X-Original-To: alpine-aports@lists.alpinelinux.org Received: from mail-lf0-f43.google.com (mail-lf0-f43.google.com [209.85.215.43]) by lists.alpinelinux.org (Postfix) with ESMTP id 502235C4166 for ; Thu, 12 Jan 2017 07:40:12 +0000 (GMT) Received: by mail-lf0-f43.google.com with SMTP id z134so3782304lff.3 for ; Wed, 11 Jan 2017 23:40:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=T/Cre+Wu0lOhJD5XEdOEKGmkoDT3wI9o0YQIcHjCsHE=; b=lCfssRIRIg2iT/XeuHEhc9mM0OqpDGb7kRBG9fiDR3/ZU4NCUFpxNVvYxiySPOMrd8 g0ZgEffPlCXJcAjqR745AxtaYLQqI/QwrYhKAYckMRfeFTxRHREUzyCTTN8xxX7e8xWE hWPuNWQTWni3usbZNEi1W7pX+TxJOd1qUfI4UT5WPvC/aQEQmN1z7A/ZoApnifvmDKhW 9X8FdpaYtsO8USpvuXXIN6yMiNK17bt7W+d3U+Dj/GDUl4HlK9Q2lxEUfnfsSBZjT2PY hgpyb42L595QQYiqARg4EisaY6oXg4sROV1gvKrM8poD2iUDTDvsO7AwgQ1qUnTlKf6J OyHw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=T/Cre+Wu0lOhJD5XEdOEKGmkoDT3wI9o0YQIcHjCsHE=; b=nsvJaa0yA4xwm7CA127QPCTMBkpe5hdPYIYM/uFJcqEEeBXNn2vNVmQU2QQKAIf1Hl hUXFbgLkF4V//jGl56t5+zgO7IbNyqtaEMzyBmvITnYxg40MidFOyQa8YgGlW0ukXeip HGKfUJxgmBy1oQ/O8wqxYTb5fizPr+LZALhHiyZM9AfAi420df2OPqTk4+CkCmGsWCBX GyC35/WJL06Sx7RADtNz/58LjWAAfNYRq/zFGR6yOQuP4thXIQDliRgkXGXXz+8VUtx6 IS851JHLr7L5aOt8LVx8ApaTVf71+QDka+bVf3N1tGkL9+ZuluxUfTX+rgAwtkYtxKAh sE6A== X-Gm-Message-State: AIkVDXK8k2Ap0lbf5OVhrj3dAfoIbvZyKbKc3jrBsSpGgG5dn42bAc5JecGHdyTIBRc+Zg== X-Received: by 10.25.195.76 with SMTP id t73mr3879434lff.40.1484206811142; Wed, 11 Jan 2017 23:40:11 -0800 (PST) Received: from v3-5.util.wtbts.net ([83.145.235.199]) by smtp.gmail.com with ESMTPSA id f25sm2095467lji.26.2017.01.11.23.40.09 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 11 Jan 2017 23:40:10 -0800 (PST) From: Sergei Lukin To: alpine-aports@lists.alpinelinux.org Cc: Sergei Lukin Subject: [alpine-aports] [PATCH v3.5] main/php5-phpmailer: security fixes #6623 Date: Thu, 12 Jan 2017 