Needed: compat5x package

[Brooks Davis]

On Sat, Aug 20, 2005 at 06:07:10AM +0900, Hiroki Sato wrote:
> Dejan Lesjak <dejan.lesjak at ijs.si> wrote
>   in <200508192250.46012.dejan.lesjak at ijs.si>:
> 
> de> One thing to consider is how to get these libraries. If they are taken from
> de> 5.4 release tarballs then there is problem with locale above and at least
> de> problem with libz and FreeBSD-SA-05:18.zlib vulnerability. One possible thing
> de> to do is to build RELENG_5_4 with the change to paths.h above and take
> de> libraries from there and generate tarballs (which is what I did for this
> de> sample except I took RELENG_5). If that makes sense I can do it for alpha,
> de> amd64, i386 and sparc64.
> 
>  True.  These libraries have to be built with vulnerability fixes.
>  I took them from 5.4-RELEASE as you pointed out.  Building from
>  the RELENG_5_4 source looks reasonable to me.
> 
>  I am wondering if misc/localedata can be used---were the LC_* files
>  architecture dependent at that time?  I thought this incompatibility
>  was needed to making them architecture independent.
>  Do I misunderstand?

Another option might be to ask Colin if he has them from freebsd-update
builds.  Those are as close to official as you're going to get.  I'm not
sure which versions he supports at the moment though.

-- Brooks

-- 
Any statement of the form "X is the one, true Y" is FALSE.
PGP fingerprint 655D 519C 26A7 82E7 2529  9BF0 5D8E 8BE9 F238 1AD4
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-ports/attachments/20050819/a71bffb3/attachment.bin