public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/glib2] cve-2026-58016-f44: Don't use full path for triggers
@ 2026-08-11 10:36 Kalev Lember
  0 siblings, 0 replies; only message in thread
From: Kalev Lember @ 2026-08-11 10:36 UTC (permalink / raw)
  To: git-commits

            A new commit has been pushed.

            Repo   : rpms/glib2
            Branch : cve-2026-58016-f44
            Commit : 801e4a1ba04ba8ce75c047e21a8df11ab59bf8b3
            Author : Kalev Lember <klember@redhat.com>
            Date   : 2017-03-20T11:06:22+01:00
            Stats  : +4/-4 in 1 file(s)
            URL    : https://src.fedoraproject.org/rpms/glib2/c/801e4a1ba04ba8ce75c047e21a8df11ab59bf8b3?branch=cve-2026-58016-f44

            Log:
            Don't use full path for triggers

rpm already sets a sufficiently narrow PATH for all scripts and there's
no need to further confine them.

---
diff --git a/glib2.spec b/glib2.spec
index 9531ff6..5847e12 100644
--- a/glib2.spec
+++ b/glib2.spec
@@ -133,16 +133,16 @@ chmod 644 $RPM_BUILD_ROOT%{_datadir}/bash-completion/completions/*
 %postun -p /sbin/ldconfig
 
 %transfiletriggerin -- %{_libdir}/gio/modules
-/bin/gio-querymodules-%{__isa_bits} %{_libdir}/gio/modules &> /dev/null || :
+gio-querymodules-%{__isa_bits} %{_libdir}/gio/modules &> /dev/null || :
 
 %transfiletriggerpostun -- %{_libdir}/gio/modules
-/bin/gio-querymodules-%{__isa_bits} %{_libdir}/gio/modules &> /dev/null || :
+gio-querymodules-%{__isa_bits} %{_libdir}/gio/modules &> /dev/null || :
 
 %transfiletriggerin -- %{_datadir}/glib-2.0/schemas
-/bin/glib-compile-schemas %{_datadir}/glib-2.0/schemas &> /dev/null || :
+glib-compile-schemas %{_datadir}/glib-2.0/schemas &> /dev/null || :
 
 %transfiletriggerpostun -- %{_datadir}/glib-2.0/schemas
-/bin/glib-compile-schemas %{_datadir}/glib-2.0/schemas &> /dev/null || :
+glib-compile-schemas %{_datadir}/glib-2.0/schemas &> /dev/null || :
 
 %files -f glib20.lang
 %license COPYING

^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-08-11 10:36 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-11 10:36 [rpms/glib2] cve-2026-58016-f44: Don't use full path for triggers Kalev Lember

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox