e5e006d933
- fix unescaped dot in package_regex - if any package fails verification, remove the whole directory, not only that single package - abort (and remove the whole directory) on any exception - don't include file name in the error message, if it failed verification This, among other things, fix handling symlinks and directories sent by potentially malicious UpdateVM. os.remove() can't remove non-empty directories, so it would fail. Fortunately metadata is created only after successful verification, so dnf/yum wouldn't touch packages that failed verification and also weren't removed. But make the code better handle such situations. Reported-by: Hans Jerry Illikainen <hji@dyntopia.com> |
||
|---|---|---|
| .. | ||
| Makefile | ||
| patch-dnf-yum-config | ||
| qfile-dom0-unpacker.c | ||
| qubes-cached.repo | ||
| qubes-dom0-update | ||
| qubes-dom0-updates.cron | ||
| qubes-receive-updates | ||
| qubes.ReceiveUpdates | ||
| qubes.ReceiveUpdates.policy | ||