linux-from-scratch/glfs
1
0
Fork 0
mirror of https://github.com/Zeckmathederg/glfs.git synced 2025-02-03 06:27:16 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Downgrade to BIND-9.16.11, add a security fix

Browse Source 
Update to stunnel-5.58
Tags

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@24263 af4574ff-66df-0310-9fd7-8a98e5e911e0
This commit is contained in:
Douglas R. Reno 2021-02-22 06:53:11 +00:00
parent 2b7420bb69
commit 1c4b4e9918
12 changed files with 44 additions and 23 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
general.ent
View File

@ -1,12 +1,12 @@
<!-- $LastChangedBy$ $Date$ --> <!-- $LastChangedBy$ $Date$ -->
<!ENTITY day "21"> <!-- Always 2 digits --> <!ENTITY day "22"> <!-- Always 2 digits -->
<!ENTITY month "02"> <!-- Always 2 digits --> <!ENTITY month "02"> <!-- Always 2 digits -->
<!ENTITY year "2021"> <!ENTITY year "2021">
<!ENTITY copyrightdate "2001-&year;"> <!ENTITY copyrightdate "2001-&year;">
<!ENTITY copyholder "The BLFS Development Team"> <!ENTITY copyholder "The BLFS Development Team">
<!ENTITY version "&year;-&month;-&day;"> <!ENTITY version "&year;-&month;-&day;">
<!ENTITY releasedate "February 21st, &year;"> <!ENTITY releasedate "February 22nd, &year;">
<!ENTITY pubdate "&year;-&month;-&day;"> <!-- metadata req. by TLDP --> <!ENTITY pubdate "&year;-&month;-&day;"> <!-- metadata req. by TLDP -->
<!ENTITY blfs-version "svn"> <!-- svn|[release #] --> <!ENTITY blfs-version "svn"> <!-- svn|[release #] -->
<!ENTITY lfs-version "development"> <!-- x.y|development --> <!ENTITY lfs-version "development"> <!-- x.y|development -->

15
introduction/welcome/changelog.xml
View File

@ -41,6 +41,21 @@
</itemizedlist> </itemizedlist>
</listitem> </listitem>
--> -->
<listitem>
<para>February 22nd, 2021</para>
<itemizedlist>
<listitem>
<para>[renodr] - Update to stunnel-5.58. Fixes
<ulink url="&blfs-ticket-root;14689">#14689</ulink>.</para>
</listitem>
<listitem>
<para>[renodr] - Downgrade to BIND-9.16.11 due to major regressions,
and apply a security fix via a 'sed' instead. Fixes
<ulink url="&blfs-ticket-root;14683">#14683</ulink>.</para>
</listitem>
</itemizedlist>
</listitem>
<listitem> <listitem>
<para>February 21st, 2021</para> <para>February 21st, 2021</para>
<itemizedlist> <itemizedlist>

2
networking/netprogs/cifsutils.xml
View File

@ -34,7 +34,7 @@
mounting SMB/CIFS shares on a Linux system. mounting SMB/CIFS shares on a Linux system.
</para> </para>
&lfs10_checked; &lfs101_checked;
<bridgehead renderas="sect3">Package Information</bridgehead> <bridgehead renderas="sect3">Package Information</bridgehead>
<itemizedlist spacing="compact"> <itemizedlist spacing="compact">

2
networking/netprogs/ncftp.xml
View File

@ -36,7 +36,7 @@
<command>ftp</command> program. <command>ftp</command> program.
</para> </para>
&lfs10_checked; &lfs101_checked;
<bridgehead renderas="sect3">Package Information</bridgehead> <bridgehead renderas="sect3">Package Information</bridgehead>
<itemizedlist spacing="compact"> <itemizedlist spacing="compact">

