Changeset 934b2a7 in clfs-sysroot for BOOK/final-system/common
- Timestamp:
- Nov 26, 2006, 5:40:04 PM (18 years ago)
- Branches:
- master
- Children:
- b47f947
- Parents:
- 79404e1
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
BOOK/final-system/common/gzip.xml
r79404e1 r934b2a7 26 26 <title>Installation of Gzip</title> 27 27 28 <para os="p1">The following patch fixes two security vulnerabilities in Gzip:29 a path traversal bug when using the <option>-N</option> option30 (CAN-2005-1228), and a race condition in the file permission restore31 code (CAN-2005-0998):</para>32 33 <screen os="p2"><userinput>patch -Np1 -i ../&gzip-security_fix-patch;</userinput></screen>34 35 <para os="s1">The <command>gzexe</command> command calls <command>tail</command>36 with options that do not conform to newer versions of the POSIX standard,37 and therefore are not accepted by current versions of Coreutils. Fix this38 problem by issuing the following command:</para>39 40 <screen os="s2"><userinput>sed -i 's/tail +/tail -n +/' gzexe.in</userinput></screen>41 42 28 <para os="a">Prepare Gzip for compilation:</para> 43 29
Note:
See TracChangeset
for help on using the changeset viewer.