Changeset bb189b0


Ignore:
Timestamp:
04/24/2015 03:19:38 AM (9 years ago)
Author:
Bruce Dubbs <bdubbs@…>
Branches:
10.0, 10.0-rc1, 10.1, 10.1-rc1, 11.0, 11.0-rc1, 11.0-rc2, 11.0-rc3, 11.1, 11.1-rc1, 11.2, 11.2-rc1, 11.3, 11.3-rc1, 12.0, 12.0-rc1, 12.1, 12.1-rc1, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, arm, bdubbs/gcc13, ml-11.0, multilib, renodr/libudev-from-systemd, s6-init, trunk, xry111/arm64, xry111/arm64-12.0, xry111/clfs-ng, xry111/lfs-next, xry111/loongarch, xry111/loongarch-12.0, xry111/loongarch-12.1, xry111/mips64el, xry111/pip3, xry111/rust-wip-20221008, xry111/update-glibc
Children:
320fdc6
Parents:
41727289
Message:

Added a fix for security issue in Glibc (CVE-2015-1781).
Thanks to Ken Moffat for identifying the proplem and the fix.

Fixed Ncurses and Perl build with GCC 5. Thanks to Ken Moffat and
Douglas R. Reno for providing the patches.

Updated to GCC-5.1.0. Imported changes from systemd version.

git-svn-id: ​http://svn.linuxfromscratch.org/LFS/trunk/BOOK@10903 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689

Files:
12 edited

Legend:

Unmodified
Added
Removed

  • chapter01/changelog.xml

    r41727289 rbb189b0  
    3838
    3939    <listitem>
     40      <para>2015-04-24</para>
     41      <itemizedlist>
     42        <listitem>
     43          <para>[krejzi] - Added a fix for security issue
     44          in Glibc (CVE-2015-1781). Thanks to Ken Moffat
     45          for identifying the proplem and the fix.</para>
     46        </listitem>
     47        <listitem>
     48          <para>[krejzi] - Fixed Ncurses and Perl build
     49          with GCC 5. Thanks to Ken Moffat and Douglas
     50          R. Reno for providing the patches.</para>
     51        </listitem>
     52        <listitem>
     53          <para>[krejzi] - Updated to GCC-5.1.0. Fixes
     54          <ulink url="&lfs-ticket-root;3779">#3779</ulink>.</para>
     55        </listitem>
     56      </itemizedlist>
     57    </listitem>
     58
     59    <listitem>
    4060      <para>2015-04-21</para>
    4161      <itemizedlist>

  • chapter01/whatsnew.xml

    r41727289 rbb189b0  
    8686      <para>Gawk &gawk-version;</para>
    8787    </listitem>-->
    88     <!--<listitem>
     88    <listitem>
    8989      <para>GCC &gcc-version;</para>
    90     </listitem>-->
     90    </listitem>
    9191    <!--<listitem>
    9292      <para>GDBM &gdbm-version;</para>
    … …  
    249249    </listitem>
    250250
     251    <listitem>
     252      <para>&ncurses-gcc5-buildfixes-patch;</para>
     253    </listitem>
     254
     255    <listitem>
     256      <para>&perl-gcc5-fixes-patch;</para>
     257    </listitem>
     258
    251259    <!--<listitem>
    252260      <para>&bash-fixes-patch;</para>

  • chapter03/patches.xml

    r41727289 rbb189b0  
    124124      </listitem>
    125125    </varlistentry>
    126 <!--
     126
    127127    <varlistentry>
    128       <term>Perl Data::Dumper Patch - <token>&perl-fix-patch-size;</token>:</term>
     128      <term>Ncurses GCC 5 Fixes Patch - <token>&ncurses-gcc5-buildfixes-patch-size;</token>:</term>
    129129      <listitem>
    130         <para>Download: <ulink url="&patches-root;&perl-fix-patch;"/></para>
    131         <para>MD5 sum: <literal>&perl-fix-patch-md5;</literal></para>
     130        <para>Download: <ulink url="&patches-root;&ncurses-gcc5-buildfixes-patch;"/></para>
     131        <para>MD5 sum: <literal>&ncurses-gcc5-buildfixes-patch-md5;</literal></para>
    132132      </listitem>
    133133    </varlistentry>
    134 -->
     134
     135    <varlistentry>
     136      <term>Perl GCC 5 Fixes Patch - <token>&perl-gcc5-fixes-patch-size;</token>:</term>
     137      <listitem>
     138        <para>Download: <ulink url="&patches-root;&perl-gcc5-fixes-patch;"/></para>
     139        <para>MD5 sum: <literal>&perl-gcc5-fixes-patch-md5;</literal></para>
     140      </listitem>
     141    </varlistentry>
     142
    135143    <varlistentry>
    136144      <term>Readline Upstream Fixes Patch - <token>&readline-fixes-patch-size;</token>:</term>

