From 9e2b17d7057958201276caf6011b4751ee053b2a Mon Sep 17 00:00:00 2001 From: Paul Menzel Date: Fri, 8 Apr 2022 14:05:44 +0200 Subject: [PATCH] gzip: Update version from 1.10 to 1.12 1. [Gzip 1.11 summary][1] 2. Gzip 1.12 fixes [zgrep, xzgrep: arbitrary-file-write vulnerability][2]. $ gzip --version | head -1 gzip 1.12 $ echo foo | gzip > "$(printf '|\n;e banner pwned\n#.gz')" $ zgrep -H foo *gz | ;e banner pwned #.gz:foo [1]: https://www.phoronix.com/scan.php?page=news_item&px=Gzip-1.11-Released [2]: https://www.openwall.com/lists/oss-security/2022/04/07/8 --- gzip.be0 | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/gzip.be0 b/gzip.be0 index 7e2020fe6..3ca92eb0c 100755 --- a/gzip.be0 +++ b/gzip.be0 @@ -1,8 +1,9 @@ #!/usr/bin/env beesh -# BEE_VERSION gzip-1.10-0 +# BEE_VERSION gzip-1.12-0 -SRCURL[0]="https://ftp.gnu.org/pub/gnu/gzip/gzip-${PKGVERSION}.tar.xz" +# SRCURL[0]="https://ftp.gnu.org/pub/gnu/gzip/gzip-${PKGVERSION}.tar.xz" +SRCURL[0]="https://beehive.molgen.mpg.de/9608e4ac5f061b2a6479dc44e917a5db/gzip-1.12.tar.xz" # PATCHURL+=()