Re: nasty patches in pkgsrc regarding CVE-2010-4651: relative paths with ../

Greg Troxel <[email protected]> Fri, 03 Jul 2026 07:19:38 -0400
Newsgroups gmane.os.netbsd.devel.packages
Message-ID <[email protected]>
Tobias Nygren <[email protected]> writes:

> If you have a cleaner method to apply patches from $WRKDIR
> instead of $WRKSRC, please make a proposal. Bonus points awarded if
> it works with mkpatches.

Three proposals

0) Ask the rust world to mend their ways.

1) Change our rules for patches to be baed in WRKDIR instead.

2) Add patches-wrkdir *additionally* for patches based on wrkdir.  Teach
mkpatches to put patches within WRKSRC in patches, and other patches in
patches-wrkdir