Compare commits
No commits in common. "de70261ab0a459285d13a84dbc91507d6a1d3bfc" and "70014dbf9706e4da187d117f3bfbed1fadeb9be0" have entirely different histories.
de70261ab0
...
70014dbf97
@ -1,26 +0,0 @@
|
|||||||
From fb33cc3bc886eec21f56309346076069f0a2bcb5 Mon Sep 17 00:00:00 2001
|
|
||||||
From: Rob Dennis <robd@services-in.xr>
|
|
||||||
Date: Tue, 17 Jan 2023 14:35:53 -0500
|
|
||||||
Subject: [PATCH] #225 - changed 1 link in rest docs
|
|
||||||
|
|
||||||
- there's a _lot_ of references to voidspace and I felt unable to change all of them
|
|
||||||
---
|
|
||||||
docs/configobj.rst | 2 +-
|
|
||||||
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
||||||
|
|
||||||
diff --git a/docs/configobj.rst b/docs/configobj.rst
|
|
||||||
index c4bbc18..6477b7b 100644
|
|
||||||
--- a/docs/configobj.rst
|
|
||||||
+++ b/docs/configobj.rst
|
|
||||||
@@ -32,7 +32,7 @@
|
|
||||||
The best introduction to working with ConfigObj, including the powerful configuration validation system,
|
|
||||||
is the article:
|
|
||||||
|
|
||||||
- * `An Introduction to ConfigObj <http://www.voidspace.org.uk/python/articles/configobj.shtml>`_
|
|
||||||
+ * `An Introduction to ConfigObj <https://web.archive.org/web/20200503085339/http://www.voidspace.org.uk/python/articles/configobj.shtml>`_
|
|
||||||
|
|
||||||
|
|
||||||
Introduction
|
|
||||||
--
|
|
||||||
2.27.0
|
|
||||||
|
|
||||||
@ -1,51 +0,0 @@
|
|||||||
From a82ea8fb0338f2bd46cf627c4b763094448e6bd7 Mon Sep 17 00:00:00 2001
|
|
||||||
From: cdcadman <mythirty@gmail.com>
|
|
||||||
Date: Wed, 17 May 2023 03:57:08 -0700
|
|
||||||
Subject: [PATCH] Address CVE-2023-26112 ReDoS
|
|
||||||
|
|
||||||
---
|
|
||||||
src/configobj/validate.py | 2 +-
|
|
||||||
src/tests/test_validate_errors.py | 10 +++++++++-
|
|
||||||
2 files changed, 10 insertions(+), 2 deletions(-)
|
|
||||||
|
|
||||||
diff --git a/validate.py b/validate.py
|
|
||||||
index 9267a3f..98d879f 100644
|
|
||||||
--- a/validate.py
|
|
||||||
+++ b/validate.py
|
|
||||||
@@ -541,7 +541,7 @@ class Validator(object):
|
|
||||||
"""
|
|
||||||
|
|
||||||
# this regex does the initial parsing of the checks
|
|
||||||
- _func_re = re.compile(r'(.+?)\((.*)\)', re.DOTALL)
|
|
||||||
+ _func_re = re.compile(r'([^\(\)]+?)\((.*)\)', re.DOTALL)
|
|
||||||
|
|
||||||
# this regex takes apart keyword arguments
|
|
||||||
_key_arg = re.compile(r'^([a-zA-Z_][a-zA-Z0-9_]*)\s*=\s*(.*)$', re.DOTALL)
|
|
||||||
diff --git a/tests/test_validate_errors.py b/tests/test_validate_errors.py
|
|
||||||
index 399daa8..f7d6c27 100644
|
|
||||||
--- a/tests/test_validate_errors.py
|
|
||||||
+++ b/tests/test_validate_errors.py
|
|
||||||
@@ -3,7 +3,7 @@ import os
|
|
||||||
import pytest
|
|
||||||
|
|
||||||
from configobj import ConfigObj, get_extra_values, ParseError, NestingError
|
|
||||||
-from validate import Validator
|
|
||||||
+from validate import Validator, VdtUnknownCheckError
|
|
||||||
|
|
||||||
@pytest.fixture()
|
|
||||||
def thisdir():
|
|
||||||
@@ -77,3 +77,11 @@ def test_no_parent(tmpdir, specpath):
|
|
||||||
ini.write('[[haha]]')
|
|
||||||
with pytest.raises(NestingError):
|
|
||||||
conf = ConfigObj(str(ini), configspec=specpath, file_error=True)
|
|
||||||
+
|
|
||||||
+
|
|
||||||
+def test_re_dos(val):
|
|
||||||
+ value = "aaa"
|
|
||||||
+ i = 165100
|
|
||||||
+ attack = '\x00'*i + ')' + '('*i
|
|
||||||
+ with pytest.raises(VdtUnknownCheckError):
|
|
||||||
+ val.check(attack, value)
|
|
||||||
--
|
|
||||||
2.40.1
|
|
||||||
|
|
||||||
@ -2,16 +2,13 @@
|
|||||||
|
|
||||||
Name: python-configobj
|
Name: python-configobj
|
||||||
Version: 5.0.6
|
Version: 5.0.6
|
||||||
Release: 20
|
Release: 16
|
||||||
Summary: ConfigObj is a simple but powerful config file reader and writer
|
Summary: ConfigObj is a simple but powerful config file reader and writer
|
||||||
License: BSD
|
License: BSD
|
||||||
URL: http://configobj.readthedocs.org/
|
URL: http://configobj.readthedocs.org/
|
||||||
Source0: https://github.com/DiffSK/configobj/archive/v%{version}.tar.gz
|
Source0: https://github.com/DiffSK/configobj/archive/v%{version}.tar.gz
|
||||||
|
|
||||||
Patch0: 0001-changed-1-link-in-rest-docs.patch
|
BuildRequires:python3-devel python3-pytest python3-setuptools python3-six git
|
||||||
Patch1: 0002-Address-CVE-2023-26112-ReDoS.patch
|
|
||||||
|
|
||||||
BuildRequires:python3-devel python3-pytest python3-setuptools python3-six
|
|
||||||
BuildArch: noarch
|
BuildArch: noarch
|
||||||
|
|
||||||
%description
|
%description
|
||||||
@ -41,7 +38,7 @@ Requires: python3-six
|
|||||||
config file reader and writer
|
config file reader and writer
|
||||||
|
|
||||||
%prep
|
%prep
|
||||||
%autosetup -n configobj-%{version} -p1
|
%autosetup -n configobj-%{version} -p1 -Sgit
|
||||||
|
|
||||||
%build
|
%build
|
||||||
%py3_build
|
%py3_build
|
||||||
@ -59,18 +56,6 @@ export PYTHONWARNINGS=always
|
|||||||
%{python3_sitelib}/*
|
%{python3_sitelib}/*
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
* Sat Sep 14 2024 Wangmian <wangmian19@h-partners.com> - 5.0.6-20
|
|
||||||
- fix CVE-2023-26112 from fedora
|
|
||||||
|
|
||||||
* Mon May 8 2023 Jiangtian Feng <fengjiangtian@huawei.com> - 5.0.6-19
|
|
||||||
- update the introduction web link
|
|
||||||
|
|
||||||
* Fri Oct 21 2022 liubo <liubo254@huawei.com> - 5.0.6-18
|
|
||||||
- rebuild the version to 5.0.6-18
|
|
||||||
|
|
||||||
* Fri Jul 30 2021 chenyanpanHW <chenyanpan@huawei.com> - 5.0.6-17
|
|
||||||
- DESC: delete -Sgit from %autosetup, and delete BuildRequires git
|
|
||||||
|
|
||||||
* Fri Oct 30 2020 yanglongkang <yanglongkang@huawei.com> - 5.0.6-16
|
* Fri Oct 30 2020 yanglongkang <yanglongkang@huawei.com> - 5.0.6-16
|
||||||
- remove python2 dependency
|
- remove python2 dependency
|
||||||
|
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user