Török Edwin wrote:
> On 2008-09-02 22:49, Roberto Ullfig wrote:
>   
>> Running redhat and have installed bzip2 1.0.5 in /usr/local/. How can I 
>> tell clamav's Configure to look in /usr/local/ just for bzip2?
>>     
>
> Try this:
> ./configure --with-libbz2-prefix=/usr/local/
>
> or
>
> ./configure CPPFLAGS="-I/usr/local/" LIBS="-L/usr/local/lib"
>
>   
>>  Configure 
>> is returning:
>>
>> checking how to link with libbz2... /usr/local/lib/libbz2.a
>> checking for bzReadOpen in -lbz2... no
>> checking bzlib.h usability... yes
>> checking bzlib.h presence... yes
>> checking for bzlib.h... yes
>> checking for CVE-2008-1372... bugged
>> configure: WARNING: ****** bzip2 libraries are affected by the 
>> CVE-2008-1372 bug
>> configure: WARNING: ****** We strongly suggest you to update to bzip2 1.0.5.
>> configure: WARNING: ****** Please do not report stability problems to 
>> the ClamAV developers!
>>
>> # /usr/local/bin/bzip2 --help
>> bzip2, a block-sorting file compressor.  Version 1.0.5, 10-Dec-2007.
>>     
>
> I assume you have an older bzip2 in /usr/lib too?
> You can try removing the old bzip2 package using yum.
>
> Best regards,
> --Edwin
> _______________________________________________
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
>
>   
The first suggestion didn't change things and I'd rather not do the 
second one. Note in my output that it seems to know about the new version:

checking how to link with libbz2... /usr/local/lib/libbz2.a

But still complains about the bug!

/usr/local/lib/libbz2.a is definitely the new 1.0.5 version I installed.

I think I'll have to remove the old redhat version in /usr/lib but 
something seems wrong here otherwise.

-- 
Roberto Ullfig - [EMAIL PROTECTED]


_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to