coreutils: Fix CVE-2024-0684 (#5417)

This commit is contained in:
Xi Ruoyao 2024-01-22 00:45:47 +08:00
parent 943f22504e
commit 0253841d0f
No known key found for this signature in database
GPG Key ID: ACAAD20E19E710E3
2 changed files with 16 additions and 6 deletions

View File

@ -40,6 +40,16 @@
appropriate for the entry or if needed the entire day's listitem.
-->
<listitem>
<para>2024-01-21</para>
<itemizedlist>
<listitem>
<para>[xry111] - Fix CVE-2024-0684 for coreutils-9.4. Fixes
<ulink url="&lfs-ticket-root;5417">#5417</ulink>.</para>
</listitem>
</itemizedlist>
</listitem>
<listitem>
<para>2024-01-18</para>
<itemizedlist>

View File

@ -53,13 +53,13 @@
those bugs are reproducible without this patch.</para>
</note>
<!-- https://bugs.gnu.org/62403 -->
<!--
<para>Fix a bug in checksum utilities causing failed checks not
reported correctly:</para>
<!-- https://seclists.org/oss-sec/2024/q1/30 -->
<para>Fix a security vulnerability in the <command>split</command>
utility:</para>
<screen><userinput remap="pre">sed -e '/n_out += n_hold/,+4 s|.*bufsize.*|//&amp;|' \
-i src/split.c</userinput></screen>
<screen><userinput remap="pre">sed '/if ( ! match/s/ed_checksums//' -i src/digest.c</userinput></screen>
-->
<para>Now prepare Coreutils for compilation:</para>
<screen><userinput remap="configure">autoreconf -fiv