Changeset 3cc6893 for BOOK/final-system/common/gzip.xml

Timestamp:

Nov 26, 2006, 1:13:32 PM (17 years ago)

Author:

Jim Gifford <clfs@…>

Branches:

clfs-1.2, clfs-2.1, clfs-3.0.0-systemd, clfs-3.0.0-sysvinit, master, systemd, sysvinit

Children:

3398827

Parents:

b778d70

Message:

Updated to Gzip 1.3.6

File:

• BOOK/final-system/common/gzip.xml (modified) (1 diff)

BOOK/final-system/common/gzip.xml

@@ -26 +26 @@
     <title>Installation of Gzip</title>
 
-    <para os="p1">The following patch fixes two security vulnerabilities in Gzip:
-    a path traversal bug when using the <option>-N</option> option
-    (CAN-2005-1228), and a race condition in the file permission restore
-    code (CAN-2005-0998):</para>
-
-<screen os="p2"><userinput>patch -Np1 -i ../&gzip-security_fix-patch;</userinput></screen>
-
-    <para os="s1">The <command>gzexe</command> command calls <command>tail</command>
-     with options that do not conform to newer versions of the POSIX standard,
-     and therefore are not accepted by current versions of Coreutils. Fix this
-     problem by issuing the following command:</para>
-
-<screen os="s2"><userinput>sed -i 's/tail +/tail -n +/' gzexe.in</userinput></screen>
-
     <para os="a">Prepare Gzip for compilation:</para>