Subject: Re: NetBSD Security Advisory 2003-004: Format string
To: NetBSD Security Officer <security-officer@netbsd.org>
From: Paul Hoffman <phoffman@proper.com>
List: tech-security
Date: 03/26/2003 14:58:37
At 1:54 PM -0500 3/26/03, NetBSD Security Officer wrote:
>* NetBSD 1.6:
>. . .
>
>	Alternatively, apply the following patch (with potential offset
>	differences):
> 
>	ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2003-004-zlib-1.6.patch

That works.

>
>	To patch, re-build and re-install zlib:
>
>		# cd src/lib/libz
>		# patch < /path/to/SA2003-004-zlib-1.6.patch

That doesn't. The patch wants gzio.c, but it doesn't exist in the directory:
. . .
-rw-r--r--   1 root  wheel  16110 Mar 11  2002 example.c
-rw-r--r--   1 root  wheel   2186 Oct 26  1999 gzio_compat.c
-rw-r--r--   1 root  wheel  12502 Mar 11  2002 infblock.c
. . .

FWIW, the patch doesn't apply to gzio_comapt.c.

So, how do those of us who still can't CVS apply this patch to 1.6?