[gentoo-commits] gentoo-x86 commit in dev-python/cherrypy/files: cherrypy-3.0.2-invalidsession.patch digest-cherrypy-3.0.2-r1

[Ali Polatel (hawking)]

hawking     08/01/08 13:59:36

  Added:                cherrypy-3.0.2-invalidsession.patch
                        digest-cherrypy-3.0.2-r1
  Log:
  Revision bump. Added patch from upstream for directory traversal via malicious cookie, bug 204829
  (Portage version: 2.1.4_rc14)

Revision  Changes    Path
1.1                  dev-python/cherrypy/files/cherrypy-3.0.2-invalidsession.patch

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/dev-python/cherrypy/files/cherrypy-3.0.2-invalidsession.patch?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/dev-python/cherrypy/files/cherrypy-3.0.2-invalidsession.patch?rev=1.1&content-type=text/plain

Index: cherrypy-3.0.2-invalidsession.patch
===================================================================
http://secunia.com/advisories/28354/
http://www.cherrypy.org/ticket/744/
https://bugs.gentoo.org/show_bug.cgi?id=204829
--- cherrypy/lib/sessions.py	2007-08-06 03:04:44.000000000 +0300
+++ cherrypy/lib/sessions.py	2008-01-08 15:29:59.000000000 +0200
@@ -260,7 +260,10 @@
                     os.path.abspath(self.storage_path)))
     
     def _get_file_path(self):
-        return os.path.join(self.storage_path, self.SESSION_PREFIX + self.id)
+        f = os.path.join(self.storage_path, self.SESSION_PREFIX + self.id)
+        if not os.path.normpath(f).startswith(self.storage_path):
+            raise cherrypy.HTTPError(400, "Invalid session id in cookie.")
+        return f
     
     def _load(self, path=None):
         if path is None:



1.1                  dev-python/cherrypy/files/digest-cherrypy-3.0.2-r1

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/dev-python/cherrypy/files/digest-cherrypy-3.0.2-r1?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/dev-python/cherrypy/files/digest-cherrypy-3.0.2-r1?rev=1.1&content-type=text/plain

Index: digest-cherrypy-3.0.2-r1
===================================================================
MD5 d0b10db126a708b763f243ef764ad21a CherryPy-3.0.2.tar.gz 262428
RMD160 0bd98ca014b6539cd03969b6b3d85308d296b88e CherryPy-3.0.2.tar.gz 262428
SHA256 cd590e57543bf1c590c006bfd7c222adce6ab1584ef35d72dd91558e4e281a1a CherryPy-3.0.2.tar.gz 262428



-- 
gentoo-commits@l.g.o mailing list