[Bug 209404] security/vuxml CVE-2016-1541 archive/libarchive entry version incorrect 2.3 should be 3.2

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Mon May 9 20:25:07 UTC 2016


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=209404

            Bug ID: 209404
           Summary: security/vuxml CVE-2016-1541 archive/libarchive entry
                    version incorrect 2.3 should be 3.2
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-secteam at FreeBSD.org
          Reporter: dereks at lifeofadishwasher.com
          Assignee: ports-secteam at FreeBSD.org
             Flags: maintainer-feedback?(ports-secteam at FreeBSD.org)

Based off the following commit:

http://svnweb.freebsd.org/ports/head/security/vuxml/vuln.xml?r1=414860&r2=414889

The latest archivers/libarchive vuxml entry (CVE-2016-1541) was fixed in 3.2
not 2.3.

Appears there was confusion with the latest commit:

http://svnweb.freebsd.org/ports/head/archivers/libarchive/distinfo?view=log

"Upgrading to 2.3"

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list