question about zlib security patch

[Kris Kennaway]

On Thu, Sep 08, 2005 at 04:23:09PM +0200, Chantal Rosmuller wrote:
> Hi everyone,
> 
> I was installing clamav 0.83 on a freebsd 5.4 system and I got the 
> following error:
> clamav configure: error: The installed zlib version may contain a 
> security bug
> 
> I want to upgrade zlib to solve this but:
> - I don't know how I can see what version of zlib I have at the moment?
> - I found the following advice on the freebsd site:
> 
> ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:18.zlib.asc
> 
> according to this I have to do the following:
> 
> # cd /usr/src
> # patch < /path/to/patch
> # cd /usr/src/lib/libz/
> # make obj && make depend && make && make install
> 
> but I have no /usr/src/lib/libz/
> 
> Can anyone clarify this for me? Thanks!

You will need to either first install the FreeBSD sources (see the
handbook for full description of the many ways to do this) or upgrade
your FreeBSD installation to the latest security revision, see

  http://www.daemonology.net/freebsd-update/

Kris
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20050908/7dd6a276/attachment.bin