summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFrancois Pons <fpons@mandriva.com>2000-09-13 17:56:21 +0000
committerFrancois Pons <fpons@mandriva.com>2000-09-13 17:56:21 +0000
commit85b30c88dd705fec9bc6e07f1b41c223c34eef74 (patch)
tree550f5bb1fe2eeb79a0a6858e65d6c849714c8a23
parent6cc8f284221800e0ec6cf657d0adfe296b875cbe (diff)
downloadurpmi-85b30c88dd705fec9bc6e07f1b41c223c34eef74.tar
urpmi-85b30c88dd705fec9bc6e07f1b41c223c34eef74.tar.gz
urpmi-85b30c88dd705fec9bc6e07f1b41c223c34eef74.tar.bz2
urpmi-85b30c88dd705fec9bc6e07f1b41c223c34eef74.tar.xz
urpmi-85b30c88dd705fec9bc6e07f1b41c223c34eef74.zip
*** empty log message ***
-rwxr-xr-xurpmi2
-rw-r--r--urpmi.spec6
2 files changed, 6 insertions, 2 deletions
diff --git a/urpmi b/urpmi
index 25d424e7..f1d64aaa 100755
--- a/urpmi
+++ b/urpmi
@@ -317,7 +317,7 @@ my %removables;
foreach my $list (rpmlistfiles($datadir)) {
open F, "$datadir/$list" or die("urpmi: error opening $list\n");
$list =~ s/list\.//;
- foreach (<F>) { chop; m|/($to_install)| and $long{$1} = $_, $name{$1} = $list }
+ foreach (<F>) { chop; m|/($to_install)| and $long{$1} = untaint($_), $name{$1} = untaint($list) }
close F;
}
diff --git a/urpmi.spec b/urpmi.spec
index 945a5ec6..58999f58 100644
--- a/urpmi.spec
+++ b/urpmi.spec
@@ -2,7 +2,7 @@
Name: urpmi
Version: 1.3
-Release: 6mdk
+Release: 7mdk
License: GPL
Source0: %{name}.tar.bz2
Summary: User mode rpm install
@@ -104,6 +104,10 @@ autoirpm.uninstall
%changelog
+* Wed Sep 13 2000 François Pons <fpons@mandrakesoft.com> 1.3-7mdk
+- trusting root only readable file list.*, fixes gurpmi with
+ mutlitple media examination.
+
* Tue Sep 05 2000 François Pons <fpons@mandrakesoft.com> 1.3-6mdk
- split query mode of urpmi into new tools urpmq.
- fixed -v option of urpmi.