pkgsrc-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: xdg-utils-1.0.2 (Re: [HEADSUP] Removing vulnerable packages

| From: Thomas Klausner <>
| Subject: Re: xdg-utils-1.0.2 (Re: [HEADSUP] Removing vulnerable packages
| Date: Tue, 5 Apr 2011 14:06:34 +0200
| Message-ID: <>

wiz> Also, drochner reported that the patches break the scripts on most
wiz> shells. So either we additionally depend on bash (which we'd like to
wiz> avoid) or we fix them differently.

wiz> I've backed out the patches for now, waiting for a better solution.
Thank you, drochner and Thomas.

I think I have collected the shell problem fix.

Now includes two following.
commit a0584be27324d6fe161c0b1c498b29be1b6f79de
Author: Kevin Krammer <>
Date:   Thu Jan 24 20:24:51 2008 +0000

    Fixing security issue reported by Lubomir Kundrak 

commit 485554bb64325e112a273cd41f8d735c4ec121c5
Author: Fathi Boudra <>
Date:   Mon Oct 12 14:03:56 2009 +0000

    Remove bash requirement to xdg-open and xdg-email.
    Fix xdg-open to handle URL with '#' symbol.
(I have omitted simply-removing-trailing-blank part.)  

Makoto Fujiwara, 
Chiba, Japan, Narita Airport and Disneyland prefecture.

Home | Main Index | Thread Index | Old Index