Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug 1853138/Bug 1886954 - Switch to Email::Sender and Email::Address::XS #103

Merged
merged 9 commits into from
Mar 22, 2024

Conversation

mrenvoize
Copy link
Contributor

This patch updates us from using Email::Address to Email::Address::XS to resolve CVE-2015-7686.

Regex comparisons have been replaced by parse + is_valid calls as per current documentation.

Additional info

@mrenvoize
Copy link
Contributor Author

To not require Email::Address::XS independently, I've cherry-picked and rebased the patches migrating from Email::Send to Email::Sender into this branch.

@mrenvoize
Copy link
Contributor Author

I'm going to need a little help getting the tests passing though.. looks like we use a separate docker build for perl dependencies that doesn't respect changes to cpanfile here.. I'll need someone to explain how your workflow works to be able to get those updated dependencies pulled in prior to the tests being able to run as expected.

@mrenvoize
Copy link
Contributor Author

Squashed a couple of minor fixes highlighted by failing tests on the corresponding 5.2 pull request.

@mrenvoize mrenvoize force-pushed the bug_1853138 branch 2 times, most recently from d084a38 to 363b4a1 Compare January 16, 2024 07:38
Copy link
Member

@justdave justdave left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I just ran the tests and they're all failing. Looks like a missing dependency that didn't get caught. (Email::Address::Simple?)

@mrenvoize
Copy link
Contributor Author

I just ran the tests and they're all failing. Looks like a missing dependency that didn't get caught. (Email::Address::Simple?)

I believe I resolved these as soon as they were reported, hopefully, tests should all be passing now once given the opportunity to run. I've rebased the branch now the CircleCI updates have landed too, thanks for working on that :)

@mrenvoize
Copy link
Contributor Author

Can we run the tests here please..

@mrenvoize mrenvoize force-pushed the bug_1853138 branch 2 times, most recently from 1ef3141 to 82cbc3b Compare March 19, 2024 19:35
Makefile.PL Show resolved Hide resolved
mrenvoize and others added 4 commits March 22, 2024 07:23
This patch updates us from using Email::Address to Email::Address::XS to
resolve CVE-2015-7686.

Regex comparisons have been replaced by parse + is_valid calls as per
current documentation.
r=dylan a=glob

(cherry picked from commit 5d96fa7)
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
…h Email::Sender::Transport::Sendmail

r=dylan a=justdave

(cherry picked from commit 0ff4174)
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
… Email::Sender

r=dkl a=glob

(cherry picked from commit 226b92c)
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
Git decided to drop some of the changes introduce by the commit we
cherry-picked during the pick.  This patch restores them and thus gets
the module compiling again. Cherry-pick in question was of commit
0ff4174
This patch introduced the Email::Address::XS entry in Makefile.PL so
that we can specify which version of the module we wish to use and
make it explicit that we're using the module rather than relying on
Email::Sender pulling it in for us.
@justdave justdave changed the title Bug 1853138 - Switch to Email::Address::XS Bug 1853138/Bug 1886954 - Switch to Email::Sender and Email::Address::XS Mar 22, 2024
@justdave justdave merged commit 2913530 into bugzilla:main Mar 22, 2024
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

4 participants