[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#787423: jessie-pu: package getmail4/4.46.0-1+debu8u1 with debdiff



Hi,

My first report was a more-or-less pre-apoproval request.

Now that I made a package under ithe jessie chroot, here are the debdiff
for dsc and changes files.  Please note we have only 1 version of python
2.7 making build result different in the binary package.  This is
essentially one line addition.

+poplib._MAXLINE = 1 << 20   # 1MB; decrease this if you're running on a VIC-20

See attached debdiff.

> -- 
> 787423: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787423
> Debian Bug Tracking System
> Contact owner@bugs.debian.org with problems
[The following lists of changes regard files as different if they have
different names, permissions or owners.]

Files in second .changes but not in first
-----------------------------------------
-rw-r--r--  root/root   /usr/lib/python2.7/dist-packages/getmail-4.46.0.egg-info
-rw-r--r--  root/root   /usr/lib/python2.7/dist-packages/getmailcore/__init__.py
-rw-r--r--  root/root   /usr/lib/python2.7/dist-packages/getmailcore/_pop3ssl.py
-rw-r--r--  root/root   /usr/lib/python2.7/dist-packages/getmailcore/_retrieverbases.py
-rw-r--r--  root/root   /usr/lib/python2.7/dist-packages/getmailcore/baseclasses.py
-rw-r--r--  root/root   /usr/lib/python2.7/dist-packages/getmailcore/compatibility.py
-rw-r--r--  root/root   /usr/lib/python2.7/dist-packages/getmailcore/constants.py
-rw-r--r--  root/root   /usr/lib/python2.7/dist-packages/getmailcore/destinations.py
-rw-r--r--  root/root   /usr/lib/python2.7/dist-packages/getmailcore/exceptions.py
-rw-r--r--  root/root   /usr/lib/python2.7/dist-packages/getmailcore/filters.py
-rw-r--r--  root/root   /usr/lib/python2.7/dist-packages/getmailcore/imap_utf7.py
-rw-r--r--  root/root   /usr/lib/python2.7/dist-packages/getmailcore/logging.py
-rw-r--r--  root/root   /usr/lib/python2.7/dist-packages/getmailcore/message.py
-rw-r--r--  root/root   /usr/lib/python2.7/dist-packages/getmailcore/retrievers.py
-rw-r--r--  root/root   /usr/lib/python2.7/dist-packages/getmailcore/utilities.py

Files in first .changes but not in second
-----------------------------------------
-rw-r--r--  root/root   /usr/share/pyshared/getmail-4.46.0.egg-info
-rw-r--r--  root/root   /usr/share/pyshared/getmailcore/__init__.py
-rw-r--r--  root/root   /usr/share/pyshared/getmailcore/_pop3ssl.py
-rw-r--r--  root/root   /usr/share/pyshared/getmailcore/_retrieverbases.py
-rw-r--r--  root/root   /usr/share/pyshared/getmailcore/baseclasses.py
-rw-r--r--  root/root   /usr/share/pyshared/getmailcore/compatibility.py
-rw-r--r--  root/root   /usr/share/pyshared/getmailcore/constants.py
-rw-r--r--  root/root   /usr/share/pyshared/getmailcore/destinations.py
-rw-r--r--  root/root   /usr/share/pyshared/getmailcore/exceptions.py
-rw-r--r--  root/root   /usr/share/pyshared/getmailcore/filters.py
-rw-r--r--  root/root   /usr/share/pyshared/getmailcore/imap_utf7.py
-rw-r--r--  root/root   /usr/share/pyshared/getmailcore/logging.py
-rw-r--r--  root/root   /usr/share/pyshared/getmailcore/message.py
-rw-r--r--  root/root   /usr/share/pyshared/getmailcore/retrievers.py
-rw-r--r--  root/root   /usr/share/pyshared/getmailcore/utilities.py
lrwxrwxrwx  root/root   /usr/lib/python2.7/dist-packages/getmail-4.46.0.egg-info -> ../../../share/pyshared/getmail-4.46.0.egg-info
lrwxrwxrwx  root/root   /usr/lib/python2.7/dist-packages/getmailcore/__init__.py -> ../../../../share/pyshared/getmailcore/__init__.py
lrwxrwxrwx  root/root   /usr/lib/python2.7/dist-packages/getmailcore/_pop3ssl.py -> ../../../../share/pyshared/getmailcore/_pop3ssl.py
lrwxrwxrwx  root/root   /usr/lib/python2.7/dist-packages/getmailcore/_retrieverbases.py -> ../../../../share/pyshared/getmailcore/_retrieverbases.py
lrwxrwxrwx  root/root   /usr/lib/python2.7/dist-packages/getmailcore/baseclasses.py -> ../../../../share/pyshared/getmailcore/baseclasses.py
lrwxrwxrwx  root/root   /usr/lib/python2.7/dist-packages/getmailcore/compatibility.py -> ../../../../share/pyshared/getmailcore/compatibility.py
lrwxrwxrwx  root/root   /usr/lib/python2.7/dist-packages/getmailcore/constants.py -> ../../../../share/pyshared/getmailcore/constants.py
lrwxrwxrwx  root/root   /usr/lib/python2.7/dist-packages/getmailcore/destinations.py -> ../../../../share/pyshared/getmailcore/destinations.py
lrwxrwxrwx  root/root   /usr/lib/python2.7/dist-packages/getmailcore/exceptions.py -> ../../../../share/pyshared/getmailcore/exceptions.py
lrwxrwxrwx  root/root   /usr/lib/python2.7/dist-packages/getmailcore/filters.py -> ../../../../share/pyshared/getmailcore/filters.py
lrwxrwxrwx  root/root   /usr/lib/python2.7/dist-packages/getmailcore/imap_utf7.py -> ../../../../share/pyshared/getmailcore/imap_utf7.py
lrwxrwxrwx  root/root   /usr/lib/python2.7/dist-packages/getmailcore/logging.py -> ../../../../share/pyshared/getmailcore/logging.py
lrwxrwxrwx  root/root   /usr/lib/python2.7/dist-packages/getmailcore/message.py -> ../../../../share/pyshared/getmailcore/message.py
lrwxrwxrwx  root/root   /usr/lib/python2.7/dist-packages/getmailcore/retrievers.py -> ../../../../share/pyshared/getmailcore/retrievers.py
lrwxrwxrwx  root/root   /usr/lib/python2.7/dist-packages/getmailcore/utilities.py -> ../../../../share/pyshared/getmailcore/utilities.py

