[SECURITY] arj

Yaakov Selkowitz yselkowitz@cygwin.com
Tue Jun 2 07:08:00 GMT 2015


Jari,

The arj package is missing a number of security packages carried by
other distributions:

http://pkgs.fedoraproject.org/cgit/arj.git/plain/arj-3.10.22-security_format.patch
http://pkgs.fedoraproject.org/cgit/arj.git/plain/arj-3.10.22-security-afl.patch
http://pkgs.fedoraproject.org/cgit/arj.git/plain/arj-3.10.22-security-traversal-dir.patch
http://pkgs.fedoraproject.org/cgit/arj.git/plain/arj-3.10.22-security-traversal-symlink.patch

There are other patches in that repo which you may wish to consider as
well.

--
Yaakov




More information about the Cygwin-apps mailing list