source: chapter06/zlib.xml@ e1dc9c5

6.1.1
Last change on this file since e1dc9c5 was 624e062, checked in by Archaic <archaic@…>, 19 years ago

Added security patch for zlib. (merged from trunk r6414)

git-svn-id: http://svn.linuxfromscratch.org/LFS/branches/6.1/BOOK@6416 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689

  • Property mode set to 100644
File size: 3.3 KB
RevLine 
[673b0d8]1<?xml version="1.0" encoding="ISO-8859-1"?>
[1770019]2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN" "http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd" [
[673b0d8]3 <!ENTITY % general-entities SYSTEM "../general.ent">
4 %general-entities;
5]>
[81fd230]6<sect1 id="ch-system-zlib" role="wrap">
[673b0d8]7<title>Zlib-&zlib-version;</title>
8<?dbhtml filename="zlib.html"?>
[24380c7]9
[673b0d8]10<indexterm zone="ch-system-zlib"><primary sortas="a-Zlib">Zlib</primary></indexterm>
11
[a001133]12<sect2 role="package"><title/>
[90b56f5]13<para>The Zlib package contains compression and decompression routines used by
[81fd230]14some programs.</para>
[5888299]15
[a001133]16<segmentedlist>
17<segtitle>&buildtime;</segtitle>
18<segtitle>&diskspace;</segtitle>
[fc1024a]19<seglistitem><seg>0.1 SBU</seg><seg>2.7 MB</seg></seglistitem>
[a001133]20</segmentedlist>
[673b0d8]21
[81fd230]22<segmentedlist>
[45992ae]23<segtitle>&dependencies;</segtitle>
[81fd230]24<seglistitem><seg>Binutils, Coreutils, GCC, Glibc, Make, and Sed</seg></seglistitem>
25</segmentedlist>
[a001133]26</sect2>
[24380c7]27
[a001133]28<sect2 role="installation">
[73aedd1d]29<title>Installation of Zlib</title>
30
[624e062]31<para>Zlib has a buffer overflow vulnerability that can lead to a Denial of
32Service attack. The following patch fixes the problem:</para>
33
34<screen><userinput>patch -Np1 -i ../zlib-&zlib-version;-security_fix-1.patch</userinput></screen>
35
[81fd230]36<note><para>Zlib is known to build its shared library incorrectly if
37<envar>CFLAGS</envar> is specified in the environment. If using a
38specified <envar>CFLAGS</envar>
39variable, be sure to add the <parameter>-fPIC</parameter> directive to
40the <envar>CFLAGS</envar> variable for the duration of the
41configure command below, then remove it afterwards.</para></note>
42
[4248b0e]43<para>Prepare Zlib for compilation:</para>
44
[5091251]45<screen><userinput>./configure --prefix=/usr --shared --libdir=/lib</userinput></screen>
[4248b0e]46
[73aedd1d]47<para>Compile the package:</para>
48
49<screen><userinput>make</userinput></screen>
50
[673b0d8]51<para>To test the results, issue:
[8a5f906]52<userinput>make check</userinput>.</para>
[dfddb12]53
54<para>Install the shared library:</para>
[73aedd1d]55
56<screen><userinput>make install</userinput></screen>
57
[373a708]58<para>The previous command installed a <filename
59class="extension">.so</filename> file in <filename
60class="directory">/lib</filename>. We will remove it and relink it into
61<filename class="directory">/usr/lib</filename>:</para>
[7111666]62
63<screen><userinput>rm /lib/libz.so
64ln -sf ../../lib/libz.so.&zlib-version; /usr/lib/libz.so</userinput></screen>
65
[81fd230]66<para>Build the static library:</para>
[8ad7980]67
[73aedd1d]68<screen><userinput>make clean
69./configure --prefix=/usr
70make</userinput></screen>
71
[81fd230]72<para>To test the results again, issue:
[8a5f906]73<userinput>make check</userinput>.</para>
[73aedd1d]74
[84e4cae]75<para>Install the static library:</para>
[73aedd1d]76
77<screen><userinput>make install</userinput></screen>
78
[81fd230]79<para>Fix the permissions on the static library:</para>
[84e4cae]80
81<screen><userinput>chmod 644 /usr/lib/libz.a</userinput></screen>
82
[73aedd1d]83</sect2>
[24380c7]84
[5888299]85
[c6cb3aa]86<sect2 id="contents-zlib" role="content"><title>Contents of Zlib</title>
[673b0d8]87
[81fd230]88<segmentedlist>
89<segtitle>Installed libraries</segtitle>
[373a708]90<seglistitem><seg>libz.[a,so]</seg></seglistitem>
[81fd230]91</segmentedlist>
92
93<variablelist><bridgehead renderas="sect3">Short Descriptions</bridgehead>
94<?dbfo list-presentation="list"?>
[8f97096]95<?dbhtml list-presentation="table"?>
[81fd230]96
97<varlistentry id="libz">
98<term><filename class="libraryfile">libz</filename></term>
99<listitem>
100<para>Contains compression and un-compression
101functions used by some programs</para>
102<indexterm zone="ch-system-zlib libz"><primary sortas="c-libz">libz</primary></indexterm>
103</listitem>
104</varlistentry>
105</variablelist>
[673b0d8]106
107</sect2>
108
109</sect1>
[81fd230]110
Note: See TracBrowser for help on using the repository browser.