Re: [LFS Trac] #5733: Patch CVE-2025-5278 in Coreutils

"LFS Trac" ([email protected] via lfs-book Mailing List) <[email protected]>
Newsgroups gmane.linux.lfs.book
Message-ID <[email protected]>
#5733: Patch CVE-2025-5278 in Coreutils
-----------------------------+-----------------------
 Reporter:  Douglas R. Reno  |       Owner:  lfs-book
     Type:  enhancement      |      Status:  new
 Priority:  high             |   Milestone:  12.4
Component:  Book             |     Version:  git
 Severity:  normal           |  Resolution:
 Keywords:                   |
-----------------------------+-----------------------
Comment (by Bruce Dubbs):

 I was able to get the patch.  I applied it and got:
 {{{
 patching file NEWS
 Hunk #1 succeeded at 41 with fuzz 2 (offset 33 lines).
 patching file src/sort.c
 patching file tests/local.mk
 patching file tests/sort/sort-field-limit.sh
 }}}

 That's OK.  I then applied the i18n patch and got several offsets:
 {{{
 ...
 patching file src/sort.c
 Hunk #11 succeeded at 1802 (offset 4 lines).
 Hunk #12 succeeded at 1881 (offset 4 lines).
 Hunk #13 succeeded at 1930 (offset 4 lines).
 Hunk #14 succeeded at 1968 (offset 8 lines).
 Hunk #15 succeeded at 2178 (offset 8 lines).
 Hunk #16 succeeded at 2331 (offset 8 lines).
 Hunk #17 succeeded at 2346 (offset 8 lines).
 Hunk #18 succeeded at 2356 (offset 8 lines).
 Hunk #19 succeeded at 2416 (offset 8 lines).
 Hunk #20 succeeded at 2755 (offset 8 lines).
 Hunk #21 succeeded at 2908 (offset 8 lines).
 Hunk #22 succeeded at 2956 (offset 8 lines).
 Hunk #23 succeeded at 2969 (offset 8 lines).
 Hunk #24 succeeded at 2979 (offset 8 lines).
 Hunk #25 succeeded at 3043 (offset 8 lines).
 Hunk #26 succeeded at 3204 (offset 8 lines).
 Hunk #27 succeeded at 3314 (offset 8 lines).
 Hunk #28 succeeded at 3546 (offset 8 lines).
 Hunk #29 succeeded at 4934 (offset 8 lines).
 Hunk #30 succeeded at 5014 (offset 8 lines).
 Hunk #31 succeeded at 5037 (offset 8 lines).
 Hunk #32 succeeded at 5330 (offset 8 lines).
 Hunk #33 succeeded at 5368 (offset 8 lines).
 ...
 patching file tests/local.mk
 Hunk #1 succeeded at 391 with fuzz 1 (offset 1 line).
 Hunk #2 succeeded at 597 (offset 1 line).
 Hunk #3 succeeded at 754 (offset 1 line).
 }}}

 The sort.c changes are at
 {{{
 @@ -1644,7 +1644,11 @@
 @@ -1746,7 +1750,11 @@
 }}}

 The tests/local.mk changes add one line at line 391:
 {{{
 +  tests/sort/sort-field-limit.sh for the upstream fix
 +  tests/misc/sort-mb-tests.sh    for the i18n patch
 +  tests/i18n/sort.sh             for the i18n patch
 }}}

 So they do not conflict.

 The patches only need to be applied in Chapter 8.
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/lfs/ticket/5733#comment:3>
LFS Trac <https://wiki.linuxfromscratch.org/lfs/>
Linux From Scratch: Your Distro, Your Rules.

-- 
http://lists.linuxfromscratch.org/sympa/info/lfs-book
Unsubscribe: See the above information page
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.