On 2015-02-01, Christian Weisgerber <[email protected]> wrote: > Update devel/gpatch to 2.7.3, uh, make that 2.7.4: > > * Patch no longer follows symbolic links to input and output files. This > ensures that symbolic links created by git-style patches cannot cause > patch to write outside the working directory (CVE-2015-1196).
Is this worth committing to -stable? -- Christian "naddy" Weisgerber [email protected]
