]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Issue warning and refuse to proceed further if the configured
authordelphij <delphij@FreeBSD.org>
Wed, 19 Aug 2015 18:24:39 +0000 (18:24 +0000)
committerdelphij <delphij@FreeBSD.org>
Wed, 19 Aug 2015 18:24:39 +0000 (18:24 +0000)
commit671f0b94de989785355f079fb0c48e95bcfcbf61
tree040833b5703e600d5f85c8821508d363291139ed
parent35e912e686f26c691fe4817788cd72039481f07e
Issue warning and refuse to proceed further if the configured
repository signature_type is unsupported by bootstrap pkg(7).

Previously, when signature_type specified an unsupported method,
the bootstrap pkg(7) would proceed like when signature_type is
"none".  MITM attackers may be able to use this vulnerability and
bypass validation and install their own versions of pkg(8).

At this time, only fingerprint and none are supported by the
bootstrap pkg(7).

FreeBSD's official pkg(8) repository uses the fingerprint method
and is therefore unaffected.

Errata candidate.

Discussed with: bapt@
Submitted by: Fabian Keil
Obtained from: ElectroBSD
usr.sbin/pkg/pkg.c