Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 26 Apr 2004 19:23:49 -0700
From:      Kris Kennaway <kris@obsecurity.org>
To:        Noah <admin2@enabled.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: frontpage build failing - compat3x-i386-4.4.20020925 is forbidden
Message-ID:  <20040427022349.GA29349@xor.obsecurity.org>
In-Reply-To: <20040427013641.M59961@enabled.com>
References:  <20040427013641.M59961@enabled.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--6c2NcOVqGQ03X4Wi
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Apr 26, 2004 at 05:36:41PM -0800, Noah wrote:
> FreeBSD-4.9-STABLE
>=20
>=20
>=20
> I am trying to build frontpage from an updated /usr/ports/www/frontpage
>=20
> there appears to be a security issue here.  any clues on how to get aroun=
d this?

You have four options:

1) Don't use the port

2) If you wish to use the port and potentially expose yourself to the
vulnerabilities discussed in those advisories, comment ouf the
FORBIDDEN line in the compat3x port

3) Convince the vendor to make a new version of frontpage that doesn't
depend on the FreeBSD 3.x libraries

4) Fix the security vulnerabilities in the unmaintained FreeBSD 3.x
code and submit your changes.

Kris

--6c2NcOVqGQ03X4Wi
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)

iD8DBQFAjcQ1Wry0BWjoQKURAq81AKDE/YmGuMb1rNDMsh2YSdJ43bSzvgCeJsMg
IJeAl9/xXFAWnlm8E+OEDQA=
=xk6x
-----END PGP SIGNATURE-----

--6c2NcOVqGQ03X4Wi--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040427022349.GA29349>