|
@@ -30,8 +30,8 @@ some programs.</para>
|
|
<sect2 role="installation">
|
|
<sect2 role="installation">
|
|
<title>Installation of Zlib</title>
|
|
<title>Installation of Zlib</title>
|
|
|
|
|
|
-<para>Zlib has a security vulnerability currently being addressed upstream. The
|
|
|
|
-following patch fixes the problem:</para>
|
|
|
|
|
|
+<para>Zlib has a buffer overflow vulnerability that can lead to a Denial of
|
|
|
|
+Service attack. The following patch fixes the problem:</para>
|
|
|
|
|
|
<screen><userinput>patch -Np1 -i ../&zlib-security_fix-patch;</userinput></screen>
|
|
<screen><userinput>patch -Np1 -i ../&zlib-security_fix-patch;</userinput></screen>
|
|
|
|
|