aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorBruce Dubbs <bdubbs@linuxfromscratch.org>2021-08-20 15:47:13 -0500
committerBruce Dubbs <bdubbs@linuxfromscratch.org>2021-08-20 15:47:13 -0500
commitde8b6cb08abf05452b2e26dcc0329954bb98e822 (patch)
tree4bf91f13865b2e76e1f6640baa58399a4ceb6a57
parent658a5da5fb4ed308f9bfd9524baefd444de51a94 (diff)
Fix security issue in Chapter 8 glibc.
Add a sed to glibc in Chapter 8 to fix a critical security issue.
-rw-r--r--chapter01/changelog.xml10
-rw-r--r--chapter08/glibc.xml5
2 files changed, 15 insertions, 0 deletions
diff --git a/chapter01/changelog.xml b/chapter01/changelog.xml
index 7652e4c38..ceeae7902 100644
--- a/chapter01/changelog.xml
+++ b/chapter01/changelog.xml
@@ -43,6 +43,16 @@
appropriate for the entry or if needed the entire day's listitem.
-->
<listitem>
+ <para>2021-08-20</para>
+ <itemizedlist>
+ <listitem>
+ <para>[bdubbs] - Add a sed to glibc in Chapter 8 to fix a
+ critical security issue.</para>
+ </listitem>
+ </itemizedlist>
+ </listitem>
+
+ <listitem>
<para>2021-08-18</para>
<itemizedlist>
<listitem>
diff --git a/chapter08/glibc.xml b/chapter08/glibc.xml
index e8ca57ab2..968b398e0 100644
--- a/chapter08/glibc.xml
+++ b/chapter08/glibc.xml
@@ -43,6 +43,11 @@
<sect2 role="installation">
<title>Installation of Glibc</title>
+ <para>First, fix a security problem identified upstream:</para>
+
+ <screen><userinput remap="pre">sed -e '/NOTIFY_REMOVED)/s/)/ \&amp;\&amp; data.attr != NULL)/' \
+ -i sysdeps/unix/sysv/linux/mq_notify.c</userinput></screen>
+
<para>Some of the Glibc programs use the non-FHS compliant
<filename class="directory">/var/db</filename> directory to store
their runtime data. Apply the following patch to make such programs