07:40:00 +0000 Message-Id: <20170112074000.877-1-sergej.lukin@gmail.com> X-Mailer: git-send-email 2.11.0 X-Mailinglist: alpine-aports Precedence: list List-Id: Alpine Development List-Unsubscribe: List-Post: List-Help: List-Subscribe: MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Q1ZFLTIwMTYtMTAwMzMNCkNWRS0yMDE2LTEwMDQ1DQoNCklzc3VlcyB3ZXJlIGZpeGVkIGluIDUu Mi4xOCBhbmQgNS4yLjIwDQpIb3dldmVyLCB0aGVyZSB3ZXJlIG1ham9yIGNoYW5nZXMgYmV0d2Vl biA1LjIuNCBhbmQgNS4yLjIwDQpodHRwczovL2dpdGh1Yi5jb20vUEhQTWFpbGVyL1BIUE1haWxl ci9ibG9iL21hc3Rlci9jaGFuZ2Vsb2cubWQNCg0KVGhpcyB1cGdyYWRlIGNvbnRhaW5zIHBhdGNo IHdoaWNoIGlzIGJhc2VkIG9uIDIgY29tbWl0cw0KY29udGFpbmluZyBmaXggZm9yIENWRS0yMDE2 LTEwMDQ1IGFuZCBDVkUtMjAxNi0xMDAzMzoNCmh0dHBzOi8vZ2l0aHViLmNvbS9QSFBNYWlsZXIv UEhQTWFpbGVyL2NvbW1pdC85NzQzZmY1YzdlZTE2ZThkNDkxODdiZDJlMTExNDlhZmI5NDg1ZWFl DQpodHRwczovL2dpdGh1Yi5jb20vUEhQTWFpbGVyL1BIUE1haWxlci9jb21taXQvODMzYzM1ZmUz OTcxNWMzZDAxOTM0NTA4OTg3ZTk3YWYxZmJjMWJhMA0KQ29tbWl0cyB3ZXJlIGFkanVzdGVkIHRv IDUuMi40DQotLS0NCiBtYWluL3BocDUtcGhwbWFpbGVyL0FQS0JVSUxEICAgICAgICAgICAgICAg ICAgICAgICB8IDIyICsrKysrLS0NCiAuLi4vQ1ZFLTIwMTYtMTAwMzMsQ1ZFLTIwMTYtMTAwNDUu cGF0Y2ggICAgICAgICAgICB8IDcxICsrKysrKysrKysrKysrKysrKysrKysNCiAyIGZpbGVzIGNo YW5nZWQsIDg3IGluc2VydGlvbnMoKyksIDYgZGVsZXRpb25zKC0pDQogY3JlYXRlIG1vZGUgMTAw NjQ0IG1haW4vcGhwNS1waHBtYWlsZXIvQ1ZFLTIwMTYtMTAwMzMsQ1ZFLTIwMTYtMTAwNDUucGF0 Y2gNCg0KZGlmZiAtLWdpdCBhL21haW4vcGhwNS1waHBtYWlsZXIvQVBLQlVJTEQgYi9tYWluL3Bo cDUtcGhwbWFpbGVyL0FQS0JVSUxEDQppbmRleCBmNDI2NzY4ZTg0Li4xMmEzMDU5ODY1IDEwMDY0 NA0KLS0tIGEvbWFpbi9waHA1LXBocG1haWxlci9BUEtCVUlMRA0KKysrIGIvbWFpbi9waHA1LXBo cG1haWxlci9BUEtCVUlMRA0KQEAgLTEsMTAgKzEsMTEgQEANCisjIENvbnRyaWJ1dG9yOiBTZXJn ZWkgTHVraW4gPHNlcmdlai5sdWtpbkBnbWFpbC5jb20+DQogIyBDb250cmlidXRvcjogVGltbyBU ZXLDpHMgPHRpbW8udGVyYXNAaWtpLmZpPg0KICMgTWFpbnRhaW5lcjogIFRpbW8gVGVyw6RzIDx0 