[SCM] Debian package checker branch, wheezy, updated. 2.5.10.4-15-ge0dc594
The following commit has been merged in the wheezy branch:
commit f9b569f403ee6012d77deff104be1ee9e27218ac
Author: Niels Thykier <niels@thykier.net>
Date: Thu Apr 4 23:52:42 2013 +0200
c/shared-libs: Ignore maintscript that are symlinks
Signed-off-by: Niels Thykier <niels@thykier.net>
diff --git a/checks/shared-libs b/checks/shared-libs
index 835e8c9..f42b834 100644
--- a/checks/shared-libs
+++ b/checks/shared-libs
@@ -563,7 +563,7 @@ if (keys %shlibs_control and keys %symbols_control) {
}
# 6th step: check pre- and post- control files
-if (-f $info->control('preinst')) {
+if (-f $info->control('preinst') and not -l $info->control('preinst')) {
local $_ = slurp_entire_file($info->control('preinst'));
if (/^[^\#]*\bldconfig\b/m) {
tag 'preinst-calls-ldconfig';
@@ -571,7 +571,7 @@ if (-f $info->control('preinst')) {
}
my $we_call_postinst=0;
-if (-f $info->control('postinst')) {
+if (-f $info->control('postinst') and not -l $info->control('postinst')) {
local $_ = slurp_entire_file($info->control('postinst'));
# Decide if we call ldconfig
@@ -595,14 +595,14 @@ if ($multiarch eq 'foreign' and $must_call_ldconfig) {
tag 'shlib-in-multi-arch-foreign-package', $must_call_ldconfig;
}
-if (-f $info->control('prerm')) {
+if (-f $info->control('prerm') and not -l $info->control('prerm')) {
local $_ = slurp_entire_file($info->control('prerm'));
if (/^[^\#]*\bldconfig\b/m) {
tag 'prerm-calls-ldconfig';
}
}
-if (-f $info->control('postrm')) {
+if (-f $info->control('postrm') and not -l $info->control('postrm')) {
local $_ = slurp_entire_file($info->control('postrm'));
# Decide if we call ldconfig
diff --git a/debian/changelog b/debian/changelog
index fd02807..2292bd2 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -12,6 +12,9 @@ lintian (2.5.10.5) unstable; urgency=low
* checks/menus:
+ [NT] Fix path traversal issue that could leak information
about the host system.
+ * checks/shared-libs:
+ + [NT] Fix path traversal issue that could leak information
+ about the host system.
-- Niels Thykier <niels@thykier.net> Fri, 05 Apr 2013 17:15:00 +0200
--
Debian package checker
Reply to: