[MacPorts] #47050: pass @1.6.3 update to 1.6.5

MacPorts noreply at macports.org
Sat Mar 7 16:22:39 PST 2015


#47050: pass @1.6.3 update to 1.6.5
----------------------+--------------------------
  Reporter:  edwin@…  |      Owner:  ryandesign@…
      Type:  update   |     Status:  assigned
  Priority:  Normal   |  Milestone:
 Component:  ports    |    Version:  2.3.3
Resolution:           |   Keywords:  haspatch
      Port:  pass     |
----------------------+--------------------------

Comment (by john@…):

 Note that pass is invoking `mktemp`, `gpg2`, `srm`, etc at ''run-time'',
 and will pick whatever happens to come first in the user's `$PATH`. This
 could be a problem if there's something unexpected in there that happens
 to share a name with one of the above, either maliciously or just through
 unfortunate coincidence.

 I don't think there's anything that MacPorts can do about this; as far as
 I know the 'sanitization' you refer to only happens at install-time.

-- 
Ticket URL: <https://trac.macports.org/ticket/47050#comment:6>
MacPorts <https://www.macports.org/>
Ports system for OS X


More information about the macports-tickets mailing list