aW1vLnRlcmFzQGlraS5maT4NCiBfcGhwPXBocDUNCiBwa2duYW1lPSR7X3BocH0tcGhwbWFpbGVy DQogX3BrZ25hbWU9UEhQTWFpbGVyDQogcGtndmVyPTUuMi40DQotcGtncmVsPTANCitwa2dyZWw9 MQ0KIHBrZ2Rlc2M9IlBIUCBjbGFzcyBmb3IgU01UUCBtYWlsaW5nIg0KIHVybD0iaHR0cDovL2Nv ZGUuZ29vZ2xlLmNvbS9hL2FwYWNoZS1leHRyYXMub3JnL3AvcGhwbWFpbGVyLyINCiBhcmNoPSJu b2FyY2giDQpAQCAtMTQsOSArMTUsMTUgQEAgZGVwZW5kc19kZXY9DQogbWFrZWRlcGVuZHM9IiRk ZXBlbmRzX2RldiINCiBpbnN0YWxsPSIiDQogc3VicGFja2FnZXM9IiINCi1zb3VyY2U9Imh0dHBz Oi8vc3RvcmFnZS5nb29nbGVhcGlzLmNvbS9nb29nbGUtY29kZS1hcmNoaXZlLWRvd25sb2Fkcy92 Mi9hcGFjaGUtZXh0cmFzLm9yZy9waHBtYWlsZXIvJHtfcGtnbmFtZX1fJHtwa2d2ZXJ9LnRneiIN Citzb3VyY2U9IiR7X3BrZ25hbWV9LSR7cGtndmVyfS50YXIuZ3o6Omh0dHBzOi8vZ2l0aHViLmNv bS9QSFBNYWlsZXIvUEhQTWFpbGVyL2FyY2hpdmUvdiR7cGtndmVyfS50YXIuZ3oNCisJQ1ZFLTIw MTYtMTAwMzMsQ1ZFLTIwMTYtMTAwNDUucGF0Y2gNCisJIg0KKyMgc2VjZml4ZXM6DQorIyAgIDUu Mi40LXIxOg0KKyMgICAgIC0gQ1ZFLTIwMTYtMTAwMzMNCisjICAgICAtIENWRS0yMDE2LTEwMDQ1 DQogDQotYnVpbGRkaXI9IiRzcmNkaXIvJHtfcGtnbmFtZX1fJHBrZ3ZlciINCitidWlsZGRpcj0i JHNyY2Rpci8ke19wa2duYW1lfS0kcGtndmVyIg0KIGJ1aWxkKCkgew0KIAljZCAiJGJ1aWxkZGly Ig0KIH0NCkBAIC0yNyw2ICszNCw5IEBAIHBhY2thZ2UoKSB7DQogCWluc3RhbGwgLUQgLW02NDQg IiRidWlsZGRpciIvY2xhc3MuKi5waHAgIiRwa2dkaXIiL3Vzci9zaGFyZS9wZWFyIHx8IHJldHVy biAxDQogfQ0KIA0KLW1kNXN1bXM9ImM5OTBkYjBkMDg1OTU5OWVhZmE0MzM4Y2U5MDE1NGE3ICBQ SFBNYWlsZXJfNS4yLjQudGd6Ig0KLXNoYTI1NnN1bXM9IjgwNWU0MTRkYWY1NmE4YmRhNDQzYzBl MGMyMDljNWNjMjlhM2ZjYjBjNTViMzY0NTBlNWI0NjM1YzA5OTFkZDggIFBIUE1haWxlcl81LjIu NC50Z3oiDQotc2hhNTEyc3Vtcz0iYzViYmFjM2Q2MGRiODMwNTJhNzY0NzRiNWU3Yzk3NWZhNmFh YTBiZjE1N2ZiYTIxYjRjMzgyYTY0NWQxMTNiY2RhNWQ4MjE0ZTA4YTg0NDkwNGQwZjZlOTljZjMy NGRhZTU3OTZiYjhkMWRlMjk4NTI1OTFkMjM0NzFkMDQzNmEgIFBIUE1haWxlcl81LjIuNC50Z3oi DQorbWQ1c3Vtcz0iZGJlMmQ4ZTEwZTRhOTgxMTg3ZTRlYTFhZmE0YjY2ZDEgIFBIUE1haWxlci01 LjIuNC50YXIuZ3oNCitkN2NlYjkwMjE3YTQ1OGYwMGNhNWQ5NzExNzFkY2IwNSAgQ1ZFLTIwMTYt