projects / openwrt / staging / pepe2k.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 89808e2) | patch
tools/patch: apply upstream patch for CVE-2019-13636
authorRussell Senior <[email protected]>
Mon, 29 Jul 2019 19:09:09 +0000 (12:09 -0700)
committerPetr Štetiar <[email protected]>
Wed, 14 Aug 2019 07:12:23 +0000 (09:12 +0200)
commitc99ceb7030ed92926d6e3561b176cb9940daa3cb
tree1b1368b291e09a3037119fca868f962535cfab2atree | snapshot
parent89808e211cd5ef5989bd0becb8cd45f9340610ffcommit | diff
tools/patch: apply upstream patch for CVE-2019-13636

In GNU patch through 2.7.6, the following of symlinks is mishandled in
certain cases other than input files. This affects inp.c and util.c.

https://nvd.nist.gov/vuln/detail/CVE-2019-13636

Signed-off-by: Russell Senior <[email protected]>
(cherry picked from commit 995bcc532943639f3df36dbcaa361f9167f9f4d5)
tools/patch/Makefile diff | blob | history
tools/patch/patches/050-CVE-2019-13636.patch [new file with mode: 0644] blob
Staging tree of Piotr Dymacz