Author: ken
Date: Thu Aug 10 18:09:05 2017
New Revision: 19007

Log:
Version Control System updates for newly publicied vulnerabilities:

git-2.14.1 CVE-2017-1000117
subversion-1.9.7 CVE-2017-9800
mercurial-4.3 CVE-2017-100011{5,6}

and for mercurial uncomment how to diagnose unexpected test failures, it would 
have save me time on the machine where tests failed.

Modified:
   trunk/BOOK/general/prog/git.xml
   trunk/BOOK/general/prog/mercurial.xml
   trunk/BOOK/general/prog/subversion.xml
   trunk/BOOK/introduction/welcome/changelog.xml
   trunk/BOOK/packages.ent

Modified: trunk/BOOK/general/prog/git.xml
==============================================================================
--- trunk/BOOK/general/prog/git.xml     Thu Aug 10 13:18:40 2017        (r19006)
+++ trunk/BOOK/general/prog/git.xml     Thu Aug 10 18:09:05 2017        (r19007)
@@ -8,12 +8,12 @@
 
   <!ENTITY git-download-http "&git-root;/git-&git-version;.tar.xz">
   <!ENTITY git-download-ftp  " ">
-  <!ENTITY git-md5sum        "8422cbf87b85e1a5e8e2cbca49333f84">
+  <!ENTITY git-md5sum        "a55bc6a2164d3ef1c3e5fc2f0c1d0d52">
   <!ENTITY git-size          "4.6 MB">
   <!-- space measured on 2.14.0 with gcc-7.1, glibc-2.25+git, all deps except 
dblatex.
-    The build gets up to 529MB, but the separate docs add 15 MB -->
-  <!ENTITY git-buildsize     "544 MB (with optional dependencies and 
documentation, add 24MB if building the docs)">
-  <!ENTITY git-time          "0.3 SBU (with parallelism=4, add 2.1 SBU if 
building documentation, add 1.5 SBU for tests with parallelism=4)">
+    The build gets up to 529MB (527 in 2.14.1), but the separate docs add 15 
MB -->
+  <!ENTITY git-buildsize     "542 MB (with optional dependencies and 
documentation, add 24MB if building the docs)">
+  <!ENTITY git-time          "0.3 SBU (with parallelism=4, add 2.1 SBU if 
building documentation, add 1.4 SBU for tests with parallelism=4)">
 ]>
 
 <sect1 id="git" xreflabel="git-&git-version;">

Modified: trunk/BOOK/general/prog/mercurial.xml
==============================================================================
--- trunk/BOOK/general/prog/mercurial.xml       Thu Aug 10 13:18:40 2017        
(r19006)
+++ trunk/BOOK/general/prog/mercurial.xml       Thu Aug 10 18:09:05 2017        
(r19007)
@@ -6,10 +6,10 @@
 
   <!ENTITY mercurial-download-http 
"https://www.mercurial-scm.org/release/mercurial-&mercurial-version;.tar.gz";>
   <!ENTITY mercurial-download-ftp  " ">
-  <!ENTITY mercurial-md5sum        "357718336be62c23597115040c0d2ded">
-  <!ENTITY mercurial-size          "5.1 MB">
-  <!ENTITY mercurial-buildsize     "46 MB (add 371 MB for tests)">
-  <!ENTITY mercurial-time          "0.1 SBU (add 4.4 SBU for tests using -j4)">
+  <!ENTITY mercurial-md5sum        "c319686de0a9076a2fcbcb215fc5baec">
+  <!ENTITY mercurial-size          "5.3 MB">
+  <!ENTITY mercurial-buildsize     "68 MB (add 337 MB for tests)">
+  <!ENTITY mercurial-time          "0.2 SBU (add 7.2 SBU for tests using -j4)">
 ]>
 
 <sect1 id="mercurial" xreflabel="Mercurial-&mercurial-version;">
@@ -122,13 +122,13 @@
 
     <para>where <replaceable>&lt;N&gt;</replaceable> is an integer between one
     and the number of ( processor X threads ), inclusive. One test, 
-    test-gpg.t, fails if <xref linkend="gnupg2"/> is not installed. <!-- In 
order to
-    investigate the apparently failing tests, you may use the
+    test-gpg.t, fails if <xref linkend="gnupg2"/> is not installed. In order to
+    investigate any other apparently failing tests, you may use the
     <command>run-tests.py</command> script. To see the almost forty switches,
     some of them very useful, issue <command>tests/run-tests.py - 
-help</command>.
     Running the following commands, you will execute only the tests that failed
-    before:--></para>
-<!--
+    before:</para>
+
 <screen><userinput>pushd tests  &amp;&amp;
   rm -rf tmp &amp;&amp;
 
