Changeset 85b5562

Timestamp:

11/27/2010 12:24:53 AM (13 years ago)

Author:

Ken Moffat <ken@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

ca6947d

Parents:

8723214

Message:

Fix the expat vulnerabilities.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@8710 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:

• general.ent (modified) (1 diff)
• general/genlib/expat.xml (modified) (4 diffs)
• introduction/welcome/changelog.xml (modified) (1 diff)

general.ent

@@ -4 +4 @@
 -->
 
-<!ENTITY day          "26">                   <!-- Always 2 digits -->
+<!ENTITY day          "27">                   <!-- Always 2 digits -->
 <!ENTITY month        "11">                   <!-- Always 2 digits -->
 <!ENTITY year         "2010">

general/genlib/expat.xml

@@ -33 +33 @@
     C library for parsing XML.</para>
 
-    &lfs65_checked;
+    &lfs67_checked;
 
     <bridgehead renderas="sect3">Package Information</bridgehead>
@@ -57 +57 @@
     </itemizedlist>
 
+    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
+    <itemizedlist spacing='compact'>
+      <listitem>
+        <para>Required patch: <ulink
+        url="&patch-root;/expat-&expat-version;-fixes-2.patch"/></para>
+      </listitem>
+    </itemizedlist>
+
     <para condition="html" role="usernotes">User Notes:
     <ulink url="&blfs-wiki;/expat"/></para>
@@ -68 +76 @@
     commands:</para>
 
-<screen><userinput>./configure --prefix=/usr &amp;&amp;
+<screen><userinput>patch -Np1 -i ../expat-&expat-version;-fixes-2.patch &amp;&amp;
+./configure --prefix=/usr &amp;&amp;
 make</userinput></screen>
 
@@ -80 +89 @@
     unprivileged user. Note this must be done after the package is
     installed.</para>
+
+  </sect2>
+
+  <sect2 role="commands">
+    <title>Command Explanations</title>
+
+    <para><option>--disable-static</option>: This switch prevents the
+    static library in this package being built and installed.</para>
 
   </sect2>

introduction/welcome/changelog.xml

@@ -41 +41 @@
 
 -->
+
+    <listitem>
+      <para>November 27th, 2010</para>
+      <itemizedlist>
+        <listitem>
+          <para>[ken] - Added patch for expat-2.0.1 vulnerabilities (fixes
+          ticket <ulink url="&blfs-ticket-root;3117">#3117</ulink>) - thanks to
+          wagner17 for raising that.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
 
     <listitem>