CVS commit: usr/src/external/bsd/openresolv/dist

Roy Marples <[email protected]>
Newsgroups gmane.os.netbsd.devel.www.cvs
Message-ID <[email protected]>
Module Name:	usr
Committed By:	roy
Date:		Wed Dec 10 22:17:40 UTC 2025

Update of /cvsroot/usr/src/external/bsd/openresolv/dist
In directory mollari.NetBSD.org:/tmp/cvs-serv28827

Log Message:
Import openresolv-3.17.1 with the following change:

resolvconf: Single quote parsed values from resolv.conf
When parsing resolv.conf entries we build up shell variables.
Because this is done via a pipe, we need to echo the variables
to stdout and eval the result to get them into the main resolvconf.
We have no idea what the values are, so we build up the output
ensuring the parsed value is single quoted so eval will always
interpret it as a string and nothing more.

This avoids an attack like so:
	`echo 'search $(touch /tmp/foo)' | resolvconf -a bar`

Status:

Vendor Tag:	ROY
Release Tags:	openresolv-3_17_1
		
N usr/src/external/bsd/openresolv/dist/dnsmasq.in
N usr/src/external/bsd/openresolv/dist/pdns_recursor.in
N usr/src/external/bsd/openresolv/dist/unbound.in
N usr/src/external/bsd/openresolv/dist/systemd-resolved.in
N usr/src/external/bsd/openresolv/dist/libc.in
N usr/src/external/bsd/openresolv/dist/pdnsd.in
N usr/src/external/bsd/openresolv/dist/resolvconf.8.in
N usr/src/external/bsd/openresolv/dist/resolvconf.in
N usr/src/external/bsd/openresolv/dist/LICENSE
N usr/src/external/bsd/openresolv/dist/named.in
N usr/src/external/bsd/openresolv/dist/mdnsd.in
N usr/src/external/bsd/openresolv/dist/resolvconf.conf
N usr/src/external/bsd/openresolv/dist/resolvectl.in
N usr/src/external/bsd/openresolv/dist/resolvconf.conf.5.in
N usr/src/external/bsd/openresolv/dist/README.md
N usr/src/external/bsd/openresolv/dist/avahi-daemon.in

No conflicts created by this import
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.