Branches for Squeeze

Author: Iain Lane
Revision Date: 2010-12-04 19:55:44 UTC

[6240cf9] debian/ipy: Set $IRONPYTHONPATH in a secure way. The ipy
wrapper originally appended /usr/lib/python2.6 to $IRONPYTHONPATH
without checking if the variable was originally unset or empty. If
it was, this would cause an empty entry to be added to the variable,
which is treated as the current directory. In this case, a potential
for local exploitation exists. Fix the wrapper to only consider the
original variable if it contains data. (Closes: #605158)