Changeset b6d80e9

Timestamp:

08/07/2006 09:02:28 PM (18 years ago)

Author:

Dan Nichilson <dnicholson@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 6.2, 6.2.0, 6.2.0-rc1, 6.2.0-rc2, 6.3, 6.3-rc1, 6.3-rc2, 6.3-rc3, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

dc77783f

Parents:

c023b7d

Message:

Fixed vulnerability and removed Glibc hack in Xorg-6.9.0.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@6280 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:

• general.ent (modified) (1 diff)
• introduction/welcome/changelog.xml (modified) (1 diff)
• x/installing/xorg.xml (modified) (2 diffs)

general.ent

@@ -1 @@
-<!ENTITY day          "06">                   <!-- Always 2 digits -->
+<!ENTITY day          "07">                   <!-- Always 2 digits -->
 <!ENTITY month        "08">                   <!-- Always 2 digits -->
 <!ENTITY year         "2006">

introduction/welcome/changelog.xml

@@ -43 +43 @@
 
     <listitem>
+      <para>August 7th, 2006</para>
+      <itemizedlist>
+        <listitem>
+          <para>[dnicholson] - Added a patch to fix security
+          vulnerabilities in Xorg-6.9.0. See ticket #2100. Removed
+          fix for Glibc sys/kd.h as it is now in LFS stable.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>August 6th, 2006</para>
       <itemizedlist>

x/installing/xorg.xml

@@ -90 +90 @@
         url="&patch-root;/xorg-&xorg-version;-luit_race-1.patch"/></para>
       </listitem>
+      <listitem>
+        <para>Required patch: <ulink
+        url="&patch-root;/xorg-&xorg-version;-security-2.patch"/></para>
+      </listitem>
     </itemizedlist>
 
@@ -198 +202 @@
       <para>The <application>Xorg</application> sources must be patched in
       order to avoid a race condition with the <application>luit</application>
-      program.  Additionally, the server portion of
-      <application>Xorg</application> contains 2
+      program.  Additionally, <application>Xorg</application> contains 3
       <ulink url="http://wiki.x.org/wiki/SecurityPage">security vulnerabilities</ulink>.
       Fix these issues with the following commands:</para>
 
 <screen><userinput>patch -Np1 -i ../xorg-&xorg-version;-luit_race-1.patch &amp;&amp;
-sed -i 's/geteuid /geteuid() /' \
-    programs/Xserver/hw/xfree86/common/xf86Init.c &amp;&amp;
-sed -i 's/ntri &amp; sizeof/ntri * sizeof/' programs/Xserver/render/mitri.c</userinput></screen>
-
-<!-- To be removed if/when proposed glibc patch is added to LFS SVN
-     Leave in in for a couple of weeks with 'you may need' and a testcase
-     around it to save the support list silly questions.  Should remove in
-     a couple of weeks -->
-      <para>Recent <application>Glibc</application> may have a problem with its
-      installed <filename>sys/kd.h</filename> file.
-      This has recently been fixed in LFS SVN.  Execute the
-      following commands to work around a broken <filename>kd.h</filename>
-      file.  The commands will only make the modification if needed:</para>
-
-<screen><userinput>grep "__undef_LINUX" \
-    /usr/include/sys/kd.h 2&gt;&amp;1 &gt; /dev/null || \
-    sed -i.bak '/CONFIG_H/i #include &lt;linux/types.h&gt;' \
-    programs/Xserver/hw/xfree86/os-support/linux/lnx_agp.c</userinput></screen>
-<!-- End remove -->
-
-
+patch -Np1 -i ../xorg-&xorg-version;-security-2.patch</userinput></screen>
 
       <para>Additionally, if you choose to install