Changeset c4ae75ef

Timestamp:

07/05/2019 02:48:25 AM (5 years ago)

Author:

Douglas R. Reno <renodr@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 9.0, 9.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

83eee4b8

Parents:

2445707b

Message:

Add a security patch for mozjs.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@21800 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:

• general/genlib/js60.xml (modified) (2 diffs)
• introduction/welcome/changelog.xml (modified) (1 diff)

general/genlib/js60.xml

@@ -67 +67 @@
         <para>
           Estimated build time: &js60-time;
+        </para>
+      </listitem>
+    </itemizedlist>
+
+    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
+    <itemizedlist spacing="compact">
+      <listitem>
+        <para>
+          Required patch:
+          <ulink url="&patch-root;/js60-&JS60-version;-security_fix-1.patch"/>
         </para>
       </listitem>
@@ -96 +106 @@
   <sect2 role="installation">
     <title>Installation of JS</title>
+
+    <caution>
+      <para>If you are reinstalling JS60 with the security patch listed in this
+      page, save all work and exit your GNOME Session if you have one running.
+      Replacing the JS60 binary will cause the GNOME Shell to crash and return
+      you to your display manager or TTY. After installing the patch, 
+      reinstall <xref linkend="gjs"/>. Polkit is unaffected.</para>
+    </caution>
+
+    <para>
+      First, apply a security patch:
+    </para>
+
+<screen><userinput remap="pre">patch -Np1 -i ../js60-&JS60-version;-security_fix-1.patch</userinput></screen>
 
     <para>

introduction/welcome/changelog.xml

@@ -44 +44 @@
 
     <listitem>
-      <para>July 3rd, 2019</para>
-      <itemizedlist>
+      <para>July 4th, 2019</para>
+      <itemizedlist>
+        <listitem>
+          <para>[renodr] - Add a security patch to fix CVE-2019-11707 in JS60.
+          When applying this patch and rebuilding JS60, please exit any GNOME
+          session that you might have open, or it will crash (SIGSEGV) when the
+          js60 interpreter is replaced. Fixes
+          <ulink url="&blfs-ticket-root;12198">#12198</ulink>.</para>
+        </listitem>
         <listitem>
           <para>[bdubbs] - Update to mariadb-10.3.16. Fixes