From: rihad on
Hi, one of the programs I'm using (freeradius' rlm_perl) segfaults with
both Perl 5.8.9 and 5.10, only working with 5.8.8. How can I cleanly
install Perl 5.8.8 on a fresh system, without mangling the port
Makefile? I've tried putting both USE_PERL=5.8.8 and PERL_VERSION=5.8.8
in /etc/make.conf, but "make fetch" still tries to fetch version 5.8.9.

Thanks.
_______________________________________________
freebsd-ports(a)freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"

From: Matthew Seaman on
rihad wrote:
> Hi, one of the programs I'm using (freeradius' rlm_perl) segfaults with
> both Perl 5.8.9 and 5.10, only working with 5.8.8. How can I cleanly
> install Perl 5.8.8 on a fresh system, without mangling the port
> Makefile? I've tried putting both USE_PERL=5.8.8 and PERL_VERSION=5.8.8
> in /etc/make.conf, but "make fetch" still tries to fetch version 5.8.9.

portdowngrade is what you'ld have to use. However, perl-5.8.8 has known
security vulnerabilities:

http://www.vuxml.org/freebsd/4a99d61c-f23a-11dd-9f55-0030843d3802.html

Would definitely be better to get your program to work with a current
version of perl.

Cheers,

Matthew

--
Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard
Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
Kent, CT11 9PW

From: rihad on
Matthew Seaman wrote:
> rihad wrote:
>> Hi, one of the programs I'm using (freeradius' rlm_perl) segfaults
>> with both Perl 5.8.9 and 5.10, only working with 5.8.8. How can I
>> cleanly install Perl 5.8.8 on a fresh system, without mangling the
>> port Makefile? I've tried putting both USE_PERL=5.8.8 and
>> PERL_VERSION=5.8.8 in /etc/make.conf, but "make fetch" still tries to
>> fetch version 5.8.9.
>
> portdowngrade is what you'ld have to use. However, perl-5.8.8 has known
> security vulnerabilities:
>
> http://www.vuxml.org/freebsd/4a99d61c-f23a-11dd-9f55-0030843d3802.html
>
> Would definitely be better to get your program to work with a current
> version of perl.
>
Thanks for pointing this out. However, portdowngrade doesn't help me much:

# portdowngrade -s:pserver:anoncvs(a)anoncvs.FreeBSD.org:/home/ncvs
lang/perl5.8

portdowngrade 0.6 by Heiner Eichmann
Please note, that nothing is changed in the ports tree
unless it is explicitly permitted in step 6!

Seeking port lang/perl5.8 ... not found
#
_______________________________________________
freebsd-ports(a)freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"

From: jhell on

On Thu, 21 Jan 2010 13:02, rihad@ wrote:
> Matthew Seaman wrote:
>> rihad wrote:
>>> Hi, one of the programs I'm using (freeradius' rlm_perl) segfaults with
>>> both Perl 5.8.9 and 5.10, only working with 5.8.8. How can I cleanly
>>> install Perl 5.8.8 on a fresh system, without mangling the port Makefile?
>>> I've tried putting both USE_PERL=5.8.8 and PERL_VERSION=5.8.8 in
>>> /etc/make.conf, but "make fetch" still tries to fetch version 5.8.9.
>>
>> portdowngrade is what you'ld have to use. However, perl-5.8.8 has known
>> security vulnerabilities:
>>
>> http://www.vuxml.org/freebsd/4a99d61c-f23a-11dd-9f55-0030843d3802.html
>>
>> Would definitely be better to get your program to work with a current
>> version of perl.
>>
> Thanks for pointing this out. However, portdowngrade doesn't help me much:
>
> # portdowngrade -s:pserver:anoncvs(a)anoncvs.FreeBSD.org:/home/ncvs
> lang/perl5.8
>
> portdowngrade 0.6 by Heiner Eichmann
> Please note, that nothing is changed in the ports tree
> unless it is explicitly permitted in step 6!
>
> Seeking port lang/perl5.8 ... not found
> #
>

This will work out for you.

PERL_PORT=perl5.10

Run pkg_version -vl'<' after to determine if perl is going to be upgraded
and what else there is to upgrade. You will have to recompile any ports
that depend on perl after and this is covered by /usr/ports/UPDATING
@date's 20090911 & 20090328.

Best of luck.

--

jhell

_______________________________________________
freebsd-ports(a)freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"

From: Tom Hukins on
On Thu, Jan 21, 2010 at 05:29:17PM +0000, Matthew Seaman wrote:
> portdowngrade is what you'ld have to use. However, perl-5.8.8 has known
> security vulnerabilities:
>
> http://www.vuxml.org/freebsd/4a99d61c-f23a-11dd-9f55-0030843d3802.html

It looks like VuXML might have got that wrong. The referenced CVE
describes Perl 5.8.4 as fixing this bug:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0448

Furthermore, 5.8.9's release notes mention no security fixes:
http://search.cpan.org/~nwclark/perl-5.8.9/pod/perl589delta.pod

While I can't think of any good reason to prefer 5.8.8 over 5.8.9, the
former has no known defects I would describe as "security
vulnerabilities".

Tom
_______________________________________________
freebsd-ports(a)freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"