Changeset a1813d08

Timestamp:

11/18/2010 01:06:14 AM (13 years ago)

Author:

Ken Moffat <ken@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

590724d

Parents:

afe66bc3

Message:

Bring forward the openssl-1.0.0 upgrade because of the security fix in 1.0.0b (also in 0.9.8p). This will break the versions of mutt, heimdal, postgresql (probably) and ruby currently in the book if used (it's optional for all of them) - added temporary explanatory para to each of those packages. For openssl itself, bc is no longer required by the testsuite, without it there is a brief whinge hidden in the output, but it still reports that all tests succeedded.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@8697 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:

• basicnet/mailnews/mailx.xml (modified) (4 diffs)
• basicnet/mailnews/mutt.xml (modified) (1 diff)
• general.ent (modified) (2 diffs)
• general/prog/ruby.xml (modified) (1 diff)
• introduction/welcome/changelog.xml (modified) (1 diff)
• postlfs/security/heimdal.xml (modified) (1 diff)
• postlfs/security/openssl.xml (modified) (5 diffs)
• server/databases/postgresql.xml (modified) (1 diff)

basicnet/mailnews/mailx.xml

@@ -9 +9 @@
   <!ENTITY mailx-md5sum        "0c93759e34200eb56a0e7c464680a54a">
   <!ENTITY mailx-size          "265 KB">
-  <!ENTITY mailx-buildsize     "3.0 MB">
+  <!ENTITY mailx-buildsize     "3.6 MB">
   <!ENTITY mailx-time          "less than 0.1 SBU">
 ]>
@@ -39 +39 @@
     especially useful for writing scripts and batch processing.</para>
 
-    <para>&lfssvn_checked;20100803&lfssvn_checked2;</para>
+    &lfs67_checked;
 
     <bridgehead renderas="sect3">Package Information</bridgehead>
@@ -59 +59 @@
       <listitem>
         <para>Estimated build time: &mailx-time;</para>
+      </listitem>
+    </itemizedlist>
+
+    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
+    <itemizedlist spacing='compact'>
+      <listitem>
+        <para>Required patch: <ulink
+        url="&patch-root;/mailx-&mailx-version;-openssl_1.0.0_build_fix-1.patch"/>
+        (if you intend to link this package against
+        <application>openssl</application>)</para>
       </listitem>
     </itemizedlist>
@@ -82 +92 @@
     following commands.</para>
 
-<screen><userinput>make SENDMAIL=/usr/sbin/sendmail</userinput></screen>
+<screen><userinput>patch -Np1 -i ../mailx-&mailx-version;-openssl_1_0_0_build_fix-1.patch &amp;&amp;
+make SENDMAIL=/usr/sbin/sendmail</userinput></screen>
 
     <para>This package does not come with a test suite.</para>

basicnet/mailnews/mutt.xml

@@ -29 +29 @@
     Agent. This is useful for reading, writing, replying to, saving, and
     deleting your email.</para>
+
+    <!-- FIXME -->
+    <para>If you intend to link this application to <xref linkend="openssl"/>
+    you will need to use mutt-1.5.21.</para>
 
     <bridgehead renderas="sect3">Package Information</bridgehead>

general.ent

@@ -4 +4 @@
 -->
 
-<!ENTITY day          "17">                   <!-- Always 2 digits -->
+<!ENTITY day          "18">                   <!-- Always 2 digits -->
 <!ENTITY month        "11">                   <!-- Always 2 digits -->
 <!ENTITY year         "2010">
@@ -91 +91 @@
 <!-- Chapter 4 -->
 
-<!ENTITY openssl-version              "0.9.8n">
+<!ENTITY openssl-version              "1.0.0b">
 <!-- The ca-bundle-version should be updated to match nss version -->
-<!ENTITY ca-bundle-version            "3.12.5">
+<!ENTITY ca-bundle-version            "3.12.8.0">
 <!ENTITY gnutls-version               "2.8.6">
 <!ENTITY cracklib-version             "2.8.18">

general/prog/ruby.xml

@@ -35 +35 @@
     <application>Ruby</application> development environment. This
     is useful for object-oriented scripting.</para>
+
+    <!-- FIXME -->
+    <para>If you intend to link this application to <xref linkend="openssl"/>
+    you will need to use ruby-1.9.2-p0 or newer.</para>
 
     <bridgehead renderas="sect3">Package Information</bridgehead>

introduction/welcome/changelog.xml

@@ -41 +41 @@
 
 -->
+
+    <listitem>
+      <para>November 18th, 2010</para>
+      <itemizedlist>
+        <listitem>
+          <para>[ken] - Updated to openssl-1.0.0b to fix CVE-2010-3864 (fixes ticket
+          <ulink url="&blfs-ticket-root;3146">#3146</ulink>)</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
 
