Bug#787423: jessie-pu: package getmail4/4.46.0-1+debu8u1 with debdiff
Hi,
My first report was a more-or-less pre-apoproval request.
Now that I made a package under ithe jessie chroot, here are the debdiff
for dsc and changes files. Please note we have only 1 version of python
2.7 making build result different in the binary package. This is
essentially one line addition.
+poplib._MAXLINE = 1 << 20 # 1MB; decrease this if you're running on a VIC-20
See attached debdiff.
> --
> 787423: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787423
> Debian Bug Tracking System
> Contact owner@bugs.debian.org with problems
[The following lists of changes regard files as different if they have
different names, permissions or owners.]
Files in second .changes but not in first
-----------------------------------------
-rw-r--r-- root/root /usr/lib/python2.7/dist-packages/getmail-4.46.0.egg-info
-rw-r--r-- root/root /usr/lib/python2.7/dist-packages/getmailcore/__init__.py
-rw-r--r-- root/root /usr/lib/python2.7/dist-packages/getmailcore/_pop3ssl.py
-rw-r--r-- root/root /usr/lib/python2.7/dist-packages/getmailcore/_retrieverbases.py
-rw-r--r-- root/root /usr/lib/python2.7/dist-packages/getmailcore/baseclasses.py
-rw-r--r-- root/root /usr/lib/python2.7/dist-packages/getmailcore/compatibility.py
-rw-r--r-- root/root /usr/lib/python2.7/dist-packages/getmailcore/constants.py
-rw-r--r-- root/root /usr/lib/python2.7/dist-packages/getmailcore/destinations.py
-rw-r--r-- root/root /usr/lib/python2.7/dist-packages/getmailcore/exceptions.py
-rw-r--r-- root/root /usr/lib/python2.7/dist-packages/getmailcore/filters.py
-rw-r--r-- root/root /usr/lib/python2.7/dist-packages/getmailcore/imap_utf7.py
-rw-r--r-- root/root /usr/lib/python2.7/dist-packages/getmailcore/logging.py
-rw-r--r-- root/root /usr/lib/python2.7/dist-packages/getmailcore/message.py
-rw-r--r-- root/root /usr/lib/python2.7/dist-packages/getmailcore/retrievers.py
-rw-r--r-- root/root /usr/lib/python2.7/dist-packages/getmailcore/utilities.py
Files in first .changes but not in second
-----------------------------------------
-rw-r--r-- root/root /usr/share/pyshared/getmail-4.46.0.egg-info
-rw-r--r-- root/root /usr/share/pyshared/getmailcore/__init__.py
-rw-r--r-- root/root /usr/share/pyshared/getmailcore/_pop3ssl.py
-rw-r--r-- root/root /usr/share/pyshared/getmailcore/_retrieverbases.py
-rw-r--r-- root/root /usr/share/pyshared/getmailcore/baseclasses.py
-rw-r--r-- root/root /usr/share/pyshared/getmailcore/compatibility.py
-rw-r--r-- root/root /usr/share/pyshared/getmailcore/constants.py
-rw-r--r-- root/root /usr/share/pyshared/getmailcore/destinations.py
-rw-r--r-- root/root /usr/share/pyshared/getmailcore/exceptions.py
-rw-r--r-- root/root /usr/share/pyshared/getmailcore/filters.py
-rw-r--r-- root/root /usr/share/pyshared/getmailcore/imap_utf7.py
-rw-r--r-- root/root /usr/share/pyshared/getmailcore/logging.py
-rw-r--r-- root/root /usr/share/pyshared/getmailcore/message.py
-rw-r--r-- root/root /usr/share/pyshared/getmailcore/retrievers.py
-rw-r--r-- root/root /usr/share/pyshared/getmailcore/utilities.py
lrwxrwxrwx root/root /usr/lib/python2.7/dist-packages/getmail-4.46.0.egg-info -> ../../../share/pyshared/getmail-4.46.0.egg-info
lrwxrwxrwx root/root /usr/lib/python2.7/dist-packages/getmailcore/__init__.py -> ../../../../share/pyshared/getmailcore/__init__.py
lrwxrwxrwx root/root /usr/lib/python2.7/dist-packages/getmailcore/_pop3ssl.py -> ../../../../share/pyshared/getmailcore/_pop3ssl.py
lrwxrwxrwx root/root /usr/lib/python2.7/dist-packages/getmailcore/_retrieverbases.py -> ../../../../share/pyshared/getmailcore/_retrieverbases.py
lrwxrwxrwx root/root /usr/lib/python2.7/dist-packages/getmailcore/baseclasses.py -> ../../../../share/pyshared/getmailcore/baseclasses.py
