| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| fix-unique-uniquebase.diff | Allow comparison of tar balls with the same base directory Also fixes an issue with listing a directory as present in the wrong tar ball. =================================================================== |
Axel Beckert <abe@debian.org> | no | |||
| fix-dash-a-vs-dash-s.diff | Fixes -a vs -s mixup Due to a typo, the short option -a is not queried while the short option -s works as if would have been -a. The according long options worked as advertised. =================================================================== |
Axel Beckert <abe@debian.org> | no | |||
| fix-statistic.diff | Fix calculation of statistics (option -s) Using normal instead of unique diff is far easier to parse unambiguously. =================================================================== |
Axel Beckert <abe@debian.org> | no | debian | ||
| CVE-2015-0857.diff | Fix local code execution when calling diff (CVE-2015-0857) Reported by Rainer Müller <raimue@codingfarm.de>. Implemented using Text::Diff instead of diff and backticks. =================================================================== |
Axel Beckert <abe@debian.org> | no | |||
| CVE-2015-0858.diff | Fix race condition when creating temporary files (CVE-2015-0858) Reported by Florian Weimer <fw@deneb.enyo.de>. Implemented using File::Temp instead of just using the process ID inside the directory name as suggested by Florian. =================================================================== |
Axel Beckert <abe@debian.org> | no |