[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: bsdcpio and bsdtar installed by default
On Wed, Jun 04, 2008 at 10:25:37PM +0200, Joerg Sonnenberger wrote:
> FreeBSD currently has a SoC project that will extend libarchive support
> and a pax frontend might be the result. In the long run I want to
> completely move to libarchive, so it would be nice if people look at the
> differences and evaluate what is needed and what can go as historic
So ignoring the slur of "historic legacy", and, yes, I do realise I
am standing in the way of progress for a moment, and that it's just
something I'll have to live with for the rest of my days,
has an interesting section about security problems in libarchive.
- libarchive security problems
Several problems in libarchive were fixed.
Specially crafted tar-archives could cause programs based on
libarchive to crash, to run into an endless loop or potentially
to even execute arbitrary code (CVE-2007-3641, CVE-2007-3644,
Is this the same libarchive that you want to see us move towards?
Main Index |
Thread Index |