Update Gzip from 1.10 to 1.12 #2616

pmenzel · 2022-04-08T12:13:32Z

Tested on invidia.

1. [Gzip 1.11 summary][1] 2. Gzip 1.12 fixes [zgrep, xzgrep: arbitrary-file-write vulnerability][2]. $ gzip --version | head -1 gzip 1.12 $ echo foo | gzip > "$(printf '|\n;e banner pwned\n#.gz')" $ zgrep -H foo *gz | ;e banner pwned #.gz:foo [1]: https://www.phoronix.com/scan.php?page=news_item&px=Gzip-1.11-Released [2]: https://www.openwall.com/lists/oss-security/2022/04/07/8

donald · 2022-04-08T12:46:25Z

LGTM

buczek@theinternet:~/test$ zgrep -H foo *

                                   
#####  #    # #    # ###### #####  
#    # #    # ##   # #      #    # 
#    # #    # # #  # #####  #    # 
#####  # ## # #  # # #      #    # 
#      ##  ## #   ## #      #    # 
#      #    # #    # ###### #####  
                                   
foo
buczek@theinternet:~/test$ sudo bee update gzip
Password (for buczek) : 
installing /src/mariux/beeroot/packages/gzip-1.12-0.x86_64.bee.tar.bz2 ..
adding gzip.info to /usr/share/info/dir
removing gzip-1.10-0.x86_64 ..
removing gzip.info from /usr/share/info/dir
buczek@theinternet:~/test$ zgrep -H foo *
|
;e banner pwned
#.gz:foo

pmenzel merged commit f619ce7 into master Apr 8, 2022

Update Gzip from 1.10 to 1.12 #2616

Update Gzip from 1.10 to 1.12 #2616

pmenzel commented Apr 8, 2022

donald commented Apr 8, 2022

Update Gzip from 1.10 to 1.12 #2616

Update Gzip from 1.10 to 1.12 #2616

Conversation

pmenzel commented Apr 8, 2022

donald commented Apr 8, 2022