From 03fcca235221df7407d2f122070ab455457076db6447517f64dfd9fab2d65f38 Mon Sep 17 00:00:00 2001 From: Jean Delvare Date: Wed, 21 Mar 2018 16:13:53 +0000 Subject: [PATCH] Update changes file to mention CVE-2016-10713 OBS-URL: https://build.opensuse.org/package/show/devel:tools/patch?expand=0&rev=53 --- patch.changes | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/patch.changes b/patch.changes index 64eab1c..d53ffaa 100644 --- a/patch.changes +++ b/patch.changes @@ -9,9 +9,12 @@ Wed Mar 21 16:44:09 CET 2018 - jdelvare@suse.de Wed Feb 7 18:43:51 UTC 2018 - astieger@suse.com - patch 2.7.6: - * Files specififed on the command line are no longer verified to + * Files specified on the command line are no longer verified to be inside the current working directory, so commands like "patch -i foo.diff ../foo" will work again + * Fixes CVE-2016-10713 (Out-of-bounds access within + pch_write_line() in pch.c could possibly lead to DoS via a + crafted input file; bsc#1080918) * Various fixes -------------------------------------------------------------------