|
|
With newer version of the patch program, it no longer follows symlinks:
========================================================================
a/patch-2.7.4-x86_64-1.txz: Upgraded.
Patch no longer follows symbolic links to input and output files.
This
ensures that symbolic links created by git-style patches cannot cause
patch to write outside the working directory.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1196
(* Security fix *)
========================================================================
This copies patches/glibc/2.20 to patches/glibc/linaro-2.20-2014.11.
This change also closes #51
Signed-off-by: Bryan Hundven <bryanhundven@gmail.com>
|
