Date: Tue, 2 Jul 2002 15:11:01 -0700 (PDT) From: Frank Sheiness <archon@dough.net> To: freebsd-gnats-submit@FreeBSD.org Subject: misc/40126: bind8 port puts nslookup in the wrong place with PORT_REPLACES_BASE_BIND8 Message-ID: <200207022211.g62MB1qB035786@www.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 40126
>Category: misc
>Synopsis: bind8 port puts nslookup in the wrong place with PORT_REPLACES_BASE_BIND8
>Confidential: no
>Severity: serious
>Priority: high
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: change-request
>Submitter-Id: current-users
>Arrival-Date: Tue Jul 02 15:40:01 PDT 2002
>Closed-Date:
>Last-Modified:
>Originator: Frank Sheiness
>Release: 4.5-STABLE
>Organization:
>Environment:
FreeBSD sandbox.texas.rr.com 4.5-STABLE FreeBSD 4.5-STABLE #5: Mon Apr 22 14:11:43 CDT 2002 root@sandbox.texas.rr.com:/usr/obj/usr/src/sys/SANDBOX i386
>Description:
Because of the recent libbind vulnerability, I wanted to replace the base bind8 with the port bind8 to get rid of the binaries compiled with a broken libbind, i.e. nslookup. When I installed, however, I noticed that I had two copies of nslookup. The old one from base in /usr/sbin and the new one from the port in /usr/bin. This obviously defeats the purpose of the upgrade which was to get rid of the vulnerable binaries.
>How-To-Repeat:
cd /usr/ports/net/bind8
make -DPORT_REPLACES_BASE_BIND8
make -DPORT_REPLACES_BASE_BIND8 install
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200207022211.g62MB1qB035786>