packages/devel/patch, branch master

patch: update to v2.8

2025-04-03T13:15:31Z

Delete patches already upstream. Signed-off-by: Russell Senior

patch: do not patch automake Makefile template

2022-09-09T22:20:58Z

We do not build the tests for this package, so we can avoid needing autoreconf when the host automake version doesn't match the version this package was bootstrapped with by not changing the .am file in this patch. Signed-off-by: Michael Pratt

treewide: Run refresh on all packages

2021-02-21T00:02:15Z

The crude loop I wrote to come up with this changeset: find -L package/feeds/packages/ -name patches | \ sed 's/patches$/refresh/' | sort | xargs make Signed-off-by: Ilya Lipnitskiy

treewide: Change .GPL.+ licenses to SPDX compatible identifier

2019-09-10T05:45:15Z

The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL licenses. But a lot of packages did use a different, non-SPDX style with a "+" at the end instead of "-or-later". Signed-off-by: Sven Eckelmann

patch: rename CVE-2019-13638 patch to mollify uscan

2019-09-01T22:56:23Z

Signed-off-by: Russell Senior

patch: apply upstream patch for CVE-2019-13638

2019-08-11T20:01:04Z

GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156. https://nvd.nist.gov/vuln/detail/CVE-2019-13638 Signed-off-by: Russell Senior

tools/patch: apply upstream patch for CVE-2019-13636

2019-07-29T20:14:58Z

In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c. https://nvd.nist.gov/vuln/detail/CVE-2019-13636 Signed-off-by: Russell Senior

patch: Add missing CVE-2018-6951 patch

2018-10-18T07:41:32Z

The last commit added PKG_CPE_ID and now uscan detects a CVE that I missed Reordered patches by date Signed-off-by: Rosen Penev [tweaked commit message] Signed-off-by: Kevin Darbyshire-Bryant

patch: Fix CVE-2018-6952 and CVE-2018-1000156

2018-10-12T21:27:25Z

Patches taken from official git repository. Added PKG_CPE_ID for proper CVE tracking. Added PKG_BUILD_PARALLEL for faster compilation. Also adjusted Makefile to be more similar to other projects. Signed-off-by: Rosen Penev

patch: update to version 2.7.6

2018-02-13T10:29:27Z