lrwxrwxrwx root/root /usr/lib/python2.7/dist-packages/getmailcore/compatibility.py -> ../../../../share/pyshared/getmailcore/compatibility.py
lrwxrwxrwx root/root /usr/lib/python2.7/dist-packages/getmailcore/constants.py -> ../../../../share/pyshared/getmailcore/constants.py
lrwxrwxrwx root/root /usr/lib/python2.7/dist-packages/getmailcore/destinations.py -> ../../../../share/pyshared/getmailcore/destinations.py
lrwxrwxrwx root/root /usr/lib/python2.7/dist-packages/getmailcore/exceptions.py -> ../../../../share/pyshared/getmailcore/exceptions.py
lrwxrwxrwx root/root /usr/lib/python2.7/dist-packages/getmailcore/filters.py -> ../../../../share/pyshared/getmailcore/filters.py
lrwxrwxrwx root/root /usr/lib/python2.7/dist-packages/getmailcore/imap_utf7.py -> ../../../../share/pyshared/getmailcore/imap_utf7.py
lrwxrwxrwx root/root /usr/lib/python2.7/dist-packages/getmailcore/logging.py -> ../../../../share/pyshared/getmailcore/logging.py
lrwxrwxrwx root/root /usr/lib/python2.7/dist-packages/getmailcore/message.py -> ../../../../share/pyshared/getmailcore/message.py
lrwxrwxrwx root/root /usr/lib/python2.7/dist-packages/getmailcore/retrievers.py -> ../../../../share/pyshared/getmailcore/retrievers.py
lrwxrwxrwx root/root /usr/lib/python2.7/dist-packages/getmailcore/utilities.py -> ../../../../share/pyshared/getmailcore/utilities.py
Control files: lines which differ (wdiff format)
------------------------------------------------
Installed-Size: [-660-] {+651+}
Version: [-4.46.0-1-] {+4.46.0-1+debu8u1+}
diff -Nru getmail4-4.46.0/debian/changelog getmail4-4.46.0/debian/changelog
--- getmail4-4.46.0/debian/changelog 2014-04-22 23:55:54.000000000 +0900
+++ getmail4-4.46.0/debian/changelog 2015-06-02 23:08:33.000000000 +0900
@@ -1,3 +1,12 @@
+getmail4 (4.46.0-1+debu8u1) stable; urgency=low
+
+ * The Python 2.7.9 introduced a regression while addressing
+ CVE-2013-1752 with poplib._MAXLINE=2048 which causes problem
+ for some HTML mails etc.. This fix sets poplib._MAXLINE=1MB
+ as in the getmail 4.48.0. Closes: #782614
+
+ -- Osamu Aoki <osamu@debian.org> Tue, 02 Jun 2015 22:09:03 +0900
+
getmail4 (4.46.0-1) unstable; urgency=medium
* New upstream release. Closes: #745484
diff -Nru getmail4-4.46.0/debian/patches/0001-poplib._MAXLINE-1MB.patch getmail4-4.46.0/debian/patches/0001-poplib._MAXLINE-1MB.patch
--- getmail4-4.46.0/debian/patches/0001-poplib._MAXLINE-1MB.patch 1970-01-01 09:00:00.000000000 +0900
+++ getmail4-4.46.0/debian/patches/0001-poplib._MAXLINE-1MB.patch 2015-06-02 23:10:25.000000000 +0900
@@ -0,0 +1,28 @@
+From: Osamu Aoki <osamu@debian.org>
+Date: Tue, 2 Jun 2015 23:09:07 +0900
+Subject: poplib._MAXLINE=1MB
+
+---
+ getmailcore/_retrieverbases.py | 9 +++++++++
+ 1 file changed, 9 insertions(+)
+
+diff --git a/getmailcore/_retrieverbases.py b/getmailcore/_retrieverbases.py
+index 581be54..36c7115 100755
+--- a/getmailcore/_retrieverbases.py
++++ b/getmailcore/_retrieverbases.py
+@@ -233,6 +233,15 @@ EAI_FAIL = getattr(socket, 'EAI_FAIL', NO_OBJ)
+ # Constant for POPSSL
+ POP3_SSL_PORT = 995
+
++
++# Python added poplib._MAXLINE somewhere along the way. As far as I can
++# see, it serves no purpose except to introduce bugs into any software
++# using poplib. Any computer running Python will have at least some megabytes
++# of userspace memory; arbitrarily causing message retrieval to break if any
++# "line" exceeds 2048 bytes is absolutely stupid.
++poplib._MAXLINE = 1 << 20 # 1MB; decrease this if you're running on a VIC-20
++
++
+ #
+ # Mix-in classes
+ #
diff -Nru getmail4-4.46.0/debian/patches/series getmail4-4.46.0/debian/patches/series
--- getmail4-4.46.0/debian/patches/series 2013-08-02 22:13:48.000000000 +0900
+++ getmail4-4.46.0/debian/patches/series 2015-06-02 23:11:30.000000000 +0900
@@ -1 +1,2 @@
+0001-poplib._MAXLINE-1MB.patch
#0003-IMAP-Exchange2003.patch
Reply to: