#47050: pass @1.6.3 update to 1.6.5 ----------------------+-------------------------- Reporter: edwin@… | Owner: ryandesign@… Type: update | Status: assigned Priority: Normal | Milestone: Component: ports | Version: 2.3.3 Resolution: | Keywords: haspatch Port: pass | ----------------------+-------------------------- Changes (by ryandesign@…): * owner: macports-tickets@… => ryandesign@… * keywords: => haspatch * status: new => assigned Comment: Replying to [comment:3 john@…]:
I'm a little nervous because upstream doesn't use absolute paths for anything, which I naively imagine means it would be easy for something incompatible (or even malicious) to sneak its way onto your `$PATH` and cause havoc.
MacPorts sanitizes PATH and other environment variables. The only way something weird could get into PATH is if the user deliberately modifies the binpath setting in their macports.conf, and there's a comment in that file discouraging that practice. -- Ticket URL: <https://trac.macports.org/ticket/47050#comment:5> MacPorts <https://www.macports.org/> Ports system for OS X