[Pkg-sympa-commits] [sympa] 01/02: Add a patch to fix a vulnerability in the web interface (wwsympa)
Emmanuel Bouthenot
kolter at moszumanska.debian.org
Mon Feb 9 22:55:27 UTC 2015
This is an automated email from the git hooks/post-receive script.
kolter pushed a commit to branch debian/wheezy
in repository sympa.
commit 1722b1fd5a7f5384aa3657c1d841ed2ef3fe80f3
Author: Emmanuel Bouthenot <kolter at openics.org>
Date: Fri Jan 16 02:47:22 2015 +0100
Add a patch to fix a vulnerability in the web interface (wwsympa)
---
.../patches/0002_fix_web_interface_vulnerability | 29 ++++++++++++++++++++++
debian/patches/series | 1 +
2 files changed, 30 insertions(+)
diff --git a/debian/patches/0002_fix_web_interface_vulnerability b/debian/patches/0002_fix_web_interface_vulnerability
new file mode 100644
index 0000000..d3a013d
--- /dev/null
+++ b/debian/patches/0002_fix_web_interface_vulnerability
@@ -0,0 +1,29 @@
+Description: Fix a vulnerability in the web interface (wwsympa)
+ which allows one to send himself by email any readable file by the
+ sympa user on the filesystem
+Author: David Verdin <david.verdin at renater.fr>
+Origin: upstream, https://sourcesup.renater.fr/scm/viewvc.php/branches/sympa-6.1-branch/wwsympa/wwsympa.fcgi.in?root=sympa&r1=11562&r2=11778&view=patch
+Applied-Upstream: 6.1.24
+Last-Update: 2015-01-16
+---
+This patch header follows DEP-3: http://dep.debian.net/deps/dep3/
+--- a/wwsympa/wwsympa.fcgi.in
++++ b/wwsympa/wwsympa.fcgi.in
+@@ -15394,9 +15394,14 @@
+ $pages_url = $in{'url'};
+
+ # parse return the MIME::Lite part to send
+- my $MIMEmail = $mailHTML->parse($pages_url);
+-
+- $in{'body'} = $MIMEmail->as_string;
++ $mailHTML->{_AGENT}->protocols_allowed(['http', 'https', 'ftp', 'nntp']);
++ my $MIMEmail = eval { $mailHTML->parse($pages_url) };
++ if ($MIMEmail) {
++ $in{'body'} = $MIMEmail->as_string;
++ } else {
++ report::reject_report_web('user', 'wrong_value', {'argument' => 'url'}, $param->{'action'});
++ return undef;
++ }
+
+ }else{
+
diff --git a/debian/patches/series b/debian/patches/series
index 8451d6c..f705ad1 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,4 +1,5 @@
0001_fix_cas_authentication.patch
+0002_fix_web_interface_vulnerability
1002_mysql_default_charset_engine.patch
1004_wizard_support_batch_and_display_mode.patch
1005_wizard_emit_cmd_and_newline_when_dying.patch
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/collab-maint/sympa.git
More information about the Pkg-sympa-commits
mailing list