patch-2.7.6-150000.5.9.1 < > , B i p9| LdH9U65{&@]BX/e\M T(
̆PɬX04DK=´Ev/\ 1
;8f
E fA3dCe&9u00;j,/ ;@KT w#EwlKZ k ]G{-V; L?йmTq1~2H-Ⱦɨp)o5^H繋Iϖhvv > A ? d % 5 S Y `
H
P p H ( 8
9
:
F 2 G H H h I X Y \ ] ^ b c I d e f l u v w < x \ y | z C patch 2.7.6 150000.5.9.1 GNU patch The GNU patch program is used to apply diffs between original and
changed files (generated by the diff command) to the original files. i h01-ch4d HSUSE Linux Enterprise 15 SUSE LLC GPL-3.0+ https://www.suse.com/ Productivity/Text/Utilities http://ftp.gnu.org/gnu/patch/ linux x86_64 O >t
K .A큤A큤 ii Y:8ZvZvi Y:8i691c5d594bc64a41a5502c4c724c9aea554d7fc67c883011c76282cd772dcaaa 528481ea03694753f86a597ae141e4f7cc39b29574d4b3e5f53d1daaabf4c803 d36e3e3fa4a4cdf4d1857c264e4e86ad0b5a946ce38dcc32a2615ef66e1951d6 9bcbe8b98b3061da1fb37d1176f7e205eec4f1e24bd1ea76f88c1f2dd790c827 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903 ca57e06025443f32fcffa186b082b7ba5a336e3846534d0d2ad4f30398420719 root root root root root root root root root root root root root root root root patch-2.7.6-150000.5.9.1.src.rpm patch patch(x86-64) @ @ @ @ @ @ @ @
libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.6)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 patchutils 0.3.2 4.14.1 ifbzSZZ3@Z3@ZZI@Zz@T@TT7T`jdelvare@suse.com wolfgang.frisch@suse.com jdelvare@suse.de jdelvare@suse.de jdelvare@suse.de jdelvare@suse.de jdelvare@suse.de jdelvare@suse.de astieger@suse.com jdelvare@suse.de jdelvare@suse.de andreas.stieger@gmx.de jdelvare@suse.de - CVE-2021-45261.patch: Clear range of pointers before they are
used/freed (boo#1194037 CVE-2021-45261). - CVE-2019-20633.patch: Fix double-free/OOB read in pch.c (bsc#1167721) - fix-swapping-fake-lines-in-pch_swap.patch: Fix swapping fake
lines in pch_swap. This bug was causing a double free leading to
a crash (boo#1080985 CVE-2018-6952).
- abort-when-cleaning-up-fails.patch: Abort when cleaning up fails.
This bug could cause an infinite loop when a patch wouldn't
apply, leading to a segmentation fault (boo#1111572).
- dont-follow-symlinks-unless-asked.patch: Don't follow symlinks
unless --follow-symlinks is given. This increases the security
against malicious patches (boo#1142041 CVE-2019-13636).
- pass-the-correct-stat-to-backup-files.patch: Pass the correct
stat to backup files. This bug would occasionally cause backup
files to be missing when all hunks failed to apply (boo#1198106). - ed-style-07-dont-leak-tmp-file.patch,
ed-style-08-dont-leak-tmp-file-multi.patch: Fix temporary file
leak when applying ed-style patches (bsc#1092500,
savannah#53820). - Add ed as BuildRequires so ed-style patches can be checked by
the test suite. Fix CVE-2018-1000156 (bsc#1088420, savannah#53566).
- ed-style-01-missing-input-files.patch: Allow input files to be
missing for ed-style patches.
- ed-style-02-fix-arbitrary-command-execution.patch,
ed-style-03-update-test-Makefile.patch: Fix arbitrary command
execution in ed-style patches.
- ed-style-04-invoke-ed-directly.patch: Invoke ed directly instead
of using the shell.
- ed-style-05-minor-cleanups.patch: Minor cleanups in do_ed_script.
- ed-style-06-fix-test-failure.patch: Fix 'ed-style' test failure. - Move COPYING from %doc to %license. - Add AUTHORS and COPYING to %doc.
