Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 727310 - mail-mta/exim-4.94 pam expansion condition fails on tainted data
Summary: mail-mta/exim-4.94 pam expansion condition fails on tainted data
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Fabian Groffen
URL:
Whiteboard:
Keywords:
: 727564 (view as bug list)
Depends on:
Blocks:
 
Reported: 2020-06-06 13:56 UTC by Thomas Stein
Modified: 2020-06-08 18:59 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Thomas Stein 2020-06-06 13:56:00 UTC 
Hello Devs.

With exim 4.94 it's not possible anymore to do pam authentication.

https://bugs.exim.org/show_bug.cgi?id=2587



Reproducible: Always
Comment 1 Fabian Groffen gentoo-dev 2020-06-08 08:04:53 UTC 
shame I didn't see this sooner
Comment 2 Larry the Git Cow gentoo-dev 2020-06-08 08:06:15 UTC 
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6a18f75bc0b98b1bc66844c82d5eee10eac9dfd7

commit 6a18f75bc0b98b1bc66844c82d5eee10eac9dfd7
Author:     Fabian Groffen <grobian@gentoo.org>
AuthorDate: 2020-06-08 08:05:57 +0000
Commit:     Fabian Groffen <grobian@gentoo.org>
CommitDate: 2020-06-08 08:06:10 +0000

    mail-mta/exim-4.94-r1: fix PAM expansion, bug #727310
    
    Closes: https://bugs.gentoo.org/727310
    Package-Manager: Portage-2.3.99, Repoman-2.3.22
    Signed-off-by: Fabian Groffen <grobian@gentoo.org>

 .../exim/{exim-4.94.ebuild => exim-4.94-r1.ebuild} |  1 +
 .../exim/files/exim-4.94-taint-pam-expansion.patch | 35 ++++++++++++++++++++++
 2 files changed, 36 insertions(+)
Comment 3 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-06-08 18:59:25 UTC 
*** Bug 727564 has been marked as a duplicate of this bug. ***