From mboxrd@z Thu Jan  1 00:00:00 1970
Return-path: <ptxdist-bounces@pengutronix.de>
From: Bastian Stender <bst@pengutronix.de>
Date: Fri,  5 Jan 2018 18:37:18 +0100
Message-Id: <20180105173719.3005-1-bst@pengutronix.de>
Subject: [ptxdist] [PATCH 1/2] python2: prevent host path leakage
List-Id: PTXdist Development Mailing List <ptxdist.pengutronix.de>
List-Unsubscribe: <http://metis.pengutronix.de/cgi-bin/mailman/options/ptxdist>, 
 <mailto:ptxdist-request@pengutronix.de?subject=unsubscribe>
List-Archive: <http://metis.pengutronix.de/cgi-bin/mailman/private/ptxdist/>
List-Post: <mailto:ptxdist@pengutronix.de>
List-Help: <mailto:ptxdist-request@pengutronix.de?subject=help>
List-Subscribe: <http://metis.pengutronix.de/cgi-bin/mailman/listinfo/ptxdist>, 
 <mailto:ptxdist-request@pengutronix.de?subject=subscribe>
Reply-To: ptxdist@pengutronix.de
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Errors-To: ptxdist-bounces@pengutronix.de
Sender: "ptxdist" <ptxdist-bounces@pengutronix.de>
To: ptxdist@pengutronix.de
Cc: Bastian Stender <bst@pengutronix.de>
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