0021196: [CEA 456] Integration and merge modification for debian packages

Only append : when LD_LIBRARY_PATH is set, to avoid having it default to . and
execute arbitrary code.  This fixes Debian bug 598421 and CVE vulnerability
CVE-2010-3377 .

diff --git a/bin/runLightSalome.sh b/bin/runLightSalome.sh
index 2fe2866b9c9513ac659fc83347233d11877c2be2..9f6dcb1cc7a3fbd336076419d31ad8990543acae 100755 (executable)
--- a/bin/runLightSalome.sh
+++ b/bin/runLightSalome.sh
@@ -137,7 +137,7 @@ if [ "${MY_PATH}" != "" ] ; then
     export PATH=${MY_PATH}:${PATH}
 fi
 if [ "${MY_LD_LIBRARY_PATH}" != "" ] ; then
-    export LD_LIBRARY_PATH=${MY_LD_LIBRARY_PATH}:${LD_LIBRARY_PATH}
+    export LD_LIBRARY_PATH=${MY_LD_LIBRARY_PATH}${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}
 fi
 if [ "${PYTHONPATH}" != "" ] ; then
     export PYTHONPATH=${MY_PYTHONPATH}:${PYTHONPATH}