rpms/gzip
7
0
Fork 0
Code Issues Pull Requests Releases Activity

- fix too strict uncompress function

Browse Source
This commit is contained in:
Ivana Varekova 2006-11-22 08:51:50 +00:00
parent 15a5b8fc5e
commit 51f58cb6ac
2 changed files with 17 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
gzip-1.3.5-cve-2006-4337_len.patch Normal file
View File

@ -0,0 +1,11 @@
--- gzip-1.3.5/unlzh.c.len 2006-11-22 09:35:10.000000000 +0100
+++ gzip-1.3.5/unlzh.c 2006-11-22 09:38:52.000000000 +0100
@@ -199,7 +199,7 @@
}
*p = ch;
}
- start[len] = nextcode;
+ start[len] = start[len] + weight[len];
}
}

7
gzip.spec
View File

@ -1,7 +1,7 @@
Summary: The GNU data compression program. Summary: The GNU data compression program.
Name: gzip Name: gzip
Version: 1.3.5 Version: 1.3.5
Release: 10 Release: 11%{?dist}
License: GPL License: GPL
Group: Applications/File Group: Applications/File
Source: ftp://alpha.gnu.org/gnu/gzip/gzip-%{version}.tar.gz Source: ftp://alpha.gnu.org/gnu/gzip/gzip-%{version}.tar.gz
@ -20,6 +20,7 @@ Patch12: gzip-1.3.5-cve-2006-4335.patch
Patch13: gzip-1.3.5-cve-2006-4336.patch Patch13: gzip-1.3.5-cve-2006-4336.patch
Patch14: gzip-1.3.5-cve-2006-4338.patch Patch14: gzip-1.3.5-cve-2006-4338.patch
Patch15: gzip-1.3.5-cve-2006-4337.patch Patch15: gzip-1.3.5-cve-2006-4337.patch
Patch16: gzip-1.3.5-cve-2006-4337_len.patch
URL: http://www.gzip.org/ URL: http://www.gzip.org/
Prereq: /sbin/install-info Prereq: /sbin/install-info
Requires: mktemp less Requires: mktemp less
@ -50,6 +51,7 @@ very commonly used data compression program.
%patch13 -p1 -b .4336 %patch13 -p1 -b .4336
%patch14 -p1 -b .4338 %patch14 -p1 -b .4338
%patch15 -p1 -b .4337 %patch15 -p1 -b .4337
%patch16 -p1 -b .4337l
%build %build
export DEFS="NO_ASM" export DEFS="NO_ASM"
@ -95,6 +97,9 @@ fi
%{_infodir}/gzip.info* %{_infodir}/gzip.info*
%changelog %changelog
* Wed Nov 22 2006 Ivana Varekova <varekova@redhat.com> - 1.3.5-11
- fix too strict uncompress function
* Mon Oct 23 2006 Ivana Varekova <varekova@redhat.com> - 1.3.5-10 * Mon Oct 23 2006 Ivana Varekova <varekova@redhat.com> - 1.3.5-10
- fix package description (#208924) - fix package description (#208924)