[SECURITY] arc

Yaakov Selkowitz yselkowitz@cygwin.com
Wed Feb 18 02:07:00 GMT 2015


Jari,

A directory traversal vulnerability has been found in arc.  Please add
the following patches to the arc package ASAP:

http://pkgs.fedoraproject.org/cgit/arc.git/plain/arc-5.21p-hdrv1-read-fix.patch
http://pkgs.fedoraproject.org/cgit/arc.git/plain/arc-5.21p-fix-arcdie.patch
http://pkgs.fedoraproject.org/cgit/arc.git/plain/arc-5.21p-directory-traversel.patch

BTW there are also some documentation patches in that repo which you may
wish to consider adding.

TIA,

Yaakov




More information about the Cygwin-apps mailing list