Changeset 7fba71b

Timestamp:

11/03/2019 04:45:45 AM (4 years ago)

Author:

Douglas R. Reno <renodr@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 9.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

d7189a1c

Parents:

0f79af41

Message:

Fix CVE-2019-13720

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@22346 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:

• general.ent (modified) (2 diffs)
• introduction/welcome/changelog.xml (modified) (1 diff)
• x/lib/qtwebengine.xml (modified) (1 diff)

general.ent

@@ -1 +1 @@
 <!-- $LastChangedBy$ $Date$ -->
 
-<!ENTITY day          "01">                   <!-- Always 2 digits -->
+<!ENTITY day          "02">                   <!-- Always 2 digits -->
 <!ENTITY month        "11">                   <!-- Always 2 digits -->
 <!ENTITY year         "2019">
@@ -7 +7 @@
 <!ENTITY copyholder   "The BLFS Development Team">
 <!ENTITY version      "&year;-&month;-&day;">
-<!ENTITY releasedate  "November 1st, &year;">
+<!ENTITY releasedate  "November 2nd, &year;">
 <!ENTITY pubdate      "&year;-&month;-&day;"> <!-- metadata req. by TLDP -->
 <!ENTITY blfs-version "svn">                  <!-- svn|[release #] -->

introduction/welcome/changelog.xml

@@ -42 +42 @@
     </listitem>
        -->
+    <listitem>
+      <para>November 2nd, 2019</para>
+      <itemizedlist>
+        <listitem>
+          <para>[renodr] - Fix a critical security vulnerability in qtwebengine.
+          Fixes <ulink url="&blfs-ticket-root;12723">#12723</ulink>>.</para>
+        </listitem>
+       </itemizedlist>
+    </listitem>
 
     <listitem>

x/lib/qtwebengine.xml

@@ -168 +168 @@
 <screen><userinput remap="pre">patch -Np1 -i ../qtwebengine-&qtwebengine-version;-background_rendering_fix-1.patch</userinput></screen>
 -->    
+
+    <para>
+      Next, fix a critical zero-day vulnerability in the audio subsystem:
+    </para>
+
+<screen><userinput remap="pre">sed -e '/!buffer/a \
+\    BaseAudioContext::GraphAutoLocker context_locker(Context()); \
+\    MutexLocker locker(process_lock_);' -i \
+     src/3rdparty/chromium/third_party/blink/renderer/modules/webaudio/convolver_node.cc</userinput></screen>
 
     <para>