  • chapter05/glibc.xml

    r41727289 rbb189b0  
    4444    <title>Installation of Glibc</title>
    4545
     46<!-- The enable-obsolete-rpc should handle this just fine.
    4647    <para>In some cases, particularly LFS 7.1, the rpc headers were not
    4748    installed properly.  Test to see if they are installed in the host system
    … …  
    5253  su -c 'cp -v sunrpc/rpc/*.h /usr/include/rpc'
    5354fi</userinput></screen>
    54 
     55-->
    5556    <para>Fix a regression in the package that affects 32-bit architectures:</para>
    5657
    … …  
    8889      --disable-profile                             \
    8990      --enable-kernel=&min-kernel;                        \
     91      --enable-obsolete-rpc                         \
    9092      --with-headers=/tools/include                 \
    9193      libc_cv_forced_unwind=yes                     \
    … …  
    119121          for &min-kernel; and later Linux kernels.  Workarounds for older
    120122          kernels are not enabled.</para>
     123        </listitem>
     124      </varlistentry>
     125
     126      <varlistentry>
     127        <term><parameter>--enable-obsolete-rpc</parameter></term>
     128        <listitem>
     129          <para>This installs NIS and RPC related headers that are not
     130          installed by default. They are required to build GCC and by
     131          several BLFS packages.</para>
    121132        </listitem>
    122133      </varlistentry>

  • chapter05/libstdc++.xml

    r41727289 rbb189b0  
    5151    <para>Create a directory for Libstdc++ and enter it:</para>
    5252
    53 <screen><userinput remap="pre">mkdir -pv ../gcc-build
     53<screen><userinput remap="pre">mkdir -v ../gcc-build
    5454cd ../gcc-build</userinput></screen>
    5555
    … …  
    6060    --prefix=/tools                 \
    6161    --disable-multilib              \
    62     --disable-shared                \
    6362    --disable-nls                   \
    6463    --disable-libstdcxx-threads     \

  • chapter05/ncurses.xml

    r41727289 rbb189b0  
    4343  <sect2 role="installation">
    4444    <title>Installation of Ncurses</title>
     45
     46    <para>First, apply a patch to prevent a build failure
     47    when building with GCC 5:</para>
     48
     49<screen><userinput remap="pre">patch -Np1 -i ../&ncurses-gcc5-buildfixes-patch;</userinput></screen>
    4550
    4651    <para>Prepare Ncurses for compilation:</para>

  • chapter06/glibc.xml

    r41727289 rbb189b0  
    7575    -i  sysdeps/i386/i686/multiarch/mempcpy_chk.S</userinput></screen>
    7676
     77    <para>Fix a potential security issue identified upstream:</para>
     78
     79<screen><userinput remap="pre">sed -i '/glibc.*pad/{i\  buflen = buflen > pad ? buflen - pad : 0;
     80                     s/ + pad//}' resolv/nss_dns/dns-host.c</userinput></screen>
     81
     82    <para>Fix a test case that fails when built using GCC 5:</para>
     83
     84<screen><userinput remap="pre">sed -e '/tst-audit2-ENV/i CFLAGS-tst-audit2.c += -fno-builtin' \
     85    -i elf/Makefile</userinput></screen>
     86
    7787    <para>The Glibc documentation recommends building Glibc outside of the source
    7888    directory in a dedicated build directory:</para>
    … …  
    8898    --enable-kernel=&min-kernel; \
    8999    --enable-obsolete-rpc</userinput></screen>
    90 
    91     <variablelist>
    92       <title>The meaning of the new configure options:</title>
    93 
    94       <varlistentry>
    95         <term><parameter>--enable-obsolete-rpc</parameter></term>
    96         <listitem>
    97           <para>Installs NIS and RPC related headers that are not installed by
    98           default; these are required to rebuild Glibc and by several BLFS
    99           packages.</para>
    100         </listitem>
    101       </varlistentry>
    102 
    103     </variablelist>
    104100
    105101    <para>Compile the package:</para>

  • chapter06/ncurses.xml

    r41727289 rbb189b0  
    4141  <sect2 role="installation">
    4242    <title>Installation of Ncurses</title>
     43
     44    <para>First, apply a patch to prevent a build failure
     45    when building with GCC 5:</para>
     46
     47<screen><userinput remap="pre">patch -Np1 -i ../&ncurses-gcc5-buildfixes-patch;</userinput></screen>
    4348
    4449    <para>Don't install a static library that is not handled by configure:</para>

  • chapter06/perl.xml

    r41727289 rbb189b0  
    5656<screen><userinput remap="pre">export BUILD_ZLIB=False
    5757export BUILD_BZIP2=0</userinput></screen>
    58 <!--
    59     <para>Fix a potential security problem:</para>
    60 
    61 <screen><userinput remap="pre">patch -Np1 -i ../&perl-fix-patch;</userinput></screen>
    62 -->
     58
     59    <para>Apply a patch to allow the Errno.pm module and the h2ph
     60    program to build correctly when building with GCC 5:</para>
     61
     62<screen><userinput remap="pre">patch -Np1 -i ../&perl-gcc5-fixes-patch;</userinput></screen>
     63
    6364    <para>To have full control over the way Perl is set up, you can remove the
    6465    <quote>-des</quote> options from the following command and hand-pick the way

