unofficial mirror of guix-devel@gnu.org 
 help / color / mirror / code / Atom feed
blob d3c3024220d9dfd0ed65a3c9d933275d168bee3d 322 bytes (raw)
name: patches/foomatic-filters-CVE-2015-8560.patch 	 # note: path name is non-authoritative(*)

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
 
Fix for <https://nvd.nist.gov/vuln/detail?vulnId=CVE-2015-8560>.

--- a/util.c	2015-10-30 15:45:03 +0000
+++ b/util.c	2015-12-12 23:27:21 +0000
@@ -31,7 +31,7 @@
 #include <assert.h>
 
 
-const char* shellescapes = "|<>&!$\'\"`#*?()[]{}";
+const char* shellescapes = "|;<>&!$\'\"`#*?()[]{}";
 
 const char * temp_dir()
 {

debug log:

solving d3c3024220d9dfd0ed65a3c9d933275d168bee3d ...
found d3c3024220d9dfd0ed65a3c9d933275d168bee3d in https://git.savannah.gnu.org/cgit/guix.git

(*) Git path names are given by the tree(s) the blob belongs to.
    Blobs themselves have no identifier aside from the hash of its contents.^

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/guix.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).