1st security warning: "installed zlib version may contain a security bug"

[Lowell Gilbert]

Timothy Luoma <lists at tntluoma.com> writes:

> I was trying to configure && make 'clamav-0.81' when it complained
> about this:
> 
> configure: error: The installed zlib version may contain a security
> bug. Please upgrade to 1.2.2 or later: http://www.zlib.net. You can
> omit this check with --disable-zlib-vcheck but DO NOT REPORT any
> stablility issues then!
> 
> I went to zlib.net, downloaded 1.2.2, did './configure && make install
> clean'
> 
> Is that all I need to do?  This is my first "security warning" so I
> want to make sure I'm not missing something obvious.

It sounds like you're missing the ports collection, to begin with.  It
will handle dependencies for you, a big help in upgrades.  And you
should try to use the FreeBSD base system upgrades and security
advisories for keeping up on security issues, rather than trying to
install bits and pieces yourself (unlike, say, Linux, FreeBSD is a
whole operating system).

> Is there a good "What newbies need to know about FreeBSD security" out
> there?

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/security.html
http://www.freebsd.org/security/