MTAwMzMsQ1ZFLTIwMTYtMTAwNDUucGF0Y2giDQorc2hhMjU2c3Vtcz0iNmZiYzM3ZmVjNDlmM2Uy NjIxNjMzZjE0NDFlZTZmNmU2ZDk3NTA0NTlmZWZlNzlhZTc1ZGY5OGRhOWJhMjVlNyAgUEhQTWFp bGVyLTUuMi40LnRhci5neg0KK2M4ZDk4NGE0ZGQ4YTExZGQyODZhOGQ2YjNhMWNhNGJkMDU4MTM3 NzE5ZmZkODFjZWRiOWRmYzkxMDZiZDhiM2IgIENWRS0yMDE2LTEwMDMzLENWRS0yMDE2LTEwMDQ1 LnBhdGNoIg0KK3NoYTUxMnN1bXM9Ijg0ZjNmOTg0YmY5YzQ2M2M2YjI4ZmUxNmM2MjhlZTMxZTEw NGZmNTYxNzRmZjVkZTA3ZDUyMDA4M2U0N2NlYzdjMGQ2YjI0MDk1ZmE5NTJhZjFjMTExNmJlZDZi YTYyOTEyZDc4ZDlhZWY2N2YwMTcyMmI2OTdlNzVjYzQwZjY5ICBQSFBNYWlsZXItNS4yLjQudGFy Lmd6DQorNzlmNTc0MzIxYjU1YmQxZjNiNmUzYmJjMTdjZmJiZjA0MmU4MjUxMGYzNTRiNjYzZWIx ZDk0N2FjNTg1YjIzMjU2MmM0NTM2ZTIyN2M1ZjE4MzQxYjdhNGFmYjI3OGNmYWQ5MzE3YTM0ZmZi OGFiZGMzMTZlNTE5YzkwNDMwYWMgIENWRS0yMDE2LTEwMDMzLENWRS0yMDE2LTEwMDQ1LnBhdGNo Ig0KZGlmZiAtLWdpdCBhL21haW4vcGhwNS1waHBtYWlsZXIvQ1ZFLTIwMTYtMTAwMzMsQ1ZFLTIw MTYtMTAwNDUucGF0Y2ggYi9tYWluL3BocDUtcGhwbWFpbGVyL0NWRS0yMDE2LTEwMDMzLENWRS0y MDE2LTEwMDQ1LnBhdGNoDQpuZXcgZmlsZSBtb2RlIDEwMDY0NA0KaW5kZXggMDAwMDAwMDAwMC4u NGFkZTU3N2YyMA0KLS0tIC9kZXYvbnVsbA0KKysrIGIvbWFpbi9waHA1LXBocG1haWxlci9DVkUt MjAxNi0xMDAzMyxDVkUtMjAxNi0xMDA0NS5wYXRjaA0KQEAgLTAsMCArMSw3MSBAQA0KK1RoaXMg cGF0Y2ggaXMgYmFzZWQgb24gMiBjb21taXRzIGNvbnRhaW5pbmcgZml4IGZvciBDVkUtMjAxNi0x MDA0NSBhbmQgQ1ZFLTIwMTYtMTAwMzM6DQoraHR0cHM6Ly9naXRodWIuY29tL1BIUE1haWxlci9Q SFBNYWlsZXIvY29tbWl0Lzk3NDNmZjVjN2VlMTZlOGQ0OTE4N2JkMmUxMTE0OWFmYjk0ODVlYWUN CitodHRwczovL2dpdGh1Yi5jb20vUEhQTWFpbGVyL1BIUE1haWxlci9jb21taXQvODMzYzM1ZmUz OTcxNWMzZDAxOTM0NTA4OTg3ZTk3YWYxZmJjMWJhMA0KK3doaWNoIHdlcmUgYWRqdXN0ZWQgdG8g UEhQTWFpbGVyXzUuMi40IHNvdXJjZSBjb2RlDQorDQorZGlmZiAtcnUgUEhQTWFpbGVyXzUuMi40 L2NsYXNzLnBocG1haWxlci5waHAub3JpZyBQSFBNYWlsZXJfNS4yLjQvY2xhc3MucGhwbWFpbGVy LnBocA0KKy0tLSBQSFBNYWlsZXJfNS4yLjQvY2xhc3MucGhwbWFpbGVyLnBocC5vcmlnDQorKysr IFBIUE1haWxlcl81LjIuNC9jbGFzcy5waHBtYWlsZXIucGhwDQorQEAgLTg2MSw2ICs4NjEsMzgg