David Jensen wrote these words on 11/26/10 09:51 CST: > From the 'Arch Linux' PKGBUILD: > > rm -rf jpeg libpng zlib jasper expat > ./configure --prefix=/usr --enable-dynamic --with-ijs \ > --with-jbig2dec --with-omni --with-x --with-drivers=ALL \ > --with-fontpath=/usr/share/fonts/Type1:/usr/share/fonts \ > --disable-compile-inits # needed for linking with system-zlib > > note the last line.
Interesting. I followed it a bit down the source tree and setting that flag then sets COMPILE_INITS=0. Here is what is said about that in the base/gs.mak build file: # COMPILE_INITS - normally 1; compiles the PostScript language # initialization files (gs_init.ps et al) and Resource/* tree # into the executable, eliminating the need for these files # to be present at run time. Files will be placed in the # %rom% device. Seems to me it would affect more than just zlib. But I don't know the goofy Ghostscript build process well enough to determine. I'll let Ken mess with it. The way I've done it works, and it removes the zlib-1.2.3 vulnerability. Thanks for the input David. -- Randy rmlscsi: [bogomips 1003.28] [GNU ld version 2.16.1] [gcc (GCC) 4.0.3] [GNU C Library stable release version 2.3.6] [Linux 2.6.14.3 i686] 10:25:00 up 24 days, 17:19, 1 user, load average: 0.00, 0.00, 0.00 -- http://linuxfromscratch.org/mailman/listinfo/blfs-book FAQ: http://www.linuxfromscratch.org/blfs/faq.html Unsubscribe: See the above information page
