Fabrice Fontaine 96725b6da9 package/patch: fix CVE-2019-13636 ...

In GNU patch through 2.7.6, the following of symlinks is mishandled in
certain cases other than input files. This affects inp.c and util.c.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ad9c33935b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2020-03-15 11:14:01 +01:00

..

0001-Fix-segfault-with-mangled-rename-patch.patch

…

0002-Allow-input-files-to-be-missing-for-ed-style-patches.patch

…

0003-Fix-arbitrary-command-execution-in-ed-style-patches-.patch

…

0004-Invoke-ed-directly-instead-of-using-the-shell.patch

…

0005-Don-t-follow-symlinks-unless--follow-symlinks-is-given.patch

…

Config.in

patch: add upstream security fix

2018-04-09 20:59:02 +02:00

patch.hash

patch: security bump to version 2.7.6

2018-02-23 09:08:48 +01:00

patch.mk

package/patch: fix xattr option

2018-05-06 17:32:24 +02:00