Changeset 5d1f0157


Ignore:
Timestamp:
10/02/2014 07:00:51 AM (10 years ago)
Author:
Bruce Dubbs <bdubbs@…>
Branches:
10.0, 10.0-rc1, 10.1, 10.1-rc1, 11.0, 11.0-rc1, 11.0-rc2, 11.0-rc3, 11.1, 11.1-rc1, 11.2, 11.2-rc1, 11.3, 11.3-rc1, 12.0, 12.0-rc1, 12.1, 12.1-rc1, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, arm, bdubbs/gcc13, ml-11.0, multilib, renodr/libudev-from-systemd, s6-init, trunk, xry111/arm64, xry111/arm64-12.0, xry111/clfs-ng, xry111/lfs-next, xry111/loongarch, xry111/loongarch-12.0, xry111/loongarch-12.1, xry111/mips64el, xry111/pip3, xry111/rust-wip-20221008, xry111/update-glibc
Children:
4072774
Parents:
82d957c
Message:

Added perl patch to fix CVE-2014-4330.

Update to grub-2.02~beta2. It's been in beta for over 9 months
and a 'stable' does not seem to be forthcoming.

Document glibc tests known to sometimes fail.

git-svn-id: http://svn.linuxfromscratch.org/LFS/trunk/BOOK@10769 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689

Files:
8 edited

Legend:

Unmodified
Added
Removed
  • chapter01/changelog.xml

    r82d957c r5d1f0157  
    3737-->
    3838    <listitem>
     39      <para>2014-10-02</para>
     40      <itemizedlist>
     41        <listitem>
     42          <para>[bdubbs] - Added perl patch to fix CVE-2014-4330.
     43          to prevent infinite recursion in Data::Dumper.  Fixes
     44          <ulink url="&lfs-ticket-root;3681">#3681</ulink>.</para>
     45        </listitem>
     46        <listitem>
     47          <para>[bdubbs] - Update to grub-2.02~beta2.  It's been
     48          in beta for over 9 months and a 'stable' does not seem
     49          to be forthcoming.  Fixes
     50          <ulink url="&lfs-ticket-root;3450">#3450</ulink>.</para>
     51        </listitem>
     52        <listitem>
     53          <para>[bdubbs] - Update glibc tests known to sometimes fail.</para>
     54        </listitem>
     55      </itemizedlist>
     56    </listitem>
     57
     58    <listitem>
    3959      <para>2014-09-29</para>
    4060      <itemizedlist>
    4161        <listitem>
    42           <para>[bdubbs] - Updated bash upstream patches and added fixes for
     62          <para>[bdubbs] - Update bash upstream patches and added fixes for
    4363          CVE-2014-6271, CVE-2014-7169, and CVE-2014-7187 (through upstream
    4464          patch bash43-027).</para>
  • chapter01/whatsnew.xml

    r82d957c r5d1f0157  
    107107      <para>Groff &groff-version;</para>
    108108    </listitem>-->
    109     <!--<listitem>
     109    <listitem>
    110110      <para>GRUB &grub-version;</para>
    111     </listitem>-->
     111    </listitem>
    112112    <!--<listitem>
    113113      <para>Gzip &gzip-version;</para>
     
    242242    <listitem><para></para></listitem>  <!-- satisfy build -->
    243243
    244 <!--
    245     <listitem>
    246       <para>acl-&acl-version;</para>
    247     </listitem>
    248     <listitem>
    249       <para>attr-&attr-version;</para>
    250     </listitem>
    251 -->
    252244    <listitem>
    253245      <para>&bash-fixes-patch;</para>
    254246    </listitem>
    255 <!--
    256     <listitem>
    257       <para>&bc-memory-leak-patch;</para>
    258     </listitem>
    259     <listitem>
    260       <para>&binutils-lto-patch;</para>
    261     </listitem>
    262     <listitem>
    263       <para>&binutils-lto-testsuite-patch;</para>
    264     </listitem>
    265     <listitem>
    266       <para>eudev-&eudev-version;</para>
    267     </listitem>
    268     <listitem>
    269       <para>expat-&expat-version;</para>
    270     </listitem>
    271     <listitem>
    272       <para>&gcc-upstream-patch;</para>
    273     </listitem>
    274     <listitem>
    275       <para>&glibc-fhs-patch;</para>
    276     </listitem>
    277     <listitem>
    278       <para>gperf-&gperf-version;</para>
    279     </listitem>
    280     <listitem>
    281       <para>intltool-&intltool-version;</para>
    282     </listitem>
    283     <listitem>
    284       <para>libcap-&libcap-version;</para>
    285     </listitem>
    286     <listitem>
    287       <para>&mpfr-fixes-patch;</para>
    288     </listitem>
    289     <listitem>
    290       <para>&readline-fixes-patch;</para>
    291     </listitem>
    292     <listitem>
    293       <para>XML::Parser-&xml-parser-version;</para>
    294     </listitem>
    295 -->
     247
     248    <listitem>
     249      <para>&perl-fix-patch;</para>
     250    </listitem>
    296251  </itemizedlist>
    297252
     
