diff --git a/chapter01/changelog.xml b/chapter01/changelog.xml index 81e033eb3..43af25426 100644 --- a/chapter01/changelog.xml +++ b/chapter01/changelog.xml @@ -87,6 +87,7 @@ First a summary, then a detailed log. Added: +&bzip2-bzgrep-patch; &bzip2-docs-patch; &gcc-linkonce-patch; &gcc-no_fixincludes-patch; @@ -113,6 +114,9 @@ First a summary, then a detailed log. +August 18th, 2005 [ken]: Add a patch to sanitise bzgrep's +handling of filenames. + August 16th, 2005 [matt]: Install sed's man page to /usr/share/doc/sed-4.1.4 instead of /usr/share/doc (fixes bug 1600). diff --git a/chapter03/patches.xml b/chapter03/patches.xml index 579741012..a12cedfe6 100644 --- a/chapter03/patches.xml +++ b/chapter03/patches.xml @@ -37,8 +37,15 @@ needed to build an LFS system: - + +Bzip2 Bzgrep Security Fixes Patch - 1 KB: + + + + + + Coreutils Suppress Uptime, Kill, Su Patch - 15 KB: diff --git a/chapter06/bzip2.xml b/chapter06/bzip2.xml index 641fb5a25..6b401650f 100644 --- a/chapter06/bzip2.xml +++ b/chapter06/bzip2.xml @@ -36,6 +36,11 @@ GCC, Glibc, and Make patch -Np1 -i ../&bzip2-docs-patch; +Bzgrep fails to sufficiently sanitise filenames passed +to it. Apply the following to address this: + +patch -Np1 -i ../&bzip2-bzgrep-patch; + Prepare Bzip2 for compilation with: make -f Makefile-libbz2_so diff --git a/general.ent b/general.ent index c9c8ca3de..d5081267e 100644 --- a/general.ent +++ b/general.ent @@ -1,6 +1,6 @@ - - + + diff --git a/patches.ent b/patches.ent index 1bdda5328..4f344f3e1 100644 --- a/patches.ent +++ b/patches.ent @@ -5,6 +5,7 @@ +