From owner-cvs-all@FreeBSD.ORG Thu Jul 12 15:01:56 2007 Return-Path: X-Original-To: cvs-all@FreeBSD.org Delivered-To: cvs-all@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id CE0C816A481; Thu, 12 Jul 2007 15:01:56 +0000 (UTC) (envelope-from cperciva@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [69.147.83.41]) by mx1.freebsd.org (Postfix) with ESMTP id BE52D13C45E; Thu, 12 Jul 2007 15:01:56 +0000 (UTC) (envelope-from cperciva@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.8/8.13.8) with ESMTP id l6CF1u2C048211; Thu, 12 Jul 2007 15:01:56 GMT (envelope-from cperciva@repoman.freebsd.org) Received: (from cperciva@localhost) by repoman.freebsd.org (8.13.8/8.13.8/Submit) id l6CF1uCi048210; Thu, 12 Jul 2007 15:01:56 GMT (envelope-from cperciva) Message-Id: <200707121501.l6CF1uCi048210@repoman.freebsd.org> From: Colin Percival Date: Thu, 12 Jul 2007 15:01:56 +0000 (UTC) To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: RELENG_5_5 Cc: Subject: cvs commit: src UPDATING src/lib/libarchive archive_read_support_format_tar.c src/sys/conf newvers.sh X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Jul 2007 15:01:56 -0000 cperciva 2007-07-12 15:01:56 UTC FreeBSD src repository Modified files: (Branch: RELENG_5_5) . UPDATING lib/libarchive archive_read_support_format_tar.c sys/conf newvers.sh Log: Correct multiple security issues in how libarchive handles corrupt tar archives, including a potentially exploitable buffer overflow. Approved by: so (cperciva) Reviewed by: kientzle Security: FreeBSD-SA-07:05.libarchive Revision Changes Path 1.342.2.35.2.14 +5 -0 src/UPDATING 1.26.2.7.2.1 +98 -36 src/lib/libarchive/archive_read_support_format_tar.c 1.62.2.21.2.16 +1 -1 src/sys/conf/newvers.sh