Changeset f658b21

Timestamp:

01/20/2006 07:25:09 PM (18 years ago)

Author:

Manuel Canales Esparcia <manuel@…>

Children:

d096eb1

Parents:

23102484

Message:

Ported r7283:7284 from trunk to alphabetical.

git-svn-id: ​http://svn.linuxfromscratch.org/LFS/branches/alphabetical/BOOK@7285 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689

Files:

• chapter01/changelog.xml (modified) (1 diff)
• chapter06/glibc.xml (modified) (2 diffs)
• chapter06/perl.xml (modified) (1 diff)
• general.ent (modified) (1 diff)
• patches.ent (modified) (1 diff)

chapter01/changelog.xml

@@ -38 +38 @@
 
     <listitem>
+      <para>January 20, 2006</para>
+      <itemizedlist>
+        <listitem>
+          <para>[jhuntwork] - Added a patch to fix the sprintf security
+          vulnerability in Perl. Thanks to Tim van der Molen for pointing
+          it out.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
+      <para>January 17, 2006</para>
+      <itemizedlist>
+        <listitem>
+          <para>[jhuntwork] - Fixed locale generation for French UTF-8. Thanks
+          to Dan McGhee for the report and Alexander Patrakov for the fix.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>January 10, 2006</para>
       <itemizedlist>

chapter06/glibc.xml

@@ -180 +180 @@
 localedef -i fr_FR -f ISO-8859-1 fr_FR
 localedef -i fr_FR@euro -f ISO-8859-15 fr_FR@euro
-localedef -i fr_FR.UTF-8 -f UTF-8 fr_FR
+localedef -i fr_FR -f UTF-8 fr_FR.UTF-8
 localedef -i it_IT -f ISO-8859-1 it_IT
 localedef -i ja_JP -f EUC-JP ja_JP</userinput></screen>
@@ -529 +529 @@
 <term><filename class="libraryfile">libBrokenLocale</filename></term>
 <listitem>
-<para>Used internally by Glibc as a gross hack to get broken programs 
+<para>Used internally by Glibc as a gross hack to get broken programs
 (e.g., some Motif applications) running. See comments in
 <filename>glibc-&glibc-version;/locale/broken_cur_max.c</filename> for more

chapter06/perl.xml

@@ -28 +28 @@
 <sect2 role="installation">
 <title>Installation of Perl</title>
+
+<para>A security vulnerability exists in Perl's sprintf function. Apply the
+following patch to fix it.</para>
+
+<screen><userinput>patch -Np1 -i ../&perl-sprintf-patch;</userinput></screen>
 
 <para>First create a basic <filename>/etc/hosts</filename> file which will be

general.ent

@@ -1 +1 @@
 <?xml version="1.0" encoding="ISO-8859-1"?>
-<!ENTITY version "ALPHABETICAL-20060117">
-<!ENTITY releasedate "January 17, 2006">
+<!ENTITY version "ALPHABETICAL-20060120">
+<!ENTITY releasedate "January 20, 2006">
 <!ENTITY milestone "6.2">
 <!ENTITY generic-version "development"> <!-- Use "development", "testing", or "x.y[-pre{x}]" -->

patches.ent

@@ -39 +39 @@
 
 <!ENTITY perl-libc-patch "perl-&perl-version;-libc-1.patch">
+<!ENTITY perl-sprintf-patch "perl-&perl-version;-sprintf_vulnerability-1.patch">
 
 <!ENTITY shadow-configure-patch "shadow-&shadow-version;-configure_fix-1.patch">