[libemail-address-perl] 01/04: Add 0008-quoted-part-can-be-empty.patch patch

Salvatore Bonaccorso carnil at debian.org
Fri Jun 27 18:10:28 UTC 2014


This is an automated email from the git hooks/post-receive script.

carnil pushed a commit to branch wheezy
in repository libemail-address-perl.

commit 8153c2fcaad02911a32909496c98221387d55ad9
Author: Salvatore Bonaccorso <carnil at debian.org>
Date:   Wed Jun 25 22:20:39 2014 +0200

    Add 0008-quoted-part-can-be-empty.patch patch
    
    CVE-2014-0477: Fix denial of service vulnerability in the way how
    Email::Address::parse parses empty quoted string, as allowed by RFC
    2822.
---
 debian/patches/0008-quoted-part-can-be-empty.patch | 25 ++++++++++++++++++++++
 debian/patches/series                              |  1 +
 2 files changed, 26 insertions(+)

diff --git a/debian/patches/0008-quoted-part-can-be-empty.patch b/debian/patches/0008-quoted-part-can-be-empty.patch
new file mode 100644
index 0000000..bdd4b04
--- /dev/null
+++ b/debian/patches/0008-quoted-part-can-be-empty.patch
@@ -0,0 +1,25 @@
+From 83f8306117115729ac9346523762c0c396251eb5 Mon Sep 17 00:00:00 2001
+From: Ricardo Signes <rjbs at cpan.org>
+Date: Tue, 17 Jun 2014 22:48:03 -0400
+Subject: [PATCH 8/8] quoted part can be empty
+
+---
+ lib/Email/Address.pm | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/lib/Email/Address.pm b/lib/Email/Address.pm
+index acece12..1e0feb8 100644
+--- a/lib/Email/Address.pm
++++ b/lib/Email/Address.pm
+@@ -51,7 +51,7 @@ my $dot_atom       = qr/$cfws*$dot_atom_text$cfws*/;
+ 
+ my $qtext          = qr/[^\\"]/;
+ my $qcontent       = qr/$qtext|$quoted_pair/;
+-my $quoted_string  = qr/$cfws*"$qcontent+"$cfws*/;
++my $quoted_string  = qr/$cfws*"$qcontent*"$cfws*/;
+ 
+ my $word           = qr/$atom|$quoted_string/;
+ 
+-- 
+2.0.0
+
diff --git a/debian/patches/series b/debian/patches/series
index 5299247..2b89011 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1 +1,2 @@
 spelling.patch
+0008-quoted-part-can-be-empty.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libemail-address-perl.git



More information about the Pkg-perl-cvs-commits mailing list