Sophie

Sophie

distrib > Mageia > 5 > x86_64 > by-pkgid > 4b5394ce1d58fcc78352416d2c15b1a6 > files > 3

cups-filters-1.0.71-1.1.mga5.src.rpm

Description: foomatic-rip: SECURITY FIX: Also consider the back tick ('`') as
 an illegal shell escape character. Thanks to Michal Kowalczyk from the Google
 Security Team for the hint.
Author: Till Kamppeter <till.kamppeter@gmail.com>
Bug-CVE: CVE-2015-8327
Origin: upstream
Last-Update: 2015-11-26

--- a/filter/foomatic-rip/util.c
+++ b/filter/foomatic-rip/util.c
@@ -31,7 +31,7 @@
 #include <assert.h>
 
 
-const char* shellescapes = "|<>&!$\'\"#*?()[]{}";
+const char* shellescapes = "|<>&!$\'\"`#*?()[]{}";
 
 const char * temp_dir()
 {