QEANCisgICB9DQorIA0KKyAgIC8qKg0KKysgICAqIEZpeCBDVkUtMjAxNi0xMDAzMyBhbmQgQ1ZF LTIwMTYtMTAwNDUgYnkgZGlzYWxsb3dpbmcgcG90ZW50aWFsbHkgdW5zYWZlIHNoZWxsIGNoYXJh Y3RlcnMuDQorKyAgICoNCisrICAgKiBOb3RlIHRoYXQgZXNjYXBlc2hlbGxhcmcgYW5kIGVzY2Fw ZXNoZWxsY21kIGFyZSBpbmFkZXF1YXRlIGZvciBvdXIgcHVycG9zZXMsIGVzcGVjaWFsbHkgb24g V2luZG93cy4NCisrICAgKiBAcGFyYW0gc3RyaW5nICRzdHJpbmcgVGhlIHN0cmluZyB0byBiZSB2 YWxpZGF0ZWQNCisrICAgKiBAc2VlIGh0dHBzOi8vZ2l0aHViLmNvbS9QSFBNYWlsZXIvUEhQTWFp bGVyL2lzc3Vlcy85MjQgQ1ZFLTIwMTYtMTAwNDUgYnVnIHJlcG9ydA0KKysgICAqIEBhY2Nlc3Mg cHJvdGVjdGVkDQorKyAgICogQHJldHVybiBib29sZWFuDQorKyAgICovDQorKyAgcHJvdGVjdGVk IHN0YXRpYyBmdW5jdGlvbiBpc1NoZWxsU2FmZSgkc3RyaW5nKQ0KKysgIHsNCisrICAgICAgLy8g RnV0dXJlLXByb29mDQorKyAgICAgIGlmIChlc2NhcGVzaGVsbGNtZCgkc3RyaW5nKSAhPT0gJHN0 cmluZyBvciAhaW5fYXJyYXkoZXNjYXBlc2hlbGxhcmcoJHN0cmluZyksIGFycmF5KCInJHN0cmlu ZyciLCAiXCIkc3RyaW5nXCIiKSkpIHsNCisrICAgICAgICAgIHJldHVybiBmYWxzZTsNCisrICAg ICAgfQ0KKysNCisrICAgICAgJGxlbmd0aCA9IHN0cmxlbigkc3RyaW5nKTsNCisrDQorKyAgICAg IGZvciAoJGkgPSAwOyAkaSA8ICRsZW5ndGg7ICRpKyspIHsNCisrICAgICAgICAgICRjID0gJHN0 cmluZ1skaV07DQorKw0KKysgICAgICAgICAgLy8gQWxsIG90aGVyIGNoYXJhY3RlcnMgaGF2ZSBh IHNwZWNpYWwgbWVhbmluZyBpbiBhdCBsZWFzdCBvbmUgY29tbW9uIHNoZWxsLCBpbmNsdWRpbmcg PSBhbmQgKy4NCisrICAgICAgICAgIC8vIEZ1bGwgc3RvcCAoLikgaGFzIGEgc3BlY2lhbCBtZWFu aW5nIGluIGNtZC5leGUsIGJ1dCBpdHMgaW1wYWN0IHNob3VsZCBiZSBuZWdsaWdpYmxlIGhlcmUu DQorKyAgICAgICAgICAvLyBOb3RlIHRoYXQgdGhpcyBkb2VzIHBlcm1pdCBub24tTGF0aW4gYWxw aGFudW1lcmljIGNoYXJhY3RlcnMgYmFzZWQgb24gdGhlIGN1cnJlbnQgbG9jYWxlLg0KKysgICAg ICAgICAgaWYgKCFjdHlwZV9hbG51bSgkYykgJiYgc3RycG9zKCdAXy0uJywgJGMpID09PSBmYWxz ZSkgew0KKysgICAgICAgICAgICAgIHJldHVybiBmYWxzZTsNCisrICAgICAgICAgIH0NCisrICAg ICAgfQ0KKysNCisrICAgICAgcmV0dXJuIHRydWU7DQorKyAgfQ0KKysNCisrICAvKioNCisgICAg