From f4aa3608f139342d194c70c1aefcd7118ef44ff8 Mon Sep 17 00:00:00 2001
From: Matthew Burgess <matthew@linuxfromscratch.org>
Date: Sun, 15 May 2005 12:56:43 +0000
Subject: [PATCH] Add gzip security patch

git-svn-id: http://svn.linuxfromscratch.org/LFS/trunk/BOOK@5367 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689
---
 chapter01/changelog.xml | 3 +++
 chapter03/patches.xml   | 6 ++++++
 chapter06/gzip.xml      | 5 +++++
 3 files changed, 14 insertions(+)

diff --git a/chapter01/changelog.xml b/chapter01/changelog.xml
index d5f18a309..a796e04c0 100644
--- a/chapter01/changelog.xml
+++ b/chapter01/changelog.xml
@@ -62,6 +62,7 @@ First a summary, then a detailed log.</para>
 <listitem><para>bash-3.0-fixes-3.patch</para></listitem>
 <listitem><para>bash-3.0-avoid_WCONTINUED-1.patch</para></listitem>
 <listitem><para>glibc-2.3.5-fix_test-1.patch</para></listitem>
+<listitem><para>gzip-1.3.5-security_fixes-1.patch</para></listitem>
 <listitem><para>Hotplug 2004_09_23</para></listitem>
 <listitem><para>shadow-4.0.7-fix_lastlog-1.patch</para></listitem>
 <listitem><para>sysklogd-1.4.1-fixes-1.patch</para></listitem>
@@ -84,6 +85,8 @@ First a summary, then a detailed log.</para>
 </itemizedlist>
 </listitem>
 
+<listitem><para>May 15th, 2005 [matt]: Added gzip security patch.</para></listitem>
+
 <listitem><para>May 15th, 2005 [matt]: Updated to Grub 0.97.</para></listitem>
 
 <listitem><para>May 15th, 2005 [matt]: Updated to Libtool 1.5.16.</para></listitem>
diff --git a/chapter03/patches.xml b/chapter03/patches.xml
index b129ff950..63cc99966 100644
--- a/chapter03/patches.xml
+++ b/chapter03/patches.xml
@@ -85,6 +85,12 @@ needed to build an LFS system:</para>
 </listitem>
 </varlistentry>
 
+<varlistentry>
+<term>Gzip Security Patch - 2KB:</term><listitem>
+<para><ulink url="&patches-root;gzip-&gzip-version;-security_fixes-1.patch"/></para>
+</listitem>
+</varlistentry>
+
 <varlistentry>
 <term>Inetutils Kernel Headers Patch - 1 KB:</term>
 <listitem>
diff --git a/chapter06/gzip.xml b/chapter06/gzip.xml
index 05c53ff50..a86d597f0 100644
--- a/chapter06/gzip.xml
+++ b/chapter06/gzip.xml
@@ -29,6 +29,11 @@ GCC, Glibc, Grep, Make, and Sed</seg></seglistitem>
 <sect2 role="installation">
 <title>Installation of Gzip</title>
 
+<para>Gzip has 2 known security vulnerabilites.  The following patch
+addresses both of them:</para>
+
+<screen><userinput>patch -Np1 -i ../gzip-&gzip-version;-security_fixes-1.patch</userinput></screen>
+
 <para>Prepare Gzip for compilation:</para>
 
 <screen><userinput>./configure --prefix=/usr</userinput></screen>