From owner-freebsd-questions@FreeBSD.ORG Sun Jan 30 15:38:22 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 18A1F16A4CE for ; Sun, 30 Jan 2005 15:38:22 +0000 (GMT) Received: from mail26.sea5.speakeasy.net (mail26.sea5.speakeasy.net [69.17.117.28]) by mx1.FreeBSD.org (Postfix) with ESMTP id DBD4F43D41 for ; Sun, 30 Jan 2005 15:38:21 +0000 (GMT) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: (qmail 16676 invoked from network); 30 Jan 2005 15:38:21 -0000 Received: from dsl092-078-145.bos1.dsl.speakeasy.net (HELO be-well.ilk.org) ([66.92.78.145]) (envelope-sender ) by mail26.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP for ; 30 Jan 2005 15:38:21 -0000 Received: by be-well.ilk.org (Postfix, from userid 1147) id 41F6284; Sun, 30 Jan 2005 10:38:20 -0500 (EST) Sender: lowell@be-well.ilk.org To: Timothy Luoma References: From: Lowell Gilbert Date: 30 Jan 2005 10:38:20 -0500 In-Reply-To: Message-ID: <44mzurexlf.fsf@be-well.ilk.org> Lines: 28 User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.3 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii cc: FreeBSD-Questions Questions Subject: Re: 1st security warning: "installed zlib version may contain a security bug" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 30 Jan 2005 15:38:22 -0000 Timothy Luoma writes: > I was trying to configure && make 'clamav-0.81' when it complained > about this: > > configure: error: The installed zlib version may contain a security > bug. Please upgrade to 1.2.2 or later: http://www.zlib.net. You can > omit this check with --disable-zlib-vcheck but DO NOT REPORT any > stablility issues then! > > I went to zlib.net, downloaded 1.2.2, did './configure && make install > clean' > > Is that all I need to do? This is my first "security warning" so I > want to make sure I'm not missing something obvious. It sounds like you're missing the ports collection, to begin with. It will handle dependencies for you, a big help in upgrades. And you should try to use the FreeBSD base system upgrades and security advisories for keeping up on security issues, rather than trying to install bits and pieces yourself (unlike, say, Linux, FreeBSD is a whole operating system). > Is there a good "What newbies need to know about FreeBSD security" out > there? http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/security.html http://www.freebsd.org/security/