Changeset 89a0adcf

Timestamp:

10/14/2004 03:01:15 AM (19 years ago)

Author:

Igor Živković <igor@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 6.0, 6.1, 6.2, 6.2.0, 6.2.0-rc1, 6.2.0-rc2, 6.3, 6.3-rc1, 6.3-rc2, 6.3-rc3, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/inkscape-core-mods, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/python-mods, qt5new, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

de241c96

Parents:

1f40e71

Message:

Added a patch for XFree86 which fixes libXpm security vulnerability,
reported by Alexander E. Patrakov.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@2804 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:

• introduction/welcome/changelog.xml (modified) (1 diff)
• x/installing/xfree86.xml (modified) (2 diffs)

introduction/welcome/changelog.xml

@@ -22 +22 @@
 
 <itemizedlist>
+
+<listitem><para>October 13th, 2004 [igor]: Added a patch for XFree86
+which fixes libXpm security vulnerability, reported by Alexander E.
+Patrakov.</para></listitem>
 
 <listitem><para>October 13th, 2004 [igor]: Updated to

x/installing/xfree86.xml

@@ -35 +35 @@
 <listitem><para>Download (FTP): <ulink url="&xfree86-download-ftp;"/></para></listitem>
 <listitem><para>Download size: &xfree86-size;</para></listitem>
-<listitem><para>Estimated Disk space required: &xfree86-buildsize;</para></listitem>
+<listitem><para>Estimated disk space required: &xfree86-buildsize;</para></listitem>
 <listitem><para>Estimated build time: &xfree86-time;</para></listitem></itemizedlist>
 </sect3>
+
+<sect3><title>Additional downloads</title>
+<itemizedlist spacing='compact'>
+<listitem><para>Security patch: <ulink
+url="http://www.x.org/pub/X11R6.8.0/patches/xorg-CAN-2004-0687-0688.patch"/>
+</para></listitem>
+</itemizedlist></sect3>
 
 <sect3><title><application>XFree86</application> dependencies</title>
@@ -302 +309 @@
 <sect3>
 <title>Build Commands</title>
+
+<para>Some vulnerabilities were reported in <filename
+class="libraryfile">libXpm</filename>. A remote user may be able to
+execute arbitrary code on applications that use <filename
+class="libraryfile">libXpm</filename>. <application>Xorg</application>
+team released a patch for their version 6.8.0 but it works for
+<application>XFree86</application> as well. Apply the patch:</para>
+
+<screen><userinput><command>patch -Np1 -i ../xorg-CAN-2004-0687-0688.patch</command></userinput></screen>
+
 <para>Install <application>XFree86</application> by running the following 
 commands:</para>