- fix-segfault-mangled-rename.patch: Fix segfault with mangled
rename patch (bsc#1080951, CVE-2018-6951, savannah#53132). - patch 2.7.6:
* Files specified on the command line are no longer verified to
be inside the current working directory, so commands like
"patch -i foo.diff ../foo" will work again
* Fixes CVE-2016-10713 (Out-of-bounds access within
pch_write_line() in pch.c could possibly lead to DoS via a
crafted input file; bsc#1080918)
* Various fixes - patch 2.7.5
Fixes a functional regression introduced by the previous update.
+ Patching through symbolic links works again, as long as the
target is within the working tree. - patch 2.7.4
Fixes a functional regression introduced by the previous security
fix. The security fix would forbid legitimate use cases of
relative symbolic links.
[boo#918058]
+ Allow arbitrary symlink targets again.
+ Do not change permissions if there isn't an explicit mode
change.
+ Fix indentation heuristic for context diffs.
- Please also note that the previous update fixed security bugs
boo#915328 and boo#915329 even though it did not say so. - patch 2.7.3
Contains a security fix for a directory traversal flaw when
handling git-style patches. This could allow an attacker to
overwrite arbitrary files by applying a specially crafted patch.
[boo#913678] [CVE-2015-1196]
+ With git-style patches, symlinks that point outside the working
directory will no longer be created (CVE-2015-1196).
+ When a file isn't being deleted because the file contents don't
match the patch, the resulting message is now "Not deleting
file ... as content differs from patch" instead of "File ...
is not empty after patch; not deleting".
+ Function names in hunks (from diff -p) are now preserved in
reject files
This change was previously added as a patch. [boo#904519]
- Version 2.7.2 differed from the above only slightly.
- packaging changes:
+ Verify source signatures
+ Removed patches now upstream:
* error-report-crash.patch
* reject-print-function-01-drop-useless-test.patch
* reject-print-function-02-handle-unified-format.patch
+ run spec-cleaner - reject-print-function-01-drop-useless-test.patch: Drop useless
test in another_hunk().
- reject-print-function-02-handle-unified-format.patch: Preserve C
function name in unified rejects (bnc#904519). h01-ch4d 1770106880 2.7.6-150000.5.9.1 2.7.6-150000.5.9.1 patch patch AUTHORS NEWS README patch COPYING patch.1.gz /usr/bin/ /usr/share/doc/packages/ /usr/share/doc/packages/patch/ /usr/share/licenses/ /usr/share/licenses/patch/ /usr/share/man/man1/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:42544/SUSE_SLE-15_Update/f4b7140e95389a4007c1fd78fc4e4058-patch.SUSE_SLE-15_Update drpm xz 5 x86_64-suse-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=5bd74b181d683aacc23db3287a3f7ff254690ae2, for GNU/Linux 3.2.0, stripped directory ASCII text troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R R R R R R R R mF| Ԥ utf-8 d0c18197d8e310382f1300baf1927c5dff631508694bd2fa323738609f856e0c ? 7zXZ
! t/5"c] "k%nKqyywt)"Bcʙ|
M))s|[*{6UUv_8
Ы`I6y.(Ϫa]POK揻) D1aVuBZq85# O k'jd6߮ f73יFE0qc$D1h =dPzƛX@k|t,m{
kݗo]zvnF pKgVMNr.)lp>Bn6kq_ѰlCA2L\e1em 4俴`Oa⦔$aIb\g([t8@BNpaa\ĝGkO_g96 ZQ cJ#[\wkQ[4n:^9K'}=|C<
s>e<07=4 6~Y҈80MQrӍ39]vMT]VEJAB
^?IItRURP }uI) +,-6OĕD1x^M_Q@2 )m)aYߡ ?#|uʋ4)V|q]jf"9ƨIdDtW )H5>" SZB$= cg呲?`( ϯ<`v!y{^"GHSZe,otMpj ◁=HDέI'+?T̰YNmt2zlܗMǒGXUbALy]CZ(`b ? `!"Fߩ:RBI$9<=\Ǟ <{Ccr~ rEw|ܠ-u *ݍ}F(Y]|T77 Ndl D:a4%Tf (${|4Vj3Jㆸ y{]'lPu&3u|ɦ[ ն7(>k'w@bÐq;.1JYP1V.˹ 0> g٬FV>6`VXG!+S܇|:B# o o- h#yBjsfHT_:
M Jw8|OKÂ' {f
\҈zkJÅW(qpcɇu2],;KtZ|>*$~kG˕%Ns3͚f@JϠ>e-\L~ol@]S!̩j%+6~ґt 3QWWʆE:BՖeE#a*iD4lȰa@<8i CVds4 ՛ :Sv11'_K/(]ѥu0Q(E 0OJX Ƽ SlF ow4bCǬ
|l T??Pٖ$A ,L$ғ <=aLlK5"x:b64`2U
+g)iCl~C^UC Ume˗ "4vu,z
yu|ȴl+
<Ɯ M]-* WFaLPL KQO*dHMh {W
Vq\Z6/O4 s<ҥ0tP vEY;Ƃކ@f2NYUy|v^ P>. "\
4#`$SlI#b+DD|K[wpXE%iH 톂"Ԫx`^`]S%4 ieϒx'
X eܿj$guЯoYpMv碙(NQ_?EWi#$u_5Cpm8 hzDZʦkUЖsi_Gʇk lMѭ:Z G=n>lӢ _pȎT82aD)(}H[M 6}9~1wvJI?ک*$#PsjF[Xo!8 2nlIRy0P}ļ= tӿqZ mUƷ6Fϴ.'Z?\QyR (vaX+u_u<\#xt%t+X~SX{9k{sMby ԟбR64A_)&Ԥv*
< L-d+mAH748ƕ 9d:Y(la< |y>^ d#V7Cl
햋(WZ!hmkG(,`'ҙ&2-CσQ-JK
B!:awMbZj]{HFMl|̀6~mĶvn LR|ɚr֛VN z Yp;''HÏg;=L(QҤ뒥\4,ykgq$Ϫ @5 jJnT\ܱb^ (=\,\?ݖ< KF$Av[URȎ_GBtJ4̲ 3 0,uUzƝuL ?i8m[軗Ȭ/&ǬM3գ o+߁!Ma'RKdOwƧ lSjBK Fe0WE > VnBBs^(j5XB:E
