Bug 198796 - archivers/rpm4: Fix security vulnerability (CVE-2014-8118)
Summary: archivers/rpm4: Fix security vulnerability (CVE-2014-8118)
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Many People
Assignee: Johan van Selst
URL:
Keywords: needs-qa, patch
Depends on:
Blocks:
 
Reported: 2015-03-22 18:21 UTC by Sevan Janiyan
Modified: 2015-03-23 08:25 UTC (History)
1 user (show)

See Also:
bugzilla: maintainer-feedback? (johans)


Attachments
CVE-2014-8118 fix (1.30 KB, text/plain)
2015-03-22 18:24 UTC, Sevan Janiyan
koobs: maintainer-approval? (johans)
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Sevan Janiyan 2015-03-22 18:21:57 UTC
Attached patch fixes CVE-2014-8118.
https://bugzilla.redhat.com/show_bug.cgi?id=1168715
Comment 1 Sevan Janiyan 2015-03-22 18:24:57 UTC
Created attachment 154663 [details]
CVE-2014-8118 fix
Comment 2 commit-hook freebsd_committer freebsd_triage 2015-03-22 18:41:17 UTC
A commit references this bug:

Author: johans
Date: Sun Mar 22 18:40:55 UTC 2015
New revision: 381946
URL: https://svnweb.freebsd.org/changeset/ports/381946

Log:
  Add security fix for CVE-2014-8118

  PR:		198796
  Submitted by:	Sevan Janiyan <venture37@geeklan.co.uk>
  Obtained from:	https://bugzilla.redhat.com/show_bug.cgi?id=1168715
  MFH:		2015Q1

Changes:
  head/archivers/rpm4/Makefile
  head/archivers/rpm4/files/patch-lib_cpio.c
Comment 3 commit-hook freebsd_committer freebsd_triage 2015-03-22 19:50:30 UTC
A commit references this bug:

Author: johans
Date: Sun Mar 22 19:49:36 UTC 2015
New revision: 381952
URL: https://svnweb.freebsd.org/changeset/ports/381952

Log:
  MFH: r381946

  Add security fix for CVE-2014-8118

  PR:		198796
  Submitted by:	Sevan Janiyan <venture37@geeklan.co.uk>
  Obtained from:	https://bugzilla.redhat.com/show_bug.cgi?id=1168715
  Approved by:	portmgr

Changes:
_U  branches/2015Q1/
  branches/2015Q1/archivers/rpm4/Makefile
  branches/2015Q1/archivers/rpm4/files/patch-lib_cpio.c
Comment 4 Johan van Selst freebsd_committer freebsd_triage 2015-03-23 08:25:27 UTC
Committed, thanks.