Changeset 7fc15d9

Timestamp:

03/19/2018 09:09:55 PM (6 years ago)

Author:

Ken Moffat <ken@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

cb7032fe

Parents:

7ea3791d

Message:

Firefox-59.0.1 : fixes vulnerability from out of bounds read of malformed vorbis file in internal copy of libvorbis, revealed at recent Pwn2Own contest.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@19973 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:

• introduction/welcome/changelog.xml (modified) (1 diff)
• packages.ent (modified) (1 diff)
• xsoft/graphweb/firefox.xml (modified) (1 diff)

introduction/welcome/changelog.xml

@@ -46 +46 @@
       <itemizedlist>
         <listitem>
+          <para>[ken] - Update to firefox-59.0.1 (security fix). Fixes
+          <ulink url="&blfs-ticket-root;10557">#10557</ulink>.</para>
+        </listitem>
+        <listitem>
           <para>[timtas] - Update to NetworkManager-1.10.6. Fixes
           <ulink url="&blfs-ticket-root;10518">#10518</ulink>.</para>

packages.ent

@@ -731 +731 @@
 <!ENTITY chromium-version             "64.0.3282.186">
 <!ENTITY epiphany-version             "3.26.6">
-<!ENTITY firefox-version              "59.0">
+<!ENTITY firefox-version              "59.0.1">
 <!ENTITY flashplayer-version          "27.0.0.187">
 <!ENTITY qupzilla-version             "2.2.5">

xsoft/graphweb/firefox.xml

@@ -8 +8 @@
   <!ENTITY firefox-download-http "&mozilla-http;/firefox/releases/&firefox-version;/source/firefox-&firefox-version;.source.tar.xz">
 -->
-   <!ENTITY firefox-hgversion "c61f5f5ead48c78a80c80db5c489bdc7cfaf8175">
+   <!ENTITY firefox-hgversion "3db9e3d52b17563efca181ccbb50deb8660c59ae">
   <!-- use tinyurl to get a much shorter link for the wget example -->
-  <!ENTITY firefox-tiny "https://tinyurl.com/firefox-59-0-tar-bz2">
+  <!ENTITY firefox-tiny "https://tinyurl.com/firefox-59-0-1-tar-bz2">
   <!ENTITY firefox-download-http "&mozilla-hg;&firefox-hgversion;.tar.bz2">
   <!ENTITY firefox-download-ftp  " ">
-  <!ENTITY firefox-md5sum        "2dfc59e6adccea41b5fb87c2d9456d4e">
+  <!ENTITY firefox-md5sum        "5aff0df363d778ebe0e572d6c9f13dbe">
   <!ENTITY firefox-size          "291 MB">
   <!-- NB with stylo, much of the build uses rust, and therefore cargo files.