Changeset f8d6cf0f

Timestamp:

07/12/2024 01:31:39 PM (2 months ago)

Author:

Ken Moffat <zarniwhoop@…>

Branches:

12.2, gimp3, lazarus, trunk, xry111/for-12.3, xry111/spidermonkey128

Children:

4e2ed570

Parents:

7db4bc0

Message:

Patch gtk+2 to build with gcc14.

The patch includes this week's gtk3 fix, but I am not convinced
that part is actually a vulnerability on recent BLFS. Using the
PoC and the ENVVAR and starting gimp-2.10 from a prepared directory
the PoC failed on gtk2 built with only the gcc14 fixes.

As noted in the comment I added to the patch, the reporter thinks
exploitation on GTK2 is unlikely.

Testing epdfview, the PoC succeeded.

Files:

• introduction/welcome/changelog.xml (modified) (1 diff)
• x/lib/gtk+2.xml (modified) (3 diffs)

introduction/welcome/changelog.xml

@@ -39 +39 @@
     </listitem>
     -->
+    <listitem>
+      <para>July 12th, 2024</para>
+      <itemizedlist>
+        <listitem>
+          <para>[ken] - Patch gtk+-2.24.33 to build with gcc14.. Fixes
+          <ulink url="&blfs-ticket-root;19887">19887</ulink>.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
     <listitem>
       <para>July 11th, 2024</para>

x/lib/gtk+2.xml

@@ -64 +64 @@
         <para>
           Estimated build time: &gtk2-time;
+        </para>
+      </listitem>
+    </itemizedlist>
+
+    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
+    <itemizedlist spacing="compact">
+      <listitem>
+        <para>
+          Required patch:
+          <ulink url="&patch-root;/gtk+-&gtk2-version;-consolidated_fixes-1.patch"/>
         </para>
       </listitem>
@@ -102 +112 @@
 
 <screen><userinput>sed -e 's#l \(gtk-.*\).sgml#&amp; -o \1#' \
-    -i docs/{faq,tutorial}/Makefile.in      &amp;&amp;
-
-./configure --prefix=/usr --sysconfdir=/etc &amp;&amp;
-
+    -i docs/{faq,tutorial}/Makefile.in                  &amp;&amp;
+patch -p1 -i ../gtk+-&gtk2-version;-consolidated_fixes-1.patch &amp;&amp;
+./configure --prefix=/usr --sysconfdir=/etc             &amp;&amp;
 make</userinput></screen>
 
@@ -148 +157 @@
       <filename>Makefile</filename>s.
     </para>
+
+    <para>
+      <command>patch -p1 -i ../gtk+-&gtk2-version;-consolidated_fixes-1.patch ...</command>:
+      This patch allows the package to compile with gcc-14 and also prevents
+      loading modules from the current directory.
+    </para>
+
     <!-- This still seems to have problems with docbook-utils installed.
          However, since it's already been tagged, I'll leave it alone. -->