810520 – <app-arch/libarchive-3.5.2: Multiple vulnerabilities

Bug 810520 - <app-arch/libarchive-3.5.2: Multiple vulnerabilities

Summary: <app-arch/libarchive-3.5.2: Multiple vulnerabilities

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal minor (vote)
Assignee:	Gentoo Security

URL:
Whiteboard:	B3 [noglsa]
Keywords:

Depends on:	810523
Blocks:
	Show dependency tree

Reported:	2021-08-26 18:57 UTC by Sam James
Modified:	2021-09-21 20:38 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Sam James archtester

2021-08-26 18:57:55 UTC

From 3.5.2 release notes:
```
Important Security Fixes:
    fix handling of symbolic link ACLs on Linux (#1565)
    never follow symlinks when setting file flags on Linux (e2ad1a2)
    do not follow symlinks when processing the fixup list (#1566)
```

Please stabilise when ready in a new blocker bug.

Comment 1 John Helmert III archtester

2021-09-21 18:15:13 UTC

Please cleanup.

Comment 2 Michał Górny archtester

2021-09-21 20:33:09 UTC

cleanup done

Comment 3 John Helmert III archtester

2021-09-21 20:38:57 UTC

Low impact, no GLSA, all done, thanks!