@@ -147,7 +147,7 @@
     start, end, user, system and real times. Notice that the switches may be
     used with <command>make check</command>, including them in the
     <envar>TESTFLAGS</envar> environment variable.</para>
--->
+
     <para>Install <application>Mercurial</application> by running the following
     command (as <systemitem class="username">root</systemitem>):</para>
 

Modified: trunk/BOOK/general/prog/subversion.xml
==============================================================================
--- trunk/BOOK/general/prog/subversion.xml      Thu Aug 10 13:18:40 2017        
(r19006)
+++ trunk/BOOK/general/prog/subversion.xml      Thu Aug 10 18:09:05 2017        
(r19007)
@@ -7,10 +7,11 @@
   <!ENTITY subversion-download-http
   
"http://www.apache.org/dist/subversion/subversion-&subversion-version;.tar.bz2";>
   <!ENTITY subversion-download-ftp  " ">
-  <!ENTITY subversion-md5sum        "f27e00338d4a9f7f9aec9d4a3f8b418b">
-  <!ENTITY subversion-size          "7.5 MB">
-  <!ENTITY subversion-buildsize     "171 MB (add 173 MB for bindings, 24 MB 
for docs, 1 GB for tests)">
-  <!ENTITY subversion-time          "1.2 SBU (add 1.4 SBU for bindings, 72 SBU 
for tests)">
+  <!ENTITY subversion-md5sum        "05b0c677681073920f938c1f322e0be2">
+  <!ENTITY subversion-size          "7.6 MB">
+  <!-- for 1.9.7 with only perl and python, tests are less than 6 SBU -->
+  <!ENTITY subversion-buildsize     "198 MB (add 173 MB for bindings, 24 MB 
for docs, 1 GB for tests)">
+  <!ENTITY subversion-time          "1.2 SBU (add 1.4 SBU for bindings, 6.0 
SBU for tests)">
 ]>
 
 <sect1 id="subversion" xreflabel="Subversion-&subversion-version;">

Modified: trunk/BOOK/introduction/welcome/changelog.xml
==============================================================================
--- trunk/BOOK/introduction/welcome/changelog.xml       Thu Aug 10 13:18:40 
2017        (r19006)
+++ trunk/BOOK/introduction/welcome/changelog.xml       Thu Aug 10 18:09:05 
2017        (r19007)
@@ -46,6 +46,18 @@
       <para>August 10th, 2017</para>
       <itemizedlist>
         <listitem>
+          <para>[ken] - Update to mercurial-4.3. Fixes
+          <ulink url="&blfs-ticket-root;9600">#9600</ulink>.</para>
+        </listitem>
+        <listitem>
+          <para>[ken] - Update to subversion-1.9.7. Fixes
+          <ulink url="&blfs-ticket-root;9599">#9599</ulink>.</para>
+        </listitem>
+        <listitem>
+          <para>[ken] - Update to git-2.14.1. Fixes
+          <ulink url="&blfs-ticket-root;9598">#9598</ulink>.</para>
+        </listitem>
+        <listitem>
           <para>[pierre] - Update to mesa-17.1.6. Fixes
           <ulink url="&blfs-ticket-root;9580">#9580</ulink>.</para>
         </listitem>

Modified: trunk/BOOK/packages.ent
==============================================================================
--- trunk/BOOK/packages.ent     Thu Aug 10 13:18:40 2017        (r19006)
+++ trunk/BOOK/packages.ent     Thu Aug 10 18:09:05 2017        (r19007)
@@ -307,13 +307,13 @@
 <!ENTITY gcc-ada-version              "7.1.0">
 <!ENTITY gc-version                   "7.6.0">
 <!ENTITY gdb-version                  "8.0">
-<!ENTITY git-version                  "2.14.0">
+<!ENTITY git-version                  "2.14.1">
 <!ENTITY guile-version                "2.2.2">
 <!ENTITY librep-version               "0.92.6">
 <!ENTITY llvm-version                 "4.0.1">
 <!ENTITY llvm-old-version             "3.9.1">
 <!ENTITY lua-version                  "5.3.4">
-<!ENTITY mercurial-version            "4.2.2">
+<!ENTITY mercurial-version            "4.3">
 <!ENTITY nasm-version                 "2.13.01">
 <!ENTITY ninja-version                "1.7.2">
 <!ENTITY npapi-sdk-version            "0.27.2">
@@ -326,7 +326,7 @@
 <!ENTITY rust-version                 "1.16.0">
 <!ENTITY scons-version                "2.5.1">
 <!ENTITY slang-version                "2.3.1">
-<!ENTITY subversion-version           "1.9.6">
+<!ENTITY subversion-version           "1.9.7">
 <!ENTITY swig-version                 "3.0.12">
 <!ENTITY tcl-version                  "8.6.6">
 <!ENTITY tk-version                   "8.6.6">
-- 
http://lists.linuxfromscratch.org/listinfo/blfs-book
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Reply via email to