Parcourir la source

Add a patch to fix a security vulnerability in util-linux

git-svn-id: http://svn.linuxfromscratch.org/LFS/branches/6.1.1/BOOK@7013 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689
Matthew Burgess il y a 20 ans
Parent
commit
297bbf1b78
3 fichiers modifiés avec 15 ajouts et 0 suppressions
  1. 4 0
      chapter01/changelog.xml
  2. 6 0
      chapter03/patches.xml
  3. 5 0
      chapter06/util-linux.xml

+ 4 - 0
chapter01/changelog.xml

@@ -29,6 +29,7 @@ First a summary, then a detailed log.</para>
 <listitem><para>texinfo-4.8-tempfile_fix-1.patch</para></listitem>
 <listitem><para>bzip2-1.0.3-install_docs-1.patch</para></listitem>
 <listitem><para>bzip2-1.0.3-bzgrep_security-1.patch</para></listitem>
+<listitem><para>util-linux-2.12q-umount_fix-1.patch</para></listitem>
 <listitem><para>vim-6.3-security_fix-2.patch</para></listitem>
 </itemizedlist>
 </listitem>
@@ -39,6 +40,9 @@ First a summary, then a detailed log.</para>
 </itemizedlist>
 </listitem>
 
+<listitem><para>October 14th, 2005 [matt]: Added a patch to fix a security
+vulnerability in util-linux.</para></listitem>
+
 <listitem><para>October 14th, 2005 [matt]: Added the updated vim security patch.
 </para></listitem>
 

+ 6 - 0
chapter03/patches.xml

@@ -175,6 +175,12 @@ needed to build an LFS system:</para>
 </listitem>
 </varlistentry>
 
+<varlistentry>
+<term>Util-linux Umount Patch - 1 KB:</term> <listitem>
+<para><ulink url="&patches-root;util-linux-&util-linux-version;-umount_fix-1.patch"/></para>
+</listitem>
+</varlistentry>
+
 <varlistentry>
 <term>Vim Security Patch - 8 KB:</term><listitem>
 <para><ulink url="&patches-root;vim-&vim-version;-security_fix-2.patch"/></para>

+ 5 - 0
chapter06/util-linux.xml

@@ -51,6 +51,11 @@ The following patch properly fixes this issue:</para>
 
 <screen><userinput>patch -Np1 -i ../util-linux-&util-linux-version;-cramfs-1.patch</userinput></screen>
 
+<para>Util-linux has a security vulnerability that could allow a user to remount
+a volume without the nosuid option. The following patch fixes this issue:</para>
+
+<screen><userinput>patch -Np1 -i ../util-linux-&util-linux-version;-umount_fix-1.patch</userinput></screen>
+
 <para>Prepare Util-linux for compilation:</para>
 
 <screen><userinput>./configure</userinput></screen>