diff options
| author | mm <mm@FreeBSD.org> | 2016-09-25 22:02:27 +0000 |
|---|---|---|
| committer | mm <mm@FreeBSD.org> | 2016-09-25 22:02:27 +0000 |
| commit | 9d924fb59145654175677c1c455812f4a4402915 (patch) | |
| tree | f991738787bbf7ca8879f6147316f7a28c38693c /secure/lib/libcrypto/man/mdc2.3 | |
| parent | 412c43e3fcc9e79a058bc6c15cda3a479267b99c (diff) | |
| download | FreeBSD-src-9d924fb59145654175677c1c455812f4a4402915.zip FreeBSD-src-9d924fb59145654175677c1c455812f4a4402915.tar.gz | |
MFC r305819:
Sync libarchive with vendor including important security fixes.
Issues fixed (FreeBSD):
PR #778: ACL error handling
Issue #745: Symlink check prefix optimization is too aggressive
Issue #746: Hard links with data can evade sandboxing restrictions
This update fixes the vulnerability #3 and vulnerability #4 as reported in
"non-cryptanalytic attacks against FreeBSD update components".
https://gist.github.com/anonymous/e48209b03f1dd9625a992717e7b89c4f
Fix for vulnerability #2 has already been merged in r305188.
Security: http://gist.github.com/anonymous/e48209b03f1dd9625a992717e7b89c4f
Diffstat (limited to 'secure/lib/libcrypto/man/mdc2.3')
0 files changed, 0 insertions, 0 deletions
