[Bug 209404] security/vuxml CVE-2016-1541 archive/libarchive entry version incorrect 2.3 should be 3.2
bugzilla-noreply at freebsd.org
bugzilla-noreply at freebsd.org
Mon May 9 20:25:07 UTC 2016
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=209404
Bug ID: 209404
Summary: security/vuxml CVE-2016-1541 archive/libarchive entry
version incorrect 2.3 should be 3.2
Product: Ports & Packages
Version: Latest
Hardware: Any
OS: Any
Status: New
Severity: Affects Many People
Priority: ---
Component: Individual Port(s)
Assignee: ports-secteam at FreeBSD.org
Reporter: dereks at lifeofadishwasher.com
Assignee: ports-secteam at FreeBSD.org
Flags: maintainer-feedback?(ports-secteam at FreeBSD.org)
Based off the following commit:
http://svnweb.freebsd.org/ports/head/security/vuxml/vuln.xml?r1=414860&r2=414889
The latest archivers/libarchive vuxml entry (CVE-2016-1541) was fixed in 3.2
not 2.3.
Appears there was confusion with the latest commit:
http://svnweb.freebsd.org/ports/head/archivers/libarchive/distinfo?view=log
"Upgrading to 2.3"
--
You are receiving this mail because:
You are the assignee for the bug.
More information about the freebsd-ports-bugs
mailing list