From owner-freebsd-ports@FreeBSD.ORG Sat Oct 15 22:50:12 2005 Return-Path: X-Original-To: freebsd-ports@freebsd.org Delivered-To: freebsd-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B3BAF16A425 for ; Sat, 15 Oct 2005 22:50:12 +0000 (GMT) (envelope-from mike@skew.org) Received: from chilled.skew.org (skew.org [65.101.207.237]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8A41843D5A for ; Sat, 15 Oct 2005 22:50:09 +0000 (GMT) (envelope-from mike@skew.org) Received: from chilled.skew.org (localhost.skew.org [127.0.0.1]) by chilled.skew.org (8.13.1/8.13.1) with ESMTP id j9FMo8t4001380; Sat, 15 Oct 2005 16:50:08 -0600 (MDT) (envelope-from mike@chilled.skew.org) Received: (from mike@localhost) by chilled.skew.org (8.13.1/8.13.1/Submit) id j9FMo4D5001378; Sat, 15 Oct 2005 16:50:04 -0600 (MDT) (envelope-from mike) From: Mike Brown Message-Id: <200510152250.j9FMo4D5001378@chilled.skew.org> To: freebsd-ports@freebsd.org Date: Sat, 15 Oct 2005 16:50:04 -0600 (MDT) Action: X-Whoa: whoa. X-Mailer: ELM [version 2.4ME+ PL119 (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=UTF-8 Cc: jharris@widomaker.com Subject: bzip2 port still out of date X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 15 Oct 2005 22:50:13 -0000 archivers/bzip2 seems to still be languishing at 1.0.3, despite the suggestion at http://www.freebsd.org/ports/portaudit/197f444f-e8ef-11d9-b875-0001020eed82.html that there was a 1.0.3_1 due in late June, when the vulnerabilities were reported. Since the FreeBSD 4.x base system does not come with bzgrep, I've been using the bzip2 port. It would be nice to be able to upgrade my installation so I can stop getting security warnings. Is there a new revision of the port in the works? (Actually, on my system, I employed a temporary workaround:) cd /usr/ports/archivers/bzip2 make deinstall make DISABLE_VULNERABILITIES=yes cd work/bzip2-1.0.3 chmod a+rx bzgrep bzdiff bzmore cp -p bzgrep bzdiff bzmore /usr/local/bin gzip -c9 bzgrep.1 > /usr/local/man/man1/bzgrep.1.gz gzip -c9 bzdiff.1 > /usr/local/man/man1/bzdiff.1.gz gzip -c9 bzmore.1 > /usr/local/man/man1/bzmore.1.gz (bzgrep, bzdiff, and bzmore are shell scripts in the port)