd&Last_Name=ports&version=fp50.freebsd.tar.Z http://www.rtr.com/fpsupport/cgi-bin/fp2002sr1download.cgi?email=ports@freebsd.org&First_Name=freebsd&Last_Name=ports&version=fp50.freebsd.tar.gz >Release-Note: >Audit-Trail: >Unformatted: