CVS commit: usr/src/external/bsd/openresolv/dist
Roy Marples <[email protected]>
| Newsgroups | gmane.os.netbsd.devel.www.cvs |
|---|---|
| Message-ID | <[email protected]> |
Module Name: usr Committed By: roy Date: Wed Dec 10 22:17:40 UTC 2025 Update of /cvsroot/usr/src/external/bsd/openresolv/dist In directory mollari.NetBSD.org:/tmp/cvs-serv28827 Log Message: Import openresolv-3.17.1 with the following change: resolvconf: Single quote parsed values from resolv.conf When parsing resolv.conf entries we build up shell variables. Because this is done via a pipe, we need to echo the variables to stdout and eval the result to get them into the main resolvconf. We have no idea what the values are, so we build up the output ensuring the parsed value is single quoted so eval will always interpret it as a string and nothing more. This avoids an attack like so: `echo 'search $(touch /tmp/foo)' | resolvconf -a bar` Status: Vendor Tag: ROY Release Tags: openresolv-3_17_1 N usr/src/external/bsd/openresolv/dist/dnsmasq.in N usr/src/external/bsd/openresolv/dist/pdns_recursor.in N usr/src/external/bsd/openresolv/dist/unbound.in N usr/src/external/bsd/openresolv/dist/systemd-resolved.in N usr/src/external/bsd/openresolv/dist/libc.in N usr/src/external/bsd/openresolv/dist/pdnsd.in N usr/src/external/bsd/openresolv/dist/resolvconf.8.in N usr/src/external/bsd/openresolv/dist/resolvconf.in N usr/src/external/bsd/openresolv/dist/LICENSE N usr/src/external/bsd/openresolv/dist/named.in N usr/src/external/bsd/openresolv/dist/mdnsd.in N usr/src/external/bsd/openresolv/dist/resolvconf.conf N usr/src/external/bsd/openresolv/dist/resolvectl.in N usr/src/external/bsd/openresolv/dist/resolvconf.conf.5.in N usr/src/external/bsd/openresolv/dist/README.md N usr/src/external/bsd/openresolv/dist/avahi-daemon.in No conflicts created by this import