[crosstool-ng/crosstool-ng] 7226fc: patches: No symlinks in patch directory

Bryan Hundven bryanhundven@gmail.com
Sun Jun 14 18:08:00 GMT 2015


  Branch: refs/heads/master
  Home:   https://github.com/crosstool-ng/crosstool-ng
  Commit: 7226fc2ac18188bb61e9b62e7d474fe559c982ea
      https://github.com/crosstool-ng/crosstool-ng/commit/7226fc2ac18188bb61e9b62e7d474fe559c982ea
  Author: Bryan Hundven <bryanhundven@gmail.com>
  Date:   2015-06-14 (Sun, 14 Jun 2015)

  Changed paths:
    R patches/glibc/linaro-2.20-2014.11
    A patches/glibc/linaro-2.20-2014.11/100-sparc-nptl.patch

  Log Message:
  -----------
  patches: No symlinks in patch directory

With newer version of the patch program, it no longer follows symlinks:

========================================================================
a/patch-2.7.4-x86_64-1.txz:  Upgraded.
  Patch no longer follows symbolic links to input and output files.
This
  ensures that symbolic links created by git-style patches cannot cause
  patch to write outside the working directory.
  For more information, see:
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1196
  (* Security fix *)
========================================================================

This copies patches/glibc/2.20 to patches/glibc/linaro-2.20-2014.11.

This change also closes #51

Signed-off-by: Bryan Hundven <bryanhundven@gmail.com>


  Commit: c45cfb51628bc8490ff198f5ad0d0ef275ba0166
      https://github.com/crosstool-ng/crosstool-ng/commit/c45cfb51628bc8490ff198f5ad0d0ef275ba0166
  Author: Bryan Hundven <bryanhundven@gmail.com>
  Date:   2015-06-14 (Sun, 14 Jun 2015)

  Changed paths:
    R patches/glibc/linaro-2.20-2014.11
    A patches/glibc/linaro-2.20-2014.11/100-sparc-nptl.patch

  Log Message:
  -----------
  Merge pull request #121 from bhundven/no_symlinks_in_patch_directory

patches: No symlinks in patch directory


Compare: https://github.com/crosstool-ng/crosstool-ng/compare/062657413cbe...c45cfb51628b
-------------- next part --------------
--
For unsubscribe information see http://sourceware.org/lists.html#faq


More information about the crossgcc mailing list