Re: libarchive issue ?

Cy Schubert <[email protected]>
Newsgroups gmane.os.freebsd.security.general
Message-ID <[email protected]>
In message <[email protected]>, mike tancsa 
write
s:
> Hi,
>
>     I was thinking with the 2 intel CPU SAs, there would be an SA fo
> libarchive issue ?
>
> https://nvd.nist.gov/vuln/detail/CVE-2019-18408
>
> Or is FreeBSD not vulnerable to this particular issue ? I think as fix was
>
> __FBSDID("$FreeBSD:
> stable/12/contrib/libarchive/libarchive/archive_read_support_filter_lz4.c
> 353375 2019-10-09 22:18:01Z mm $");
>
> but just wanted to make sure

Parsing the commit log messages, we're beyond 3.4.0. Looks like we're ok.


-- 
Cheers,
Cy Schubert <[email protected]>
FreeBSD UNIX:  <[email protected]>   Web:  http://www.FreeBSD.org

	The need of the many outweighs the greed of the few.


_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[email protected]"
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.