On 2008-09-02 23:04, Roberto Ullfig wrote: > Török Edwin wrote: > >> On 2008-09-02 22:49, Roberto Ullfig wrote: >> >> >>> Running redhat and have installed bzip2 1.0.5 in /usr/local/. How can I >>> tell clamav's Configure to look in /usr/local/ just for bzip2? >>> >>> >> Try this: >> ./configure --with-libbz2-prefix=/usr/local/ >> >> or >> >> ./configure CPPFLAGS="-I/usr/local/" LIBS="-L/usr/local/lib" >> >> >> >>> Configure >>> is returning: >>> >>> checking how to link with libbz2... /usr/local/lib/libbz2.a >>> checking for bzReadOpen in -lbz2... no >>> checking bzlib.h usability... yes >>> checking bzlib.h presence... yes >>> checking for bzlib.h... yes >>> checking for CVE-2008-1372... bugged >>> configure: WARNING: ****** bzip2 libraries are affected by the >>> CVE-2008-1372 bug >>> configure: WARNING: ****** We strongly suggest you to update to bzip2 1.0.5. >>> configure: WARNING: ****** Please do not report stability problems to >>> the ClamAV developers! >>> >>> # /usr/local/bin/bzip2 --help >>> bzip2, a block-sorting file compressor. Version 1.0.5, 10-Dec-2007. >>> >>> >> I assume you have an older bzip2 in /usr/lib too? >> You can try removing the old bzip2 package using yum. >> >> Best regards, >> --Edwin >> _______________________________________________ >> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net >> http://www.clamav.net/support/ml >> >> >> > The first suggestion didn't change things and I'd rather not do the > second one. Note in my output that it seems to know about the new version: > > checking how to link with libbz2... /usr/local/lib/libbz2.a > > But still complains about the bug! > > /usr/local/lib/libbz2.a is definitely the new 1.0.5 version I installed. > > I think I'll have to remove the old redhat version in /usr/lib but > something seems wrong here otherwise.
Send me your config.log (off-list, this list strips attachments). Best regards, --Edwin _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
