This is the mail archive of the
cygwin-apps
mailing list for the Cygwin project.
Re: [SECURITY] arj (UPLOADED)
- From: Jari Aalto <jari dot aalto at cante dot net>
- To: cygwin-apps at cygwin dot com
- Date: Sun, 28 Jun 2015 12:41:09 +0300
- Subject: Re: [SECURITY] arj (UPLOADED)
- Authentication-results: sourceware.org; auth=none
- References: <1433228930 dot 8324 dot 26 dot camel at cygwin dot com> <1435338570 dot 11720 dot 30 dot camel at cygwin dot com>
2015-06-26 20:09 Yaakov Selkowitz
<yselkowitz-rDBXBDvO6BXQT0dZR+AlfA(at)public.gmane.org>:
| On Tue, 2015-06-02 at 02:08 -0500, Yaakov Selkowitz wrote:
|
| > Jari,
| >
| > The arj package is missing a number of security packages carried by
| > other distributions:
| >
| > http://pkgs.fedoraproject.org/cgit/arj.git/plain/arj-3.10.22-security_format.patch
| > http://pkgs.fedoraproject.org/cgit/arj.git/plain/arj-3.10.22-security-afl.patch
| > http://pkgs.fedoraproject.org/cgit/arj.git/plain/arj-3.10.22-security-traversal-dir.patch
| > http://pkgs.fedoraproject.org/cgit/arj.git/plain/arj-3.10.22-security-traversal-symlink.patch
| >
| > There are other patches in that repo which you may wish to consider as
| > well.
|
| Ping?
Uploaded, thanks.
Jari