svn commit: r304747 - in head/contrib/sqlite3: . tea

[Shawn Webb]

On Wed, Aug 24, 2016 at 05:35:54AM -0700, Cy Schubert wrote:
> In message <201608241232.u7OCWPsn020853 at repo.freebsd.org>, Cy Schubert 
> writes:
> > Author: cy
> > Date: Wed Aug 24 12:32:24 2016
> > New Revision: 304747
> > URL: https://svnweb.freebsd.org/changeset/base/304747
> > 
> > Log:
> >   MFV r304732.
> >   
> >   Update from sqlite3-3.12.1 (3120100) to sqlite3-3.14.1 (3140100).
> >   
> >   This commit addresses the tmpdir selection vulnerability fixed in
> >   sqlite3-1.13.0.  See VuXML entry 546deeea-3fc6-11e6-a671-60a44ce6887b.
> >   
> >   Security:	VuXML 546deeea-3fc6-11e6-a671-60a44ce6887b
> >   Security:	CVE-2016-6153
> 
> This should probably be MFCed in a week unless re@ wants it sooner of 
> course.

Does this also need a FreeBSD errata notice or security announcement?

Thanks,

-- 
Shawn Webb
Cofounder and Security Engineer
HardenedBSD

GPG Key ID:          0x6A84658F52456EEE
GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89  3D9E 6A84 658F 5245 6EEE
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/svn-src-head/attachments/20160824/5dbb919a/attachment.sig>