Changeset 504d0c05 for x/installing

Timestamp:

04/14/2006 09:52:03 PM (18 years ago)

Author:

Dan Nichilson <dnicholson@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 6.2, 6.2.0, 6.2.0-rc1, 6.2.0-rc2, 6.3, 6.3-rc1, 6.3-rc2, 6.3-rc3, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

cc2fa2f

Parents:

2b470cf

Message:

Fixed Xorg security bug in ticket #1876. Imporved sed to include linux/types.h

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@5863 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:

• x/installing/xorg.xml (modified) (1 diff)

x/installing/xorg.xml

@@ -203 +203 @@
       program.  Additionally, recent <application>glibc</application> requires
       <filename>linux/types.h</filename> to be included prior to
-      <filename>asm/types.h</filename>.  Fix both issues with the following
-      commands:</para>
+      <filename>asm/types.h</filename>.  Finally, the server portion of
+      <application>Xorg</application> contains a <ulink
+      url="http://wiki.x.org/wiki/SecurityPage">security vulnerability</ulink>.
+      Fix these issues with the following commands:</para>
 
 <screen><userinput>patch -Np1 -i ../xorg-&xorg-version;-luit_race-1.patch &amp;&amp;
-sed -i "s@*/@*/\n#include &lt;linux/types.h&gt;\n@" \
-    programs/Xserver/hw/xfree86/os-support/linux/lnx_agp.c</userinput></screen>
+sed -i '/CONFIG_H/i #include &lt;linux/types.h&gt;' \
+    programs/Xserver/hw/xfree86/os-support/linux/lnx_agp.c &amp;&amp;
+sed -i 's/geteuid /geteuid() /' \
+    programs/Xserver/hw/xfree86/common/xf86Init.c</userinput></screen>
 
       <para>Additionally, if you choose to install