From owner-freebsd-security@freebsd.org Mon Oct 10 21:37:48 2016 Return-Path: Delivered-To: freebsd-security@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8935DC0C03A for ; Mon, 10 Oct 2016 21:37:48 +0000 (UTC) (envelope-from yz@yz.kiev.ua) Received: from nb.yz.kiev.ua (nb.yz.kiev.ua [92.63.99.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 466D16B8; Mon, 10 Oct 2016 21:37:47 +0000 (UTC) (envelope-from yz@yz.kiev.ua) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=yz.kiev.ua; s=dkim; h=In-Reply-To:Content-Type:MIME-Version:References:Message-ID: Subject:Cc:To:From:Date:Sender:Reply-To:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=tbRwGwXyQeiBjAGuKjkun8T6O3GSZXayfaMRXpb52fA=; b=oSGkVqyTsYB4kt67kj/RyOfXo9 H6N2DwKdoEA9MQcFhhyIgw/hz5Dwrdo+N+lEuIXWwSiVYLi3r5FPOtH1ulmxqNfapya3TNgNE4xGG G/bcoM6JPzGVny81PnDNjMBSYPkFLKCteQN4DLjEiptjci5AmTWAV9Qna2KrS5A94/sY=; Received: from yz by nb.yz.kiev.ua with local (Exim 4.87 (FreeBSD)) (envelope-from ) id 1btiGW-000Dqg-23; Tue, 11 Oct 2016 00:37:44 +0300 Date: Tue, 11 Oct 2016 00:37:44 +0300 From: "George L. Yermulnik" To: Gleb Smirnoff Cc: freebsd-security@freebsd.org Subject: Re: FreeBSD Security Advisory FreeBSD-SA-16:31.libarchive Message-ID: <20161010213743.GE57293@yz.kiev.ua> References: <20161010075202.0C4281857@freefall.freebsd.org> <20161010204456.GA57293@yz.kiev.ua> <20161010212342.GF23123@FreeBSD.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20161010212342.GF23123@FreeBSD.org> Organization: Earth, Europe, Ukraine, Kiev X-Yz-Mark: yz@nb 20161011 00:33:03 User-Agent: Mutt/1.7.0 (2016-08-17) X-Mailman-Approved-At: Mon, 10 Oct 2016 21:50:39 +0000 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Oct 2016 21:37:48 -0000 Hello! On Mon, 10 Oct 2016 at 14:23:42 (-0700), Gleb Smirnoff wrote: > G> > a) Download the relevant patch from the location below, and verify the > G> > detached PGP signature using your PGP utility. > G> > G> > # fetch https://security.FreeBSD.org/patches/SA-16:31/libarchive.patch > G> > # fetch https://security.FreeBSD.org/patches/SA-16:31/libarchive.patch.asc > G> > # gpg --verify libarchive.patch.asc > G> > G> #> fetch https://security.FreeBSD.org/patches/SA-16:31/libarchive.patch > G> fetch: https://security.FreeBSD.org/patches/SA-16:31/libarchive.patch: Not Found > Should be either of this: > https://security.FreeBSD.org/patches/SA-16:31/libarchive-10.1.patch > https://security.FreeBSD.org/patches/SA-16:31/libarchive-10.2.patch > https://security.FreeBSD.org/patches/SA-16:31/libarchive-10.3.patch Thanx. I found that already, but Security Advisory is incorrect and that's the point. Anyway libarchive-10.3.patch generated on my 10.3 box a bunch of rejections, so I had to checkout contrib/libarchive/libarchive/ and lib/libarchive/tests/ from repository to be able to rebuild world. -- George L. Yermulnik [YZ-RIPE]