Created attachment 211998 [details] Patch file Update to 3.4.2. Security: CVE-2020-9308 Bug #244474 documents vulnerability fixed with this version. So please commit it together.
A commit references this bug: Author: glewis Date: Sun Mar 1 20:14:07 UTC 2020 New revision: 527600 URL: https://svnweb.freebsd.org/changeset/ports/527600 Log: Update to 3.4.2 PR: 244476 Submitted by: Yasuhiro KIMURA <yasu@utahime.org> Changes: head/archivers/libarchive/Makefile head/archivers/libarchive/distinfo
I'm not on ports-secteam, so I just committed this update. Thanks.