[SCM] Debian packaging of libxml-sax-perl branch, master, updated. debian/0.99+dfsg-1-1-gf603c74

Florian Schlichting fschlich at zedat.fu-berlin.de
Mon Sep 19 14:22:07 UTC 2011


The following commit has been merged in the master branch:
commit f603c7487f560355e3d2847aa8ceba232b17085a
Author: Florian Schlichting <fschlich at zedat.fu-berlin.de>
Date:   Mon Sep 19 14:16:11 2011 +0000

    Fix a command injection bug in update-perl-sax-parsers reported on Launchpad

diff --git a/debian/changelog b/debian/changelog
index e754dcc..2f4a40c 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+libxml-sax-perl (0.99+dfsg-2) UNRELEASED; urgency=low
+
+  * Fix a command injection bug in update-perl-sax-parsers (LP: #782479).
+
+ -- Florian Schlichting <fschlich at zedat.fu-berlin.de>  Mon, 19 Sep 2011 13:37:53 +0000
+
 libxml-sax-perl (0.99+dfsg-1) unstable; urgency=low
 
   [ Florian Schlichting ]
diff --git a/debian/update-perl-sax-parsers b/debian/update-perl-sax-parsers
index e31b715..4c60405 100644
--- a/debian/update-perl-sax-parsers
+++ b/debian/update-perl-sax-parsers
@@ -148,7 +148,7 @@ elsif ( $update )
     }
     close( $handle );
     if ($ucf) {
-        system("ucf --debconf-ok --sum-file /var/lib/libxml-sax-perl/ParserDetails.ini.md5sum $tmpfile $file");
+        system("ucf", "--debconf-ok", "--sum-file",  "/var/lib/libxml-sax-perl/ParserDetails.ini.md5sum", $tmpfile, $file);
         unlink $tmpfile or die("unlink $tmpfile: $!");
     }
 }

-- 
Debian packaging of libxml-sax-perl



More information about the Pkg-perl-cvs-commits mailing list