     <listitem>

postlfs/security/heimdal.xml

@@ -63 +63 @@
     <ulink url="&files-anduin;/heimdal-overwrites"/> for a complete list of
     all the files and commands to rename each of them.</para>
+
+    <!-- FIXME -->
+    <para>If you intend to link this application to <xref linkend="openssl"/>
+    you will need to use the heimdal-1.4 series.</para>
 
     <bridgehead renderas="sect3">Package Information</bridgehead>

postlfs/security/openssl.xml

@@ -7 +7 @@
   <!ENTITY openssl-download-http "http://www.openssl.org/source/openssl-&openssl-version;.tar.gz">
   <!ENTITY openssl-download-ftp  "ftp://ftp.openssl.org/source/openssl-&openssl-version;.tar.gz">
-  <!ENTITY openssl-md5sum        "076d8efc3ed93646bd01f04e23c07066">
-  <!ENTITY openssl-size          "3.7 MB">
+  <!ENTITY openssl-md5sum        "104deb3b7e6820cae6de3f49ba0ff2b0">
+  <!ENTITY openssl-size          "3.9 MB">
   <!ENTITY ca-bundle-download    "http://anduin.linuxfromscratch.org/files/BLFS/BLFS-ca-bundle-&ca-bundle-version;.tar.bz2">
-  <!ENTITY ca-bundle-size        "224 KB">
-  <!ENTITY ca-bundle-md5sum      "84287d75a4137d00020b1b89a472f5e7">
-  <!ENTITY openssl-buildsize     "47 MB">
-  <!ENTITY openssl-time          "1.2 SBU (additional 0.3 SBU to run the test suite)">
+  <!ENTITY ca-bundle-size        "196 KB">
+  <!ENTITY ca-bundle-md5sum      "da705ed29e5abcb42d498bcc86d1e62e">
+  <!ENTITY openssl-buildsize     "54 MB">
+  <!ENTITY openssl-time          "1.2 SBU (additional 0.4 SBU to run the test suite)">
 ]>
 
@@ -75 +75 @@
     <itemizedlist spacing='compact'>
       <listitem>
-        <para>Required patch: <ulink
-        url="&patch-root;/openssl-&openssl-version;-fix_manpages-1.patch"/></para>
+        <para>Required patches: <ulink
+        url="&patch-root;/openssl-&openssl-version;-fix_manpages-1.patch"/> and
+        <ulink url="&patch-root;/openssl-&openssl-version;-fix_testsuite-1.patch"/></para>
       </listitem>
     </itemizedlist>
@@ -84 +85 @@
     <bridgehead renderas="sect4">Optional</bridgehead>
     <para role="optional"><xref linkend="mitkrb"/> or
-    <xref linkend="heimdal"/>, and <xref linkend="bc"/> (required to run the
-    test suite during the build)</para>
+    <xref linkend="heimdal"/>, and <xref linkend="bc"/> (required for full
+    coverage by the test suite during the build)</para>
 
     <para condition="html" role="usernotes">User Notes:
@@ -99 +100 @@
 
 <screen><userinput>patch -Np1 -i ../openssl-&openssl-version;-fix_manpages-1.patch &amp;&amp;
+patch -Np1 -i ../openssl-&openssl-version;-fix_testsuite-1.patch &amp;&amp;
 tar -vxf ../BLFS-ca-bundle-&ca-bundle-version;.tar.bz2 &amp;&amp;
 
@@ -228 +230 @@
         <seg>libcrypto.{so,a}, libssl.{so,a}, and additional encryption
         libraries in /usr/lib/engines/ (lib4758cca.so, libaep.so,
-        libatalla.so, libcapi.so, libchil.so, libcswift.so, libgmp.so, libnuron.so,
-        libsureware.so, and libubsec.so)</seg>
-        <seg>/etc/ssl, /usr/include/ssl, /usr/lib/engines
+        libatalla.so, libcapi.so, libchil.so, libcswift.so, libgmp.so,
+        libgost.so, libnuron.so, libpadlock.so, libsureware.so, and
+        libubsec.so)</seg>
+        <seg>/etc/ssl, /usr/include/openssl, /usr/lib/engines
         and /usr/share/doc/openssl-&openssl-version;</seg>
       </seglistitem>

server/databases/postgresql.xml

@@ -41 +41 @@
     existing BLFS instructions. Note that versions other than the one shown
     in the download URLs have not been tested in a BLFS environment.</para>
+
+    <!-- FIXME -->
+    <para>If you intend to link this application to <xref linkend="openssl"/>
+    you will need to move to a newer version of <application>PostgreSQL</application>,
+    1.9.0.1 is known to build.</para>
 
     <bridgehead renderas="sect3">Package Information</bridgehead>