=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/58.html,v retrieving revision 1.64 retrieving revision 1.65 diff -c -r1.64 -r1.65 *** www/58.html 2015/09/28 19:29:08 1.64 --- www/58.html 2015/09/29 15:02:34 1.65 *************** *** 142,148 ****
  • file(1) has been replaced with a new modern implementation, including sandbox and privilege separation.
  • pax(1) (and tar(1) and cpio(1)) now prevent archive extraction from escaping the current directory via symlinks; tar(1) without -P option now strips up through any ".." path components.
  • Improved kernel checks of ELF headers. !
  • ...

    --- 142,148 ----

  • file(1) has been replaced with a new modern implementation, including sandbox and privilege separation.
  • pax(1) (and tar(1) and cpio(1)) now prevent archive extraction from escaping the current directory via symlinks; tar(1) without -P option now strips up through any ".." path components.
  • Improved kernel checks of ELF headers. !
  • Stricter enforcement of W^X in the kernel address space on i386 when using processors with PAE support