deb vfs security issue (CAN-2004-0494)

Wed Aug 18 17:28:23 UTC 2004

Hi,

On Wed, 2004-08-18 at 16:31, Leonard den Ottolander wrote:
> I noticed this in Red Hat's bugzilla just now:
> http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127973 .

Attached is a patch that escapes all dangerous characters for function
arguments. More specifically, everything not in A-Z, a-z, 0-9, _, /, .,
- and +.

Could somebody on a system with dpkg installed verify that things still
work correctly after applying this patch? Thanks.

Leonard.

-- 
mount -t life -o ro /dev/dna /genetic/research

-------------- next part --------------
A non-text attachment was scrubbed...
Name: deb.diff
Type: text/x-patch
Size: 1021 bytes
Desc: not available
URL: <http://lists.midnight-commander.org/pipermail/mc-devel/attachments/20040818/a3bbe171/attachment.bin>