question about zlib security patch

[Yuan Jue]

On Friday 09 September 2005 01:39, Kris Kennaway wrote:
> > > >>I was installing clamav 0.83 on a freebsd 5.4 system and I got the
> > > >>following error:
> > > >>clamav configure: error: The installed zlib version may contain a
> > > >>security bug
> > > >>
> > > >>I want to upgrade zlib to solve this but:
> > > >>- I don't know how I can see what version of zlib I have at the
> > > >> moment?
> > > >
> > > >use pkg_info|grep zlib
> > > >
> > > >>- I found the following advice on the freebsd site:
> > > >>
> > > >>ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:18.zl
> > > >>ib.a sc
> > > >>
> > > >>according to this I have to do the following:
> > > >>
> > > >># cd /usr/src
> > > >># patch < /path/to/patch
> > > >># cd /usr/src/lib/libz/
> > > >># make obj && make depend && make && make install
> > > >>
> > > >>but I have no /usr/src/lib/libz/
> > > >
> > > >maybe you didn't install source code when you installed your FreeBSD.
> > > > You still can do it using sysinstall now.
> > >
> > > You are right I didn't install the sourcecode, the instructions make a
> > > lot more sense now :)
> > > one other small question,  pkg_info | grep zlib
> > > gave me the following output;
> > >
> > > jzlib-1.0.5_1       A re-implementation of zlib in pure Java
> > > php4-zlib-4.3.10_2  The zlib shared extension for php
> > >
> > >
> > > so no zlib? Why is that ? because I didn't install it with pkg_add?
> >
> > sorry, I never try clamav, so I am not sure the exact reason for that
> > error. Maybe when you install the source code, there is no error anymore
> > :)
>
> The advice was bogus, zlib is not a package on FreeBSD.
>
> > Or, you may need to install this port find_zlib-1.9, which can be found
> > in /usr/ports/security/.
>
> That does something else again..please try not to give bad advice :-)
I apologize for that. Thanks for your reminding.

-- 
Best Regards.

Yuan Jue