patch: security bump to version 2.7.3

Fixes CVE-2015-1196 - allows remote attackers to write to arbitrary
files via a symlink attack in a patch file.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Gustavo Zacarias 2015-01-23 07:47:56 -03:00 committed by Peter Korsgaard
parent 9711d8b824
commit 78cb8c81fa
2 changed files with 3 additions and 1 deletions

2
package/patch/patch.hash Normal file
View File

@ -0,0 +1,2 @@
# Locally calculated after checking pgp signature
sha256 d09022de9d629561bf4dad44625ef4b1ead15178b210412113531730cdb6f19d patch-2.7.3.tar.xz

View File

@ -4,7 +4,7 @@
#
################################################################################
PATCH_VERSION = 2.7.1
PATCH_VERSION = 2.7.3
PATCH_SOURCE = patch-$(PATCH_VERSION).tar.xz
PATCH_SITE = $(BR2_GNU_MIRROR)/patch
PATCH_LICENSE = GPLv3+