[Kolab-devel] Kolab server 2.1.0 & bzip2 bug

[Gelpi Andrea]

Hi,
	during clamav upgrade on debian sarge I noted the following line messages

checking for CVE-2008-1372... bugged
configure: WARNING: ****** bzip2 libraries are affected by the CVE-2008-1372 bug
configure: WARNING: ****** We strongly suggest you to update to bzip2 1.0.5.
configure: WARNING: ****** Please do not report stability problems to the ClamAV developers!

I solved with these steps:

a) cd /kolab/RPM/SRC
b) Download bzip2-1.0.5-20080318.src.rpm from openpkg site
c) /kolab/bin/openpkg rpm --rebuild bzip2-1.0.5-20080318.src.rpm
d) /kolab/bin/openpkg rpm -Uvh ../PKG/bzip2-1.0.5-20080318.ix86-debian-kolab.rpm

I suggest to add it as a security patch

Regards,
-- 
ing. Andrea Gelpi
***************************************************
La Terra non la abbiamo ereditata dai nostri avi,
ma la abbiamo presa in prestito dai nostri bambini.
***************************************************
We do not inherit the Earth from our parents,
but borrow it from our children.
***************************************************