    303258      <para>bash-4.3-upstream_fixes-3.patch</para>
    304259    </listitem>
    305 <!--
    306     <listitem>
    307       <para>glibc-2.19-fhs-1.patch</para>
    308     </listitem>
    309 
    310     <listitem>
    311       <para>mpfr-3.1.2-upstream_fixes-1.patch</para>
    312     </listitem>
    313 
    314     <listitem>
    315       <para>perl-5.18.2-libc-1.patch</para>
    316     </listitem>
    317 
    318     <listitem>
    319       <para>readline-6.2-fixes-2.patch</para>
    320     </listitem>
    321 
    322     <listitem>
    323       <para>tar-1.27.1-manpage-1.patch</para>
    324     </listitem>
    325 
    326     <listitem>
    327       <para>udev 208</para>
    328     </listitem>
    329 -->
     260
    330261  </itemizedlist>
    331262
  • chapter03/patches.xml

    r82d957c r5d1f0157  
    118118
    119119    <varlistentry>
     120      <term>Perl Data::Dumper Patch - <token>&perl-fix-patch-size;</token>:</term>
     121      <listitem>
     122        <para>Download: <ulink url="&patches-root;&perl-fix-patch;"/></para>
     123        <para>MD5 sum: <literal>&perl-fix-patch-md5;</literal></para>
     124      </listitem>
     125    </varlistentry>
     126
     127    <varlistentry>
    120128      <term>Readline Upstream Fixes Patch - <token>&readline-fixes-patch-size;</token>:</term>
    121129      <listitem>
  • chapter06/glibc.xml

    r82d957c r5d1f0157  
    116116
    117117    <itemizedlist>
    118 <!--
     118
    119119      <listitem>
    120         <para>The <emphasis>nptl/tst-clock2</emphasis>,
    121         <emphasis>nptl/tst-attr3</emphasis>,
    122         <emphasis>tst/tst-cputimer1</emphasis>, and
    123         <emphasis>rt/tst-cpuclock2</emphasis>
    124         tests have been known to fail.  The
    125         reason is not completely understood, but indications are that minor
    126         timing issues can trigger these failures.</para>
     120        <para>The <emphasis>tst/tst-cputimer1</emphasis> test has been known to
     121        fail.  The reason is not completely understood, but indications are
     122        that minor timing issues can trigger this failure.</para>
    127123      </listitem>
    128124
     
    132128        authentic AMD processor.</para>
    133129      </listitem>
    134 
     130<!--
    135131      <listitem>
    136132        <para>When running on older and slower hardware or on systems under
     
    150146        that has not yet been generated.</para>
    151147      </listitem>
    152 
     148-->
    153149      <listitem>
    154         <para>Other tests known to fail on some architectures are posix/bug-regex32,
    155         misc/tst-writev, elf/check-textrel, nptl/tst-getpid2, nptl/tst-robust8,
    156         and stdio-common/bug22.</para>
     150        <para>Other tests known to fail on some architectures are
     151        malloc/tst-malloc-usable and  nptl/tst-cleanupx4. </para>
    157152      </listitem>
    158 -->
     153
    159154    </itemizedlist>
    160155
  • chapter06/grub.xml

    r82d957c r5d1f0157  
    4141    <title>Installation of GRUB</title>
    4242
    43     <para>Fix an incompatibility between this package and Glibc-&glibc-version;:</para>
    44 
    45 <screen><userinput remap="pre">sed -i -e '/gets is a/d' grub-core/gnulib/stdio.in.h</userinput></screen>
    46 
    4743    <para>Prepare GRUB for compilation:</para>
    4844
  • chapter06/perl.xml

    r82d957c r5d1f0157  
    5656<screen><userinput remap="pre">export BUILD_ZLIB=False
    5757export BUILD_BZIP2=0</userinput></screen>
     58
     59    <para>Fix a potential security problem:</para>
     60
     61<screen><userinput remap="pre">patch -Np1 -i ../&perl-fix-patch;</userinput></screen>
    5862
    5963    <para>To have full control over the way Perl is set up, you can remove the
  • packages.ent

    r82d957c r5d1f0157  
    279279<!ENTITY groff-ch6-sbu "0.6 SBU">
    280280
    281 <!ENTITY grub-version "2.00">
    282 <!ENTITY grub-size "5,016 KB">
    283 <!ENTITY grub-url "&gnu;grub/grub-&grub-version;.tar.xz">
    284 <!ENTITY grub-md5 "a1043102fbc7bcedbf53e7ee3d17ab91">
     281<!ENTITY grub-version "2.02~beta2">
     282<!ENTITY grub-size "5,663 KB">
     283<!ENTITY grub-url "http://alpha.gnu.org/gnu/grub/grub-&grub-version;.tar.xz">
     284<!ENTITY grub-md5 "be62932eade308a364ea4bbc91295930">
    285285<!ENTITY grub-home "&gnu-software;grub/">
    286286<!ENTITY grub-ch6-du "110 MB">
  • patches.ent

    r82d957c r5d1f0157  
    5454<!ENTITY mpfr-fixes-patch-size "40 KB">
    5555
     56<!ENTITY perl-fix-patch "perl-&perl-version;-infinite_recurse_fix-1.patch">
     57<!ENTITY perl-fix-patch-md5 "579dfed34e97e0a2fe21b74aa53946ac">
     58<!ENTITY perl-fix-patch-size "11 KB">
     59
    5660<!ENTITY readline-fixes-patch "readline-6.3-upstream_fixes-2.patch">
    5761<!ENTITY readline-fixes-patch-md5 "97f74f1c3c83008f268b32d36e9fd376">
Note: See TracChangeset for help on using the changeset viewer.