Sfoglia il codice sorgente

Add gzip security patch

git-svn-id: http://svn.linuxfromscratch.org/LFS/trunk/BOOK@5367 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689
Matthew Burgess 20 anni fa
parent
commit
f4aa3608f1
3 ha cambiato i file con 14 aggiunte e 0 eliminazioni
  1. 3 0
      chapter01/changelog.xml
  2. 6 0
      chapter03/patches.xml
  3. 5 0
      chapter06/gzip.xml

+ 3 - 0
chapter01/changelog.xml

@@ -62,6 +62,7 @@ First a summary, then a detailed log.</para>
 <listitem><para>bash-3.0-fixes-3.patch</para></listitem>
 <listitem><para>bash-3.0-avoid_WCONTINUED-1.patch</para></listitem>
 <listitem><para>glibc-2.3.5-fix_test-1.patch</para></listitem>
+<listitem><para>gzip-1.3.5-security_fixes-1.patch</para></listitem>
 <listitem><para>Hotplug 2004_09_23</para></listitem>
 <listitem><para>shadow-4.0.7-fix_lastlog-1.patch</para></listitem>
 <listitem><para>sysklogd-1.4.1-fixes-1.patch</para></listitem>
@@ -84,6 +85,8 @@ First a summary, then a detailed log.</para>
 </itemizedlist>
 </listitem>
 
+<listitem><para>May 15th, 2005 [matt]: Added gzip security patch.</para></listitem>
+
 <listitem><para>May 15th, 2005 [matt]: Updated to Grub 0.97.</para></listitem>
 
 <listitem><para>May 15th, 2005 [matt]: Updated to Libtool 1.5.16.</para></listitem>

+ 6 - 0
chapter03/patches.xml

@@ -85,6 +85,12 @@ needed to build an LFS system:</para>
 </listitem>
 </varlistentry>
 
+<varlistentry>
+<term>Gzip Security Patch - 2KB:</term><listitem>
+<para><ulink url="&patches-root;gzip-&gzip-version;-security_fixes-1.patch"/></para>
+</listitem>
+</varlistentry>
+
 <varlistentry>
 <term>Inetutils Kernel Headers Patch - 1 KB:</term>
 <listitem>

+ 5 - 0
chapter06/gzip.xml

@@ -29,6 +29,11 @@ GCC, Glibc, Grep, Make, and Sed</seg></seglistitem>
 <sect2 role="installation">
 <title>Installation of Gzip</title>
 
+<para>Gzip has 2 known security vulnerabilites.  The following patch
+addresses both of them:</para>
+
+<screen><userinput>patch -Np1 -i ../gzip-&gzip-version;-security_fixes-1.patch</userinput></screen>
+
 <para>Prepare Gzip for compilation:</para>
 
 <screen><userinput>./configure --prefix=/usr</userinput></screen>