Subject: CVS commit: [pkgsrc-2014Q4] pkgsrc/devel/patch
From: Matthias Scheler
Date: 2015-02-18 18:57:12
Message id: 20150218175712.3AA0498@cvs.netbsd.org

Log Message:
Pullup ticket #4616 - requested by sevan
devel/patch: security update

Revisions pulled up:
- devel/patch/Makefile                                          1.41
- devel/patch/distinfo                                          1.9

---
   Module Name:    pkgsrc
   Committed By:   mef
   Date:           Sun Feb  8 09:29:43 UTC 2015

   Modified Files:
           pkgsrc/devel/patch: Makefile distinfo

   Log Message:
   Update 2.7.1 to 2.7.4
   ---------------------
   Changes until version 2.7.4:

   * When a file isn't being deleted because the file contents don't match the
     patch, the resulting message is now "Not deleting file ... as content
     differs from patch" instead of "File ... is not empty after patch; not
     deleting".
   * Function names in hunks (from diff -p) are now preserved in reject files.
   * Patch no longer follows symbolic links to input and output files.  This
     ensures that symbolic links created by git-style patches cannot cause
     patch to write outside the working directory (CVE-2015-1196).
   * Various fixes.

Files:
RevisionActionfile
1.40.2.1modifypkgsrc/devel/patch/Makefile
1.8.8.1modifypkgsrc/devel/patch/distinfo