Gentoo Archives: gentoo-commits

From: "Peter Volkov (pva)" <pva@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] gentoo-x86 commit in app-admin/denyhosts/files: denyhosts-2.6-log-injection-regex.patch digest-denyhosts-2.6-r1
Date: Thu, 13 Sep 2007 15:18:24
Message-Id: E1IVqJi-00045l-R3@stork.gentoo.org
1 pva 07/09/13 15:09:18
2
3 Added: denyhosts-2.6-log-injection-regex.patch
4 digest-denyhosts-2.6-r1
5 Log:
6 Fixes log injection reported by Sune Kloppenborg Jeppesen in bug #181213.
7 (Portage version: 2.1.3.9)
8
9 Revision Changes Path
10 1.1 app-admin/denyhosts/files/denyhosts-2.6-log-injection-regex.patch
11
12 file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/app-admin/denyhosts/files/denyhosts-2.6-log-injection-regex.patch?rev=1.1&view=markup
13 plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/app-admin/denyhosts/files/denyhosts-2.6-log-injection-regex.patch?rev=1.1&content-type=text/plain
14
15 Index: denyhosts-2.6-log-injection-regex.patch
16 ===================================================================
17 Address Log injection reported at
18
19 http://bugs.gentoo.org/show_bug.cgi?id=181213
20
21 diff -ur a/DenyHosts/regex.py b/DenyHosts/regex.py
22 --- a/DenyHosts/regex.py 2006-12-07 13:47:04.000000000 -0600
23 +++ b/DenyHosts/regex.py 2007-06-19 18:51:54.000000000 -0500
24 @@ -17,11 +17,11 @@
25
26 FAILED_ENTRY_REGEX4 = re.compile(r"""Authentication failure for (?P<user>.*) .*from (?P<host>.*)""")
27
28 -FAILED_ENTRY_REGEX5 = re.compile(r"""User (?P<user>.*) .*from (?P<host>.*) not allowed because none of user's groups are listed in AllowGroups""")
29 +FAILED_ENTRY_REGEX5 = re.compile(r"""User (?P<user>.*) .*from (?P<host>.*) not allowed because none of user's groups are listed in AllowGroups$""")
30
31 FAILED_ENTRY_REGEX6 = re.compile(r"""Did not receive identification string .*from (::ffff:)?(?P<host>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})""")
32
33 -FAILED_ENTRY_REGEX7 = re.compile(r"""User (?P<user>.*) not allowed because not listed in AllowUsers""")
34 +FAILED_ENTRY_REGEX7 = re.compile(r"""User (?P<user>.*) .*from (::ffff:)?(?P<host>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}) not allowed because not listed in AllowUsers""")
35
36
37 # these are reserved for future versions
38
39
40
41 1.1 app-admin/denyhosts/files/digest-denyhosts-2.6-r1
42
43 file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/app-admin/denyhosts/files/digest-denyhosts-2.6-r1?rev=1.1&view=markup
44 plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/app-admin/denyhosts/files/digest-denyhosts-2.6-r1?rev=1.1&content-type=text/plain
45
46 Index: digest-denyhosts-2.6-r1
47 ===================================================================
48 MD5 fc2365305a9402886a2b0173d1beb7df DenyHosts-2.6.tar.gz 42667
49 RMD160 cab4206af992f5405ed1c9b302341c7b5649c71a DenyHosts-2.6.tar.gz 42667
50 SHA256 5190ead13a7238e3ccf328cb3b71b16716e1c73939909a4f3fa6904ba58ddf7d DenyHosts-2.6.tar.gz 42667
51
52
53
54 --
55 gentoo-commits@g.o mailing list