Jelajahi Sumber

patch: security bump to version 2.7.3

Fixes CVE-2015-1196 - allows remote attackers to write to arbitrary
files via a symlink attack in a patch file.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias 10 tahun lalu
induk
melakukan
78cb8c81fa
2 mengubah file dengan 3 tambahan dan 1 penghapusan
  1. 2 0
      package/patch/patch.hash
  2. 1 1
      package/patch/patch.mk

+ 2 - 0
package/patch/patch.hash

@@ -0,0 +1,2 @@
+# Locally calculated after checking pgp signature
+sha256	d09022de9d629561bf4dad44625ef4b1ead15178b210412113531730cdb6f19d	patch-2.7.3.tar.xz

+ 1 - 1
package/patch/patch.mk

@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-PATCH_VERSION = 2.7.1
+PATCH_VERSION = 2.7.3
 PATCH_SOURCE = patch-$(PATCH_VERSION).tar.xz
 PATCH_SITE = $(BR2_GNU_MIRROR)/patch
 PATCH_LICENSE = GPLv3+