bzip2 port still out of date

Mike Brown mike at skew.org
Sat Oct 15 15:50:13 PDT 2005


archivers/bzip2 seems to still be languishing at 1.0.3, despite the suggestion at
http://www.freebsd.org/ports/portaudit/197f444f-e8ef-11d9-b875-0001020eed82.html
that there was a 1.0.3_1 due in late June, when the vulnerabilities were reported.

Since the FreeBSD 4.x base system does not come with bzgrep, I've been using 
the bzip2 port. It would be nice to be able to upgrade my installation so I 
can stop getting security warnings. Is there a new revision of the port in the
works?

(Actually, on my system, I employed a temporary workaround:)

cd /usr/ports/archivers/bzip2
make deinstall
make DISABLE_VULNERABILITIES=yes
cd work/bzip2-1.0.3
chmod a+rx bzgrep bzdiff bzmore
cp -p bzgrep bzdiff bzmore /usr/local/bin
gzip -c9 bzgrep.1 > /usr/local/man/man1/bzgrep.1.gz
gzip -c9 bzdiff.1 > /usr/local/man/man1/bzdiff.1.gz
gzip -c9 bzmore.1 > /usr/local/man/man1/bzmore.1.gz

(bzgrep, bzdiff, and bzmore are shell scripts in the port)


More information about the freebsd-ports mailing list