[Clfs-commits] commit: r3964 - in /trunk/BOOK: final-system/common/perl.xml final-system/multilib/perl-64bit.xml final-system/multilib/perl-n32.xml final-system/multilib/perl.xml general.ent introduction/common/changelog.xml materials/common/patches.xml patches.ent

svn at cross-lfs.org svn at cross-lfs.org
Fri Jul 11 15:29:28 PDT 2008


Author: ken
Date: Fri Jul 11 22:29:28 2008
New Revision: 3964

Log:
Fix known perl vulnerabilities.

Modified:
    trunk/BOOK/final-system/common/perl.xml
    trunk/BOOK/final-system/multilib/perl-64bit.xml
    trunk/BOOK/final-system/multilib/perl-n32.xml
    trunk/BOOK/final-system/multilib/perl.xml
    trunk/BOOK/general.ent
    trunk/BOOK/introduction/common/changelog.xml
    trunk/BOOK/materials/common/patches.xml
    trunk/BOOK/patches.ent

Modified: trunk/BOOK/final-system/common/perl.xml
==============================================================================
--- trunk/BOOK/final-system/common/perl.xml (original)
+++ trunk/BOOK/final-system/common/perl.xml Fri Jul 11 22:29:28 2008
@@ -36,6 +36,10 @@
     forward:</para>
 
 <screen os="p4"><userinput>patch -Np1 -i ../&perl-no_page_h-patch;</userinput></screen>
+
+    <para os="p5">The following patch fixes known vulnerabilities in perl:</para>
+
+<screen os="p6"><userinput>patch -Np1 -i ../&perl-security-patch;</userinput></screen>
 
     <para os="s1">The following sed causes <filename>DynaLoader.a</filename>
     to be built with -fPIC so it can be linked into a shared library

Modified: trunk/BOOK/final-system/multilib/perl-64bit.xml
==============================================================================
--- trunk/BOOK/final-system/multilib/perl-64bit.xml (original)
+++ trunk/BOOK/final-system/multilib/perl-64bit.xml Fri Jul 11 22:29:28 2008
@@ -36,6 +36,14 @@
     <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"
     href="../common/perl.xml"
     xpointer="xpointer(//*[@os='p4'])"/>
+
+    <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"
+    href="../common/perl.xml"
+    xpointer="xpointer(//*[@os='p5'])"/>
+
+    <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"
+    href="../common/perl.xml"
+    xpointer="xpointer(//*[@os='p6'])"/>
 
     <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"
     href="../common/perl.xml"

Modified: trunk/BOOK/final-system/multilib/perl-n32.xml
==============================================================================
--- trunk/BOOK/final-system/multilib/perl-n32.xml (original)
+++ trunk/BOOK/final-system/multilib/perl-n32.xml Fri Jul 11 22:29:28 2008
@@ -37,6 +37,14 @@
     <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"
     href="../common/perl.xml"
     xpointer="xpointer(//*[@os='p4'])"/>
+
+    <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"
+    href="../common/perl.xml"
+    xpointer="xpointer(//*[@os='p5'])"/>
+
+    <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"
+    href="../common/perl.xml"
+    xpointer="xpointer(//*[@os='p6'])"/>
 
     <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"
     href="../common/perl.xml"

Modified: trunk/BOOK/final-system/multilib/perl.xml
==============================================================================
--- trunk/BOOK/final-system/multilib/perl.xml (original)
+++ trunk/BOOK/final-system/multilib/perl.xml Fri Jul 11 22:29:28 2008
@@ -37,6 +37,14 @@
     <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"
     href="../common/perl.xml"
     xpointer="xpointer(//*[@os='p4'])"/>
+
+    <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"
+    href="../common/perl.xml"
+    xpointer="xpointer(//*[@os='p5'])"/>
+
+    <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"
+    href="../common/perl.xml"
+    xpointer="xpointer(//*[@os='p6'])"/>
 
     <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"
     href="../common/perl.xml"

Modified: trunk/BOOK/general.ent
==============================================================================
--- trunk/BOOK/general.ent (original)
+++ trunk/BOOK/general.ent Fri Jul 11 22:29:28 2008
@@ -2,7 +2,7 @@
 
 <!ENTITY month "07"> <!-- Use two digits -->
 <!ENTITY month_name "July">
-<!ENTITY day "08"> <!-- Use two digits -->
+<!ENTITY day "11"> <!-- Use two digits -->
 <!ENTITY year "2008"> <!-- Use four digits -->
 
 <!ENTITY releasedate "&month_name; &day;, &year;">

Modified: trunk/BOOK/introduction/common/changelog.xml
==============================================================================
--- trunk/BOOK/introduction/common/changelog.xml (original)
+++ trunk/BOOK/introduction/common/changelog.xml Fri Jul 11 22:29:28 2008
@@ -35,6 +35,14 @@
       </itemizedlist>
     </listitem>
 -->
+    <listitem>
+      <para>July 11, 2008</para>
+      <itemizedlist>
+	<listitem>
+          <para>[ken] - Add a patch to address known perl vulnerabilities.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
 
     <listitem>
       <para>July 7, 2008</para>

Modified: trunk/BOOK/materials/common/patches.xml
==============================================================================
--- trunk/BOOK/materials/common/patches.xml (original)
+++ trunk/BOOK/materials/common/patches.xml Fri Jul 11 22:29:28 2008
@@ -219,6 +219,15 @@
     </varlistentry>
 
     <varlistentry>
+      <term>Perl Security Fixes Patch - <token>&perl-security-patch-size;</token>:</term>
+      <listitem>
+        <para>Download: <ulink
+        url="&patches-root;&perl-security-patch;"/></para>
+        <para>MD5 sum: <literal>&perl-security-patch-md5;</literal></para>
+      </listitem>
+    </varlistentry>
+
+    <varlistentry>
       <term>Readline Fixes - <token>&readline-fixes-patch-size;</token>:</term>
       <listitem>
         <para>Download: <ulink

Modified: trunk/BOOK/patches.ent
==============================================================================
--- trunk/BOOK/patches.ent (original)
+++ trunk/BOOK/patches.ent Fri Jul 11 22:29:28 2008
@@ -94,6 +94,10 @@
 <!ENTITY perl-no_page_h-patch-md5 "fe49a8a539b14f53adfe24482c1fbe1f">
 <!ENTITY perl-no_page_h-patch-size "4 KB">
 
+<!ENTITY perl-security-patch "perl-&perl-version;-security_fixes-1.patch">
+<!ENTITY perl-security-patch-md5 "918a8f41d9e4fe1e272381e58be71497">
+<!ENTITY perl-security-patch-size "10 KB">
+
 <!ENTITY readline-fixes-patch "readline-&readline-version;-fixes-4.patch">
 <!ENTITY readline-fixes-patch-md5 "14ae1c3f3ff7223656f874bcf36e6f19">
 <!ENTITY readline-fixes-patch-size "20 KB">




More information about the Clfs-commits mailing list