Bug#601199: release.debian.org: unblock: mono-debugger/2.6.3-2.1

[jari <jari.aalto@cante.net>]

On 2010-11-03 00:09, Julien Cristau wrote:
| On Wed, Nov  3, 2010 at 00:50:54 +0200, Jari Aalto wrote:
| 
| > > "Adam D. Barratt" <adam@adam-barratt.org.uk>
| > > > On Sun, 2010-10-24 at 12:40 +0200, Moritz Muehlenhoff wrote:
| > > > Please unblock package mono-debugger. It fixes CVE-2010-3369.
| > >
| > > I'm not really convinced about the utility of this:
| > >
| > > ++   tmp=$(echo "$1" | sed -e 's/::\+// ; s/^:// ; s/:$//' )
| > >
| > > The code is already using ${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH} to only
| > > append LD_LIBRARY_PATH if it is non-empty, resolving the issue with the
| > > script (adding empty items without the user realising).
| > >
| > > If I want to explicitly add empty items to LD_LIBRARY_PATH before
| > > calling the debugger, and potentially shoot myself badly in the foot,
| > > should I not be permitted to do so?
| > 
| > I can provide *-2.2 without the patchclean(). Let me know if new upload
| > is ok.
| > 
| Yes please.

Uploaded,
Jari