On Thu, Sep 08, 2005 at 11:09:43PM +0800, Yuan Jue wrote: > On Thursday 08 September 2005 22:43, Chantal Rosmuller wrote: > > > >>I was installing clamav 0.83 on a freebsd 5.4 system and I got the > > >>following error: > > >>clamav configure: error: The installed zlib version may contain a > > >>security bug > > >> > > >>I want to upgrade zlib to solve this but: > > >>- I don't know how I can see what version of zlib I have at the moment? > > > > > >use pkg_info|grep zlib > > > > > >>- I found the following advice on the freebsd site: > > >> > > >>ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:18.zlib.a > > >>sc > > >> > > >>according to this I have to do the following: > > >> > > >># cd /usr/src > > >># patch < /path/to/patch > > >># cd /usr/src/lib/libz/ > > >># make obj && make depend && make && make install > > >> > > >>but I have no /usr/src/lib/libz/ > > > > > >maybe you didn't install source code when you installed your FreeBSD. You > > >still can do it using sysinstall now. > > > > You are right I didn't install the sourcecode, the instructions make a > > lot more sense now :) > > one other small question, pkg_info | grep zlib > > gave me the following output; > > > > jzlib-1.0.5_1 A re-implementation of zlib in pure Java > > php4-zlib-4.3.10_2 The zlib shared extension for php > > > > > > so no zlib? Why is that ? because I didn't install it with pkg_add? > sorry, I never try clamav, so I am not sure the exact reason for that error. > Maybe when you install the source code, there is no error anymore :)
The advice was bogus, zlib is not a package on FreeBSD. > Or, you may need to install this port find_zlib-1.9, which can be found > in /usr/ports/security/. That does something else again..please try not to give bad advice :-) Kris
pgp1NPSfWRJUJ.pgp
Description: PGP signature