Changeset de8b6cb

Timestamp:

08/20/2021 08:47:13 PM (3 years ago)

Author:

Bruce Dubbs <bdubbs@…>

Branches:

11.0, 11.0-rc2, 11.0-rc3, 11.1, 11.1-rc1, 11.2, 11.2-rc1, 11.3, 11.3-rc1, 12.0, 12.0-rc1, 12.1, 12.1-rc1, 12.2, 12.2-rc1, arm, bdubbs/gcc13, ml-11.0, multilib, renodr/libudev-from-systemd, s6-init, trunk, xry111/arm64, xry111/arm64-12.0, xry111/clfs-ng, xry111/lfs-next, xry111/loongarch, xry111/loongarch-12.0, xry111/loongarch-12.1, xry111/loongarch-12.2, xry111/mips64el, xry111/multilib, xry111/pip3, xry111/rust-wip-20221008, xry111/update-glibc

Children:

0e89a47

Parents:

658a5da

Message:

Fix security issue in Chapter 8 glibc.
Add a sed to glibc in Chapter 8 to fix a critical security issue.

Files:

• chapter01/changelog.xml (modified) (1 diff)
• chapter08/glibc.xml (modified) (1 diff)

chapter01/changelog.xml

@@ -44 +44 @@
     -->
     <listitem>
+      <para>2021-08-20</para>
+      <itemizedlist>
+        <listitem>
+           <para>[bdubbs] - Add a sed to glibc in Chapter 8 to fix a 
+           critical security issue.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>2021-08-18</para>
       <itemizedlist>

chapter08/glibc.xml

@@ -43 +43 @@
   <sect2 role="installation">
     <title>Installation of Glibc</title>
+
+    <para>First, fix a security problem identified upstream:</para>
+
+    <screen><userinput remap="pre">sed -e '/NOTIFY_REMOVED)/s/)/ \&amp;\&amp; data.attr != NULL)/' \
+    -i sysdeps/unix/sysv/linux/mq_notify.c</userinput></screen> 
 
     <para>Some of the Glibc programs use the non-FHS compliant