Home | Devuan | Git | Forum | Packages | Popcon
Donate now!
Download

Devuan bug report logs - #716
hash built-in function in python3 is salted

Package: greylistd; Severity: grave; Reported by: "Fernando M. Maresca (Monitoring Station S.A.)" <[email protected]>; Keywords: debian; Forwarded to https://bugs.debian.org/1021356; Maintainer for greylistd is (unknown).
Changed bug forwarded-to-address to 'https://bugs.debian.org/1021356' from 'https://bugs.debian.org/1021356.'. Request was from Mark Hindley <[email protected]> to [email protected]. Full text available.
Set bug forwarded-to-address to 'https://bugs.debian.org/1021356.'. Request was from Mark Hindley <[email protected]> to [email protected]. Full text available.

Message received at [email protected]:


Received: (at 716) by bugs.devuan.org; 6 Oct 2022 18:06:03 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from mail.dyne.org [141.95.83.167]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Thu, 06 Oct 2022 18:06:03 +0000 (UTC)
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by mail.dyne.org (Postfix) with ESMTPS id 3633866192B
	for <[email protected]>; Thu,  6 Oct 2022 20:05:29 +0200 (CEST)
Received: from apollo.hindleynet ([192.168.1.3] helo=hindley.org.uk)
	by mx.hindley.org.uk with smtp (Exim 4.84_2)
	(envelope-from <[email protected]>)
	id 1ogVFO-00031k-D8; Thu, 06 Oct 2022 19:05:26 +0100
Received: (nullmailer pid 29219 invoked by uid 1000);
	Thu, 06 Oct 2022 18:05:26 -0000
Date: Thu, 6 Oct 2022 19:05:25 +0100
From: Mark Hindley <[email protected]>
To: "Fernando M. Maresca" <[email protected]>
Cc: [email protected]
Subject: Re: bug#716: hash built-in function in python3 is salted
Message-ID: <Yz8Y5d/[email protected]>
References: <166497427241.10164.17845131670545146281.reportbug@aleph.devel.monssa.com.ar>
 <Yz2+8v/yPQSyjMq/@hindley.org.uk>
 <[email protected]>
 <[email protected]>
 <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <[email protected]>
X-Spam-Status: No, score=0.4 required=5.0 tests=RCVD_IN_DNSWL_BLOCKED,
	RDNS_DYNAMIC,SPF_PASS autolearn=disabled version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mail.dyne.org

Control: forwarded -1  https://bugs.debian.org/1021356.

Fernando,

On Thu, Oct 06, 2022 at 01:58:13PM -0300, Fernando M. Maresca wrote:
> On Thu, Oct 06, 2022 at 12:46:08PM +0100, Mark Hindley wrote:
> > When you have, maybe you could add the Debian bug number here so we can track it
> > easily?

Great, thanks.

Mark
Acknowledgement sent to Mark Hindley <[email protected]>:
Extra info received and forwarded to list. Copy sent to [email protected]. Full text available.
Information forwarded to [email protected], [email protected]:
bug#716; Package greylistd. Full text available.

Message received at [email protected]:


Received: (at 716) by bugs.devuan.org; 6 Oct 2022 16:58:54 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from mail.dyne.org [141.95.83.167]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Thu, 06 Oct 2022 16:58:54 +0000 (UTC)
Received: from mail.monssa.com.ar (mail.monssa.com.ar [190.3.107.187])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by mail.dyne.org (Postfix) with ESMTPS id 73663661954
	for <[email protected]>; Thu,  6 Oct 2022 18:58:19 +0200 (CEST)
Received: from aleph.devel.monssa.com.ar ([10.20.30.21]:59812)
	by mail.monssa.com.ar with esmtpsa  (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <[email protected]>)
	id 1ogUCL-0003Vf-8L; Thu, 06 Oct 2022 13:58:13 -0300
Received: from fmaresca by aleph.devel.monssa.com.ar with local (Exim 4.92)
	(envelope-from <[email protected]>)
	id 1ogUCL-0007Wj-57; Thu, 06 Oct 2022 13:58:13 -0300
Date: Thu, 6 Oct 2022 13:58:13 -0300
From: "Fernando M. Maresca" <[email protected]>
Sender: [email protected]
To: Mark Hindley <[email protected]>
Cc: [email protected]
Subject: Re: bug#716: hash built-in function in python3 is salted
Message-ID: <[email protected]>
Reply-To: "Fernando M. Maresca" <[email protected]>
References: <166497427241.10164.17845131670545146281.reportbug@aleph.devel.monssa.com.ar>
 <Yz2+8v/yPQSyjMq/@hindley.org.uk>
 <[email protected]>
 <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
In-Reply-To: <[email protected]>
X-Operating-System: Debian GNU/Linux
X-Spam-Score: -1.0
X-Spam-Status: No, score=-0.0 required=5.0 tests=RCVD_IN_DNSWL_BLOCKED,
	SPF_HELO_PASS,SPF_PASS autolearn=disabled version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mail.dyne.org

