tech-userlevel archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: bsdcpio and bsdtar installed by default

On Wed, Jun 04, 2008 at 10:25:37PM +0200, Joerg Sonnenberger wrote:
> FreeBSD currently has a SoC project that will extend libarchive support
> and a pax frontend might be the result. In the long run I want to
> completely move to libarchive, so it would be nice if people look at the
> differences and evaluate what is needed and what can go as historic
> legacy.

So ignoring the slur of "historic legacy", and, yes, I do realise I
am standing in the way of progress for a moment, and that it's just
something I'll have to live with for the rest of my days,

has an interesting section about security problems in libarchive.

   - libarchive security problems

     Several problems in libarchive were fixed.

     Specially crafted tar-archives could cause programs based on
     libarchive to crash, to run into an endless loop or potentially
     to even execute arbitrary code (CVE-2007-3641, CVE-2007-3644,

Is this the same libarchive that you want to see us move towards?


Home | Main Index | Thread Index | Old Index