Changeset a1813d08 for postlfs

Timestamp:

11/18/2010 01:06:14 AM (13 years ago)

Author:

Ken Moffat <ken@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

590724d

Parents:

afe66bc3

Message:

Bring forward the openssl-1.0.0 upgrade because of the security fix in 1.0.0b (also in 0.9.8p). This will break the versions of mutt, heimdal, postgresql (probably) and ruby currently in the book if used (it's optional for all of them) - added temporary explanatory para to each of those packages. For openssl itself, bc is no longer required by the testsuite, without it there is a brief whinge hidden in the output, but it still reports that all tests succeedded.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@8697 af4574ff-66df-0310-9fd7-8a98e5e911e0

Location:

postlfs/security

Files:

• heimdal.xml (modified) (1 diff)
• openssl.xml (modified) (5 diffs)

postlfs/security/heimdal.xml

@@ -63 +63 @@
     <ulink url="&files-anduin;/heimdal-overwrites"/> for a complete list of
     all the files and commands to rename each of them.</para>
+
+    <!-- FIXME -->
+    <para>If you intend to link this application to <xref linkend="openssl"/>
+    you will need to use the heimdal-1.4 series.</para>
 
     <bridgehead renderas="sect3">Package Information</bridgehead>

postlfs/security/openssl.xml

@@ -7 +7 @@
   <!ENTITY openssl-download-http "http://www.openssl.org/source/openssl-&openssl-version;.tar.gz">
   <!ENTITY openssl-download-ftp  "ftp://ftp.openssl.org/source/openssl-&openssl-version;.tar.gz">
-  <!ENTITY openssl-md5sum        "076d8efc3ed93646bd01f04e23c07066">
-  <!ENTITY openssl-size          "3.7 MB">
+  <!ENTITY openssl-md5sum        "104deb3b7e6820cae6de3f49ba0ff2b0">
+  <!ENTITY openssl-size          "3.9 MB">
   <!ENTITY ca-bundle-download    "http://anduin.linuxfromscratch.org/files/BLFS/BLFS-ca-bundle-&ca-bundle-version;.tar.bz2">
-  <!ENTITY ca-bundle-size        "224 KB">
-  <!ENTITY ca-bundle-md5sum      "84287d75a4137d00020b1b89a472f5e7">
-  <!ENTITY openssl-buildsize     "47 MB">
-  <!ENTITY openssl-time          "1.2 SBU (additional 0.3 SBU to run the test suite)">
+  <!ENTITY ca-bundle-size        "196 KB">
+  <!ENTITY ca-bundle-md5sum      "da705ed29e5abcb42d498bcc86d1e62e">
+  <!ENTITY openssl-buildsize     "54 MB">
+  <!ENTITY openssl-time          "1.2 SBU (additional 0.4 SBU to run the test suite)">
 ]>
 
@@ -75 +75 @@
     <itemizedlist spacing='compact'>
       <listitem>
-        <para>Required patch: <ulink
-        url="&patch-root;/openssl-&openssl-version;-fix_manpages-1.patch"/></para>
+        <para>Required patches: <ulink
+        url="&patch-root;/openssl-&openssl-version;-fix_manpages-1.patch"/> and
+        <ulink url="&patch-root;/openssl-&openssl-version;-fix_testsuite-1.patch"/></para>
       </listitem>
     </itemizedlist>
@@ -84 +85 @@
     <bridgehead renderas="sect4">Optional</bridgehead>
     <para role="optional"><xref linkend="mitkrb"/> or
-    <xref linkend="heimdal"/>, and <xref linkend="bc"/> (required to run the
-    test suite during the build)</para>
+    <xref linkend="heimdal"/>, and <xref linkend="bc"/> (required for full
+    coverage by the test suite during the build)</para>
 
     <para condition="html" role="usernotes">User Notes:
@@ -99 +100 @@
 
 <screen><userinput>patch -Np1 -i ../openssl-&openssl-version;-fix_manpages-1.patch &amp;&amp;
+patch -Np1 -i ../openssl-&openssl-version;-fix_testsuite-1.patch &amp;&amp;
 tar -vxf ../BLFS-ca-bundle-&ca-bundle-version;.tar.bz2 &amp;&amp;
 
@@ -228 +230 @@
         <seg>libcrypto.{so,a}, libssl.{so,a}, and additional encryption
         libraries in /usr/lib/engines/ (lib4758cca.so, libaep.so,
-        libatalla.so, libcapi.so, libchil.so, libcswift.so, libgmp.so, libnuron.so,
-        libsureware.so, and libubsec.so)</seg>
-        <seg>/etc/ssl, /usr/include/ssl, /usr/lib/engines
+        libatalla.so, libcapi.so, libchil.so, libcswift.so, libgmp.so,
+        libgost.so, libnuron.so, libpadlock.so, libsureware.so, and
+        libubsec.so)</seg>
+        <seg>/etc/ssl, /usr/include/openssl, /usr/lib/engines
         and /usr/share/doc/openssl-&openssl-version;</seg>
       </seglistitem>