Changeset 855ab9a

Timestamp:

01/11/2019 04:49:55 PM (5 years ago)

Author:

Douglas R. Reno <renodr@…>

Branches:

10.0, 10.0-rc1, 10.1, 10.1-rc1, 11.0, 11.0-rc1, 11.0-rc2, 11.0-rc3, 11.1, 11.1-rc1, 11.2, 11.2-rc1, 11.3, 11.3-rc1, 12.0, 12.0-rc1, 12.1, 12.1-rc1, 8.4, 9.0, 9.1, arm, bdubbs/gcc13, ml-11.0, multilib, renodr/libudev-from-systemd, s6-init, trunk, xry111/arm64, xry111/arm64-12.0, xry111/clfs-ng, xry111/lfs-next, xry111/loongarch, xry111/loongarch-12.0, xry111/loongarch-12.1, xry111/mips64el, xry111/pip3, xry111/rust-wip-20221008, xry111/update-glibc

Children:

6ff35e9

Parents:

16dc51d

Message:

Add systemd security patch. Please update as soon as you can.

git-svn-id: ​http://svn.linuxfromscratch.org/LFS/trunk/BOOK@11500 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689

Files:

• chapter01/changelog.xml (modified) (1 diff)
• chapter03/patches.xml (modified) (2 diffs)
• chapter06/systemd.xml (modified) (1 diff)
• general.ent (modified) (1 diff)
• patches.ent (modified) (1 diff)

chapter01/changelog.xml

@@ -43 +43 @@
     appropriate for the entry or if needed the entire day's listitem.
 -->
+
+    <listitem revision="systemd">
+      <para>2019-01-11</para>
+      <itemizedlist>
+        <listitem>
+          <para>[renodr] - Add a security patch for systemd-240. This fixes
+          CVE-2018-16865 and CVE-2018-16864 (memory corruption in journald
+          leading to stack overflows / arbitrary code execution).
+          Apply this as soon as you can. Fixes
+          <ulink url="&lfs-ticket-root;4408">#4408</ulink>.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
     <listitem>
       <para>2019-01-10</para>

chapter03/patches.xml

@@ -117 +117 @@
     </varlistentry>
 
-<!-- 
     <varlistentry revision="systemd">
       <term>Systemd security patch - <token>&systemd-security-patch-size;</token>:</term>
@@ -125 +124 @@
       </listitem>
     </varlistentry>
--->
-<!--
-    <varlistentry revision="systemd">
-      <term>systemd glibc patch - <token>&systemd-glibc-patch-size;</token>:</term>
-      <listitem>
-        <para>Download: <ulink url="&patches-root;&systemd-glibc-patch;"/></para>
-        <para>MD5 sum: <literal>&systemd-glibc-patch-md5;</literal></para>
-      </listitem>
-    </varlistentry>
-
-    <varlistentry revision="systemd">
-      <term>systemd meson fixes patch - <token>&systemd-meson-patch-size;</token>:</term>
-      <listitem>
-        <para>Download: <ulink url="&patches-root;&systemd-meson-patch;"/></para>
-        <para>MD5 sum: <literal>&systemd-meson-patch-md5;</literal></para>
-      </listitem>
-    </varlistentry>
-    -->
 
   </variablelist>

chapter06/systemd.xml

@@ -40 +40 @@
   <sect2 role="installation">
     <title>Installation of systemd</title>
+
+    <para>Apply a patch to fix two critical security vulnerabilities:</para>
+
+<screen><userinput remap="pre">patch -Np1 -i ../systemd-240-security_fixes-1.patch</userinput></screen>
 
     <para>Create a symlink to work around missing xsltproc:</para>

general.ent

@@ -1 @@
-<!ENTITY version         "SVN-20190109">
+<!ENTITY version         "SVN-20190111">
 <!ENTITY short-version   "svn">  <!-- Used below in &blfs-book; 
                                       Change to x.y for release but not -rc releases -->
 <!ENTITY generic-version "development"> <!-- Use "development"  or "x.y[-pre{x}]" -->
 
-<!ENTITY versiond        "20190101-systemd">
+<!ENTITY versiond        "20190111-systemd">
 <!ENTITY short-versiond  "systemd">
 <!ENTITY generic-versiond "systemd"> 
 
-<!ENTITY releasedate     "January 9, 2019">
+<!ENTITY releasedate     "January 11, 2019">
 
 <!ENTITY copyrightdate   "1999-2019"><!-- jhalfs needs a literal dash, not &ndash; -->

patches.ent

@@ -58 +58 @@
 <!ENTITY sysvinit-consolidated-patch-size "2.6 KB">
 
-<!-- 
-<!ENTITY systemd-security-patch "systemd-&systemd-version;-security_fix-1.patch">
-<!ENTITY systemd-security-patch-md5 "aa9d81fec9a3875a54e63af86904513a">
-<!ENTITY systemd-security-patch-size "4 KB">
--->
-<!--
-<!ENTITY systemd-glibc-patch "systemd-&systemd-version;-glibc_statx_fix-1.patch">
-<!ENTITY systemd-glibc-patch-md5 "a44057d6a6ca69760bafc126458d89e5">
-<!ENTITY systemd-glibc-patch-size "4 KB">
-
-<!ENTITY systemd-meson-patch "systemd-&systemd-version;-meson-0.48.0_fixes-1.patch">
-<!ENTITY systemd-meson-patch-md5 "0e12e0722bd6bb84e8a4ec4de8979722">
-<!ENTITY systemd-meson-patch-size "4 KB">
--->
+<!ENTITY systemd-security-patch "systemd-&systemd-version;-security_fixes-1.patch">
+<!ENTITY systemd-security-patch-md5 "e0e27d1e5eb527f0ce2ac55b808cb7b2">
+<!ENTITY systemd-security-patch-size "12 KB">