diff options
| author | Andreas Gruenbacher <agruen@linbit.com> | 2012-09-12 11:35:43 +0200 |
|---|---|---|
| committer | Andreas Gruenbacher <agruen@linbit.com> | 2012-09-12 11:35:43 +0200 |
| commit | 58ec5b5643dc5b896575287fa82cc6e7c7aa47f3 (patch) | |
| tree | e9854fdc9f7ac3f2e3e5cb6194f3afcf97811971 | |
| parent | e4b9ff4cfe445da3b1882007ed82d8705497b3f3 (diff) | |
| download | patch-58ec5b5643dc5b896575287fa82cc6e7c7aa47f3.tar.gz | |
Version 2.7v2.7
* NEWS: Update.
| -rw-r--r-- | NEWS | 10 |
1 files changed, 6 insertions, 4 deletions
@@ -1,6 +1,8 @@ +Changes in version 2.7: + * Patch no longer gets a failed assertion for certain mangled patches. -* Patch now ignores destination file names that are absolute or that contain - a component of "..". This addresses CVE-2010-4651. +* Ignore destination file names that are absolute or that contain a component + of "..". This addresses CVE-2010-4651. * Support for most features of the "diff --git" format, including renames and copies, permission changes, and symlink diffs. Binary diffs are not supported yet; patch will complain and skip them. @@ -13,8 +15,8 @@ * When trying to modify a read-only file, warn about the potential problem by default. The --read-only command line option allows to change this behavior. -* Files that should be deleted are now deleted once the entire patch file has - been read. This fixes a bug with numbered backup files. +* Files to be deleted are deleted once the entire input has been processed, not + immediately. This fixes a bug with numbered backup files. * When a timestamp specifies a time zone, honor that instead of assuming the local time zone (--set-date) or Universal Coordinated Time (--set-utc). * Support for nanosecond precision timestamps. |