Fixes CVE-2015-1196 - allows remote attackers to write to arbitrary files via a symlink attack in a patch file. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>