OpenPKG CVS Repository
http://cvs.openpkg.org/
____________________________________________________________________________
Server: cvs.openpkg.org Name: Ralf S. Engelschall
Root: /e/openpkg/cvs Email: [EMAIL PROTECTED]
Module: openpkg-src Date: 19-Feb-2003 13:30:35
Branch: OPENPKG_1_STABLE Handle: 2003021912303400
Modified files: (Branch: OPENPKG_1_STABLE)
openpkg-src/majordomo majordomo.patch majordomo.spec
Log:
MFC: majordomo security bugfix
Summary:
Revision Changes Path
1.1.2.1 +14 -0 openpkg-src/majordomo/majordomo.patch
1.28.2.2 +1 -1 openpkg-src/majordomo/majordomo.spec
____________________________________________________________________________
patch -p0 <<'@@ .'
Index: openpkg-src/majordomo/majordomo.patch
============================================================================
$ cvs diff -u -r1.1 -r1.1.2.1 majordomo.patch
--- openpkg-src/majordomo/majordomo.patch 19 Dec 2002 10:57:26 -0000 1.1
+++ openpkg-src/majordomo/majordomo.patch 19 Feb 2003 12:30:34 -0000 1.1.2.1
@@ -12,3 +12,17 @@
s/^~/~~/;
print MAIL $_;
}
+--- majordomo.orig Mon Feb 3 13:23:45 2003
++++ majordomo Mon Feb 3 13:23:23 2003
+@@ -624,6 +624,11 @@
+
+ sub do_which {
+ local($subscriber) = join(" ", @_) || &valid_addr($reply_to);
++ if ($subscriber !~ /^[0-9a-zA-Z\.\-\_]+\@[0-9a-zA-Z\.\-]+\.[a-zA-Z]{2,3}$/) {
++
++ &log("which abuse -> $subscriber passed as an argument.");
++ exit(0);
++ };
+ local($count, $per_list_hits) = 0;
+ # Tell the requestor which lists they are on by reading through all
+ # the lists, comparing their address to each address from each list
@@ .
patch -p0 <<'@@ .'
Index: openpkg-src/majordomo/majordomo.spec
============================================================================
$ cvs diff -u -r1.28.2.1 -r1.28.2.2 majordomo.spec
--- openpkg-src/majordomo/majordomo.spec 18 Jan 2003 14:12:59 -0000
1.28.2.1
+++ openpkg-src/majordomo/majordomo.spec 19 Feb 2003 12:30:34 -0000
1.28.2.2
@@ -33,7 +33,7 @@
Group: Mail
License: Majordomo License Agreement
Version: 1.94.5
-Release: 1.20030114
+Release: 1.20030219
# list of sources
Source0:
http://www.greatcircle.com/majordomo/%{version}/majordomo-%{version}.tar.gz
@@ .
______________________________________________________________________
The OpenPKG Project www.openpkg.org
CVS Repository Commit List [EMAIL PROTECTED]
