diff options
| author |  Mubashshir <ahm@jadupc.com> | 2023-08-26 16:01:54 +0600 |
|---|---|---|
| committer | Mubashshir <ahm@jadupc.com> | 2023-08-26 16:01:54 +0600 |
| commit | 22b47d8f27c3d4558f1df2d79cad7a63fd7cc871 (patch) | |
| tree | 4f9e55dec008a3f1de61cabfb577fe254ae6e36e /debian/patches/CVE-2020-15703.patch | |
| parent | 70faa8e9a0ff3cba74b4f753e257d56b768fcbd2 (diff) | |
| download | aptdaemon-22b47d8f27c3d4558f1df2d79cad7a63fd7cc871.tar.gz aptdaemon-22b47d8f27c3d4558f1df2d79cad7a63fd7cc871.zip | |
Drop unused patches
Signed-off-by: Mubashshir <ahm@jadupc.com>
Diffstat (limited to 'debian/patches/CVE-2020-15703.patch')
| -rw-r--r-- | debian/patches/CVE-2020-15703.patch | 16 |
1 files changed, 0 insertions, 16 deletions
diff --git a/debian/patches/CVE-2020-15703.patch b/debian/patches/CVE-2020-15703.patch deleted file mode 100644 index caf9360..0000000 --- a/debian/patches/CVE-2020-15703.patch +++ /dev/null @@ -1,16 +0,0 @@ -Description: Reject locales with full path - _parse_localename() treats "/tmp/a." as a locale with language "/tmp/a" and - empty region, so add an extra safety check. -Author: Julian Andres Klode <juliank@ubuntu.com> -Bug: https://bugs.launchpad.net/ubuntu/+source/aptdaemon/+bug/1888235 ---- a/aptdaemon/core.py -+++ b/aptdaemon/core.py -@@ -821,6 +821,8 @@ class Transaction(DBusObject): - """ - if self.status != enums.STATUS_SETTING_UP: - raise errors.TransactionAlreadyRunning() -+ if "/" in str(locale_str): -+ raise ValueError("Security exception: Absolute path for locale") - try: - # ensure locale string is str() and not dbus.String() - (lang, encoding) = locale._parse_localename(str(locale_str)) |