8
networking/netutils/bind-utils.xml
View File

@ -6,9 +6,9 @@
<!ENTITY bind-download-http " "> <!ENTITY bind-download-http " ">
<!ENTITY bind-download-ftp "ftp://ftp.isc.org/isc/bind9/&bind-version;/bind-&bind-version;.tar.xz"> <!ENTITY bind-download-ftp "ftp://ftp.isc.org/isc/bind9/&bind-version;/bind-&bind-version;.tar.xz">
<!ENTITY bind-md5sum "61c545db393628152e5b2c957e8bf712"> <!ENTITY bind-md5sum "58cbc23121e43ec934d644c4f412ceea">
<!ENTITY bind-size "4.8 MB"> <!ENTITY bind-size "4.7 MB">
<!ENTITY bind-utils-buildsize "155 MB"> <!ENTITY bind-utils-buildsize "154 MB">
<!ENTITY bind-utils-time "0.6 SBU"> <!ENTITY bind-utils-time "0.6 SBU">
]> ]>
@ -40,7 +40,7 @@
<application>BIND</application> server, but need these <application>BIND</application> server, but need these
client side applications.</para> client side applications.</para>
&lfs10_checked; &lfs101_checked;
<bridgehead renderas="sect3">Package Information</bridgehead> <bridgehead renderas="sect3">Package Information</bridgehead>
<itemizedlist spacing="compact"> <itemizedlist spacing="compact">

2
networking/netutils/traceroute.xml
View File

@ -45,7 +45,7 @@
</para> </para>
</note> </note>
&lfs10_checked; &lfs101_checked;
<bridgehead renderas="sect3">Package Information</bridgehead> <bridgehead renderas="sect3">Package Information</bridgehead>
<itemizedlist spacing="compact"> <itemizedlist spacing="compact">

2
networking/netutils/whois.xml
View File

@ -38,7 +38,7 @@
expect package in LFS. expect package in LFS.
</para> </para>
&lfs10_checked; &lfs101_checked;
<bridgehead renderas="sect3">Package Information</bridgehead> <bridgehead renderas="sect3">Package Information</bridgehead>
<itemizedlist spacing="compact"> <itemizedlist spacing="compact">

4
packages.ent
View File

@ -39,7 +39,7 @@
<!ENTITY polkit-gnome-version "0.105"> <!ENTITY polkit-gnome-version "0.105">
<!ENTITY shadow-version "4.8.1"> <!ENTITY shadow-version "4.8.1">
<!ENTITY ssh-askpass-version "&openssh-version;"> <!ENTITY ssh-askpass-version "&openssh-version;">
<!ENTITY stunnel-version "5.57"> <!ENTITY stunnel-version "5.58">
<!ENTITY sudo-version "1.9.5p2"> <!ENTITY sudo-version "1.9.5p2">
<!ENTITY tripwire-version "2.4.3.7"> <!ENTITY tripwire-version "2.4.3.7">
<!ENTITY volume_key-version "0.3.12"> <!ENTITY volume_key-version "0.3.12">
@ -596,7 +596,7 @@ to avoid building libxml2 twice, which is slow with all deps -->
<!-- Chapter 16 --> <!-- Chapter 16 -->
<!ENTITY avahi-version "0.8"> <!ENTITY avahi-version "0.8">
<!ENTITY bind-minor-version "9.16"> <!ENTITY bind-minor-version "9.16">
<!ENTITY bind-version "&bind-minor-version;.12"> <!ENTITY bind-version "&bind-minor-version;.11">
<!ENTITY mod_dnssd-version "0.6"> <!ENTITY mod_dnssd-version "0.6">
<!ENTITY NetworkManager-minor "1.28"> <!ENTITY NetworkManager-minor "1.28">
<!ENTITY NetworkManager-version "&NetworkManager-minor;.0"> <!ENTITY NetworkManager-version "&NetworkManager-minor;.0">

