From 22b47d8f27c3d4558f1df2d79cad7a63fd7cc871 Mon Sep 17 00:00:00 2001 From: Mubashshir Date: Sat, 26 Aug 2023 16:01:54 +0600 Subject: Drop unused patches Signed-off-by: Mubashshir --- debian/patches/CVE-2020-15703.patch | 16 ---------------- 1 file changed, 16 deletions(-) delete mode 100644 debian/patches/CVE-2020-15703.patch (limited to 'debian/patches/CVE-2020-15703.patch') diff --git a/debian/patches/CVE-2020-15703.patch b/debian/patches/CVE-2020-15703.patch deleted file mode 100644 index caf9360..0000000 --- a/debian/patches/CVE-2020-15703.patch +++ /dev/null @@ -1,16 +0,0 @@ -Description: Reject locales with full path - _parse_localename() treats "/tmp/a." as a locale with language "/tmp/a" and - empty region, so add an extra safety check. -Author: Julian Andres Klode -Bug: https://bugs.launchpad.net/ubuntu/+source/aptdaemon/+bug/1888235 ---- a/aptdaemon/core.py -+++ b/aptdaemon/core.py -@@ -821,6 +821,8 @@ class Transaction(DBusObject): - """ - if self.status != enums.STATUS_SETTING_UP: - raise errors.TransactionAlreadyRunning() -+ if "/" in str(locale_str): -+ raise ValueError("Security exception: Absolute path for locale") - try: - # ensure locale string is str() and not dbus.String() - (lang, encoding) = locale._parse_localename(str(locale_str)) -- cgit v1.2.3