[Security update] Created new ebuild: sys-devel/patch

[teika]

Hi. sys-devel/patch-2.7.6-r3, the latest in the portage tree, is vulnerable, according to Debian's dsa-3389. Unfortunately Gentoo's developers have been busy, and no official update has been released.

I submitted an ebuild at Gentoo bugzilla #690136.

Use at your own risk, but at least it can src_prepare for itself. ;) I recommend you to save the original /usr/bin/patch somewhere.

Best regards.
_________________
Hack of easy Shift / Ctrl / AltGr etc; save your pinkies, type without drudgery: topic 865313

BTRFS - Biden & TRump, Fools Suck.

[fedeliallalinea]

We can use also /etc/portage/patches without create a new ebuild
_________________
Questions are guaranteed in life; Answers aren't.

[teika]

Now the official update is in the portage tree. Thanks Gentoo devs!

@fedeliallalinea
Yep, but ebuilds in the bugzilla are easily searchable. I often search gpo.zugaina.org for updates. Ebuilds in the bugzilla also appears in zugaina, too.

The more noticeable an ebuild is, the more likely it will receive reviews and thus improvements. ;-)