12
postlfs/security/stunnel.xml
View File

@ -9,10 +9,10 @@
<!ENTITY stunnel-download-ftp "ftp://ftp.stunnel.org/stunnel/archive/5.x/stunnel-&stunnel-version;.tar.gz"> <!ENTITY stunnel-download-ftp "ftp://ftp.stunnel.org/stunnel/archive/5.x/stunnel-&stunnel-version;.tar.gz">
<!-- Following ftp only has later release --> <!-- Following ftp only has later release -->
<!-- "ftp://ftp.stunnel.org/stunnel/stunnel-&stunnel-version;.tar.gz"> --> <!-- "ftp://ftp.stunnel.org/stunnel/stunnel-&stunnel-version;.tar.gz"> -->
<!ENTITY stunnel-md5sum "6bbe921f8d2ab4967dc7ff42f6e5d45a"> <!ENTITY stunnel-md5sum "aed41cff61d622ff6c8706e9d75c53b7">
<!ENTITY stunnel-size "964 KB"> <!ENTITY stunnel-size "968 KB">
<!ENTITY stunnel-buildsize "7.3 MB"> <!ENTITY stunnel-buildsize "8.8 MB">
<!ENTITY stunnel-time "less than 0.1 SBU"> <!ENTITY stunnel-time "0.1 SBU">
]> ]>
<sect1 id="stunnel" xreflabel="stunnel-&stunnel-version;"> <sect1 id="stunnel" xreflabel="stunnel-&stunnel-version;">
@ -44,7 +44,7 @@
server package source code. server package source code.
</para> </para>
&lfs10_checked; &lfs101_checked;
<bridgehead renderas="sect3">Package Information</bridgehead> <bridgehead renderas="sect3">Package Information</bridgehead>
<itemizedlist spacing="compact"> <itemizedlist spacing="compact">
@ -259,7 +259,7 @@ chown stunnel:stunnel /var/lib/stunnel</userinput></screen>
<systemitem class="username">root</systemitem> user: <systemitem class="username">root</systemitem> user:
</para> </para>
<screen role="root"><userinput>cat &gt;/etc/stunnel/stunnel.conf &lt;&lt; "EOF" <screen role="root"><userinput>cat &gt; /etc/stunnel/stunnel.conf &lt;&lt; "EOF"
<literal>; File: /etc/stunnel/stunnel.conf <literal>; File: /etc/stunnel/stunnel.conf
; Note: The pid and output locations are relative to the chroot location. ; Note: The pid and output locations are relative to the chroot location.

2
server/databases/mariadb.xml
View File

@ -36,7 +36,7 @@
database management system. database management system.
</para> </para>
&lfs10_checked; &lfs101_checked;
<bridgehead renderas="sect3">Package Information</bridgehead> <bridgehead renderas="sect3">Package Information</bridgehead>
<itemizedlist spacing="compact"> <itemizedlist spacing="compact">

2
server/databases/postgresql.xml
View File

@ -36,7 +36,7 @@
from the Berkeley Postgres database management system. from the Berkeley Postgres database management system.
</para> </para>
&lfs10_checked; &lfs101_checked;
<bridgehead renderas="sect3">Package Information</bridgehead> <bridgehead renderas="sect3">Package Information</bridgehead>
<itemizedlist spacing="compact"> <itemizedlist spacing="compact">

12
server/major/bind.xml
View File

@ -6,8 +6,8 @@
<!ENTITY bind-download-http " "> <!ENTITY bind-download-http " ">
<!ENTITY bind-download-ftp "ftp://ftp.isc.org/isc/bind9/&bind-version;/bind-&bind-version;.tar.xz"> <!ENTITY bind-download-ftp "ftp://ftp.isc.org/isc/bind9/&bind-version;/bind-&bind-version;.tar.xz">
<!ENTITY bind-md5sum "61c545db393628152e5b2c957e8bf712"> <!ENTITY bind-md5sum "58cbc23121e43ec934d644c4f412ceea">
<!ENTITY bind-size "4.8 MB"> <!ENTITY bind-size "4.7 MB">
<!ENTITY bind-buildsize "129 MB (23 MB installed)"> <!ENTITY bind-buildsize "129 MB (23 MB installed)">
<!ENTITY bind-time "0.8 SBU (with parallelism=4; add 29+ minutes, somewhat processor independent, to run the complete test suite)"> <!ENTITY bind-time "0.8 SBU (with parallelism=4; add 29+ minutes, somewhat processor independent, to run the complete test suite)">
]> ]>
@ -35,7 +35,7 @@
to the <xref linkend="bind-utils"/>. to the <xref linkend="bind-utils"/>.
</para> </para>
&lfs10_checked; &lfs101_checked;
<bridgehead renderas="sect3">Package Information</bridgehead> <bridgehead renderas="sect3">Package Information</bridgehead>
<itemizedlist spacing="compact"> <itemizedlist spacing="compact">
@ -135,6 +135,12 @@
<screen role="root"><userinput>pip3 install ply</userinput></screen> <screen role="root"><userinput>pip3 install ply</userinput></screen>
<para>
Fix a security vulnerability:
</para>
<screen><userinput remap="pre">sed -i '851 s/len/(len + 1)/' lib/dns/spnego.c</userinput></screen>
<para> <para>
Install <application>BIND</application> by running the Install <application>BIND</application> by running the
following commands: following commands: