Subject: Re: NetBSD Security Advisory 2003-004: Format string
To: NetBSD Security Officer <security-officer@netbsd.org>
From: Paul Hoffman <phoffman@proper.com>
List: tech-security
Date: 03/26/2003 14:58:37
At 1:54 PM -0500 3/26/03, NetBSD Security Officer wrote:
>* NetBSD 1.6:
>. . .
>
> Alternatively, apply the following patch (with potential offset
> differences):
>
> ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2003-004-zlib-1.6.patch
That works.
>
> To patch, re-build and re-install zlib:
>
> # cd src/lib/libz
> # patch < /path/to/SA2003-004-zlib-1.6.patch
That doesn't. The patch wants gzio.c, but it doesn't exist in the directory:
. . .
-rw-r--r-- 1 root wheel 16110 Mar 11 2002 example.c
-rw-r--r-- 1 root wheel 2186 Oct 26 1999 gzio_compat.c
-rw-r--r-- 1 root wheel 12502 Mar 11 2002 infblock.c
. . .
FWIW, the patch doesn't apply to gzio_comapt.c.
So, how do those of us who still can't CVS apply this patch to 1.6?