summaryrefslogtreecommitdiffstats
path: root/package/patch/0003-Fix-arbitrary-command-execution-in-ed-style-patches-.patch
Commit message (Collapse)AuthorAgeFilesLines
* patch: add upstream security fixBaruch Siach2018-04-091-0/+157
Fixes CVE-2018-1000156: arbitrary command execution in ed-style patches. Depend on MMU for now, because the patch adds a fork() call. Upstream later switched to gnulib provided execute(), so this dependency can be dropped on the next version bump. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
OpenPOWER on IntegriCloud