/[smeserver]/rpms/e-smith-email/sme10/e-smith-email-5.6.0-bz11799.patch
ViewVC logotype

Contents of /rpms/e-smith-email/sme10/e-smith-email-5.6.0-bz11799.patch

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph


Revision 1.1 - (show annotations) (download)
Sat Apr 16 16:32:00 2022 UTC (2 years, 6 months ago) by jpp
Branch: MAIN
CVS Tags: e-smith-email-5_6_0-16_el7_sme, e-smith-email-5_6_0-18_el7_sme, e-smith-email-5_6_0-17_el7_sme, e-smith-email-5_6_0-19_el7_sme, HEAD
* Sat Apr 16 2022 Jean-Philippe Pialasse <tests@pialasse.com> 5.6.0-16.sme
- fix missing dot in regex for untainting [SME: 11799]
  would delete any account named with the string before the dot

1 diff -Nur --no-dereference e-smith-email-5.6.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick/Panel/pseudonyms.pm e-smith-email-5.6.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick/Panel/pseudonyms.pm
2 --- e-smith-email-5.6.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick/Panel/pseudonyms.pm 2022-04-16 12:23:00.053000000 -0400
3 +++ e-smith-email-5.6.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick/Panel/pseudonyms.pm 2022-04-16 12:29:27.603000000 -0400
4 @@ -283,6 +283,7 @@
5 #TODO: is it ->delete or get()->delete
6 foreach my $p_rec (@pseudonyms) {
7 if ($p_rec->prop("Account") eq $pseudonym) {
8 + next unless $p_rec->type eq "pseudonym-deleted";
9 $accounts->get($p_rec->key)->delete()
10 or $msg = "Error occurred while deleting pseudonym from database.";
11 }

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed