On 2008-03-24, David Newman <[EMAIL PROTECTED]> wrote: > 1. On a 4.2 i386 box, installing mediawiki from ports died during tk > install with the header error pasted below. This box has xbase installed > but none of the rest of the X stuff. > > How to remedy?
You should have a full OS installation if you're building from ports. The easier method for you is to install php5-gd from package. > 2. The package and port are version 1.9 while current stable source is > at version 1.12. The release notes for 1.10-1.12 mention fixes for some > cross-side scripting and other vulnerabilities. -current/4.3 ports and packages have a newer version (1.11.1), though not yet the newest. It's usually fairly straightforward to update a port though. > Purely from a security standpoint, which is preferabe: installing the > 1.9 version from packages or ports, or building the current release from > sources? Your choice .. looking at the release notes, either there are work- arounds to avoid the problems, or they only affect versions newer than 1.9.

