Bug#598283: ardour: CVE-2010-3349: insecure library loading

Adrian Knoth adi at drcomp.erfurt.thur.de
Tue Sep 28 12:26:28 UTC 2010


On 09/28/10 13:48, Adrian Knoth wrote:

Hi!

> I might miss something

Ok, it's the trailing colon that might cause problems if LD_LIBRARY_PATH
is unset and CWD contains a malicious library.

I'm going to fix this.

Sorry for bothering you in the first place.





More information about the pkg-multimedia-maintainers mailing list