[Pkg-sympa-commits] [sympa] 02/03: Add a patch to fix a vulnerability (CVE-2015-1306) in the web interface (wwsympa)

[Emmanuel Bouthenot]

This is an automated email from the git hooks/post-receive script.

kolter pushed a commit to branch debian/squeeze-backports
in repository sympa.

commit 75c3a686e65001e2993f1f02718c57f304c738f1
Author: Emmanuel Bouthenot <kolter at openics.org>
Date:   Mon Feb 9 17:56:01 2015 +0000

    Add a patch to fix a vulnerability (CVE-2015-1306) in the web interface (wwsympa)
---
 .../patches/2992_fix_web_interface_vulnerability   | 29 ++++++++++++++++++++++
 debian/patches/series                              |  1 +
 2 files changed, 30 insertions(+)

diff --git a/debian/patches/2992_fix_web_interface_vulnerability b/debian/patches/2992_fix_web_interface_vulnerability
new file mode 100644
index 0000000..72c0140
--- /dev/null
+++ b/debian/patches/2992_fix_web_interface_vulnerability
@@ -0,0 +1,29 @@
+Description: Fix a vulnerability (CVE-2015-1306) in the web interface (wwsympa)
+ which allows one to send himself by email any readable file by the sympa
+ user on the filesystem
+Author: David Verdin <david.verdin at renater.fr>
+Origin: upstream, https://sourcesup.renater.fr/scm/viewvc.php/branches/sympa-6.1-branch/wwsympa/wwsympa.fcgi.in?root=sympa&r1=11562&r2=11778&view=patch
+Applied-Upstream: 6.1.24
+Last-Update: 2015-01-16
+---
+This patch header follows DEP-3: http://dep.debian.net/deps/dep3/
+--- a/wwsympa/wwsympa.fcgi.in
++++ b/wwsympa/wwsympa.fcgi.in
+@@ -15391,9 +15391,14 @@
+ 	 $pages_url = $in{'url'};
+ 	 
+ 	 # parse return the MIME::Lite part to send 
+-	 my $MIMEmail = $mailHTML->parse($pages_url); 
+-
+-	 $in{'body'} = $MIMEmail->as_string;
++         $mailHTML->{_AGENT}->protocols_allowed(['http', 'https', 'ftp', 'nntp']);
++         my $MIMEmail = eval { $mailHTML->parse($pages_url) };
++         if ($MIMEmail) {
++             $in{'body'} = $MIMEmail->as_string;
++         } else {
++             report::reject_report_web('user', 'wrong_value', {'argument' => 'url'}, $param->{'action'});
++             return undef;
++         }
+ 	 
+      }else{
+ 	 
diff --git a/debian/patches/series b/debian/patches/series
index ad66a37..8cc10b7 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -13,3 +13,4 @@
 2004_pg_create_db.patch
 2005_disable_build_non_dfsg_po_files.patch
 #2991_sanitize_make_all.patch
+2992_fix_web_interface_vulnerability

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/collab-maint/sympa.git