Changeset 3cc6893 for BOOK/final-system/common
- Timestamp:
- Nov 26, 2006, 1:13:32 PM (18 years ago)
- Branches:
- clfs-1.2, clfs-2.1, clfs-3.0.0-systemd, clfs-3.0.0-sysvinit, master, systemd, sysvinit
- Children:
- 3398827
- Parents:
- b778d70
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
BOOK/final-system/common/gzip.xml
rb778d70 r3cc6893 26 26 <title>Installation of Gzip</title> 27 27 28 <para os="p1">The following patch fixes two security vulnerabilities in Gzip:29 a path traversal bug when using the <option>-N</option> option30 (CAN-2005-1228), and a race condition in the file permission restore31 code (CAN-2005-0998):</para>32 33 <screen os="p2"><userinput>patch -Np1 -i ../&gzip-security_fix-patch;</userinput></screen>34 35 <para os="s1">The <command>gzexe</command> command calls <command>tail</command>36 with options that do not conform to newer versions of the POSIX standard,37 and therefore are not accepted by current versions of Coreutils. Fix this38 problem by issuing the following command:</para>39 40 <screen os="s2"><userinput>sed -i 's/tail +/tail -n +/' gzexe.in</userinput></screen>41 42 28 <para os="a">Prepare Gzip for compilation:</para> 43 29
Note:
See TracChangeset
for help on using the changeset viewer.