HomeFreeBSD

Fix shell injection vulnerability in patch(1) and drop SCCS

Description

Fix shell injection vulnerability in patch(1) and drop SCCS
support by replacing system() with execve().

Future revisions may remove the functionality completely.

Obtained from: Bitrig
Security: CVE-2015-1416

Details

Provenance
delphijAuthored on
Parents
rS285973: - Avoid lock contention in the if_transmit callback by using trylock and
Branches
Unknown
Tags
Unknown