Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 14 Mar 2016 01:25:25 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-bugs@FreeBSD.org
Subject:   [Bug 207965] [nanobsd] regression during disk image build after CVE-2015-2304 fix/libarchive 3.2.0 update
Message-ID:  <bug-207965-8@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D207965

            Bug ID: 207965
           Summary: [nanobsd] regression during disk image build after
                    CVE-2015-2304 fix/libarchive 3.2.0 update
           Product: Base System
           Version: 11.0-CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: conf
          Assignee: freebsd-bugs@FreeBSD.org
          Reporter: junovitch@freebsd.org

The nanobsd script is relying on behaviour that has been patched in the next
release of libarchive
(https://github.com/libarchive/libarchive/commit/5935715).

Excerpt from /usr/obj/nanobsd.soekris/_.di

Populating s1a from /usr/obj/nanobsd.soekris/_.w
/usr/obj/nanobsd.soekris/_.mnt/.cpio: .: Path is absolute: Unknown error: -1

/usr/obj/nanobsd.soekris/_.mnt/./varcpio: ./var: Path is absolute: Unknown
error: -1

This prevents building a good image.  I haven't dug into a suggested fix as=
 of
yet.

See also:
- https://github.com/libarchive/libarchive/pull/110
- http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2015-2304

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-207965-8>