Author: jhuntwork Date: 2005-10-14 08:39:41 -0600 (Fri, 14 Oct 2005) New Revision: 7007
Modified: branches/6.1.1/BOOK/chapter01/changelog.xml branches/6.1.1/BOOK/chapter03/patches.xml branches/6.1.1/BOOK/chapter06/texinfo.xml Log: Added the tempfile patch to texinfo Modified: branches/6.1.1/BOOK/chapter01/changelog.xml =================================================================== --- branches/6.1.1/BOOK/chapter01/changelog.xml 2005-10-14 14:24:02 UTC (rev 7006) +++ branches/6.1.1/BOOK/chapter01/changelog.xml 2005-10-14 14:39:41 UTC (rev 7007) @@ -35,6 +35,9 @@ </itemizedlist> </listitem> +<listitem><para>October 14th, 2005 [jhuntwork]: Added the tempfile patch +for texinfo.</para></listitem> + <listitem><para>October 14th, 2005 [ken]: Update packages and patches in the changelog to only reflect changes since 6.1. Update zlib.</para></listitem> Modified: branches/6.1.1/BOOK/chapter03/patches.xml =================================================================== --- branches/6.1.1/BOOK/chapter03/patches.xml 2005-10-14 14:24:02 UTC (rev 7006) +++ branches/6.1.1/BOOK/chapter03/patches.xml 2005-10-14 14:39:41 UTC (rev 7007) @@ -149,6 +149,13 @@ </varlistentry> <varlistentry> +<term>Texinfo Tempfile Fix Patch - 2 KB:</term> +<listitem> +<para><ulink url="&patches-root;texinfo-&texinfo-version;-tempfile_fix-1.patch"/></para> +</listitem> +</varlistentry> + +<varlistentry> <term>Util-linux Cramfs Patch - 3 KB:</term> <listitem> <para><ulink url="&patches-root;util-linux-&util-linux-version;-cramfs-1.patch"/></para> </listitem> Modified: branches/6.1.1/BOOK/chapter06/texinfo.xml =================================================================== --- branches/6.1.1/BOOK/chapter06/texinfo.xml 2005-10-14 14:24:02 UTC (rev 7006) +++ branches/6.1.1/BOOK/chapter06/texinfo.xml 2005-10-14 14:39:41 UTC (rev 7007) @@ -29,6 +29,11 @@ <sect2 role="installation"> <title>Installation of Texinfo</title> +<para>Texinfo allows local users to overwrite arbitrary files via a symlink attack +on temporary files. Apply the following patch to fix this:</para> + +<screen><userinput>patch -Np1 -i ../texinfo-&texinfo-version;-tempfile_fix-1.patch</userinput></screen> + <para>Prepare Texinfo for compilation:</para> <screen><userinput>./configure --prefix=/usr</userinput></screen> -- http://linuxfromscratch.org/mailman/listinfo/lfs-book FAQ: http://www.linuxfromscratch.org/lfs/faq.html Unsubscribe: See the above information page
