r8710 - in trunk/BOOK: . general/genlib introduction/welcome

[ken]

Author: ken
Date: 2010-11-26 17:24:53 -0700 (Fri, 26 Nov 2010)
New Revision: 8710

Modified:
   trunk/BOOK/general.ent
   trunk/BOOK/general/genlib/expat.xml
   trunk/BOOK/introduction/welcome/changelog.xml
Log:
Fix the expat vulnerabilities.

Modified: trunk/BOOK/general/genlib/expat.xml
===================================================================
--- trunk/BOOK/general/genlib/expat.xml 2010-11-26 19:40:11 UTC (rev 8709)
+++ trunk/BOOK/general/genlib/expat.xml 2010-11-27 00:24:53 UTC (rev 8710)
@@ -32,7 +32,7 @@
     <para>The <application>Expat</application> package contains a stream 
oriented
     C library for parsing XML.</para>
 
-    &lfs65_checked;
+    &lfs67_checked;
 
     <bridgehead renderas="sect3">Package Information</bridgehead>
     <itemizedlist spacing="compact">
@@ -56,6 +56,14 @@
       </listitem>
     </itemizedlist>
 
+    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
+    <itemizedlist spacing='compact'>
+      <listitem>
+        <para>Required patch: <ulink
+        url="&patch-root;/expat-&expat-version;-fixes-2.patch"/></para>
+      </listitem>
+    </itemizedlist>
+
     <para condition="html" role="usernotes">User Notes:
     <ulink url="&blfs-wiki;/expat"/></para>
 
@@ -67,7 +75,8 @@
     <para>Install <application>Expat</application> by running the following
     commands:</para>
 
-<screen><userinput>./configure --prefix=/usr &amp;&amp;
+<screen><userinput>patch -Np1 -i ../expat-&expat-version;-fixes-2.patch 
&amp;&amp;
+./configure --prefix=/usr &amp;&amp;
 make</userinput></screen>
 
     <para>Now, as the <systemitem class="username">root</systemitem> 
user:</para>
@@ -82,6 +91,14 @@
 
   </sect2>
 
+  <sect2 role="commands">
+    <title>Command Explanations</title>
+
+    <para><option>--disable-static</option>: This switch prevents the
+    static library in this package being built and installed.</para>
+
+  </sect2>
+
   <sect2 role="content">
     <title>Contents</title>
 

Modified: trunk/BOOK/general.ent
===================================================================
--- trunk/BOOK/general.ent      2010-11-26 19:40:11 UTC (rev 8709)
+++ trunk/BOOK/general.ent      2010-11-27 00:24:53 UTC (rev 8710)
@@ -3,7 +3,7 @@
 $Date$
 -->
 
-<!ENTITY day          "26">                   <!-- Always 2 digits -->
+<!ENTITY day          "27">                   <!-- Always 2 digits -->
 <!ENTITY month        "11">                   <!-- Always 2 digits -->
 <!ENTITY year         "2010">
 <!ENTITY copyrightdate "2001-&year;">

Modified: trunk/BOOK/introduction/welcome/changelog.xml
===================================================================
--- trunk/BOOK/introduction/welcome/changelog.xml       2010-11-26 19:40:11 UTC 
(rev 8709)
+++ trunk/BOOK/introduction/welcome/changelog.xml       2010-11-27 00:24:53 UTC 
(rev 8710)
@@ -42,6 +42,17 @@
 -->
 
     <listitem>
+      <para>November 27th, 2010</para>
+      <itemizedlist>
+        <listitem>
+          <para>[ken] - Added patch for expat-2.0.1 vulnerabilities (fixes
+         ticket <ulink url="&blfs-ticket-root;3117">#3117</ulink>) - thanks to
+          wagner17 for raising that.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>November 26th, 2010</para>
       <itemizedlist>
         <listitem>

-- 
http://linuxfromscratch.org/mailman/listinfo/blfs-book
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page