Re: nasty patches in pkgsrc regarding CVE-2010-4651: relative paths with ../

To: Alistair Crooks <alistaircrooks%gmail.com@localhost>
Subject: Re: nasty patches in pkgsrc regarding CVE-2010-4651: relative paths with ../
From: Greg Troxel <gdt%lexort.com@localhost>
Date: Fri, 03 Jul 2026 13:15:16 -0400

Alistair Crooks <alistaircrooks%gmail.com@localhost> writes:

>> 2) Add patches-wrkdir *additionally* for patches based on wrkdir.  Teach
>> mkpatches to put patches within WRKSRC in patches, and other patches in
>> patches-wrkdir
>>
>
> I'm still not sure this is a good idea :(
>
> But I do agree that relative paths in patch files, all 180+ of them, should
> not exist. Good catch

I'm not sure either.

What is your approach?

Follow-Ups:
- Re: nasty patches in pkgsrc regarding CVE-2010-4651: relative paths with ../
  - From: Alistair Crooks

References:
- nasty patches in pkgsrc regarding CVE-2010-4651: relative paths with ../
  - From: Dr. Thomas Orgis
- Re: nasty patches in pkgsrc regarding CVE-2010-4651: relative paths with ../
  - From: Tobias Nygren
- Re: nasty patches in pkgsrc regarding CVE-2010-4651: relative paths with ../
  - From: Greg Troxel
- Re: nasty patches in pkgsrc regarding CVE-2010-4651: relative paths with ../
  - From: Alistair Crooks

Prev by Date: Re: heads up RE autoconf C23 vs legacy code
Next by Date: Re: CVS commit: pkgsrc/math/cvc5
Previous by Thread: Re: nasty patches in pkgsrc regarding CVE-2010-4651: relative paths with ../
Next by Thread: Re: nasty patches in pkgsrc regarding CVE-2010-4651: relative paths with ../
Indexes:

Home | Main Index | Thread Index | Old Index