fix bug 156269 - CAN-2005-1228 directory traversal bug

This commit is contained in:
Ivana Varekova 2005-04-29 13:15:42 +00:00
parent 83827e1fa9
commit f1966122e7

View File

@ -1,7 +1,7 @@
Summary: The GNU data compression program. Summary: The GNU data compression program.
Name: gzip Name: gzip
Version: 1.3.5 Version: 1.3.5
Release: 4 Release: 5
License: GPL License: GPL
Group: Applications/File Group: Applications/File
Source: ftp://alpha.gnu.org/gnu/gzip/gzip-%{version}.tar.gz Source: ftp://alpha.gnu.org/gnu/gzip/gzip-%{version}.tar.gz
@ -14,6 +14,7 @@ Patch6: gzip-1.3.3-window-size.patch
Patch7: gzip-1.3.3-addsuffix.patch Patch7: gzip-1.3.3-addsuffix.patch
Patch8: gzip-1.3.5-zgrep-sed.patch Patch8: gzip-1.3.5-zgrep-sed.patch
Patch9: gzip-1.3.5-gzip-perm.patch Patch9: gzip-1.3.5-gzip-perm.patch
Patch10: gzip-1.3.5-gunzip-dir.patch
URL: http://www.gzip.org/ URL: http://www.gzip.org/
Prereq: /sbin/install-info Prereq: /sbin/install-info
Requires: mktemp less Requires: mktemp less
@ -37,6 +38,7 @@ very commonly used data compression program.
%patch7 -p1 -b .addsuffix %patch7 -p1 -b .addsuffix
%patch8 -p0 -b .sed %patch8 -p0 -b .sed
%patch9 -p1 -b .perm %patch9 -p1 -b .perm
%patch10 -p1 -b .dir
%build %build
export DEFS="NO_ASM" export DEFS="NO_ASM"
@ -82,6 +84,10 @@ fi
%{_infodir}/gzip.info* %{_infodir}/gzip.info*
%changelog %changelog
* Fri Apr 29 2005 Ivana Varekova <varekova@redhat.com> 1.3.5-5
- fix bug 156269 - CAN-2005-1228 directory traversal bug
(using the patch from Ulf Harnhammar)
* Tue Apr 26 2005 Ivana Varekova <varekova@redhat.com> 1.3.5-4 * Tue Apr 26 2005 Ivana Varekova <varekova@redhat.com> 1.3.5-4
- fix bug 155746 - CAN-2005-0988 Race condition in gzip (patch9) - fix bug 155746 - CAN-2005-0988 Race condition in gzip (patch9)