Changeset 4df25bd0 for networking

Timestamp:

05/31/2017 12:07:31 AM (7 years ago)

Author:

Ken Moffat <ken@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

c51f263

Parents:

421e0cb

Message:

Patch libtirpc and rpcbind for CVE-2017-8779.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@18771 af4574ff-66df-0310-9fd7-8a98e5e911e0

Location:

networking

Files:

• netlibs/libtirpc.xml (modified) (2 diffs)
• netprogs/rpcbind.xml (modified) (3 diffs)

networking/netlibs/libtirpc.xml

@@ -73 +73 @@
     </itemizedlist>
 
+    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
+    <itemizedlist spacing="compact">
+      <listitem>
+        <para>
+          Required patch:
+          <ulink url="&patch-root;/libtirpc-&libtirpc-version;-vulnerability_fixes-1.patch"/>
+        </para>
+      </listitem>
+    </itemizedlist>
+
     <bridgehead renderas="sect3">libtirpc Dependencies</bridgehead>
 
@@ -96 +106 @@
     </para>
 
-<screen><userinput>./configure --prefix=/usr     \
-            --sysconfdir=/etc \
-            --disable-static  \
-            --disable-gssapi  &amp;&amp;
+<screen><userinput>
+patch -Np1 -i ../libtirpc-&libtirpc-version;-vulnerability_fixes-1.patch &amp;&amp;
+./configure --prefix=/usr                                   \
+            --sysconfdir=/etc                               \
+            --disable-static                                \
+            --disable-gssapi                                &amp;&amp;
 make</userinput></screen>
 

networking/netprogs/rpcbind.xml

@@ -57 +57 @@
       </listitem>
     </itemizedlist>
-<!--
+
     <bridgehead renderas="sect3">Additional Downloads</bridgehead>
     <itemizedlist spacing="compact">
@@ -63 +63 @@
         <para>
           Required patch:
-          <ulink url="&patch-root;/rpcbind-&rpcbind-version;-tirpc_fix-1.patch"/>
+          <ulink url="&patch-root;/rpcbind-&rpcbind-version;-vulnerability_fixes-1.patch"/>
         </para>
       </listitem>
     </itemizedlist>
--->
+
     <bridgehead renderas="sect3">rpcbind Dependencies</bridgehead>
 
@@ -103 +103 @@
     commands:</para>
 
-<screen revision="sysv"><userinput>./configure --prefix=/usr       \
-            --bindir=/sbin      \
-            --with-rpcuser=root \
-            --enable-warmstarts \
-            --without-systemdsystemunitdir &amp;&amp;
+<screen revision="sysv"><userinput>patch -Np1 -i ../rpcbind-&rpcbind-version;-vulnerability_fixes-1.patch &amp;&amp;
+./configure --prefix=/usr                                  \
+            --bindir=/sbin                                 \
+            --with-rpcuser=root                            \
+            --enable-warmstarts                            \
+            --without-systemdsystemunitdir                 &amp;&amp;
 make</userinput></screen>
 
-<screen revision="systemd"><userinput>./configure --prefix=/usr  \
-            --bindir=/sbin \
-            --enable-warmstarts \
-            --with-rpcuser=rpc &amp;&amp;
+<screen revision="systemd">
+<userinput>
+patch -Np1 -i ../rpcbind-&rpcbind-version;-vulnerability_fixes-1.patch &amp;&amp;
+           ./configure --prefix=/usr                       \
+            --bindir=/sbin                                 \
+            --enable-warmstarts                            \
+            --with-rpcuser=rpc                             &amp;&amp;
 make</userinput></screen>