Changeset ebf4942


Ignore:
Timestamp:
08/20/2020 05:43:00 PM (16 months ago)
Author:
Xi Ruoyao <xry111@…>
Branches:
10.0, 10.1, 11.0, ken/refactor-virt, lazarus, qt5new, trunk, xry111/git-date, xry111/git-date-for-trunk, xry111/git-date-test
Children:
ff0b3aa8
Parents:
020ecfd
Message:

curl: add security hotfix for 7.71.1 (blfs-10.0)

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@23584 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:
1 edited

Legend:

Unmodified
Added
Removed
  • networking/netlibs/curl.xml

    r020ecfd rebf4942  
    7474      </listitem>
    7575    </itemizedlist>
    76 <!--
     76
    7777    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
    7878    <itemizedlist spacing="compact">
    7979      <listitem>
    8080        <para>
    81           Patch to fix DNS resolution issues: <ulink
    82           url="&patch-root;/curl-7.65.1-fix_dns_segfaults-2.patch"/>
     81          <!-- A hotfix for LFS-10.0, to fix the CVE w/o change the API
     82               and ABI.  So we won't need to rebuild massively.  Will be
     83               dropped in LFS-10.1 once we update to curl-7.72.0.  -->
     84          Patch to fix CVE-2020-8231: <ulink
     85          url="&patch-root;/curl-7.71.1-security_fixes-1.patch"/>
    8386        </para>
    8487      </listitem>
    8588    </itemizedlist>
    86 -->
    8789
    8890    <bridgehead renderas="sect3">cURL Dependencies</bridgehead>
     
    132134  <sect2 role="installation">
    133135    <title>Installation of cURL</title>
    134 <!--
    135     <para>
    136       First, apply a patch to fix DNS resolution issues:
    137     </para>
    138 
    139 <screen><userinput>patch -Np1 -i ../curl-7.65.1-fix_dns_segfaults-2.patch</userinput></screen>
    140 -->
     136
     137    <para>
     138      First, apply a patch to fix a security issue:
     139    </para>
     140
     141<screen><userinput>patch -Np1 -i ../curl-7.71.1-security_fixes-1.patch</userinput></screen>
    141142
    142143    <para>
Note: See TracChangeset for help on using the changeset viewer.