KiBTZW5kcyBtYWlsIHVzaW5nIHRoZSAkU2VuZG1haWwgcHJvZ3JhbS4NCisgICAgKiBAcGFyYW0g c3RyaW5nICRoZWFkZXIgVGhlIG1lc3NhZ2UgaGVhZGVycw0KKyAgICAqIEBwYXJhbSBzdHJpbmcg JGJvZHkgVGhlIG1lc3NhZ2UgYm9keQ0KK0BAIC04NjksOCArOTAxLDEwIEBADQorICAgICogQHJl dHVybiBib29sDQorICAgICovDQorICAgcHJvdGVjdGVkIGZ1bmN0aW9uIFNlbmRtYWlsU2VuZCgk aGVhZGVyLCAkYm9keSkgew0KKy0gICAgaWYgKCR0aGlzLT5TZW5kZXIgIT0gJycpIHsNCistICAg ICAgJHNlbmRtYWlsID0gc3ByaW50ZigiJXMgLW9pIC1mJXMgLXQiLCBlc2NhcGVzaGVsbGNtZCgk dGhpcy0+U2VuZG1haWwpLCBlc2NhcGVzaGVsbGFyZygkdGhpcy0+U2VuZGVyKSk7DQorKyAgICAv LyBDVkUtMjAxNi0xMDAzMywgQ1ZFLTIwMTYtMTAwNDU6IERvbid0IHBhc3MgLWYgaWYgY2hhcmFj dGVycyB3aWxsIGJlIGVzY2FwZWQuDQorKyAgICBpZiAoIWVtcHR5KCR0aGlzLT5TZW5kZXIpIGFu ZCBzZWxmOjppc1NoZWxsU2FmZSgkdGhpcy0+U2VuZGVyKSkgew0KKysgICAgICAvLyBUT0RPOiBJ ZiBwb3NzaWJsZSwgdGhpcyBzaG91bGQgYmUgY2hhbmdlZCB0byBlc2NhcGVzaGVsbGFyZy4gIE5l ZWRzIHRob3JvdWdoIHRlc3RpbmcuDQorKyAgICAgICRzZW5kbWFpbCA9IHNwcmludGYoIiVzIC1v aSAtZiVzIC10IiwgZXNjYXBlc2hlbGxjbWQoJHRoaXMtPlNlbmRtYWlsKSwgJHRoaXMtPlNlbmRl cik7DQorICAgICB9IGVsc2Ugew0KKyAgICAgICAkc2VuZG1haWwgPSBzcHJpbnRmKCIlcyAtb2kg LXQiLCBlc2NhcGVzaGVsbGNtZCgkdGhpcy0+U2VuZG1haWwpKTsNCisgICAgIH0NCitAQCAtOTI1 LDcgKzk1OSw5IEBADQorICAgICBpZiAoZW1wdHkoJHRoaXMtPlNlbmRlcikpIHsNCisgICAgICAg JHBhcmFtcyA9ICItb2kgIjsNCisgICAgIH0gZWxzZSB7DQorLSAgICAgICRwYXJhbXMgPSBzcHJp bnRmKCItb2kgLWYlcyIsICR0aGlzLT5TZW5kZXIpOw0KKysgICAgICBpZiAoc2VsZjo6aXNTaGVs bFNhZmUoJHRoaXMtPlNlbmRlcikpIHsNCisrICAgICAgICAkcGFyYW1zID0gc3ByaW50ZigiLW9p IC1mJXMiLCAkdGhpcy0+U2VuZGVyKTsNCisrICAgICAgfQ0KKyAgICAgfQ0KKyAgICAgaWYgKCR0 aGlzLT5TZW5kZXIgIT0gJycgYW5kICFpbmlfZ2V0KCdzYWZlX21vZGUnKSkgew0KKyAgICAgICAk b2xkX2Zyb20gPSBpbmlfZ2V0KCdzZW5kbWFpbF9mcm9tJyk7DQotLSANCjIuMTEuMA0KDQoNCg0K LS0tDQpVbnN1YnNjcmliZTogIGFscGluZS1hcG9ydHMrdW5zdWJzY3JpYmVAbGlzdHMuYWxwaW5l bGludXgub3JnDQpIZWxwOiAgICAgICAgIGFscGluZS1hcG9ydHMraGVscEBsaXN0cy5hbHBpbmVs aW51eC5vcmcNCi0tLQ0K