[Lunar-commits] CVS: moonbase/archive/zip BUILD, 1.1.1.1, 1.2 DETAILS, 1.3, 1.4

Florin Braescu florin at lunar-linux.org
Sat Feb 12 14:00:28 UTC 2005


Update of /var/cvs/lunar/moonbase/archive/zip
In directory espresso.foo-projects.org:/tmp/cvs-serv15485/archive/zip

Modified Files:
	BUILD DETAILS 
Log Message:
add a security patch to prevent a buffer overflow.

Index: BUILD
===================================================================
RCS file: /var/cvs/lunar/moonbase/archive/zip/BUILD,v
retrieving revision 1.1.1.1
retrieving revision 1.2
diff -u -d -r1.1.1.1 -r1.2
--- BUILD	21 Aug 2002 00:55:09 -0000	1.1.1.1
+++ BUILD	12 Feb 2005 14:00:25 -0000	1.2
@@ -1,5 +1,6 @@
 (
 
+  patch_it $SOURCE_CACHE/$SOURCE2 1 &&
   sedit "s/MANDIR = \$(prefix)\/man/MANDIR = \$(prefix)\/share\/man/" unix/Makefile
   make  -f unix/Makefile generic  &&
   prepare_install                 &&

Index: DETAILS
===================================================================
RCS file: /var/cvs/lunar/moonbase/archive/zip/DETAILS,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -d -r1.3 -r1.4
--- DETAILS	5 Oct 2004 09:29:51 -0000	1.3
+++ DETAILS	12 Feb 2005 14:00:25 -0000	1.4
@@ -1,15 +1,18 @@
            MODULE=zip
          VERSION=2.3
           SOURCE=${MODULE}23.tar.gz
+         SOURCE2=$MODULE-$VERSION-CAN.patch.bz2
    SOURCE_URL[0]=ftp://sunsite.cnlab-switch.ch/mirror/infozip/src/
    SOURCE_URL[1]=ftp://ftp.info-zip.org/pub/infozip/src/
-      SOURCE_VFY=md5:5206a99541f3b0ab90f1baa167392c4f
+     SOURCE2_URL=$PATCH_URL/
+      SOURCE_VFY=sha1:0600c93218e6acf1be75dd79da4244eabc8e16cf
+     SOURCE2_VFY=sha1:4a16cccae21eaacf52c6242378c11fa283a595ff
         WEB_SITE=ftp://ftp.freesoftware.com/pub/infozip/Zip.html
          ENTERED=20010922
          UPDATED=20020422
            SHORT="zip is a PKWARE compatible compressor."
+
 cat << EOF
-zip
 Info-ZIP's purpose is to provide free, portable, high-quality versions
 of the Zip and UnZip compressor-archiver utilities that are compatible
 with the DOS-based PKZIP by PKWARE, Inc.



More information about the Lunar-commits mailing list