Minor documentation patch
Floris Bruynooghe <[email protected]> Tue, 29 Mar 2011 21:18:47 +0100
| Newsgroups | gmane.comp.corba.omniorb.devel |
|---|---|
| Message-ID | <[email protected]> |
--0022150489378b6005049fa4c45b Content-Type: text/plain; charset=UTF-8 Hi One of Debian's QA analysis efforts was to spot insecure usage of PYTHONPATH, i.e. PYTHON=$PYTHONPATH:/some/path which could potentially put the current working directory on the PYTHONPATH. In OmniORBpy this occurs only in the documentation, however they still regard that as a security bug ;-). As I'm always interested in keeping Debian's patches to a minimum attached is the patch we applied to the documentation to fix this issue, in case you would like to apply it upstream. Regards Floris -- Debian GNU/Linux -- The Power of Freedom www.debian.org | www.gnu.org | www.kernel.org --0022150489378b6005049fa4c45b Content-Type: application/octet-stream; name=pythonpath Content-Disposition: attachment; filename=pythonpath Content-Transfer-Encoding: base64 X-Attachment-Id: f_glv9psna0 SW5kZXg6IHB5dGhvbi1vbW5pb3JiL2RvYy9vbW5pT1JCcHkvb21uaU9SQnB5Lmh0bWwKPT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PQotLS0gcHl0aG9uLW9tbmlvcmIub3JpZy9kb2Mvb21uaU9SQnB5L29tbmlPUkJweS5odG1s CTIwMTEtMDMtMjggMDA6MDE6MDcuMjA4NTIzMDAxICswMDAwCisrKyBweXRob24tb21uaW9yYi9k b2Mvb21uaU9SQnB5L29tbmlPUkJweS5odG1sCTIwMTEtMDMtMjggMDA6MDE6NTIuODc4NTIzMDAw ICswMDAwCkBAIC0xMjQsNyArMTI0LDcgQEAKIDxUVD5saWIvcHl0aG9uPC9UVD4gZGlyZWN0b3J5 IGNvbnRhaW5zIHBsYXRmb3JtLWluZGVwZW5kZW50IFB5dGhvbiBjb2RlOwogdGhlIDxUVD5saWIv PC9UVD48VFQ+JDwvVFQ+PFRUPkZBUkNIPC9UVD4gZGlyZWN0b3J5IGNvbnRhaW5zCiBwbGF0Zm9y bS1zcGVjaWZpYyBiaW5hcmllcywgd2hlcmUgPFRUPkZBUkNIPC9UVD4gaXMgdGhlIG5hbWUgb2YK LXlvdXIgcGxhdGZvcm0sIHN1Y2ggYXMgPFRUPng4Nl93aW4zMjwvVFQ+LjwvUD48UD5PbiBVbml4 IHBsYXRmb3Jtcywgc2V0IDxUVD5QWVRIT05QQVRIPC9UVD4gd2l0aCBhIGNvbW1hbmQgbGlrZTo8 L1A+PFBSRSBDTEFTUz0idmVyYmF0aW0iPiAgIGV4cG9ydCBQWVRIT05QQVRIPSRQWVRIT05QQVRI OiRUT1AvbGliL3B5dGhvbjokVE9QL2xpYi8kRkFSQ0gKK3lvdXIgcGxhdGZvcm0sIHN1Y2ggYXMg PFRUPng4Nl93aW4zMjwvVFQ+LjwvUD48UD5PbiBVbml4IHBsYXRmb3Jtcywgc2V0IDxUVD5QWVRI T05QQVRIPC9UVD4gd2l0aCBhIGNvbW1hbmQgbGlrZTo8L1A+PFBSRSBDTEFTUz0idmVyYmF0aW0i PiAgIGV4cG9ydCBQWVRIT05QQVRIPSR7UFlUSE9OUEFUSDorJFBZVEhPTlBBVEg6fSRUT1AvbGli L3B5dGhvbjokVE9QL2xpYi8kRkFSQ0gKIDwvUFJFPjxQPk9uIFdpbmRvd3MsIHVzZTwvUD48UFJF IENMQVNTPSJ2ZXJiYXRpbSI+ICAgc2V0IFBZVEhPTlBBVEg9JVBZVEhPTlBBVEglOyVUT1AlXGxp YlxweXRob247JVRPUCVcbGliXHg4Nl93aW4zMgogPC9QUkU+PFA+KFdoZXJlIHRoZSA8VFQ+VE9Q PC9UVD4gZW52aXJvbm1lbnQgdmFyaWFibGUgaXMgdGhlIHJvb3Qgb2YgeW91cgogb21uaU9SQiB0 cmVlLik8L1A+PFA+WW91IHNob3VsZCBhbHNvIGFkZCB0aGUgPFRUPmJpbi88L1RUPjxUVD4kPC9U