[lfs] 02/03: Merge

This is an automated email from the git hooks/post-receive script.

git pushed a commit to branch multilib
in repository lfs.

commit a3ef449f84da31190b895b70a18e7b37b5ea6193
Author: Thomas Trepl <[email protected]>
AuthorDate: Sun Aug 10 01:10:02 2025 +0200

    Merge
---
 chapter01/changelog.xml | 10 ++++++++++
 chapter08/bc.xml        |  2 +-
 chapter08/python.xml    | 14 ++++++++++----
 3 files changed, 21 insertions(+), 5 deletions(-)

diff --git a/chapter01/changelog.xml b/chapter01/changelog.xml
index 206ac5718..912218740 100644
--- a/chapter01/changelog.xml
+++ b/chapter01/changelog.xml
@@ -40,6 +40,16 @@
     appropriate for the entry or if needed the entire day's listitem.
     -->
 
+    <listitem>
+      <para>2025-08-05</para>
+      <itemizedlist>
+        <listitem>
+          <para>[renodr] - Fixed CVE-2025-8194 in Python. Fixes
+          <ulink url="&lfs-ticket-root;5774">#5774</ulink>.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
     <listitem>
       <para>2025-08-01</para>
       <itemizedlist>
diff --git a/chapter08/bc.xml b/chapter08/bc.xml
index 7df13a963..1f99cd8ed 100644
--- a/chapter08/bc.xml
+++ b/chapter08/bc.xml
@@ -49,7 +49,7 @@
       <title>The meaning of the configure options:</title>
 
       <varlistentry>
-        <term><parameter>CC=gcc -std=c99</parameter></term>
+        <term><parameter>CC='gcc -std=c99'</parameter></term>
         <listitem>
           <para>This parameter specifies the compiler and C standard to use.</para>
         </listitem>
diff --git a/chapter08/python.xml b/chapter08/python.xml
index 534b81acd..2bedb71c6 100644
--- a/chapter08/python.xml
+++ b/chapter08/python.xml
@@ -42,11 +42,17 @@
 
   <sect2 role="installation">
     <title>Installation of Python 3</title>
-<!--
-    <para>First, apply a security patch to the current package:</para>
 
-    <screen><userinput remap="pre">patch -Np1 -i ../&python-security-fixes-patch;</userinput></screen>
--->    
+    <!-- CVE-2025-8194, see BLFS ticket #21895. The sed adds three lines. Thank
+    you Bruce for the sed! Please do not modify the spacing. -renodr -->
+    <para>First, fix a security vulnerability in the tarfile module:</para>
+
+<screen><userinput remap="pre">sed -e '/Round/{n;n;a\
+        # Only non-negative offsets are allowed\
+        if count &lt; 0:\
+            raise InvalidHeaderError("invalid offset")
+}' -i Lib/tarfile.py</userinput></screen>
+
     <para>Prepare Python for compilation:</para>
 
 <screen><userinput remap="configure">./configure --prefix=/usr          \

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.

-- 
http://lists.linuxfromscratch.org/sympa/info/lfs-book
Unsubscribe: See the above information page