FreeBSD Security Advisory FreeBSD-SA-07:05.libarchive Errors handling corrupt tar files in libarchive(3)


http://lists.freebsd.org/pipermail/freebsd-security-notifications/2007-July/000098.html
Errors handling corrupt tar files in libarchive(3)

fetch http://security.FreeBSD.org/patches/SA-07:05/libarchive.patch
fetch http://security.FreeBSD.org/patches/SA-07:05/libarchive.patch.asc

cd /usr/src
patch < /path/to/patch
cd /usr/src/lib/libarchive
make obj && make depend && make && make install
cd /usr/src/rescue
make obj && make depend && make && make install

した。

しかし、罠があって、

NOTE: On the amd64 platform, the above procedure will not update the
lib32 (i386 compatibility) libraries. On amd64 systems where the i386
compatibility libraries are used, the operating system should instead
be recompiled as described in
url:http://www.freebsd.org/handbook/makeworld.html

ということなのでした。数時間ほっとけば buildworldが走るのでほっとこ。