On Thu, Oct 06, 2022 at 12:46:08PM +0100, Mark Hindley wrote:
> When you have, maybe you could add the Debian bug number here so we can track it
> easily?

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1021356.


Best regards,
Fer

-- 
    Fernando M. Maresca
    Monitoring Station S.A.
Acknowledgement sent to "Fernando M. Maresca" <[email protected]>:
Extra info received and forwarded to list. Copy sent to [email protected]. Full text available.
Information forwarded to [email protected], [email protected]:
bug#716; Package greylistd. Full text available.

Message received at [email protected]:


Received: (at 716) by bugs.devuan.org; 6 Oct 2022 11:46:45 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from mail.dyne.org [141.95.83.167]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Thu, 06 Oct 2022 11:46:45 +0000 (UTC)
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by mail.dyne.org (Postfix) with ESMTPS id 67A15661B7C
	for <[email protected]>; Thu,  6 Oct 2022 13:46:11 +0200 (CEST)
Received: from apollo.hindleynet ([192.168.1.3] helo=hindley.org.uk)
	by mx.hindley.org.uk with smtp (Exim 4.84_2)
	(envelope-from <[email protected]>)
	id 1ogPKL-00010b-OM; Thu, 06 Oct 2022 12:46:09 +0100
Received: (nullmailer pid 15489 invoked by uid 1000);
	Thu, 06 Oct 2022 11:46:09 -0000
Date: Thu, 6 Oct 2022 12:46:08 +0100
From: Mark Hindley <[email protected]>
To: "Fernando M. Maresca" <[email protected]>
Cc: [email protected]
Subject: Re: bug#716: hash built-in function in python3 is salted
Message-ID: <[email protected]>
References: <166497427241.10164.17845131670545146281.reportbug@aleph.devel.monssa.com.ar>
 <Yz2+8v/yPQSyjMq/@hindley.org.uk>
 <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <[email protected]>
X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS
	autolearn=disabled version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mail.dyne.org

On Thu, Oct 06, 2022 at 08:06:09AM -0300, Fernando M. Maresca wrote:
> 
> On Wed, Oct 05, 2022 at 06:29:22PM +0100, Mark Hindley wrote:
> > However, greylistd is not forked in Devuan and we use Debian's packages directly
> > without recompilation. Please report this issue to Debian's BTS to be addressed.
> > 
> > Thanks.
> 
> Yes, sorry, my bad.

Not at all.

When you have, maybe you could add the Debian bug number here so we can track it
easily?

Thanks

Mark
Acknowledgement sent to Mark Hindley <[email protected]>:
Extra info received and forwarded to list. Copy sent to [email protected]. Full text available.
Information forwarded to [email protected], [email protected]:
bug#716; Package greylistd. Full text available.

Message received at [email protected]:


