Changeset 7c6284f

Timestamp:

Jul 11, 2008, 3:29:28 PM (16 years ago)

Author:

Ken Moffat <zarniwhoop@…>

Branches:

clfs-1.2, clfs-2.1, clfs-3.0.0-systemd, clfs-3.0.0-sysvinit, master, systemd, sysvinit

Children:

599f4ac

Parents:

f41b9d0

Message:

Fix known perl vulnerabilities.

Location:

BOOK

Files:

• final-system/common/perl.xml (modified) (1 diff)
• final-system/multilib/perl-64bit.xml (modified) (1 diff)
• final-system/multilib/perl-n32.xml (modified) (1 diff)
• final-system/multilib/perl.xml (modified) (1 diff)
• general.ent (modified) (1 diff)
• introduction/common/changelog.xml (modified) (1 diff)
• materials/common/patches.xml (modified) (1 diff)
• patches.ent (modified) (1 diff)

BOOK/final-system/common/perl.xml

@@ -37 +37 @@
 
 <screen os="p4"><userinput>patch -Np1 -i ../&perl-no_page_h-patch;</userinput></screen>
+
+    <para os="p5">The following patch fixes known vulnerabilities in perl:</para>
+
+<screen os="p6"><userinput>patch -Np1 -i ../&perl-security-patch;</userinput></screen>
 
     <para os="s1">The following sed causes <filename>DynaLoader.a</filename>

BOOK/final-system/multilib/perl-64bit.xml

@@ -37 +37 @@
     href="../common/perl.xml"
     xpointer="xpointer(//*[@os='p4'])"/>
+
+    <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"
+    href="../common/perl.xml"
+    xpointer="xpointer(//*[@os='p5'])"/>
+
+    <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"
+    href="../common/perl.xml"
+    xpointer="xpointer(//*[@os='p6'])"/>
 
     <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"

BOOK/final-system/multilib/perl-n32.xml

@@ -38 +38 @@
     href="../common/perl.xml"
     xpointer="xpointer(//*[@os='p4'])"/>
+
+    <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"
+    href="../common/perl.xml"
+    xpointer="xpointer(//*[@os='p5'])"/>
+
+    <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"
+    href="../common/perl.xml"
+    xpointer="xpointer(//*[@os='p6'])"/>
 
     <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"

BOOK/final-system/multilib/perl.xml

@@ -38 +38 @@
     href="../common/perl.xml"
     xpointer="xpointer(//*[@os='p4'])"/>
+
+    <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"
+    href="../common/perl.xml"
+    xpointer="xpointer(//*[@os='p5'])"/>
+
+    <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"
+    href="../common/perl.xml"
+    xpointer="xpointer(//*[@os='p6'])"/>
 
     <xi:include xmlns:xi="http://www.w3.org/2003/XInclude"

BOOK/general.ent

@@ -3 +3 @@
 <!ENTITY month "07"> <!-- Use two digits -->
 <!ENTITY month_name "July">
-<!ENTITY day "08"> <!-- Use two digits -->
+<!ENTITY day "11"> <!-- Use two digits -->
 <!ENTITY year "2008"> <!-- Use four digits -->
 

BOOK/introduction/common/changelog.xml

@@ -36 +36 @@
     </listitem>
 -->
+    <listitem>
+      <para>July 11, 2008</para>
+      <itemizedlist>
+        <listitem>
+          <para>[ken] - Add a patch to address known perl vulnerabilities.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
 
     <listitem>

BOOK/materials/common/patches.xml

@@ -220 +220 @@
 
     <varlistentry>
+      <term>Perl Security Fixes Patch - <token>&perl-security-patch-size;</token>:</term>
+      <listitem>
+        <para>Download: <ulink
+        url="&patches-root;&perl-security-patch;"/></para>
+        <para>MD5 sum: <literal>&perl-security-patch-md5;</literal></para>
+      </listitem>
+    </varlistentry>
+
+    <varlistentry>
       <term>Readline Fixes - <token>&readline-fixes-patch-size;</token>:</term>
       <listitem>

BOOK/patches.ent

@@ -95 +95 @@
 <!ENTITY perl-no_page_h-patch-size "4 KB">
 
+<!ENTITY perl-security-patch "perl-&perl-version;-security_fixes-1.patch">
+<!ENTITY perl-security-patch-md5 "918a8f41d9e4fe1e272381e58be71497">
+<!ENTITY perl-security-patch-size "10 KB">
+
 <!ENTITY readline-fixes-patch "readline-&readline-version;-fixes-4.patch">
 <!ENTITY readline-fixes-patch-md5 "14ae1c3f3ff7223656f874bcf36e6f19">