Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 24 Aug 2016 08:38:11 -0400
From:      Shawn Webb <shawn.webb@hardenedbsd.org>
To:        Cy Schubert <Cy.Schubert@komquats.com>
Cc:        Cy Schubert <cy@FreeBSD.org>, svn-src-head@freebsd.org, svn-src-all@freebsd.org, src-committers@freebsd.org
Subject:   Re: svn commit: r304747 - in head/contrib/sqlite3: . tea
Message-ID:  <20160824123811.GB74786@mutt-hardenedbsd>
In-Reply-To: <201608241235.u7OCZswp004129@slippy.cwsent.com>
References:  <cy@FreeBSD.org> <201608241232.u7OCWPsn020853@repo.freebsd.org> <201608241235.u7OCZswp004129@slippy.cwsent.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--qcHopEYAB45HaUaB
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Aug 24, 2016 at 05:35:54AM -0700, Cy Schubert wrote:
> In message <201608241232.u7OCWPsn020853@repo.freebsd.org>, Cy Schubert=20
> writes:
> > Author: cy
> > Date: Wed Aug 24 12:32:24 2016
> > New Revision: 304747
> > URL: https://svnweb.freebsd.org/changeset/base/304747
> >=20
> > Log:
> >   MFV r304732.
> >  =20
> >   Update from sqlite3-3.12.1 (3120100) to sqlite3-3.14.1 (3140100).
> >  =20
> >   This commit addresses the tmpdir selection vulnerability fixed in
> >   sqlite3-1.13.0.  See VuXML entry 546deeea-3fc6-11e6-a671-60a44ce6887b.
> >  =20
> >   Security:	VuXML 546deeea-3fc6-11e6-a671-60a44ce6887b
> >   Security:	CVE-2016-6153
>=20
> This should probably be MFCed in a week unless re@ wants it sooner of=20
> course.

Does this also need a FreeBSD errata notice or security announcement?

Thanks,

--=20
Shawn Webb
Cofounder and Security Engineer
HardenedBSD

GPG Key ID:          0x6A84658F52456EEE
GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89  3D9E 6A84 658F 5245 6EEE

--qcHopEYAB45HaUaB
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJXvZUxAAoJEGqEZY9SRW7uze8QAMceVH+G5kwAqAaR3zUZZd0R
CJ/hhyFMVuNl6LOOrQYkwwDvOzVtjXzu7DkErXMbsp0/57sjxYcE6Cztu5PzGTTe
MAer3s9Wbwy5Lq43w8TtpLNZDEkK3JOqJdvZw0HHgHUsc5ZOoAJY9M/6utKp8mcb
HiAAysGaqj80H4JUxdvNaE3eFyu+OGPVgEqg9jlSWBMnfffwAVAiFl+g8ysejAE6
shW4Kef4mZnVwSZib4OeikbxTOLYzyO/c8So7B0I75rQHXu8+0zX/y+AsOcbogOi
cMLM3D7tldyu7PwHnZj0Sf9PJohHJDU5arMqtykcPevgY/c/7DCCgDRHah7JU82Y
oUByrQ+VQMjK7lpMs2/uqb/kOiYNN14VdAo5vqQ1Bbud+RfDd7V29e8cdrTJxcj0
KJFM744Cu/gFukwd9yvdYZEe0TdVX5CFD+3wiCnD8BoRYJcKYhSKXh4lSvGswUP4
gE9YkZ645aKgk0Jnghibzzj9l9ridUgn2pvVxaheT3luX1JUKWp1GIpoODCShZVG
WGm+zyA31Q5aqUh/RYWFIOfw9UGfQqO1VBAi1kUu5bLqPuOOdIX1Sh0E5R1zAbep
0Jfd/EF45o7J1zEe/KE3hmCiP4v6WRXm2ZvTRIGSfscClr55CfLjNvlPBMwmTKeD
Uo4OsSeF1Y+T97inOvBY
=5jam
-----END PGP SIGNATURE-----

--qcHopEYAB45HaUaB--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20160824123811.GB74786>