[Lunar-commits] r15626 - moonbase/trunk/archive/zlib

[Jaime Buffery]

Author: nestu
Date: 2005-07-07 10:05:46 +0000 (Thu, 07 Jul 2005)
New Revision: 15626

Modified:
   moonbase/trunk/archive/zlib/BUILD
   moonbase/trunk/archive/zlib/DETAILS
Log:
Buffer overflow fix. Patch from ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-05%3A16/zlib.patch . Vulnerability reference: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2096

Modified: moonbase/trunk/archive/zlib/BUILD
===================================================================
--- moonbase/trunk/archive/zlib/BUILD	2005-07-07 07:08:44 UTC (rev 15625)
+++ moonbase/trunk/archive/zlib/BUILD	2005-07-07 10:05:46 UTC (rev 15626)
@@ -1,6 +1,7 @@
 (
 
-  patch_it $SOURCE_CACHE/$SOURCE2 1 &&
+  patch_it ${SOURCE2} 1 &&
+  patch_it ${SOURCE3} 1 &&
 
   ./configure  --prefix=/usr  &&
   make                        &&

Modified: moonbase/trunk/archive/zlib/DETAILS
===================================================================
--- moonbase/trunk/archive/zlib/DETAILS	2005-07-07 07:08:44 UTC (rev 15625)
+++ moonbase/trunk/archive/zlib/DETAILS	2005-07-07 10:05:46 UTC (rev 15626)
@@ -2,14 +2,17 @@
          VERSION=1.2.2
           SOURCE=$MODULE-$VERSION.tar.gz
          SOURCE2=$MODULE-1.2.1-alt-inflate.patch.bz2
+         SOURCE3=zlib-buffer-overflow-fix.patch
    SOURCE_URL[0]=http://www.gzip.org/$MODULE/
    SOURCE_URL[1]=http://www.winimage.com/zLibDll/
   SOURCE2_URL=$PATCH_URL/
+  SOURCE3_URL=$PATCH_URL/
       SOURCE_VFY=sha1:e6ec67108bfd1f321eb4f1bd192b648725219595
      SOURCE2_VFY=sha1:00f53af5c8602f5040bf76e54fd24dcd94f63ed6
+     SOURCE3_VFY=sha1:cf3a6112108b9e5fe6c18797811b601e25dd84dd
         WEB_SITE=http://www.gzip.org/$MODULE
          ENTERED=20010922
-         UPDATED=20041012
+         UPDATED=20050707
            SHORT="zlib is a lossless data compression library."
 
 cat << EOF