import mailman-2.1.29-10.module+el8.3.0+6860+8e47d84b

This commit is contained in:
CentOS Sources 2020-07-28 07:06:37 -04:00 committed by Stepan Oksanichenko
parent 47f4c9315c
commit 01b0cc92e5
4 changed files with 115 additions and 7 deletions

View File

@ -0,0 +1,14 @@
=== modified file 'Mailman/Handlers/Scrubber.py'
--- Mailman/Handlers/Scrubber.py 2018-06-17 23:47:34 +0000
+++ Mailman/Handlers/Scrubber.py 2018-11-10 18:57:54 +0000
@@ -87,6 +87,9 @@
all = guess_all_extensions(ctype, strict=False)
if ext in all:
return ext
+ if ctype.lower == 'application/octet-stream':
+ # For this type, all[0] is '.obj'. '.bin' is better.
+ return '.bin'
return all and all[0]

View File

@ -0,0 +1,78 @@
--- Mailman/Bouncers/SimpleMatch.py 2018-06-17 23:47:34 +0000
+++ Mailman/Bouncers/SimpleMatch.py 2020-01-17 00:03:34 +0000
@@ -25,6 +25,9 @@
def _c(pattern):
return re.compile(pattern, re.IGNORECASE)
+# Pattern to match any valid email address and not much more.
+VALID = _c(r'[\x21-\x3d\x3f\x41-\x7e]+@[a-z0-9._]+')
+
# This is a list of tuples of the form
#
# (start cre, end cre, address cre)
@@ -227,4 +230,4 @@
break
if addrs:
break
- return addrs.keys()
+ return [x for x in addrs.keys() if VALID.match(x)]
=== modified file 'Mailman/Bouncers/SimpleWarning.py'
--- Mailman/Bouncers/SimpleWarning.py 2018-06-17 23:47:34 +0000
+++ Mailman/Bouncers/SimpleWarning.py 2020-01-17 00:03:34 +0000
@@ -17,9 +17,10 @@
"""Recognizes simple heuristically delimited warnings."""
+import email
+
from Mailman.Bouncers.BouncerAPI import Stop
from Mailman.Bouncers.SimpleMatch import _c
-from Mailman.Bouncers.SimpleMatch import process as _process
@@ -67,8 +68,25 @@
def process(msg):
- if _process(msg, patterns):
- # It's a recognized warning so stop now
- return Stop
- else:
- return []
+ # We used to just import process from SimpleMatch, but with the change in
+ # SimpleMatch to return only vaild addresses, that doesn't work any more.
+ # So, we copy most of the process from SimpleMatch here.
+ addrs = {}
+ for scre, ecre, acre in patterns:
+ state = 0
+ for line in email.Iterators.body_line_iterator(msg, decode=True):
+ if state == 0:
+ if scre.search(line):
+ state = 1
+ if state == 1:
+ mo = acre.search(line)
+ if mo:
+ addr = mo.group('addr')
+ if addr:
+ addrs[addr.strip('<>')] = 1
+ elif ecre.search(line):
+ break
+ if addrs:
+ # It's a recognized warning so stop now
+ return Stop
+ return []
--- Mailman/Bouncers/SimpleMatch.py 2020-01-17 00:03:34 +0000
+++ Mailman/Bouncers/SimpleMatch.py 2020-01-17 03:25:09 +0000
@@ -26,7 +26,7 @@
return re.compile(pattern, re.IGNORECASE)
# Pattern to match any valid email address and not much more.
-VALID = _c(r'[\x21-\x3d\x3f\x41-\x7e]+@[a-z0-9._]+')
+VALID = _c(r'^[\x21-\x3d\x3f\x41-\x7e]+@[a-z0-9._]+$')
# This is a list of tuples of the form
#

View File

@ -1,2 +1,2 @@
d /var/lock/mailman 0775 root mailman d /var/lock/mailman 0775 root mailman
d /var/run/mailman 0775 root mailman d /run/mailman 0775 root mailman

