diff --git a/chapter01/changelog.xml b/chapter01/changelog.xml index 779a4e8c8..500d0c72a 100644 --- a/chapter01/changelog.xml +++ b/chapter01/changelog.xml @@ -70,6 +70,7 @@ First a summary, then a detailed log. tar-1.15.1-sparse_fix-1.patch util-linux-2.12p-cramfs-1.patch vim-6.0-security_fix-1.patch +zlib-1.2.2-security_fix-1.patch; @@ -87,6 +88,9 @@ First a summary, then a detailed log. +July 6th, 2005 [archaic]: Added security patch for zlib. + + July 6th, 2005 [matt]: Several typo corrections, as suggested by Bernard Leak. diff --git a/chapter03/patches.xml b/chapter03/patches.xml index 2885f0cc5..99040149f 100644 --- a/chapter03/patches.xml +++ b/chapter03/patches.xml @@ -159,6 +159,12 @@ needed to build an LFS system: + +Zlib Security Patch - 1KB: + + + + In addition to the above required patches, there exist a number of diff --git a/chapter06/zlib.xml b/chapter06/zlib.xml index 55e0a9c46..701554633 100644 --- a/chapter06/zlib.xml +++ b/chapter06/zlib.xml @@ -28,6 +28,11 @@ some programs. Installation of Zlib +Zlib has a buffer overflow vulnerability that can lead to a Denial of +Service attack. The following patch fixes the problem: + +patch -Np1 -i ../zlib-&zlib-version;-security_fix-1.patch + Zlib is known to build its shared library incorrectly if CFLAGS is specified in the environment. If using a specified CFLAGS