--- rpms/e-smith-email/sme10/e-smith-email-5.6.0-bz11716-untaint.patch 2021/11/15 15:40:51 1.1 +++ rpms/e-smith-email/sme10/e-smith-email-5.6.0-bz11716-untaint.patch 2022/05/19 04:24:52 1.3 @@ -6,7 +6,7 @@ diff -Nur --no-dereference e-smith-email } # Untaint $pseudonym before use in system() - ($pseudonym) = ($pseudonym =~ /(.+)/); -+ ($pseudonym) = ($pseudonym =~ /([\w\p{L}]+)/); ++ ($pseudonym) = ($pseudonym =~ /([\w\p{L}.]+)/); system( "/sbin/e-smith/signal-event", "pseudonym-create", "$pseudonym",) == 0 or $msg = "Error occurred while creating pseudonym."; @@ -15,7 +15,7 @@ diff -Nur --no-dereference e-smith-email # Untaint $pseudonym before use in system() - ($pseudonym) = ($pseudonym =~ /(.+)/); -+ ($pseudonym) = ($pseudonym =~ /([\w\p{L}]+)/); ++ ($pseudonym) = ($pseudonym =~ /([\w\p{L}.]+)/); system( "/sbin/e-smith/signal-event", "pseudonym-modify", "$pseudonym",) == 0 or $msg = "Error occurred while modifying pseudonym."; @@ -24,7 +24,7 @@ diff -Nur --no-dereference e-smith-email # Untaint $pseudonym before use in system() - ($pseudonym) = ($pseudonym =~ /(.+)/); -+ ($pseudonym) = ($pseudonym =~ /([\w\p{L}]+)/); ++ ($pseudonym) = ($pseudonym =~ /([\w\p{L}.]+)/); system( "/sbin/e-smith/signal-event", "pseudonym-delete", "$pseudonym") == 0 or $msg = "Error occurred while removing pseudonym.";