diff options
| author | Anders Kaseorg <andersk@mit.edu> | 2020-05-31 01:40:07 -0700 |
|---|---|---|
| committer | Anders Kaseorg <andersk@mit.edu> | 2020-05-31 01:42:09 -0700 |
| commit | 665dfc26ed8f8547ea97fad66334d6dca79e4ab6 (patch) | |
| tree | 3526758d6518176a81652fd75fc550a2c7f95be8 /pkgs/development/python-modules/python-mapnik/python-mapnik_std_optional.patch | |
| parent | 135073a87b7e2c631739f4ffa016e1859b1a425e (diff) | |
libversion: Fix unsafe concatenation of $LD_LIBRARY_PATH
Naive concatenation of $LD_LIBRARY_PATH can result in an empty
colon-delimited segment; this tells glibc to load libraries from the
current directory, which is definitely wrong, and may be a security
vulnerability if the current directory is untrusted. This particular
case probably has no security relevance, but we should avoid this
unsafe pattern anyway in case it gets copied. See #76804.
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
Diffstat (limited to 'pkgs/development/python-modules/python-mapnik/python-mapnik_std_optional.patch')
0 files changed, 0 insertions, 0 deletions