From: rihad on 21 Jan 2010 11:20 Hi, one of the programs I'm using (freeradius' rlm_perl) segfaults with both Perl 5.8.9 and 5.10, only working with 5.8.8. How can I cleanly install Perl 5.8.8 on a fresh system, without mangling the port Makefile? I've tried putting both USE_PERL=5.8.8 and PERL_VERSION=5.8.8 in /etc/make.conf, but "make fetch" still tries to fetch version 5.8.9. Thanks. _______________________________________________ freebsd-ports(a)freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"
From: Matthew Seaman on 21 Jan 2010 12:29 rihad wrote: > Hi, one of the programs I'm using (freeradius' rlm_perl) segfaults with > both Perl 5.8.9 and 5.10, only working with 5.8.8. How can I cleanly > install Perl 5.8.8 on a fresh system, without mangling the port > Makefile? I've tried putting both USE_PERL=5.8.8 and PERL_VERSION=5.8.8 > in /etc/make.conf, but "make fetch" still tries to fetch version 5.8.9. portdowngrade is what you'ld have to use. However, perl-5.8.8 has known security vulnerabilities: http://www.vuxml.org/freebsd/4a99d61c-f23a-11dd-9f55-0030843d3802.html Would definitely be better to get your program to work with a current version of perl. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate Kent, CT11 9PW
From: rihad on 21 Jan 2010 13:02 Matthew Seaman wrote: > rihad wrote: >> Hi, one of the programs I'm using (freeradius' rlm_perl) segfaults >> with both Perl 5.8.9 and 5.10, only working with 5.8.8. How can I >> cleanly install Perl 5.8.8 on a fresh system, without mangling the >> port Makefile? I've tried putting both USE_PERL=5.8.8 and >> PERL_VERSION=5.8.8 in /etc/make.conf, but "make fetch" still tries to >> fetch version 5.8.9. > > portdowngrade is what you'ld have to use. However, perl-5.8.8 has known > security vulnerabilities: > > http://www.vuxml.org/freebsd/4a99d61c-f23a-11dd-9f55-0030843d3802.html > > Would definitely be better to get your program to work with a current > version of perl. > Thanks for pointing this out. However, portdowngrade doesn't help me much: # portdowngrade -s:pserver:anoncvs(a)anoncvs.FreeBSD.org:/home/ncvs lang/perl5.8 portdowngrade 0.6 by Heiner Eichmann Please note, that nothing is changed in the ports tree unless it is explicitly permitted in step 6! Seeking port lang/perl5.8 ... not found # _______________________________________________ freebsd-ports(a)freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"
From: jhell on 21 Jan 2010 21:33 On Thu, 21 Jan 2010 13:02, rihad@ wrote: > Matthew Seaman wrote: >> rihad wrote: >>> Hi, one of the programs I'm using (freeradius' rlm_perl) segfaults with >>> both Perl 5.8.9 and 5.10, only working with 5.8.8. How can I cleanly >>> install Perl 5.8.8 on a fresh system, without mangling the port Makefile? >>> I've tried putting both USE_PERL=5.8.8 and PERL_VERSION=5.8.8 in >>> /etc/make.conf, but "make fetch" still tries to fetch version 5.8.9. >> >> portdowngrade is what you'ld have to use. However, perl-5.8.8 has known >> security vulnerabilities: >> >> http://www.vuxml.org/freebsd/4a99d61c-f23a-11dd-9f55-0030843d3802.html >> >> Would definitely be better to get your program to work with a current >> version of perl. >> > Thanks for pointing this out. However, portdowngrade doesn't help me much: > > # portdowngrade -s:pserver:anoncvs(a)anoncvs.FreeBSD.org:/home/ncvs > lang/perl5.8 > > portdowngrade 0.6 by Heiner Eichmann > Please note, that nothing is changed in the ports tree > unless it is explicitly permitted in step 6! > > Seeking port lang/perl5.8 ... not found > # > This will work out for you. PERL_PORT=perl5.10 Run pkg_version -vl'<' after to determine if perl is going to be upgraded and what else there is to upgrade. You will have to recompile any ports that depend on perl after and this is covered by /usr/ports/UPDATING @date's 20090911 & 20090328. Best of luck. -- jhell _______________________________________________ freebsd-ports(a)freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"
From: Tom Hukins on 22 Jan 2010 06:54
On Thu, Jan 21, 2010 at 05:29:17PM +0000, Matthew Seaman wrote: > portdowngrade is what you'ld have to use. However, perl-5.8.8 has known > security vulnerabilities: > > http://www.vuxml.org/freebsd/4a99d61c-f23a-11dd-9f55-0030843d3802.html It looks like VuXML might have got that wrong. The referenced CVE describes Perl 5.8.4 as fixing this bug: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0448 Furthermore, 5.8.9's release notes mention no security fixes: http://search.cpan.org/~nwclark/perl-5.8.9/pod/perl589delta.pod While I can't think of any good reason to prefer 5.8.8 over 5.8.9, the former has no known defects I would describe as "security vulnerabilities". Tom _______________________________________________ freebsd-ports(a)freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org" |