From 039cbaca07a03305d85e915f4047ce04ca801482 Mon Sep 17 00:00:00 2001
From: Karen Arutyunov <karen@codesynthesis.com>
Date: Mon, 29 Aug 2022 20:49:20 +0300
Subject: Release version 1.2.1200+2

Apply patches which fix CVE-2022-37434

Rewrite testscript not to use files

Update TODO file

Update libz/README-DEV file
---
 libz/README-DEV | 11 +++++++++++
 1 file changed, 11 insertions(+)

(limited to 'libz/README-DEV')

diff --git a/libz/README-DEV b/libz/README-DEV
index 42a8ae1..aa7874f 100644
--- a/libz/README-DEV
+++ b/libz/README-DEV
@@ -20,6 +20,17 @@ $ touch zconf.h
 $ patch -p0 <zconf.h.in.patch
 $ patch -p0 <zlib.h.patch
 
+Apply patches to fix CVE-2022-37434:
+
+$ rm inflate.c
+$ cp ../../upstream/inflate.c .
+$ patch -p0 <CVE-2022-37434-eff308a.patch
+$ patch -p0 <CVE-2022-37434-1eb7682.patch
+
+@@ TMP Remove the CVE-2022-37434-* patches, the above notes, and turn libz.c
+   back into symlink to ../../upstream/inflate.c when upgrade to upstream
+   version > 1.2.12.
+
 Note that there is no LICENSE/COPYING file in the upstream project as the
 copyright notice is provided at the end of its README file. We extract it into
 a separate (installable) LICENSE file.
-- 
cgit v1.1