Changeset 00f4d68

Timestamp:

11/10/2010 10:26:02 PM (14 years ago)

Author:

Matthew Burgess <matthew@…>

Branches:

10.0, 10.0-rc1, 10.1, 10.1-rc1, 11.0, 11.0-rc1, 11.0-rc2, 11.0-rc3, 11.1, 11.1-rc1, 11.2, 11.2-rc1, 11.3, 11.3-rc1, 12.0, 12.0-rc1, 12.1, 12.1-rc1, 6.8, 7.0, 7.1, 7.2, 7.3, 7.4, 7.5, 7.5-systemd, 7.6, 7.6-systemd, 7.7, 7.7-systemd, 7.8, 7.8-systemd, 7.9, 7.9-systemd, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, arm, bdubbs/gcc13, ml-11.0, multilib, renodr/libudev-from-systemd, s6-init, trunk, xry111/arm64, xry111/arm64-12.0, xry111/clfs-ng, xry111/lfs-next, xry111/loongarch, xry111/loongarch-12.0, xry111/loongarch-12.1, xry111/mips64el, xry111/pip3, xry111/rust-wip-20221008, xry111/update-glibc

Children:

30852f21

Parents:

0e215e4

Message:

Add security fixes for Glibc. Fixes #2790.

git-svn-id: ​http://svn.linuxfromscratch.org/LFS/trunk/BOOK@9414 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689

Files:

• chapter01/changelog.xml (modified) (1 diff)
• chapter01/whatsnew.xml (modified) (2 diffs)
• chapter03/patches.xml (modified) (1 diff)
• chapter06/glibc.xml (modified) (1 diff)
• patches.ent (modified) (1 diff)

chapter01/changelog.xml

@@ -41 +41 @@
       <itemizedlist>
         <listitem>
+          <para>[matthew] Add security fixes for Glibc. Fixes
+          <ulink url="&lfs-ticket-root;2790">#2790</ulink>.</para>
+        </listitem>
+        <listitem>
           <para>[matthew] Upgrade to Man-Pages-3.30. Fixes
           <ulink url="&lfs-ticket-root;2788">#2788</ulink>.</para>

chapter01/whatsnew.xml

@@ -225 +225 @@
 
     <listitem>
+      <para>bzip2-1.0.6-install_docs-1.patch</para>
+    </listitem>
+
+    <listitem>
       <para>coreutils-8.6-i18n-1.patch</para>
     </listitem>
@@ -233 +237 @@
 
     <listitem>
+      <para>glibc-2.12.1-ld_audit_fix-1.patch</para>
+    </listitem>
+
+    <listitem>
+      <para>glibc-2.12.1-origin_fix-1.patch</para>
+    </listitem>
+
+    <listitem>
       <para>perl-5.12.2-libc-1.patch</para>
-    </listitem>
-
-    <listitem>
-      <para>bzip2-1.0.6-install_docs-1.patch</para>
     </listitem>
 

chapter03/patches.xml

@@ -92 +92 @@
 
     <varlistentry>
+      <term>Glibc LD Audit Patch - <token>&glibc-ldaudit-patch-size;</token>:</term>
+      <listitem>
+        <para>Download: <ulink url="&patches-root;&glibc-ldaudit-patch;"/></para>
+        <para>MD5 sum: <literal>&glibc-ldaudit-patch-md5;</literal></para>
+      </listitem>
+    </varlistentry>
+
+    <varlistentry>
       <term>Glibc Makefile Fix Patch - <token>&glibc-makefile_fix-patch-size;</token>:</term>
       <listitem>
         <para>Download: <ulink url="&patches-root;&glibc-makefile_fix-patch;"/></para>
         <para>MD5 sum: <literal>&glibc-makefile_fix-patch-md5;</literal></para>
+      </listitem>
+    </varlistentry>
+
+    <varlistentry>
+      <term>Glibc Origin Patch - <token>&glibc-origin-patch-size;</token>:</term>
+      <listitem>
+        <para>Download: <ulink url="&patches-root;&glibc-origin-patch;"/></para>
+        <para>MD5 sum: <literal>&glibc-origin-patch-md5;</literal></para>
       </listitem>
     </varlistentry>

chapter06/glibc.xml

@@ -101 +101 @@
 
 <screen><userinput remap="pre">patch -Np1 -i ../&glibc-makefile_fix-patch;</userinput></screen>
+
+    <para>Apply 2 patches that fix security vulnerabilities in this version of Glibc:</para>
+
+<screen><userinput remap="pre">patch -Np1 -i ../&glibc-ldaudit-patch;
+patch -Np1 -i ../&glibc-origin-patch;</userinput></screen>
 
     <para>The Glibc documentation recommends building Glibc outside of the source

patches.ent

@@ -50 +50 @@
 <!ENTITY glibc-gcc_fix-patch-size "2.5 KB">
 
+<!ENTITY glibc-ldaudit-patch "glibc-&glibc-version;-ld_audit_fix-1.patch">
+<!ENTITY glibc-ldaudit-patch-md5 "10e1bae28413ec9086f63abba34a1e2e">
+<!ENTITY glibc-ldaudit-patch-size "7.9 KB">
+
 <!ENTITY glibc-makefile_fix-patch "glibc-&glibc-version;-makefile_fix-1.patch">
 <!ENTITY glibc-makefile_fix-patch-md5 "0ef634ac78e582f45d0e7643bfda7505">
 <!ENTITY glibc-makefile_fix-patch-size "1 KB">
+
+<!ENTITY glibc-origin-patch "glibc-&glibc-version;-origin_fix-1.patch">
+<!ENTITY glibc-origin-patch-md5 "aa81dd9594648707e86c764ce8b2e1c8">
+<!ENTITY glibc-origin-patch-size "2.9 KB">