aboutsummaryrefslogtreecommitdiffstats
path: root/tools/patch/Makefile
diff options
context:
space:
mode:
authorRussell Senior <russell@personaltelco.net>2019-07-29 12:09:09 -0700
committerPetr Štetiar <ynezz@true.cz>2019-07-30 10:16:16 +0200
commit995bcc532943639f3df36dbcaa361f9167f9f4d5 (patch)
tree965f6e2bea1e1537f7130186e7eb853a4e14794b /tools/patch/Makefile
parentc6d41c320c795b0bb9a9350c7d4b1ce55f25769a (diff)
downloadupstream-995bcc532943639f3df36dbcaa361f9167f9f4d5.tar.gz
upstream-995bcc532943639f3df36dbcaa361f9167f9f4d5.tar.bz2
upstream-995bcc532943639f3df36dbcaa361f9167f9f4d5.zip
tools/patch: apply upstream patch for CVE-2019-13636
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c. https://nvd.nist.gov/vuln/detail/CVE-2019-13636 Signed-off-by: Russell Senior <russell@personaltelco.net>
Diffstat (limited to 'tools/patch/Makefile')
-rw-r--r--tools/patch/Makefile2
1 files changed, 1 insertions, 1 deletions
diff --git a/tools/patch/Makefile b/tools/patch/Makefile
index cab9fee9f6..3bcf668b04 100644
--- a/tools/patch/Makefile
+++ b/tools/patch/Makefile
@@ -8,7 +8,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=patch
PKG_VERSION:=2.7.6
-PKG_RELEASE:=4
+PKG_RELEASE:=5
PKG_CPE_ID:=cpe:/a:gnu:patch
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz