Florian Weimer
676599b36a
Harden putpwent, putgrent, putspent, putspent against injection [BZ #18724 ]
...
This prevents injection of ':' and '\n' into output functions which
use the NSS files database syntax. Critical fields (user/group names
and file system paths) are checked strictly. For backwards
compatibility, the GECOS field is rewritten instead.
The getent program is adjusted to use the put*ent functions in libc,
instead of local copies. This changes the behavior of getent if user
names start with '-' or '+'.
2015-10-02 11:34:13 +02:00
..
2014-12-17 18:09:11 +00:00
2015-06-18 23:08:15 +00:00
2015-01-02 16:29:47 +00:00
2014-12-16 18:18:49 +00:00
2015-06-17 20:08:22 +00:00
2015-01-02 16:29:47 +00:00
2015-09-03 20:33:46 +00:00
2015-06-17 20:22:39 +00:00
2012-02-25 23:18:39 -05:00
2012-01-07 23:57:22 -05:00
2015-02-24 13:29:40 -05:00
2012-05-24 23:08:18 +02:00
2014-11-24 15:03:45 +05:30
2015-09-11 20:00:19 +00:00
2015-01-02 16:29:47 +00:00
2013-09-04 20:47:21 +00:00
2014-12-11 21:41:30 +00:00
2015-09-03 20:33:46 +00:00
2015-05-13 12:34:11 -07:00
2015-07-07 11:06:56 -07:00
2012-11-21 06:33:19 -08:00
2014-11-24 15:03:45 +05:30
2012-01-07 23:57:22 -05:00
2014-10-30 19:44:31 +00:00
2015-08-05 02:42:21 -04:00
2015-09-15 20:36:50 +00:00
2014-12-11 21:41:30 +00:00
2012-02-25 23:18:39 -05:00
2012-02-25 23:18:39 -05:00
2015-01-02 16:29:47 +00:00
2012-02-25 23:18:39 -05:00
2014-11-24 11:41:44 +05:30
2015-01-02 16:29:47 +00:00
2015-01-02 16:29:47 +00:00
2012-02-26 21:32:56 -05:00
2015-04-02 19:55:21 +02:00
2015-05-25 21:20:20 +03:00
2012-05-24 23:08:18 +02:00
2015-09-04 16:21:14 +00:00
2015-01-02 16:29:47 +00:00
2015-09-08 21:11:03 +00:00
2015-01-02 16:29:47 +00:00
2012-02-25 23:18:39 -05:00
2015-09-18 20:51:52 +01:00
2012-05-31 13:10:02 +02:00
2012-02-26 21:32:56 -05:00
2015-06-17 20:19:04 +00:00
2015-06-12 10:10:18 +00:00
2015-10-02 11:34:13 +02:00
2015-06-17 20:16:56 +00:00
2015-10-02 11:34:13 +02:00
2012-02-25 23:18:39 -05:00
2014-11-24 15:03:45 +05:30
2015-01-02 16:29:47 +00:00
2012-02-25 23:18:39 -05:00
2015-04-07 11:03:43 +02:00
2015-06-17 20:11:58 +00:00
2015-01-02 16:29:47 +00:00
2012-02-25 23:18:39 -05:00
2012-01-07 23:57:22 -05:00
2015-01-02 16:29:47 +00:00
2015-01-13 11:28:17 -08:00
2015-01-02 16:29:47 +00:00
2015-01-02 16:29:47 +00:00
2015-02-23 11:35:24 -03:00
2012-05-24 23:06:20 +02:00
2015-07-09 15:32:32 -07:00
2014-11-24 15:03:45 +05:30
2015-06-02 20:24:25 +00:00
2012-02-25 23:18:39 -05:00
2012-02-25 23:18:39 -05:00
2013-06-11 11:11:11 +05:30
2015-06-17 20:21:19 +00:00
2012-02-25 23:18:39 -05:00
2012-02-25 23:18:39 -05:00
2015-07-09 15:25:47 -07:00
2012-02-25 23:18:39 -05:00
2012-01-07 23:57:22 -05:00
2015-01-02 16:29:47 +00:00
2015-06-17 20:15:22 +00:00
2015-06-05 20:04:47 +00:00
2012-02-25 23:18:39 -05:00