tree 1b877807c65e0370bebbc6bcda6a9d4cba949927
parent 014dbd4855fa0d52a32d2e2d15b425c64b2e7c95
author Baruch Siach <baruch@tkos.co.il> 1523290836 +0300
committer Peter Korsgaard <peter@korsgaard.com> 1523300490 +0200

patch: add upstream security fix

Fixes CVE-2018-1000156: arbitrary command execution in ed-style patches.

Depend on MMU for now, because the patch adds a fork() call. Upstream
later switched to gnulib provided execute(), so this dependency can be
dropped on the next version bump.

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit f4a4df2084b923f29eca2130976ca10a7aa6b719)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>