  • general.ent

    r41727289 rbb189b0  
    1 <!ENTITY version         "SVN-20150421">
     1<!ENTITY version         "SVN-20150424">
    22<!ENTITY short-version   "svn">  <!-- Used below in &blfs-book;. Change to x.y for release
    33                                      but not -rc releases -->
    4 <!ENTITY releasedate     "April 21, 2015">
     4<!ENTITY releasedate     "April 24, 2015">
    55<!ENTITY copyrightdate   "1999-2015"><!-- jhalfs needs a literal dash, not &ndash; -->
    66<!ENTITY milestone       "7.8">
    … …  
    99<!ENTITY lfs-root        "http://www.linuxfromscratch.org/">
    1010<!ENTITY blfs-root       "&lfs-root;blfs/">
    11 <!ENTITY blfs-book       "&blfs-root;view/&short-version;/"> 
     11<!ENTITY blfs-book       "&blfs-root;view/&short-version;/">
    1212<!ENTITY faq-root        "&lfs-root;faq/">
    1313<!ENTITY hints-root      "&lfs-root;hints/downloads/files/">

  • packages.ent

    r41727289 rbb189b0  
    197197<!ENTITY gawk-ch6-sbu "0.3 SBU">
    198198
    199 <!ENTITY gcc-version "4.9.2">
    200 <!ENTITY gcc-size "87,832 KB">
     199<!ENTITY gcc-version "5.1.0">
     200<!ENTITY gcc-size "92,736 KB">
    201201<!ENTITY gcc-url "&gnu;gcc/gcc-&gcc-version;/gcc-&gcc-version;.tar.bz2">
    202 <!ENTITY gcc-md5 "4df8ee253b7f3863ad0b86359cd39c43">
     202<!ENTITY gcc-md5 "d5525b1127d07d215960e6051c5da35e">
    203203<!ENTITY gcc-home "http://gcc.gnu.org/">
    204 <!ENTITY gcc-ch5p1-du "2.0 GB">
    205 <!ENTITY gcc-ch5p1-sbu "5.9 SBU">
    206 <!ENTITY gcc-ch5p2-du "2.6 GB">
    207 <!ENTITY gcc-ch5p2-sbu "7.7 SBU">
    208 <!ENTITY gcc-ch6-du "2.9 GB ">
    209 <!ENTITY gcc-ch6-sbu "63 SBU (with tests)">
    210 
    211 <!ENTITY libstdcpp-ch5-du "798 MB">
    212 <!ENTITY libstdcpp-ch5-sbu "0.3 SBU">
     204<!ENTITY gcc-ch5p1-du "2.4 GB">
     205<!ENTITY gcc-ch5p1-sbu "8.0 SBU">
     206<!ENTITY gcc-ch5p2-du "2.8 GB">
     207<!ENTITY gcc-ch5p2-sbu "10.2 SBU">
     208<!ENTITY gcc-ch6-du "2.6 GB ">
     209<!ENTITY gcc-ch6-sbu "92 SBU (with tests)">
     210
     211<!ENTITY libstdcpp-ch5-du "838 MB">
     212<!ENTITY libstdcpp-ch5-sbu "0.4 SBU">
    213213
    214214<!ENTITY gdbm-version "1.11">

  • patches.ent

    r41727289 rbb189b0  
    3131<!ENTITY mpfr-fixes-patch-size "38 KB">
    3232
    33 <!--
    34 <!ENTITY perl-fix-patch "perl-&perl-version;-infinite_recurse_fix-1.patch">
    35 <!ENTITY perl-fix-patch-md5 "579dfed34e97e0a2fe21b74aa53946ac">
    36 <!ENTITY perl-fix-patch-size "11 KB">
    37 -->
     33<!ENTITY ncurses-gcc5-buildfixes-patch "ncurses-&ncurses-version;-gcc5_buildfixes-1.patch">
     34<!ENTITY ncurses-gcc5-buildfixes-patch-md5 "f9015f670940350a3fc3c2ef347e2b33">
     35<!ENTITY ncurses-gcc5-buildfixes-patch-size "4 KB">
     36
     37<!ENTITY perl-gcc5-fixes-patch "perl-&perl-version;-gcc5_fixes-1.patch">
     38<!ENTITY perl-gcc5-fixes-patch-md5 "30f4907f63ec3ef7d50fa55e12d2923e">
     39<!ENTITY perl-gcc5-fixes-patch-size "8 KB">
    3840
    3941<!ENTITY readline-fixes-patch "readline-&readline-version;-upstream_fixes-3.patch">
Note: See TracChangeset for help on using the changeset viewer.