patch: security bump to version 2.7.3
Fixes CVE-2015-1196 - allows remote attackers to write to arbitrary files via a symlink attack in a patch file. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
parent
9711d8b824
commit
78cb8c81fa
2
package/patch/patch.hash
Normal file
2
package/patch/patch.hash
Normal file
@ -0,0 +1,2 @@
|
||||
# Locally calculated after checking pgp signature
|
||||
sha256 d09022de9d629561bf4dad44625ef4b1ead15178b210412113531730cdb6f19d patch-2.7.3.tar.xz
|
@ -4,7 +4,7 @@
|
||||
#
|
||||
################################################################################
|
||||
|
||||
PATCH_VERSION = 2.7.1
|
||||
PATCH_VERSION = 2.7.3
|
||||
PATCH_SOURCE = patch-$(PATCH_VERSION).tar.xz
|
||||
PATCH_SITE = $(BR2_GNU_MIRROR)/patch
|
||||
PATCH_LICENSE = GPLv3+
|
||||
|
Loading…
Reference in New Issue
Block a user