Changeset 0fc5bfd7

Timestamp:

03/08/2022 09:56:17 PM (2 years ago)

Author:

Douglas R. Reno <renodr@…>

Branches:

11.2, 11.3, 12.0, 12.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, xry111/llvm18, xry111/soup3, xry111/xf86-video-removal

Children:

0075912

Parents:

c4938ccc

Message:

Package updates, build fix, and security patch

Update to thunderbird-91.6.2
Update to curl-7.82.0
Patch Seamonkey against CVE-2022-26485
Fix building inkscape with poppler-22.03.0

Files:

• introduction/welcome/changelog.xml (modified) (1 diff)
• networking/netlibs/curl.xml (modified) (2 diffs)
• packages.ent (modified) (2 diffs)
• xsoft/graphweb/seamonkey.xml (modified) (2 diffs)
• xsoft/other/inkscape.xml (modified) (1 diff)
• xsoft/other/thunderbird.xml (modified) (1 diff)

introduction/welcome/changelog.xml

@@ -46 +46 @@
       <itemizedlist>
         <listitem>
+          <para>[renodr] - Fix CVE-2022-26485 in Seamonkey. Fixes
+          <ulink url="&blfs-ticket-root;16202">#16202</ulink>.</para>
+        </listitem>
+        <listitem>
+          <para>[renodr] - Fix building Inkscape with poppler-22.03.0. Fixes
+          <ulink url="&blfs-ticket-root;16209">#16209</ulink>.</para>
+        </listitem>
+        <listitem>
+          <para>[renodr] - Update to curl-7.82.0. Fixes
+          <ulink url="&blfs-ticket-root;16198">#16198</ulink>.</para>
+        </listitem>
+        <listitem>
+          <para>[renodr] - Update to thunderbird-91.6.2 (Security Update).
+          Fixes <ulink url="&blfs-ticket-root;16201">#16201</ulink>.</para>
+        </listitem>
+        <listitem>
           <para>[bdubbs] - Update to gpgme-1.17.1.  Fixes
           <ulink url="&blfs-ticket-root;16204">#16204</ulink>.</para>

networking/netlibs/curl.xml

@@ -7 +7 @@
   <!ENTITY curl-download-http "https://curl.se/download/curl-&curl-version;.tar.xz">
   <!ENTITY curl-download-ftp  " ">
-  <!ENTITY curl-md5sum        "41954fa09f879fccb57d88be23fe8606">
-  <!ENTITY curl-size          "2.4 MB">
-  <!ENTITY curl-buildsize     "100 MB (add 20 MB for tests)">
-  <!ENTITY curl-time          "0.2 SBU (with parallelism=4; add 19 SBU for tests)">
+  <!ENTITY curl-md5sum        "ce05eb61ef7c398feb7dbe23122d0bd9">
+  <!ENTITY curl-size          "2.3 MB">
+  <!ENTITY curl-buildsize     "105 MB (add 28 MB for tests)">
+  <!ENTITY curl-time          "0.3 SBU (with parallelism=4; add 27 SBU for tests)">
 ]>
 
@@ -104 +104 @@
       <xref linkend="openldap"/>,
       <xref linkend="samba"/>,
+      <ulink url="https://www.gnu.org/software/gsasl/">gsasl</ulink>,
       <ulink url="https://www.secureauth.com/labs/open-source-tools/impacket/">impacket</ulink>,
       <ulink url="https://launchpad.net/libmetalink/">libmetalink</ulink>,

packages.ent

@@ -633 +633 @@
 <!-- Chapter 17 -->
 <!ENTITY c-ares-version               "1.18.1">
-<!ENTITY curl-version                 "7.81.0">
+<!ENTITY curl-version                 "7.82.0">
 <!ENTITY geoclue2-version             "2.6.0">
 <!ENTITY glib-networking-version      "2.70.1">
@@ -970 +970 @@
 <!ENTITY rox-filer-version            "2.11">
 <!ENTITY rxvt-unicode-version         "9.30">
-<!ENTITY thunderbird-version          "91.6.1">
+<!ENTITY thunderbird-version          "91.6.2">
 <!ENTITY tigervnc-version             "1.12.0">
 <!ENTITY transmission-version         "3.00">

xsoft/graphweb/seamonkey.xml

@@ -80 +80 @@
     </itemizedlist>
 
-<!--<bridgehead renderas="sect3">Additional Downloads</bridgehead>
+    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
     <itemizedlist spacing="compact">
       <listitem>
         <para>
           Required patch:
-          <ulink url="&patch-root;/seamonkey-&seamonkey-version;-security_fixes-1.patch"/>
-        </para>
-      </listitem>
-    </itemizedlist>-->
+          <ulink url="&patch-root;/seamonkey-&seamonkey-version;-security_fix-1.patch"/>
+        </para>
+      </listitem>
+    </itemizedlist>
 
     <note>
@@ -263 +263 @@
     </note>
 
-<!--<para>
-      Apply a patch to fix a 0day vulnerability in Seamonkey:
-    </para>
-
-
-<screen><userinput>patch -Np1 -i ../seamonkey-&seamonkey-version;-security_fixes-1.patch</userinput></screen>
-
-
-    <para>
-      Remove a deprecated include which breaks the build with glibc-2.32:
-    </para>
-
-<screen><userinput>sed /sysctl/d -i mozilla/memory/build/mozjemalloc.cpp</userinput></screen>-->
+    <para>
+      Apply a patch to fix a critical security vulnerability in Seamonkey:
+    </para>
+
+<screen><userinput>patch -Np1 -i ../seamonkey-&seamonkey-version;-security_fix-1.patch</userinput></screen>
 
     <para>

xsoft/other/inkscape.xml

@@ -193 +193 @@
 
     <para>
+      First, fix the build with poppler-22.03.0:
+    </para>
+
+<screen><userinput remap="pre">sed -i '/filename_goo,/s/filename_goo.*/std::make_unique&lt;GooString&gt;(uri));/' \
+       src/extension/internal/pdfinput/pdf-input.cpp</userinput></screen>
+
+    <para>
       Install <application>Inkscape</application> by running the following
       commands:

xsoft/other/thunderbird.xml

@@ -7 +7 @@
   <!ENTITY thunderbird-download-http "&mozilla-http;/thunderbird/releases/&thunderbird-version;/source/thunderbird-&thunderbird-version;.source.tar.xz">
   <!ENTITY thunderbird-download-ftp  " ">
-  <!ENTITY thunderbird-md5sum        "ef508246f2c90e03adb8529abaa3dccd">
-  <!ENTITY thunderbird-size          "389 MB">
+  <!ENTITY thunderbird-md5sum        "cfa6ef391e9348c12775b06de405480b">
+  <!ENTITY thunderbird-size          "386 MB">
   <!ENTITY thunderbird-buildsize     "7.0 GB (202 MB installed)">
-  <!ENTITY thunderbird-time          "28 SBU (on a 4-core machine)">
+  <!ENTITY thunderbird-time          "26 SBU (on a 4-core machine)">
   <!-- Removed the -j1 time because python and rust do not obey it, although
        the C/C++ code appears to obey it -->