!2 fix CVE-2021-32838

From: @programmer12
Reviewed-by: @myeuler
Signed-off-by: @myeuler
This commit is contained in:
openeuler-ci-bot 2021-10-09 09:00:38 +00:00 committed by Gitee
commit fa52323009
2 changed files with 27 additions and 1 deletions

22
CVE-2021-32838.patch Normal file
View File

@ -0,0 +1,22 @@
From bab31e085f355dd73858fd3715f7ed71849656da Mon Sep 17 00:00:00 2001
From: ziirish <ziirish@ziirish.info>
Date: Wed, 1 Sep 2021 21:53:02 +0200
Subject: [PATCH] optimize email regex (credits: @kevinbackhouse, fix: #372)
---
flask_restx/inputs.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/flask_restx/inputs.py b/flask_restx/inputs.py
index b05532f3..9c76d8a0 100644
--- a/flask_restx/inputs.py
+++ b/flask_restx/inputs.py
@@ -48,7 +48,7 @@ def my_type(value):
email_regex = re.compile(
- r"^" "(?P<local>[^@]*[^@.])" r"@" r"(?P<server>[^@]+(?:\.[^@]+)*)" r"$",
+ r"^" "(?P<local>[^@]*[^@.])" r"@" r"(?P<server>[^@\.]+(?:\.[^@\.]+)*)" r"$",
re.IGNORECASE,
)

View File

@ -1,11 +1,12 @@
%global _empty_manifest_terminate_build 0 %global _empty_manifest_terminate_build 0
Name: python-flask-restx Name: python-flask-restx
Version: 0.2.0 Version: 0.2.0
Release: 1 Release: 2
Summary: Fully featured framework for fast, easy and documented API development with Flask Summary: Fully featured framework for fast, easy and documented API development with Flask
License: BSD-3-Clause License: BSD-3-Clause
URL: https://github.com/python-restx/flask-restx URL: https://github.com/python-restx/flask-restx
Source0: https://files.pythonhosted.org/packages/5f/6e/f71db883f6228e09e7e8c7bf5f1068c0a853db992bcaebd105005b70c959/flask-restx-%{version}.tar.gz Source0: https://files.pythonhosted.org/packages/5f/6e/f71db883f6228e09e7e8c7bf5f1068c0a853db992bcaebd105005b70c959/flask-restx-%{version}.tar.gz
Patch1: CVE-2021-32838.patch
BuildArch: noarch BuildArch: noarch
Requires: python3-aniso8601 Requires: python3-aniso8601
@ -73,5 +74,8 @@ mv %{buildroot}/doclist.lst .
%{_pkgdocdir} %{_pkgdocdir}
%changelog %changelog
* Sat Oct 9 2021 liwu <liwu13@huawei.com> - 0.2.0-2
* Fix CVE-2021-32838
* Mon Jun 22 2020 Python_Bot <Python_Bot@openeuler.org> * Mon Jun 22 2020 Python_Bot <Python_Bot@openeuler.org>
- Package Spec generated - Package Spec generated