View File

@ -3,7 +3,7 @@
Summary: Mailing list manager with built in Web access Summary: Mailing list manager with built in Web access
Name: mailman Name: mailman
Version: 2.1.29 Version: 2.1.29
Release: 4%{?dist} Release: 10%{?dist}
Epoch: 3 Epoch: 3
Group: Applications/Internet Group: Applications/Internet
Source0: ftp://ftp.gnu.org/pub/gnu/mailman/mailman-%{version}.tgz Source0: ftp://ftp.gnu.org/pub/gnu/mailman/mailman-%{version}.tgz
@ -29,6 +29,8 @@ Patch13: mailman-2.1.9-unicode.patch
Patch21: mailman-2.1.13-env-python.patch Patch21: mailman-2.1.13-env-python.patch
Patch22: mailman-2.1.15-check_perms.patch Patch22: mailman-2.1.15-check_perms.patch
Patch24: mailman-specify_python_version.patch Patch24: mailman-specify_python_version.patch
Patch25: mailman-CVE-2020-12137.patch
Patch26: mailman-bouncer_oom_crash.patch
License: GPLv2+ License: GPLv2+
@ -118,6 +120,8 @@ additional installation steps, these are described in:
%patch21 -p1 %patch21 -p1
%patch22 -p1 %patch22 -p1
%patch24 -p1 -b .python_version %patch24 -p1 -b .python_version
%patch25 -p0 -b .cve_obj_mime
%patch26 -p0 -b .bouncer_match
#cp $RPM_SOURCE_DIR/mailman.INSTALL.REDHAT.in INSTALL.REDHAT.in #cp $RPM_SOURCE_DIR/mailman.INSTALL.REDHAT.in INSTALL.REDHAT.in
cp %{SOURCE5} INSTALL.REDHAT.in cp %{SOURCE5} INSTALL.REDHAT.in
@ -283,8 +287,6 @@ cat > %{buildroot}%{mmdir}/templates/README <<EOF
Templates have been moved to %{templatedir}. Templates have been moved to %{templatedir}.
EOF EOF
# byte-compile %{mmdir}
#py_byte_compile %{__python} %{buildroot}%{mmdir}
find %{buildroot}%{mmdir} -type f -a -name "*.py" -print0 | xargs -0 %{__python2} -c 'import py_compile, sys; [py_compile.compile(f, dfile=f.partition("$RPM_BUILD_ROOT")[2]) for f in sys.argv[1:]]' || : find %{buildroot}%{mmdir} -type f -a -name "*.py" -print0 | xargs -0 %{__python2} -c 'import py_compile, sys; [py_compile.compile(f, dfile=f.partition("$RPM_BUILD_ROOT")[2]) for f in sys.argv[1:]]' || :
find %{buildroot}%{mmdir} -type f -a -name "*.py" -print0 | xargs -0 %{__python2} -O -c 'import py_compile, sys; [py_compile.compile(f, dfile=f.partition("$RPM_BUILD_ROOT")[2]) for f in sys.argv[1:]]' || : find %{buildroot}%{mmdir} -type f -a -name "*.py" -print0 | xargs -0 %{__python2} -O -c 'import py_compile, sys; [py_compile.compile(f, dfile=f.partition("$RPM_BUILD_ROOT")[2]) for f in sys.argv[1:]]' || :
@ -296,8 +298,6 @@ chmod %{buildroot}/%{mmdir} -s -R
# cgi-bin contains ELF executables which have to have setgid # cgi-bin contains ELF executables which have to have setgid
chmod g+s %{buildroot}/%{mmdir}/cgi-bin/* chmod g+s %{buildroot}/%{mmdir}/cgi-bin/*
chmod g+s %{buildroot}/%{mmdir}/mail/mailman chmod g+s %{buildroot}/%{mmdir}/mail/mailman
# no need for setgid in configdir
chmod %{buildroot}/%{configdir} -s -R
%pre %pre
@ -563,7 +563,7 @@ exit 0
%config(noreplace) %{httpdconfdir}/%{httpdconffile} %config(noreplace) %{httpdconfdir}/%{httpdconffile}
%config(noreplace) /etc/logrotate.d/%{name} %config(noreplace) /etc/logrotate.d/%{name}
/etc/smrsh/%{mail_wrapper} /etc/smrsh/%{mail_wrapper}
%dir %attr(755,root,%{mmgroup}) %{configdir} %dir %attr(2755,root,%{mmgroup}) %{configdir}
%attr(0644, root, %{mmgroup}) %config(noreplace) %verify(not md5 size mtime) %{configdir}/sitelist.cfg %attr(0644, root, %{mmgroup}) %config(noreplace) %verify(not md5 size mtime) %{configdir}/sitelist.cfg
%attr(775,root,%{mmgroup}) %{logdir} %attr(775,root,%{mmgroup}) %{logdir}
%{_prefix}/lib/tmpfiles.d/mailman.conf %{_prefix}/lib/tmpfiles.d/mailman.conf
@ -575,6 +575,22 @@ exit 0
%dir %attr(775,root,%{mmgroup}) %{lockdir} %dir %attr(775,root,%{mmgroup}) %{lockdir}
%changelog %changelog
* Mon May 25 2020 Pavel Zhukov <pzhukov@redhat.com> - 3:2.1.29-10
- Fix match patter to reduce false allocation
* Mon May 25 2020 Pavel Zhukov <pzhukov@redhat.com> - 3:2.1.29-9
- Fix for CVE-2020-12137
* Wed May 6 2020 Pavel Zhukov <pzhukov@redhat.com> - 3:2.1.29-8
- Drop unversioned python from comments.
* Wed May 6 2020 Pavel Zhukov <pzhukov@redhat.com> - 3:2.1.29-7
- Change attr of /etc/mailman
* Thu Apr 23 2020 Pavel Zhukov <pzhukov@redhat.com> - 3:2.1.29-6
- Update run directory references (#1805954)
- fix #1188043 - set 2775 permission for /etc/mailman
* Mon Oct 8 2018 Pavel Zhukov <pzhukov@redhat.com> - 3:2.1.29-4 * Mon Oct 8 2018 Pavel Zhukov <pzhukov@redhat.com> - 3:2.1.29-4
- Resolves: #1636432 - Delete env python shebangs - Resolves: #1636432 - Delete env python shebangs