diff options
-rw-r--r-- | chapter01/changelog.xml | 3 | ||||
-rw-r--r-- | chapter03/patches.xml | 6 | ||||
-rw-r--r-- | chapter06/gzip.xml | 5 |
3 files changed, 14 insertions, 0 deletions
diff --git a/chapter01/changelog.xml b/chapter01/changelog.xml index d5f18a309..a796e04c0 100644 --- a/chapter01/changelog.xml +++ b/chapter01/changelog.xml @@ -62,6 +62,7 @@ First a summary, then a detailed log.</para> <listitem><para>bash-3.0-fixes-3.patch</para></listitem> <listitem><para>bash-3.0-avoid_WCONTINUED-1.patch</para></listitem> <listitem><para>glibc-2.3.5-fix_test-1.patch</para></listitem> +<listitem><para>gzip-1.3.5-security_fixes-1.patch</para></listitem> <listitem><para>Hotplug 2004_09_23</para></listitem> <listitem><para>shadow-4.0.7-fix_lastlog-1.patch</para></listitem> <listitem><para>sysklogd-1.4.1-fixes-1.patch</para></listitem> @@ -84,6 +85,8 @@ First a summary, then a detailed log.</para> </itemizedlist> </listitem> +<listitem><para>May 15th, 2005 [matt]: Added gzip security patch.</para></listitem> + <listitem><para>May 15th, 2005 [matt]: Updated to Grub 0.97.</para></listitem> <listitem><para>May 15th, 2005 [matt]: Updated to Libtool 1.5.16.</para></listitem> diff --git a/chapter03/patches.xml b/chapter03/patches.xml index b129ff950..63cc99966 100644 --- a/chapter03/patches.xml +++ b/chapter03/patches.xml @@ -86,6 +86,12 @@ needed to build an LFS system:</para> </varlistentry> <varlistentry> +<term>Gzip Security Patch - 2KB:</term><listitem> +<para><ulink url="&patches-root;gzip-&gzip-version;-security_fixes-1.patch"/></para> +</listitem> +</varlistentry> + +<varlistentry> <term>Inetutils Kernel Headers Patch - 1 KB:</term> <listitem> <para><ulink url="&patches-root;inetutils-&inetutils-version;-kernel_headers-1.patch"/></para> diff --git a/chapter06/gzip.xml b/chapter06/gzip.xml index 05c53ff50..a86d597f0 100644 --- a/chapter06/gzip.xml +++ b/chapter06/gzip.xml @@ -29,6 +29,11 @@ GCC, Glibc, Grep, Make, and Sed</seg></seglistitem> <sect2 role="installation"> <title>Installation of Gzip</title> +<para>Gzip has 2 known security vulnerabilites. The following patch +addresses both of them:</para> + +<screen><userinput>patch -Np1 -i ../gzip-&gzip-version;-security_fixes-1.patch</userinput></screen> + <para>Prepare Gzip for compilation:</para> <screen><userinput>./configure --prefix=/usr</userinput></screen> |