Date: Sat, 15 Oct 2005 16:50:04 -0600 (MDT) From: Mike Brown <mike@skew.org> To: freebsd-ports@freebsd.org Cc: jharris@widomaker.com Subject: bzip2 port still out of date Message-ID: <200510152250.j9FMo4D5001378@chilled.skew.org>
next in thread | raw e-mail | index | archive | help
archivers/bzip2 seems to still be languishing at 1.0.3, despite the suggestion at http://www.freebsd.org/ports/portaudit/197f444f-e8ef-11d9-b875-0001020eed82.html that there was a 1.0.3_1 due in late June, when the vulnerabilities were reported. Since the FreeBSD 4.x base system does not come with bzgrep, I've been using the bzip2 port. It would be nice to be able to upgrade my installation so I can stop getting security warnings. Is there a new revision of the port in the works? (Actually, on my system, I employed a temporary workaround:) cd /usr/ports/archivers/bzip2 make deinstall make DISABLE_VULNERABILITIES=yes cd work/bzip2-1.0.3 chmod a+rx bzgrep bzdiff bzmore cp -p bzgrep bzdiff bzmore /usr/local/bin gzip -c9 bzgrep.1 > /usr/local/man/man1/bzgrep.1.gz gzip -c9 bzdiff.1 > /usr/local/man/man1/bzdiff.1.gz gzip -c9 bzmore.1 > /usr/local/man/man1/bzmore.1.gz (bzgrep, bzdiff, and bzmore are shell scripts in the port)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200510152250.j9FMo4D5001378>