e-smith-email/sme10/e-smith-email-5.6.0-bz11716-untaint.patch

diff -Nur --no-dereference e-smith-email-5.6.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick/Panel/pseudonyms.pm e-smith-email-5.6.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick/Panel/pseudonyms.pm
--- e-smith-email-5.6.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick/Panel/pseudonyms.pm      2021-11-15 10:28:23.044000000 -0500
+++ e-smith-email-5.6.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick/Panel/pseudonyms.pm  2021-11-15 10:38:27.355000000 -0500
@@ -180,7 +180,7 @@
                or $msg = "Error occurred while modifying pseudonym in database.";
        }
     # Untaint $pseudonym before use in system()
-    ($pseudonym) = ($pseudonym =~ /(.+)/);
+    ($pseudonym) = ($pseudonym =~ /([\w\p{L}.]+)/);
     system( "/sbin/e-smith/signal-event", "pseudonym-create", "$pseudonym",) 
         == 0 or $msg = "Error occurred while creating pseudonym.";
 
@@ -226,7 +226,7 @@
         or $msg = "Error occurred while modifying pseudonym in database.";
 
     # Untaint $pseudonym before use in system()
-    ($pseudonym) = ($pseudonym =~ /(.+)/);
+    ($pseudonym) = ($pseudonym =~ /([\w\p{L}]+.)/);
     system( "/sbin/e-smith/signal-event", "pseudonym-modify", "$pseudonym",)
         == 0 or $msg = "Error occurred while modifying pseudonym.";
 
@@ -276,7 +276,7 @@
         or $msg = "Error occurred while changing pseudonym type.";
 
     # Untaint $pseudonym before use in system()
-    ($pseudonym) = ($pseudonym =~ /(.+)/);
+    ($pseudonym) = ($pseudonym =~ /([\w\p{L}]+.)/);
     system( "/sbin/e-smith/signal-event", "pseudonym-delete", "$pseudonym") == 0
         or $msg = "Error occurred while removing pseudonym.";
 
1	diff -Nur --no-dereference e-smith-email-5.6.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick/Panel/pseudonyms.pm e-smith-email-5.6.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick/Panel/pseudonyms.pm
2	--- e-smith-email-5.6.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick/Panel/pseudonyms.pm 2021-11-15 10:28:23.044000000 -0500
3	+++ e-smith-email-5.6.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick/Panel/pseudonyms.pm 2021-11-15 10:38:27.355000000 -0500
4	@@ -180,7 +180,7 @@
5	or $msg = "Error occurred while modifying pseudonym in database.";
6	}
7	# Untaint $pseudonym before use in system()
8	- ($pseudonym) = ($pseudonym =~ /(.+)/);
9	+ ($pseudonym) = ($pseudonym =~ /([\w\p{L}.]+)/);
10	system( "/sbin/e-smith/signal-event", "pseudonym-create", "$pseudonym",)
11	== 0 or $msg = "Error occurred while creating pseudonym.";
12
13	@@ -226,7 +226,7 @@
14	or $msg = "Error occurred while modifying pseudonym in database.";
15
16	# Untaint $pseudonym before use in system()
17	- ($pseudonym) = ($pseudonym =~ /(.+)/);
18	+ ($pseudonym) = ($pseudonym =~ /([\w\p{L}]+.)/);
19	system( "/sbin/e-smith/signal-event", "pseudonym-modify", "$pseudonym",)
20	== 0 or $msg = "Error occurred while modifying pseudonym.";
21
22	@@ -276,7 +276,7 @@
23	or $msg = "Error occurred while changing pseudonym type.";
24
25	# Untaint $pseudonym before use in system()
26	- ($pseudonym) = ($pseudonym =~ /(.+)/);
27	+ ($pseudonym) = ($pseudonym =~ /([\w\p{L}]+.)/);
28	system( "/sbin/e-smith/signal-event", "pseudonym-delete", "$pseudonym") == 0
29	or $msg = "Error occurred while removing pseudonym.";
30