[tryton-debian-vcs] tryton-client branch debian-squeeze created. ab75aa7d824d18f9532dfed6416288077ac0a2a8

[Mathias Behrle]

The following commit has been merged in the debian-squeeze branch:
https://alioth.debian.org/plugins/scmgit/cgi-bin/gitweb.cgi/?p=tryton/tryton-client.git;a=commitdiff;h=ab75aa7d824d18f9532dfed6416288077ac0a2a8
commit ab75aa7d824d18f9532dfed6416288077ac0a2a8
Author: Mathias Behrle <mathiasb at m9s.biz>
Date:   Fri Nov 1 19:43:16 2013 +0100

    Releasing debian version 1.6.1-1+deb6u1.

diff --git a/debian/changelog b/debian/changelog
index 4613751..9c3d54a 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+tryton-client (1.6.1-1+deb6u1) oldstable-security; urgency=high
+
+  *  Adding patch to sanitize correctly the file extension of temporary
+  files received by the server (s. https://bugs.tryton.org/issue3446).
+
+ -- Mathias Behrle <mathiasb at m9s.biz>  Fri, 01 Nov 2013 13:54:52 +0100
+
 tryton-client (1.6.1-1) unstable; urgency=low
 
   * Wrapping copyright.
commit a71cba2452ec696899da06dc26f7d5dd4e9aaabf
Author: Mathias Behrle <mathiasb at m9s.biz>
Date:   Fri Nov 1 19:42:21 2013 +0100

    Applying patch to sanitize file extension (https://bugs.tryton.org/issue3446).

diff --git a/tryton/action/main.py b/tryton/action/main.py
index 574bec8..6977171 100644
--- a/tryton/action/main.py
+++ b/tryton/action/main.py
@@ -56,8 +56,9 @@ class Action(object):
             print_p = True
         dtemp = tempfile.mkdtemp(prefix='tryton_')
         fp_name = os.path.join(dtemp,
-                name.replace(os.sep, '_').replace(os.altsep or os.sep, '_') \
-                        + os.extsep + type)
+                name.replace(os.sep, '_').replace(os.altsep or os.sep, '_')
+                + os.extsep
+                + type.replace(os.sep, '_').replace(os.altsep or os.sep, '_'))
         file_d = open(fp_name, 'wb')
         file_d.write(base64.decodestring(data))
         file_d.close()
-- 
tryton-client