gzip security update

[jdow]

From: "Kevin J. Cummings" <cummings at kjchome.homeip.net>

> jdow wrote:
>> Does anybody other than me think it is a little peculiar that there
>> was a listed update for gzip today that has an earlier version number
>> than the one from the second?
>> 
>> gzip-1.3.5-7.1.fc5.i386.rpm    October 2
>> gzip-1.3.5-7.fc5.i386.rpm      October 10
>> 
>> Did somebody screw up the version numbering?
>> {^_^}
> 
> Actually, I'm going to reply to my reply before I receive it (ignore it,
> it was tar that had the new epoch, not gzip).
> 
> I looked back at both the 10/2 and todays package announcements.  Both
> seem to involve changes made on 09/20/06, and the 7.1.fc5 release is the
> more up-to-date one.  In fact, after a quick "yum search gzip", I can't
> find the 7.fc5 release in any repository (only the 7.1.fc5 version).
> And since the changelog for 7.fc5 is a subset of the 7.1.fc5 release, I
> agree, somebody musta screwed up somewhere.....

There is a reason I am a reactionary and perform manual updates from
the commandline and WATCH what it is doing. When gzip did not come down
I got suspicious and looked.

{^_-}   Joanne, the old curmudgeonette.