Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
gzip: Update version from 1.10 to 1.12
1.  [Gzip 1.11 summary][1]
2.  Gzip 1.12 fixes [zgrep, xzgrep: arbitrary-file-write vulnerability][2].

        $ gzip --version | head -1
        gzip 1.12
        $ echo foo | gzip > "$(printf '|\n;e banner pwned\n#.gz')"
        $ zgrep -H foo *gz
        |
        ;e banner pwned
        #.gz:foo

[1]: https://www.phoronix.com/scan.php?page=news_item&px=Gzip-1.11-Released
[2]: https://www.openwall.com/lists/oss-security/2022/04/07/8
  • Loading branch information
pmenzel committed Apr 8, 2022
1 parent 40a50db commit 9e2b17d
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions gzip.be0
@@ -1,8 +1,9 @@
#!/usr/bin/env beesh

# BEE_VERSION gzip-1.10-0
# BEE_VERSION gzip-1.12-0

SRCURL[0]="https://ftp.gnu.org/pub/gnu/gzip/gzip-${PKGVERSION}.tar.xz"
# SRCURL[0]="https://ftp.gnu.org/pub/gnu/gzip/gzip-${PKGVERSION}.tar.xz"
SRCURL[0]="https://beehive.molgen.mpg.de/9608e4ac5f061b2a6479dc44e917a5db/gzip-1.12.tar.xz"

# PATCHURL+=()

Expand Down

0 comments on commit 9e2b17d

Please sign in to comment.