[gentoo-commits] gentoo-x86 commit in app-admin/denyhosts/files: denyhosts-2.6-log-injection-regex.patch digest-denyhosts-2.6-r1

[gentoo-commits] gentoo-x86 commit in app-admin/denyhosts/files: denyhosts-2.6-log-injection-regex.patch digest-denyhosts-2.6-r1

[Peter Volkov (pva)]

pva         07/09/13 15:09:18

  Added:                denyhosts-2.6-log-injection-regex.patch
                        digest-denyhosts-2.6-r1
  Log:
  Fixes log injection reported by Sune Kloppenborg Jeppesen in bug #181213.
  (Portage version: 2.1.3.9)

Revision  Changes    Path
1.1                  app-admin/denyhosts/files/denyhosts-2.6-log-injection-regex.patch

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/app-admin/denyhosts/files/denyhosts-2.6-log-injection-regex.patch?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/app-admin/denyhosts/files/denyhosts-2.6-log-injection-regex.patch?rev=1.1&content-type=text/plain

Index: denyhosts-2.6-log-injection-regex.patch
===================================================================
Address Log injection reported at

http://bugs.gentoo.org/show_bug.cgi?id=181213

diff -ur a/DenyHosts/regex.py b/DenyHosts/regex.py
--- a/DenyHosts/regex.py	2006-12-07 13:47:04.000000000 -0600
+++ b/DenyHosts/regex.py	2007-06-19 18:51:54.000000000 -0500
@@ -17,11 +17,11 @@
 
 FAILED_ENTRY_REGEX4 = re.compile(r"""Authentication failure for (?P<user>.*) .*from (?P<host>.*)""")
 
-FAILED_ENTRY_REGEX5 = re.compile(r"""User (?P<user>.*) .*from (?P<host>.*) not allowed because none of user's groups are listed in AllowGroups""")
+FAILED_ENTRY_REGEX5 = re.compile(r"""User (?P<user>.*) .*from (?P<host>.*) not allowed because none of user's groups are listed in AllowGroups$""")
 
 FAILED_ENTRY_REGEX6 = re.compile(r"""Did not receive identification string .*from (::ffff:)?(?P<host>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})""")
 
-FAILED_ENTRY_REGEX7 = re.compile(r"""User (?P<user>.*) not allowed because not listed in AllowUsers""")
+FAILED_ENTRY_REGEX7 = re.compile(r"""User (?P<user>.*) .*from (::ffff:)?(?P<host>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}) not allowed because not listed in AllowUsers""")
 
 
 # these are reserved for future versions



1.1                  app-admin/denyhosts/files/digest-denyhosts-2.6-r1

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/app-admin/denyhosts/files/digest-denyhosts-2.6-r1?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/app-admin/denyhosts/files/digest-denyhosts-2.6-r1?rev=1.1&content-type=text/plain

Index: digest-denyhosts-2.6-r1
===================================================================
MD5 fc2365305a9402886a2b0173d1beb7df DenyHosts-2.6.tar.gz 42667
RMD160 cab4206af992f5405ed1c9b302341c7b5649c71a DenyHosts-2.6.tar.gz 42667
SHA256 5190ead13a7238e3ccf328cb3b71b16716e1c73939909a4f3fa6904ba58ddf7d DenyHosts-2.6.tar.gz 42667



-- 
gentoo-commits@gentoo.org mailing list