On Thu, 2019-12-12 at 18:30 +0100, Dario Lesca wrote: > But if it is true that the bug or vulnerability has been solved, it's > time to remove " -DENABLE_YTNEF=OFF" line from .spec file. I can't imagine why you'd ever allow an email file attachment to specify its own creation path. It's just asking for trouble. Never mind trying to sanitise it, just don't let the file name itself, at all. -- uname -rsvp Linux 3.10.0-1062.9.1.el7.x86_64 #1 SMP Fri Dec 6 15:49:49 UTC 2019 x86_64 Boilerplate: All unexpected mail to my mailbox is automatically deleted. I will only get to see the messages that are posted to the mailing list. _______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx