[Adding Junio's correct email address. Sigh.] On Mon, Jan 26, 2015 at 11:29 AM, Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> wrote: > Hi, > > I went to do the Fedora 3.19-rc6 build this morning and it failed in > our buildsystem with: > > + '[' '!' -f /builddir/build/SOURCES/patch-3.19-rc6.xz ']' > + case "$patch" in > + unxz > + patch -p1 -F1 -s > symbolic link target '../../../../../include/dt-bindings' is invalid > error: Bad exit status from /var/tmp/rpm-tmp.mWE3ZL (%prep) > > That is coming from the hunk in patch-3.19-rc6.xz that creates the > symbolic link from arch/arm64/boot/dts/include/dt-bindings to > include/dt-bindings. Oddly enough, patch-3.19-rc5.xz contains the > same hunk and it built fine last week. > > Digging in, it seems that upstream patch has decided that relative > symlinks are forbidden now as part of a fix for CVE-2015-1196. You > can find the relevant bugs here: > > https://bugzilla.redhat.com/show_bug.cgi?id=1185928 > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775901#13 > > Aside from locally modifying patch-3.19-rc6.xz, I'm not sure what else > to do. I thought I would send a heads up since anyone that is using > patch-2.7.3 is probably going to run into this issue. > > josh -- To unsubscribe from this list: send the line "unsubscribe git" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html