linux-from-scratch/glfs
1
0
Fork 0
mirror of https://github.com/Zeckmathederg/glfs.git synced 2025-01-25 07:42:13 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Second attempt to fix libwebp.

Browse Source 
Apologies to anyone who picked up the first version of the patch.
This commit is contained in:
Ken Moffat 2023-09-13 05:59:22 +01:00
parent 11f671c80b
commit 5e3a62dffe
2 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
general/graphlib/libwebp.xml
View File

@ -71,7 +71,7 @@
<listitem>
<para>
Required patch:
<ulink url="&patch-root;/libwebp-&libwebp-version;-security_update-1.patch"/>
<ulink url="&patch-root;/libwebp-&libwebp-version;-security_update-2.patch"/>
</para>
</listitem>
</itemizedlist>
@ -97,13 +97,11 @@
<sect2 role="installation">
<title>Installation of libwebp</title>
<!-- CVE-2023-4863, critical, extracted from firefox-115.2.1 in the hope
it will be sufficient -->
<para>
Fix a security issue identified upstream:
</para>
<screen><userinput>patch -Np1 -i ../libwebp-&libwebp-version;-security_update-1.patch</userinput></screen>
<screen><userinput>patch -Np1 -i ../libwebp-&libwebp-version;-security_update-2.patch</userinput></screen>
<para>
Install <application>libwebp</application> by running the following

6
introduction/welcome/changelog.xml
View File

@ -42,6 +42,12 @@
<listitem>
<para>September 13th, 2023</para>
<itemizedlist>
<listitem>
<para>[ken] - Updated the libwebp patch to version2, this adds
a second chromium commit which the debian bug pointed to.
Fixes
<ulink url="&blfs-ticket-root;18544">#18544</ulink>.</para>
</listitem>
<listitem>
<para>[ken] - Patch libwebp-1.3.1 for a critical vulnerability.
This is not the official fix, which is not yet public, but was