VD48VFQ+RkFSQ0g8L1RUPiBkaXJlY3RvcnkKSW5kZXg6IHB5dGhvbi1vbW5pb3JiL2RvYy9vbW5p T1JCcHkvb21uaU9SQnB5MDAxLmh0bWwKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gcHl0aG9uLW9tbmlvcmIub3Jp Zy9kb2Mvb21uaU9SQnB5L29tbmlPUkJweTAwMS5odG1sCTIwMTEtMDMtMjggMDA6MDI6MTAuMzM4 NTIzMDAxICswMDAwCisrKyBweXRob24tb21uaW9yYi9kb2Mvb21uaU9SQnB5L29tbmlPUkJweTAw MS5odG1sCTIwMTEtMDMtMjggMDA6MDM6MTMuNzg4NTIzMDAwICswMDAwCkBAIC02MCw3ICs2MCw3 IEBACiA8VFQ+bGliL3B5dGhvbjwvVFQ+IGRpcmVjdG9yeSBjb250YWlucyBwbGF0Zm9ybS1pbmRl cGVuZGVudCBQeXRob24gY29kZTsKIHRoZSA8VFQ+bGliLzwvVFQ+PFRUPiQ8L1RUPjxUVD5GQVJD SDwvVFQ+IGRpcmVjdG9yeSBjb250YWlucwogcGxhdGZvcm0tc3BlY2lmaWMgYmluYXJpZXMsIHdo ZXJlIDxUVD5GQVJDSDwvVFQ+IGlzIHRoZSBuYW1lIG9mCi15b3VyIHBsYXRmb3JtLCBzdWNoIGFz IDxUVD54ODZfd2luMzI8L1RUPi48L1A+PFA+T24gVW5peCBwbGF0Zm9ybXMsIHNldCA8VFQ+UFlU SE9OUEFUSDwvVFQ+IHdpdGggYSBjb21tYW5kIGxpa2U6PC9QPjxQUkUgQ0xBU1M9InZlcmJhdGlt Ij4gICBleHBvcnQgUFlUSE9OUEFUSD0kUFlUSE9OUEFUSDokVE9QL2xpYi9weXRob246JFRPUC9s aWIvJEZBUkNICit5b3VyIHBsYXRmb3JtLCBzdWNoIGFzIDxUVD54ODZfd2luMzI8L1RUPi48L1A+ PFA+T24gVW5peCBwbGF0Zm9ybXMsIHNldCA8VFQ+UFlUSE9OUEFUSDwvVFQ+IHdpdGggYSBjb21t YW5kIGxpa2U6PC9QPjxQUkUgQ0xBU1M9InZlcmJhdGltIj4gICBleHBvcnQgUFlUSE9OUEFUSD0k e1BZVEhPTlBBVEg6KyRQWVRIT05QQVRIOn0kVE9QL2xpYi9weXRob246JFRPUC9saWIvJEZBUkNI CiA8L1BSRT48UD5PbiBXaW5kb3dzLCB1c2U8L1A+PFBSRSBDTEFTUz0idmVyYmF0aW0iPiAgIHNl dCBQWVRIT05QQVRIPSVQWVRIT05QQVRIJTslVE9QJVxsaWJccHl0aG9uOyVUT1AlXGxpYlx4ODZf d2luMzIKIDwvUFJFPjxQPihXaGVyZSB0aGUgPFRUPlRPUDwvVFQ+IGVudmlyb25tZW50IHZhcmlh YmxlIGlzIHRoZSByb290IG9mIHlvdXIKIG9tbmlPUkIgdHJlZS4pPC9QPjxQPllvdSBzaG91bGQg YWxzbyBhZGQgdGhlIDxUVD5iaW4vPC9UVD48VFQ+JDwvVFQ+PFRUPkZBUkNIPC9UVD4gZGlyZWN0 b3J5CkluZGV4OiBweXRob24tb21uaW9yYi9kb2MvdGV4L29tbmlPUkJweS50ZXgKPT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PQotLS0gcHl0aG9uLW9tbmlvcmIub3JpZy9kb2MvdGV4L29tbmlPUkJweS50ZXgJMjAxMS0wMy0y OCAwMDowMzoyNy40NTg1MjMwMDEgKzAwMDAKKysrIHB5dGhvbi1vbW5pb3JiL2RvYy90ZXgvb21u aU9SQnB5LnRleAkyMDExLTAzLTI4IDAwOjA0OjA3LjU4ODUyMzAwMCArMDAwMApAQCAtMzUwLDcg KzM1MCw3IEBACiBPbiBVbml4IHBsYXRmb3Jtcywgc2V0IFxlbnZ2YXJ7UFlUSE9OUEFUSH0gd2l0 aCBhIGNvbW1hbmQgbGlrZToKIAogXGJlZ2lue3ZlcmJhdGltfQotICAgZXhwb3J0IFBZVEhPTlBB VEg9JFBZVEhPTlBBVEg6JFRPUC9saWIvcHl0aG9uOiRUT1AvbGliLyRGQVJDSAorICAgZXhwb3J0 IFBZVEhPTlBBVEg9JHtQWVRIT05QQVRIOiskUFlUSE9OUEFUSDp9JFRPUC9saWIvcHl0aG9uOiRU T1AvbGliLyRGQVJDSAogXGVuZHt2ZXJiYXRpbX0KIAogT24gV2luZG93cywgdXNlCg== --0022150489378b6005049fa4c45b Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ omniORB-dev mailing list [email protected] http://www.omniorb-support.com/mailman/listinfo/omniorb-dev --0022150489378b6005049fa4c45b--