Minor documentation patch

Floris Bruynooghe <[email protected]> Tue, 29 Mar 2011 21:18:47 +0100
Newsgroups gmane.comp.corba.omniorb.devel
Message-ID <[email protected]>
--0022150489378b6005049fa4c45b
Content-Type: text/plain; charset=UTF-8

Hi

One of Debian's QA analysis efforts was to spot insecure usage of
PYTHONPATH, i.e. PYTHON=$PYTHONPATH:/some/path which could potentially
put the current working directory on the PYTHONPATH.  In OmniORBpy
this occurs only in the documentation, however they still regard that
as a security bug ;-).

As I'm always interested in keeping Debian's patches to a minimum
attached is the patch we applied to the documentation to fix this
issue, in case you would like to apply it upstream.

Regards
Floris

-- 
Debian GNU/Linux -- The Power of Freedom
www.debian.org | www.gnu.org | www.kernel.org

--0022150489378b6005049fa4c45b
Content-Type: application/octet-stream; name=pythonpath
Content-Disposition: attachment; filename=pythonpath
Content-Transfer-Encoding: base64
X-Attachment-Id: f_glv9psna0
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==
--0022150489378b6005049fa4c45b
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
omniORB-dev mailing list
[email protected]
http://www.omniorb-support.com/mailman/listinfo/omniorb-dev

--0022150489378b6005049fa4c45b--