Bug#598286: [pkg-cli-apps-team] Bug#598286: cowbell: NMU diff for 0.2.7.1-5--0.2.7.1-5.1 (CVE-2010-3353)

[Iain Lane]

Hello,

On Mon, Oct 18, 2010 at 12:06:49PM +0300, Jari Aalto wrote:

reopen 598286
tags 598286 + patch
thanks

The full code of ./cowbell.in reads:

    1  #!/bin/sh
    2
    3  libdir="@prefix@/lib/cowbell"
    4  export LD_LIBRARY_PATH=${libdir}${LD_LIBRARY_PATH+:$LD_LIBRARY_PATH}

Uhm, there are more problems that met the eye at first glance:

   (
       libdir="/usr/lib/cowbell"
       LD_LIBRARY_PATH="::"
       LD_LIBRARY_PATH=${libdir}${LD_LIBRARY_PATH+:$LD_LIBRARY_PATH}
       echo $LD_LIBRARY_PATH
   )

   # => /usr/lib/cowbell:::

Proposed NMU follows.

OK, please upload. I don't see the source format change in your diff
(and this is an undesirable change to introduce in an NMU anyway, so
please don't do that).

Cheers,
Iain

signature.asc
Description: Digital signature