Pārlūkot izejas kodu

Update Vim's security patch to fix the latest modeline vulnerability

git-svn-id: http://svn.linuxfromscratch.org/LFS/trunk/BOOK@6614 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689
Matthew Burgess 20 gadi atpakaļ
vecāks
revīzija
329d049e17
5 mainītis faili ar 11 papildinājumiem un 6 dzēšanām
  1. 5 0
      chapter01/changelog.xml
  2. 1 1
      chapter03/patches.xml
  3. 2 2
      chapter06/vim.xml
  4. 2 2
      general.ent
  5. 1 1
      patches.ent

+ 5 - 0
chapter01/changelog.xml

@@ -93,6 +93,7 @@ First a summary, then a detailed log.</para>
 <listitem><para>&glibc-testfix-patch;</para></listitem>
 <listitem><para>&perl-libc-patch;</para></listitem>
 <listitem><para>&mktemp-tempfile-patch;</para></listitem>
+<listitem><para>&vim-security_fix-patch;</para></listitem>
 </itemizedlist>
 </listitem>
 
@@ -106,10 +107,14 @@ First a summary, then a detailed log.</para>
 <listitem><para>iproute2-2.6.11-050330-remove_db-1.patch</para></listitem>
 <listitem><para>mktemp-1.5-add_tempfile-2.patch</para></listitem>
 <listitem><para>perl-5.8.6-libc-1.patch</para></listitem>
+<listitem><para>vim-6.3-security_fix-1.patch</para></listitem>
 <listitem><para>zlib-1.2.2-security_fix-1.patch</para></listitem>
 </itemizedlist>
 </listitem>
 
+<listitem><para>August 6th, 2005 [matt]: Updated Vim's security patch to address
+the latest modeline vulnerability</para></listitem>
+
 <listitem><para>July  30th, 2005 [matt]: Added instructions for installing Bash
 documentation (Randy McMurchy).</para></listitem>
 

+ 1 - 1
chapter03/patches.xml

@@ -142,7 +142,7 @@ needed to build an LFS system:</para>
 </varlistentry>
 
 <varlistentry>
-<term>Vim Security Patch - 8 KB:</term><listitem>
+<term>Vim Security Patch - 9 KB:</term><listitem>
 <para><ulink url="&patches-root;&vim-security_fix-patch;"/></para>
 </listitem>
 </varlistentry>

+ 2 - 2
chapter06/vim.xml

@@ -46,8 +46,8 @@ class="directory">/etc</filename>:</para>
 
 <screen><userinput>echo '#define SYS_VIMRC_FILE "/etc/vimrc"' &gt;&gt; src/feature.h</userinput></screen>
 
-<para>Vim has a security vulnerability already addressed upstream.  The
-following patch fixes the problem:</para>
+<para>Vim has two known security vulnerabilities that have already been
+addressed upstream.  The following patch fixes the problems:</para>
 
 <screen><userinput>patch -Np1 -i ../&vim-security_fix-patch;</userinput></screen>
 

+ 2 - 2
general.ent

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="ISO-8859-1"?>
-<!ENTITY version "SVN-20050730">
-<!ENTITY releasedate "July 30, 2005">
+<!ENTITY version "SVN-20050806">
+<!ENTITY releasedate "August 6, 2005">
 <!ENTITY milestone "6.2">
 <!ENTITY generic-version "development"> <!-- Use "development", "testing", or "x.y[-pre{x}]" -->
 

+ 1 - 1
patches.ent

@@ -33,4 +33,4 @@
 
 <!ENTITY util-linux-cramfs-patch "util-linux-&util-linux-version;-cramfs-1.patch">
 
-<!ENTITY vim-security_fix-patch "vim-&vim-version;-security_fix-1.patch">
+<!ENTITY vim-security_fix-patch "vim-&vim-version;-security_fix-2.patch">