Ld-Hagen/fix-opera-linux-ffmpeg-widevine
1
0
Fork 0
mirror of https://github.com/Ld-Hagen/fix-opera-linux-ffmpeg-widevine.git synced 2026-08-26 09:25:02 +03:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #48 from sewi-cpan/fix/tmp-symlink-vuln

Browse Source 
Fix predictable /tmp path enabling symlink attack as root
This commit is contained in:
Maksim Ivanov
2026-08-17 11:48:57 +03:00
committed by GitHub
parent b22229d589 42fe8e0176
commit 0150fa9bc9
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/fix-opera.sh
Regular → Executable
+6 -2
View File
@@ -31,7 +31,12 @@ fi
#Config section #Config section
readonly FIX_WIDEVINE=true readonly FIX_WIDEVINE=true
readonly FIX_DIR='/tmp/opera-fix' FIX_DIR=$(mktemp -d -t opera-fix.XXXXXXXX)
if [[ ! -d "$FIX_DIR" ]]; then
printf 'Failed to create a secure temporary directory\n'
exit 1
fi
readonly FIX_DIR
readonly FFMPEG_SRC_MAIN='https://api.github.com/repos/Ld-Hagen/nwjs-ffmpeg-prebuilt/releases' readonly FFMPEG_SRC_MAIN='https://api.github.com/repos/Ld-Hagen/nwjs-ffmpeg-prebuilt/releases'
readonly FFMPEG_SRC_ALT='https://api.github.com/repos/Ld-Hagen/fix-opera-linux-ffmpeg-widevine/releases' readonly FFMPEG_SRC_ALT='https://api.github.com/repos/Ld-Hagen/fix-opera-linux-ffmpeg-widevine/releases'
readonly WIDEVINE_SRC='https://raw.githubusercontent.com/mozilla-firefox/firefox/refs/heads/main/toolkit/content/gmp-sources/widevinecdm.json' readonly WIDEVINE_SRC='https://raw.githubusercontent.com/mozilla-firefox/firefox/refs/heads/main/toolkit/content/gmp-sources/widevinecdm.json'
@@ -121,7 +126,6 @@ if $FIX_WIDEVINE; then
fi fi
#Downloading Widevine #Downloading Widevine
mkdir -p "$FIX_DIR"
if $FIX_WIDEVINE; then if $FIX_WIDEVINE; then
printf 'Downloading Widevine CDM...\n' printf 'Downloading Widevine CDM...\n'
echo -e "From URL: $WIDEVINE_URL\n" echo -e "From URL: $WIDEVINE_URL\n"