d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
5b71d8999c
freebsd-dev/contrib
History
Martin Matuska 24113d8c17 MFV r305816: 
Sync libarchive with vendor including important security fixes.

Issues fixed (FreeBSD):
PR #778: ACL error handling
Issue #745: Symlink check prefix optimization is too aggressive
Issue #746: Hard links with data can evade sandboxing restrictions

This update fixes the vulnerability #3 and vulnerability #4 as reported in
"non-cryptanalytic attacks against FreeBSD update components".
https://gist.github.com/anonymous/e48209b03f1dd9625a992717e7b89c4f

Fix for vulnerability #2 has already been merged in r304989.

MFC after:	1 week
Security: http://gist.github.com/anonymous/e48209b03f1dd9625a992717e7b89c4f
2016-09-14 21:15:01 +00:00
..
amd Mark amd(8) and all related utilities as obsolete. 2016-02-29 16:45:10 +00:00
apr Update apr-1.5.1 to 1.5.2 2015-08-09 05:14:25 +00:00
apr-util
atf Don't let ATF call basename() and dirname() in a non-standard way. 2016-06-08 20:54:56 +00:00
binutils Spell MIPS more traditionally in "bfd_elf32_ntradbigmips_vec". 2016-08-24 00:00:54 +00:00
blacklist libblacklist: Do not use %m for logging, use strerror(errno) 2016-07-29 21:11:32 +00:00
bmake Update to bmake-20170818 2016-09-09 01:09:39 +00:00
bsnmp Revert r299830, it has couple of fatal errors. 2016-05-18 22:02:19 +00:00
byacc Merge byacc 20160324. 2016-03-25 22:32:26 +00:00
bzip2
com_err
compiler-rt Update compiler-rt to release_38 branch r261369. 2016-02-21 16:27:55 +00:00
dialog
diff Fix the wrong format, format specifies type 'int' but the argument has type 2015-06-01 06:14:17 +00:00
dma Import Dragonfly Mail Agent snapshort from 20160806 aka v0.11+ 2016-08-20 16:36:05 +00:00
dtc Silence clang warning about extraneous parenthesis 2015-06-05 17:18:10 +00:00
ee
elftoolchain readelf: silence GCC 4.2.1 uninitialized variable warning 2016-08-31 21:04:58 +00:00
expat MFV r302260: expat 2.2.0 2016-07-01 05:48:45 +00:00
file MFV r302218: file 5.28. 2016-06-27 01:29:17 +00:00
flex
gcc MFV r302423: 2016-08-30 21:51:53 +00:00
gcclibs Define libcpp's HAVE_DESIGNATED_INITIALIZERS in a defined and portable 2016-09-05 18:02:37 +00:00
gdb Fix KGDB backtrace on ARM 2016-04-20 17:58:13 +00:00
gdtoa
gperf
groff Add SUSv4 reference macro to our groff mdoc. mdocml already supports it. 2016-05-17 09:24:54 +00:00
hyperv/tools hyperv/kvp_daemon: Make poll(2) block indefinitely 2016-01-11 03:30:16 +00:00
ipfilter Follow-up to r304953, in which I broke the build: apparently the SOLARIS 2016-08-28 19:35:29 +00:00
jemalloc Update jemalloc to 4.2.1. 2016-06-09 06:10:20 +00:00
ldns
ldns-host Initialize first_serial to 0 in dozonetransfer(..) to fix -Wuninitialized 2016-07-14 06:10:16 +00:00
less MFV r293125: less v481. 2016-01-05 05:25:16 +00:00
libarchive MFV r305816: 2016-09-14 21:15:01 +00:00
libbegemot
libc-pwcache
libc-vis Update to a June 8th snapshot of (un)vis form NetBSD. 2016-06-08 18:21:27 +00:00
libc++ Update libc++ to 3.8.0. Excerpted list of fixes (with upstream revision 2016-05-26 18:52:49 +00:00
libcxxrt Add _US_ACTION_MASK to libcxxrt's arm-specific unwind header. This 2016-09-04 21:48:58 +00:00
libdivsufsort Change bsdiff to use divsufsort suffix sort library instead of qsufsort, 2016-07-25 03:58:19 +00:00
libexecinfo Remove usage of _WITH_DPRINTF 2016-07-30 01:16:06 +00:00
libgnuregex Back out non-collating [a-z] ranges. 2016-07-14 09:45:07 +00:00
libpcap Fix a style(9) bug. 2016-08-03 20:21:58 +00:00
libreadline
libstdc++
libucl Fix build with external gcc 2016-06-05 11:56:03 +00:00
libxo Update libxo to 0.6.3 2016-07-03 01:35:27 +00:00
llvm Pull in r277331 from upstream llvm trunk (by Diana Picus): 2016-09-01 18:11:44 +00:00
mdocml Update mandoc to 1.13.4 release 2016-07-23 11:55:15 +00:00
mknod
mtree
ncurses In ncurses baudrate definitions, avoid warnings about implicit 2016-08-27 20:33:19 +00:00
netbsd-tests Fix tests/sys/kqueue NetBSD tests on 32-bit platforms by using proper 2016-09-06 17:22:25 +00:00
netcat MFV r288243: nc from OpenBSD 5.8. 2015-09-27 07:04:16 +00:00
ngatm
ntp MFV r301238: 2016-06-03 08:00:22 +00:00
nvi
ofed cxgbe/iw_cxgbe: Various fixes to the iWARP driver. 2016-08-26 17:38:13 +00:00
one-true-awk The bug: 2016-09-03 23:04:56 +00:00
openbsm Regenerate config.h for OpenBSM 1.2 alpha 4. 2015-12-18 09:49:11 +00:00
openpam Restore the upstream (and documented) behavior of searching for modules 2015-09-21 17:26:35 +00:00
openresolv MFV r298167, r300962, r303048: 2016-07-20 03:52:04 +00:00
opie
pam_modules/pam_passwdqc
pf Rename getline with get_line to avoid collision with getline(3) 2016-05-10 11:09:26 +00:00
pjdfstest Better handle filesystems mounted with -o noexec 2016-03-12 19:41:38 +00:00
pnpinfo
sendmail Remove unneeded libutil dependency for sendmail. 2015-11-24 04:19:55 +00:00
serf Update serf from 1.3.7 to 1.3.8. Mostly disables sslv2 and sslv3. 2015-08-09 05:16:14 +00:00
smbfs Add #include <string.h> to mute warning from clang/gcc about implicitly 2016-02-01 07:09:08 +00:00
sqlite3 MFV r304732. 2016-08-24 12:32:24 +00:00
subversion Re-sync the FreeBSD-specific Subversion template with the one from 2016-05-03 18:06:42 +00:00
tcp_wrappers
tcpdump The code responsible for opening and rotating pcap files is independent 2016-06-08 23:22:59 +00:00
tcsh To mimic system glob, we definitely don't need manual upper/lower hack. 2016-07-14 09:40:42 +00:00
telnet Fix warnings in telnet about invalid constant conversions, e.g.: 2016-08-30 20:27:22 +00:00
tnftp Fix warnings in tnftp about invalid constant conversions, e.g.: 2016-08-30 20:24:50 +00:00
top Add a toggle to display the approximate amount of swap used by each 2016-09-05 08:27:04 +00:00
traceroute The code starts with base + 1 as the first port. Fix to documentation 2015-05-31 12:18:30 +00:00
tzcode Merge: 2015-10-08 11:42:15 +00:00
tzdata MFV of 290695,tzdata2015g 2015-11-12 03:25:04 +00:00
unbound Upgrade to Unbound 1.5.9. 2016-09-04 12:17:57 +00:00
unvis
vis
wpa [wpa] use IFM_IEEE80211_ADHOC for now on FreeBSD for IBSS operation. 2015-11-26 17:28:40 +00:00
xz MFV r291123: 2015-11-21 09:09:25 +00:00