Changeset 326224b

Timestamp:

03/04/2015 03:23:00 AM (9 years ago)

Author:

Bruce Dubbs <bdubbs@…>

Branches:

10.0, 10.0-rc1, 10.1, 10.1-rc1, 11.0, 11.0-rc1, 11.0-rc2, 11.0-rc3, 11.1, 11.1-rc1, 11.2, 11.2-rc1, 11.3, 11.3-rc1, 12.0, 12.0-rc1, 12.1, 12.1-rc1, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, arm, bdubbs/gcc13, ml-11.0, multilib, renodr/libudev-from-systemd, s6-init, trunk, xry111/arm64, xry111/arm64-12.0, xry111/clfs-ng, xry111/lfs-next, xry111/loongarch, xry111/loongarch-12.0, xry111/loongarch-12.1, xry111/mips64el, xry111/pip3, xry111/rust-wip-20221008, xry111/update-glibc

Children:

41246d4, eace3bf

Parents:

b304545

Message:

Add seds to grep and e3fsprogs to fix security issues found upstream.
Remove unrecognized option in eudev.
Minor text corrections.

git-svn-id: ​http://svn.linuxfromscratch.org/LFS/trunk/BOOK@10863 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689

Files:

• chapter01/changelog.xml (modified) (1 diff)
• chapter05/glibc.xml (modified) (1 diff)
• chapter06/e2fsprogs.xml (modified) (1 diff)
• chapter06/eudev.xml (modified) (1 diff)
• chapter06/glibc.xml (modified) (1 diff)
• chapter06/grep.xml (modified) (1 diff)
• general.ent (modified) (1 diff)

chapter01/changelog.xml

@@ -37 +37 @@
 -->
     <listitem>
+      <para>2015-03-03</para>
+      <itemizedlist>
+        <listitem>
+          <para>[bdubbs] - Add a sed to fix an upstream security issue
+          in e2fsprogs. Fixes
+          <ulink url="&lfs-ticket-root;3759">#3759</ulink>.</para>
+        </listitem>
+        <listitem>
+          <para>[bdubbs] - Add a sed to fix an upstream security issue
+          in grep. Fixes
+          <ulink url="&lfs-ticket-root;3760">#3760</ulink>.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>2015-02-25</para>
       <itemizedlist>

chapter05/glibc.xml

@@ -53 +53 @@
 fi</userinput></screen>
 
-    <para>Fix is regression in the package that affects 32-bit architectures:</para>
+    <para>Fix a regression in the package that affects 32-bit architectures:</para>
 
 <screen><userinput remap="pre">sed -e '/ia32/s/^/1:/' \

chapter06/e2fsprogs.xml

@@ -44 +44 @@
   <sect2 role="installation">
     <title>Installation of E2fsprogs</title>
+
+    <para>First, fix a potential security issue identified upstream:</para>
+
+<screen><userinput remap="pre">sed -e '/int.*old_desc_blocks/s/int/blk64_t/' \
+    -e '/if (old_desc_blocks/s/super->s_first_meta_bg/desc_blocks/' \
+    -i lib/ext2fs/closefs.c</userinput></screen>
 
     <para>The E2fsprogs documentation recommends that the package be built in

chapter06/eudev.xml

@@ -63 +63 @@
             --disable-introspection \
             --disable-gudev         \
-            --disable-gtk-doc-html  \
-            --with-firmware-path=/lib/firmware </userinput></screen>
+            --disable-gtk-doc-html</userinput></screen>
 
 <para>Compile the package:</para>

chapter06/glibc.xml

@@ -156 +156 @@
       <listitem>
         <para>Other tests known to fail on some architectures are
-        malloc/tst-malloc-usable and  nptl/tst-cleanupx4. </para>
+        malloc/tst-malloc-usable and nptl/tst-cleanupx4. </para>
       </listitem>
 

chapter06/grep.xml

@@ -40 +40 @@
   <sect2 role="installation">
     <title>Installation of Grep</title>
+
+    <para>First fix a potential security issue identified upstream:</para>
+
+<screen><userinput remap="configure">sed -i -e '/tp++/a  if (ep &lt;= tp) break;' src/kwset.c</userinput></screen>
 
     <para>Prepare Grep for compilation:</para>

general.ent

@@ -1 @@
-<!ENTITY version         "SVN-20150225">
+<!ENTITY version         "SVN-20150303">
 <!ENTITY short-version   "svn">  <!-- Used in dbus chapter, change to x.y for release 
                                       but not -rc releases -->
-<!ENTITY releasedate     "February 25, 2015">
+<!ENTITY releasedate     "March 3, 2015">
 <!ENTITY copyrightdate   "1999-2015"><!-- jhalfs needs a literal dash, not &ndash; -->
 <!ENTITY milestone       "7.7">