1-B{OI`ezȹT4#ݦDD) X'ԽKQ?}6Tm vS>9 )R6ߨJ{b2' 8_IB\do| 9 el#{ܺЈqQc^ m Xxz܍fLDAL$ ;cڗ7^JbhiPNEn-]-;9"VK?%o ŁJ=
yKiӕW@p5ّƒCF"ٵ+mNk3JpZHf[~~@]J6q5 q6{ BΉ ?yU
I1U~AV4u?Gc<Yxmsɦ1:^',صvLNm?7{7Ԋ ˋ*5feZGśq0;쟳Sc :
tv~wk-ϻHQk3k7`3I+%bA >~AZDiɕZUB hsC[: +l@f! [wr]A9=|IQYs KJG -RzN% f]ߘ\[h<"Ne&$ibĭ[شhՏka 2_ Xկ±h;N:U6vkVD
' ("kbf^N{*jUb)Iu4jqK NtIaf C
( SYJ'z\t
RHP as(.uo``.?m=[X\b5(̸w֦OhD"RL$Z^I[ܚX=D. ad25jۅ _T$?\Sg t+7w9/DiKC!WZnkgRɘ" d(
m0Ze#&4y~;e_Pod%7Tm\I'㵇$0ٮU VM8qy.GsII!J }ƭfՀ Z+S)iLH^5!$*v]繲pu'1UcJ dzlT 5:Ao<
!T]L
?&ۛF ^ \LٸGB]L6&L39iWæVg }N=? ĝ=*ܳ囔8r =T87?d;6~ƉP g@RcR3v
t^@d$C}ͥSx|O*jYyrW0 Ndžb),5I S<2 WEsU!\Zt/*J5O `l":N0Y{υgKe,WJG?b Pj0f=x:GB.Q58"ݲCYqsV5j U -)|`-HB;;8d?\lk "k%w!] Qqzze_Wv'F#DK1/MqDea;X2/9< L#\`S(ejۺ=r:JEg,+]z$ \thf)Zo97$ ЎnU-)j
Mub4puVkחQQ
~d &5Mŭ9-aZ'y> O[$v njS*m͗:FPc,OAox@%BDF*aqz¥v h) ڲm^ɨn ʪ1 Ut{mf>`l,!u凭 hݽ/Wӭf
sK]"ߌdI $7NՕREN7c{j<%Sì(A6O3!?J^Qɛ ej͂z5. |њS=tUQ\v 7Dv÷ӕW
"2T"s .[b
.8a
R+.\xY:"L)ݽE-q 9N%Gdm'5UܱAIݭDg7'@^IXl:FY("W͂u @0O4oF˸Mk|^5P6KS?5S8!⪯|#+O@Ļii_ S3N趌^)ũ\k7ћz
{{v|Է"FDoL7ҵ&e|q~v%3X4 d xd ȯYY2N h7nmn#s$i<-0쳧&%5tX_ H80O|NJ牛|$D%Կ{P !ɌkvmVS \/2bmNF㰊5YFH O6?C(ئp_!#Ѓ}b JC_b=dwu6LHcc똶= >oC3;|{R>Ce_hu6e}P0[=LG םXwB']t93r$V#Q6+Z_+ǨCzƒe&_2sf.lg,
Q=Z
Ut~ ͂ /,aCB} c0iOv5AgUŤ]iی7%05|L)ĥ>P\{iu_Ϡ``|N;=$hzQ*25 d"F<B&Fdb$D<Ӯ~BDסܯtDB/6E%,Q iѧ )$r @/ cI bvgx`Dеj5^0oC3;U_) BDq*)~)T^s7WڎbͰs8k'F&0=u `x''c}x
.wE/]e_LF.FHg)?ɷs
VT"d6\-+>Ӧ N3q1@9~Rʵȏ z×,ߴ%K6'nbh@EAXv&}3ڛҢ>2&6T_a< lT zm-G{i*r* :K̊RO8~vR*A~q>P5/~>])%
T /T惼wr+gAQ fj$jO{Zoڢ*bW2U~Dqmf(idh}f$S֦Z _/M!%yA}n-SŪ~OJ&Q=b| l@#> a8O=hE5lSs8k\Մ[26$52['>Yь $ng>Z?ʖnA=pD&V3\ec .2ٗV!"s& soTcYg!
DZ ,ȑĠ_x+aO1E<cHDT9hAH
P|'H?N:4sɛ{ryJ|4%%()VȻ ;i}TοŸavJ+I9f'n8.kO6K]<~Q BZ׆\E_/$7m[!hS"!zmZsgkZ~&0s5<\}nH,
73t0t4{yJGv0uP0%omLmG8aIb[
t͛\>lt' 5glJpqjgP=9ӣ
Hzbxȫ BZwAv]ɥqK4XSU[ "xעXUn='FO!qkغh^ owlyU=ٺ% oB3;c1|8Q<Ͷ(j-˲! =Gq$f z`k ؘ*ߘRle1o uT|!+fFI)Qz$ R|5ڌ<FHOr1^x5S"b$,&2E|c.켅`髬gAohU$(CB=,!h@3EQoS&kŗ;4jI@?
a=*69ޡ! bd]Va"c' () ,ub# qf AyxǍj~nD4^NQ]@Nf{10`T Lg 4uiUy*u\W◷ c S)sjJwE?]ޅ'(VKwNU\YQ8xCD{ضoYVs$bn ק_HW1b\E" f rKof/mZr!w;/:_9& ExOko]w =
?oJc3.}پ˕>G?F."" ,ݮ2zSŰ<>K儅7q9 J(~ bd ]13< @⾐rD_pU 0jh W9|] b koC