Control files: lines which differ (wdiff format)
------------------------------------------------
Installed-Size: [-660-] {+651+}
Version: [-4.46.0-1-] {+4.46.0-1+debu8u1+}
diff -Nru getmail4-4.46.0/debian/changelog getmail4-4.46.0/debian/changelog
--- getmail4-4.46.0/debian/changelog	2014-04-22 23:55:54.000000000 +0900
+++ getmail4-4.46.0/debian/changelog	2015-06-02 23:08:33.000000000 +0900
@@ -1,3 +1,12 @@
+getmail4 (4.46.0-1+debu8u1) stable; urgency=low
+
+  * The Python 2.7.9 introduced a regression while addressing
+    CVE-2013-1752 with poplib._MAXLINE=2048 which causes problem
+    for some HTML mails etc..  This fix sets poplib._MAXLINE=1MB
+    as in the getmail 4.48.0.  Closes: #782614
+
+ -- Osamu Aoki <osamu@debian.org>  Tue, 02 Jun 2015 22:09:03 +0900
+
 getmail4 (4.46.0-1) unstable; urgency=medium
 
   * New upstream release. Closes: #745484
diff -Nru getmail4-4.46.0/debian/patches/0001-poplib._MAXLINE-1MB.patch getmail4-4.46.0/debian/patches/0001-poplib._MAXLINE-1MB.patch
--- getmail4-4.46.0/debian/patches/0001-poplib._MAXLINE-1MB.patch	1970-01-01 09:00:00.000000000 +0900
+++ getmail4-4.46.0/debian/patches/0001-poplib._MAXLINE-1MB.patch	2015-06-02 23:10:25.000000000 +0900
@@ -0,0 +1,28 @@
+From: Osamu Aoki <osamu@debian.org>
+Date: Tue, 2 Jun 2015 23:09:07 +0900
+Subject: poplib._MAXLINE=1MB
+
+---
+ getmailcore/_retrieverbases.py | 9 +++++++++
+ 1 file changed, 9 insertions(+)
+
+diff --git a/getmailcore/_retrieverbases.py b/getmailcore/_retrieverbases.py
+index 581be54..36c7115 100755
+--- a/getmailcore/_retrieverbases.py
++++ b/getmailcore/_retrieverbases.py
+@@ -233,6 +233,15 @@ EAI_FAIL = getattr(socket, 'EAI_FAIL', NO_OBJ)
+ # Constant for POPSSL
+ POP3_SSL_PORT = 995
+ 
++
++# Python added poplib._MAXLINE somewhere along the way.  As far as I can
++# see, it serves no purpose except to introduce bugs into any software
++# using poplib.  Any computer running Python will have at least some megabytes
++# of userspace memory; arbitrarily causing message retrieval to break if any
++# "line" exceeds 2048 bytes is absolutely stupid.
++poplib._MAXLINE = 1 << 20   # 1MB; decrease this if you're running on a VIC-20
++
++
+ #
+ # Mix-in classes
+ #
diff -Nru getmail4-4.46.0/debian/patches/series getmail4-4.46.0/debian/patches/series
--- getmail4-4.46.0/debian/patches/series	2013-08-02 22:13:48.000000000 +0900
+++ getmail4-4.46.0/debian/patches/series	2015-06-02 23:11:30.000000000 +0900
@@ -1 +1,2 @@
+0001-poplib._MAXLINE-1MB.patch
 #0003-IMAP-Exchange2003.patch

Reply to: