FS#57144 - [xss-lock] non-unique source filename
Attached to Project:
Community Packages
Opened by Levente Polyak (anthraxx) - Thursday, 18 January 2018, 19:13 GMT
Last edited by Pierre Neidhardt (Ambrevar) - Tuesday, 23 January 2018, 09:14 GMT
Opened by Levente Polyak (anthraxx) - Thursday, 18 January 2018, 19:13 GMT
Last edited by Pierre Neidhardt (Ambrevar) - Tuesday, 23 January 2018, 09:14 GMT
|
Details
The source=() array does not prefix the non-unqiue source
filename, which is a must to avoid clashes in shared
source-dir environments.
It just contains the pkgver therefor its non-unique across multiple packages. Mitigation: prefix via ${pkgname}-${pkgver}.tar.gz::https://.... |
This task depends upon