Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 23 Jul 2016 09:29:59 -0500
From:      Karl Denninger <karl@denninger.net>
To:        freebsd-ports@freebsd.org
Subject:   Re: Updating Samba to 4.3.11_1
Message-ID:  <3cadfb5d-2165-bbf6-4916-7840a38ed4e5@denninger.net>
In-Reply-To: <E1C53AFC-D302-475F-9988-67F63F2B05E5@FreeBSD.org>
References:  <SN2PR20MB084559C7DBB064A8076CBDC2800A0@SN2PR20MB0845.namprd20.prod.outlook.com> <E1C53AFC-D302-475F-9988-67F63F2B05E5@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
This is a cryptographically signed message in MIME format.

--------------ms000007050107050101020104
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

On 7/22/2016 17:22, Dimitry Andric wrote:
> On 22 Jul 2016, at 12:19, carmel_ny@outlook.com wrote:
>> I am having the same problem as reported by this PR:
>> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D211140
>>
>> Does anyone know of a way to get this port installed? The older versio=
n
>> is reported as having a vulnerability.
> Uninstall the previous version before attempting to build the new
> version.  For some reason, the port build process picks up its own old
> libraries from /usr/local/lib during linking.
>
> -Dimitry
Caution: This advice is WRONG.  If you have a RUNNING Samba 4.3 do NOT
deinstall it before attempting to build the CVE-patched version.

I followed the above advice on failure to build the latest Samba 4.3 and
now have NO samba server software on the machine; I get to recover from
last snapshot now (or attempt to load it via pkg), as the build STILL
fails in the same place following deinstall with errors in undefined
references to BIO_ calls.

Since Samba is a *very* widely used piece of software *and* the upgrade
is broken the maintainer either needs to get this fixed pronto or the
port needs to be marked broken so that people don't get hosed in this
fashion on 11-BETA{1|2}.

Good thing it's the weekend and I can afford the lack of SMB server on
this network at the present time without being lynched.

--=20
Karl Denninger
karl@denninger.net <mailto:karl@denninger.net>
/The Market Ticker/
/[S/MIME encrypted email preferred]/

--------------ms000007050107050101020104
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms000007050107050101020104--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3cadfb5d-2165-bbf6-4916-7840a38ed4e5>