This is the mail archive of the
cygwin-apps
mailing list for the Cygwin project.
Re: [SECURITY] arj
- From: Yaakov Selkowitz <yselkowitz at cygwin dot com>
- To: "cygwin-apps at cygwin dot com" <cygwin-apps at cygwin dot com>
- Cc: jari dot aalto at cante dot net
- Date: Fri, 26 Jun 2015 12:09:30 -0500
- Subject: Re: [SECURITY] arj
- Authentication-results: sourceware.org; auth=none
- References: <1433228930 dot 8324 dot 26 dot camel at cygwin dot com>
On Tue, 2015-06-02 at 02:08 -0500, Yaakov Selkowitz wrote:
> Jari,
>
> The arj package is missing a number of security packages carried by
> other distributions:
>
> http://pkgs.fedoraproject.org/cgit/arj.git/plain/arj-3.10.22-security_format.patch
> http://pkgs.fedoraproject.org/cgit/arj.git/plain/arj-3.10.22-security-afl.patch
> http://pkgs.fedoraproject.org/cgit/arj.git/plain/arj-3.10.22-security-traversal-dir.patch
> http://pkgs.fedoraproject.org/cgit/arj.git/plain/arj-3.10.22-security-traversal-symlink.patch
>
> There are other patches in that repo which you may wish to consider as
> well.
Ping?
--
Yaakov