Author: ken
Date: Wed Mar 31 19:12:34 2021
New Revision: 24419
Log:
Patch Python-2.7.18 for vulnerabilities.
Modified:
trunk/BOOK/general.ent
trunk/BOOK/general/prog/python2.xml
trunk/BOOK/introduction/welcome/changelog.xml
Modified: trunk/BOOK/general.ent
==============================================================================
--- trunk/BOOK/general.ent Tue Mar 30 09:46:22 2021 (r24418)
+++ trunk/BOOK/general.ent Wed Mar 31 19:12:34 2021 (r24419)
@@ -1,12 +1,12 @@
<!-- $LastChangedBy$ $Date$ -->
-<!ENTITY day "30"> <!-- Always 2 digits -->
+<!ENTITY day "31"> <!-- Always 2 digits -->
<!ENTITY month "03"> <!-- Always 2 digits -->
<!ENTITY year "2021">
<!ENTITY copyrightdate "2001-&year;">
<!ENTITY copyholder "The BLFS Development Team">
<!ENTITY version "&year;-&month;-&day;">
-<!ENTITY releasedate "March 30th, &year;">
+<!ENTITY releasedate "March 31st, &year;">
<!ENTITY pubdate "&year;-&month;-&day;"> <!-- metadata req. by TLDP -->
<!ENTITY blfs-version "svn"> <!-- svn|[release #] -->
<!ENTITY lfs-version "development"> <!-- x.y|development -->
Modified: trunk/BOOK/general/prog/python2.xml
==============================================================================
--- trunk/BOOK/general/prog/python2.xml Tue Mar 30 09:46:22 2021 (r24418)
+++ trunk/BOOK/general/prog/python2.xml Wed Mar 31 19:12:34 2021 (r24419)
@@ -9,8 +9,8 @@
<!ENTITY python2-download-ftp " ">
<!ENTITY python2-md5sum "fd6cc8ec0a78c44036f825e739f36e5a">
<!ENTITY python2-size "12.2 MB">
- <!ENTITY python2-buildsize "134 MB (add 17 MB for tests)">
- <!ENTITY python2-time "0.7 SBU (Using parallelism=4; add 7.1 SBU
for tests)">
+ <!ENTITY python2-buildsize "228 MB (add 17 MB for tests)">
+ <!ENTITY python2-time "0.5 SBU (Using parallelism=4; add 5.9 SBU
for tests)">
<!ENTITY python2htmldoc-download-http
"https://docs.python.org/ftp/python/doc/&python2-version;/python-&python2-version;-docs-html.tar.bz2";>
@@ -92,14 +92,20 @@
<bridgehead renderas="sect3">Additional Downloads</bridgehead>
<itemizedlist spacing="compact">
- <title>Optional HTML Documentation</title>
<listitem>
<para>
- Download (HTTP): <ulink url="&python2htmldoc-download-http;"/>
+ Required patch:
+ <ulink
url="&patch-root;/Python-&python2-version;-security_fixes-1.patch"/>
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Optional HTML Documentation: <ulink
url="&python2htmldoc-download-http;"/>
</para>
</listitem>
</itemizedlist>
+
<bridgehead renderas="sect3">Python 2 Dependencies</bridgehead>
<!--
<bridgehead renderas="sect4">Recommended</bridgehead>
@@ -152,14 +158,17 @@
commands:
</para>
-<screen><userinput>./configure --prefix=/usr \
- --enable-shared \
- --with-system-expat \
- --with-system-ffi \
- --enable-unicode=ucs4 &&
+<screen><userinput>
+patch -Np1 -i ../Python-&python2-version;-security_fixes-1.patch &&
+./configure --prefix=/usr \
+ --enable-shared \
+ --with-system-expat \
+ --with-system-ffi \
+ --enable-unicode=ucs4 &&
make</userinput></screen>
<para>
+ If you invoke the tests, they will run through twice.
To test the results, issue: <command>make -k test</command>.
</para>
Modified: trunk/BOOK/introduction/welcome/changelog.xml
==============================================================================
--- trunk/BOOK/introduction/welcome/changelog.xml Tue Mar 30 09:46:22
2021 (r24418)
+++ trunk/BOOK/introduction/welcome/changelog.xml Wed Mar 31 19:12:34
2021 (r24419)
@@ -42,6 +42,16 @@
</listitem>
-->
<listitem>
+ <para>March 31st, 2021</para>
+ <itemizedlist>
+ <listitem>
+ <para>[ken] - Patch Python-2.7.18 for security vulnerabilities. Fixes
+ <ulink url="&blfs-ticket-root;14843">#14843</ulink>.</para>
+ </listitem>
+ </itemizedlist>
+ </listitem>
+
+ <listitem>
<para>March 30th, 2021</para>
<itemizedlist>
<listitem>
--
http://lists.linuxfromscratch.org/listinfo/blfs-book
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page
