Add security fixes for Glibc. Fixes #2790.

git-svn-id: http://svn.linuxfromscratch.org/LFS/trunk/BOOK@9414 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689

chapter01/changelog.xml

@@ -39,6 +39,10 @@
     <listitem>
       <para>2010-11-10</para>
       <itemizedlist>
+        <listitem>
+          <para>[matthew] Add security fixes for Glibc. Fixes
+          <ulink url="&lfs-ticket-root;2790">#2790</ulink>.</para>
+        </listitem>
         <listitem>
           <para>[matthew] Upgrade to Man-Pages-3.30. Fixes
           <ulink url="&lfs-ticket-root;2788">#2788</ulink>.</para>

chapter01/whatsnew.xml

@@ -223,6 +223,10 @@
       <para>bash-4.1-fixes-3.patch</para>
     </listitem>
 
+    <listitem>
+      <para>bzip2-1.0.6-install_docs-1.patch</para>
+    </listitem>
+
     <listitem>
       <para>coreutils-8.6-i18n-1.patch</para>
     </listitem>
@@ -232,11 +236,15 @@
     </listitem>
 
     <listitem>
-      <para>perl-5.12.2-libc-1.patch</para>
+      <para>glibc-2.12.1-ld_audit_fix-1.patch</para>
     </listitem>
 
     <listitem>
-      <para>bzip2-1.0.6-install_docs-1.patch</para>
+      <para>glibc-2.12.1-origin_fix-1.patch</para>
+    </listitem>
+
+    <listitem>
+      <para>perl-5.12.2-libc-1.patch</para>
     </listitem>
 
     <listitem>

chapter03/patches.xml

@@ -90,6 +90,14 @@
       </listitem>
     </varlistentry>
 
+    <varlistentry>
+      <term>Glibc LD Audit Patch - <token>&glibc-ldaudit-patch-size;</token>:</term>
+      <listitem>
+        <para>Download: <ulink url="&patches-root;&glibc-ldaudit-patch;"/></para>
+        <para>MD5 sum: <literal>&glibc-ldaudit-patch-md5;</literal></para>
+      </listitem>
+    </varlistentry>
+
     <varlistentry>
       <term>Glibc Makefile Fix Patch - <token>&glibc-makefile_fix-patch-size;</token>:</term>
       <listitem>
@@ -98,6 +106,14 @@
       </listitem>
     </varlistentry>
 
+    <varlistentry>
+      <term>Glibc Origin Patch - <token>&glibc-origin-patch-size;</token>:</term>
+      <listitem>
+        <para>Download: <ulink url="&patches-root;&glibc-origin-patch;"/></para>
+        <para>MD5 sum: <literal>&glibc-origin-patch-md5;</literal></para>
+      </listitem>
+    </varlistentry>
+
 <!--
     <varlistentry>
       <term>GRUB Disk Geometry Patch - <token>&grub-geometry-patch-size;</token>:</term>

chapter06/glibc.xml

@@ -101,6 +101,11 @@ unset DL</userinput></screen>
 
 <screen><userinput remap="pre">patch -Np1 -i ../&glibc-makefile_fix-patch;</userinput></screen>
 
+    <para>Apply 2 patches that fix security vulnerabilities in this version of Glibc:</para>
+
+<screen><userinput remap="pre">patch -Np1 -i ../&glibc-ldaudit-patch;
+patch -Np1 -i ../&glibc-origin-patch;</userinput></screen>
+
     <para>The Glibc documentation recommends building Glibc outside of the source
     directory in a dedicated build directory:</para>
 

patches.ent

@@ -49,10 +49,18 @@
 <!ENTITY glibc-gcc_fix-patch-md5 "d1f28cb98acb9417fe52596908bbb9fd">
 <!ENTITY glibc-gcc_fix-patch-size "2.5 KB">
 
+<!ENTITY glibc-ldaudit-patch "glibc-&glibc-version;-ld_audit_fix-1.patch">
+<!ENTITY glibc-ldaudit-patch-md5 "10e1bae28413ec9086f63abba34a1e2e">
+<!ENTITY glibc-ldaudit-patch-size "7.9 KB">
+
 <!ENTITY glibc-makefile_fix-patch "glibc-&glibc-version;-makefile_fix-1.patch">
 <!ENTITY glibc-makefile_fix-patch-md5 "0ef634ac78e582f45d0e7643bfda7505">
 <!ENTITY glibc-makefile_fix-patch-size "1 KB">
 
+<!ENTITY glibc-origin-patch "glibc-&glibc-version;-origin_fix-1.patch">
+<!ENTITY glibc-origin-patch-md5 "aa81dd9594648707e86c764ce8b2e1c8">
+<!ENTITY glibc-origin-patch-size "2.9 KB">
+
 
 <!ENTITY grub-inode-patch "grub-&grub-version;-256byte_inode-1.patch">
 <!ENTITY grub-inode-patch-md5 "2482bef9c1866b4045767a56268ba673">