Received: (at 716) by bugs.devuan.org; 6 Oct 2022 11:07:33 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from mail.dyne.org [141.95.83.167]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Thu, 06 Oct 2022 11:07:33 +0000 (UTC)
Received: from mail.monssa.com.ar (mail.monssa.com.ar [190.3.107.187])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by mail.dyne.org (Postfix) with ESMTPS id 0DF856618EF
	for <[email protected]>; Thu,  6 Oct 2022 13:06:15 +0200 (CEST)
Received: from aleph.devel.monssa.com.ar ([10.20.30.21]:59158)
	by mail.monssa.com.ar with esmtpsa  (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <[email protected]>)
	id 1ogOhd-0006Vf-LF; Thu, 06 Oct 2022 08:06:09 -0300
Received: from fmaresca by aleph.devel.monssa.com.ar with local (Exim 4.92)
	(envelope-from <[email protected]>)
	id 1ogOhd-0003hU-HU; Thu, 06 Oct 2022 08:06:09 -0300
Date: Thu, 6 Oct 2022 08:06:09 -0300
From: "Fernando M. Maresca" <[email protected]>
Sender: [email protected]
To: Mark Hindley <[email protected]>
Cc: [email protected]
Subject: Re: bug#716: hash built-in function in python3 is salted
Message-ID: <[email protected]>
Reply-To: "Fernando M. Maresca" <[email protected]>
References: <166497427241.10164.17845131670545146281.reportbug@aleph.devel.monssa.com.ar>
 <Yz2+8v/yPQSyjMq/@hindley.org.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
In-Reply-To: <Yz2+8v/yPQSyjMq/@hindley.org.uk>
X-Operating-System: Debian GNU/Linux
X-Spam-Score: -1.0
X-Spam-Status: No, score=-0.0 required=5.0 tests=RCVD_IN_DNSWL_BLOCKED,
	SPF_HELO_PASS,SPF_PASS autolearn=disabled version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mail.dyne.org


On Wed, Oct 05, 2022 at 06:29:22PM +0100, Mark Hindley wrote:
> However, greylistd is not forked in Devuan and we use Debian's packages directly
> without recompilation. Please report this issue to Debian's BTS to be addressed.
> 
> Thanks.

Yes, sorry, my bad.
Thank you.


-- 
    Fernando M. Maresca
Acknowledgement sent to "Fernando M. Maresca" <[email protected]>:
Extra info received and forwarded to list. Copy sent to [email protected]. Full text available.
Information forwarded to [email protected], [email protected]:
bug#716; Package greylistd. Full text available.
Added tag(s) debian. Request was from Mark Hindley <[email protected]> to [email protected]. Full text available.

Message received at [email protected]:


Received: (at 716) by bugs.devuan.org; 5 Oct 2022 17:30:09 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from mail.dyne.org [141.95.83.167]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Wed, 05 Oct 2022 17:30:08 +0000 (UTC)
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by mail.dyne.org (Postfix) with ESMTPS id 568F8661A36
	for <[email protected]>; Wed,  5 Oct 2022 19:29:25 +0200 (CEST)
Received: from apollo.hindleynet ([192.168.1.3] helo=hindley.org.uk)
	by mx.hindley.org.uk with smtp (Exim 4.84_2)
	(envelope-from <[email protected]>)
	id 1og8Cw-0003Ym-V7; Wed, 05 Oct 2022 18:29:23 +0100
Received: (nullmailer pid 21950 invoked by uid 1000);
	Wed, 05 Oct 2022 17:29:22 -0000
Date: Wed, 5 Oct 2022 18:29:22 +0100
From: Mark Hindley <[email protected]>
To: "Fernando M. Maresca (Monitoring Station S.A.)" <[email protected]>, [email protected]
Subject: Re: bug#716: hash built-in function in python3 is salted
Message-ID: <Yz2+8v/yPQSyjMq/@hindley.org.uk>
References: <166497427241.10164.17845131670545146281.reportbug@aleph.devel.monssa.com.ar>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <166497427241.10164.17845131670545146281.reportbug@aleph.devel.monssa.com.ar>
X-Debbugs-No-Ack: No Thanks
X-Spam-Status: No, score=0.4 required=5.0 tests=RCVD_IN_DNSWL_BLOCKED,
	RDNS_DYNAMIC,SPF_PASS autolearn=disabled version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mail.dyne.org

Control: tags -1 debian

Fernando,

Thanks for this.

On Wed, Oct 05, 2022 at 09:51:12AM -0300, Fernando M. Maresca (Monitoring Station S.A.) wrote:
> Package: greylistd
> Version: 0.8.8.7
> Severity: grave

However, greylistd is not forked in Devuan and we use Debian's packages directly
without recompilation. Please report this issue to Debian's BTS to be addressed.

Thanks.

Mark
Information forwarded to [email protected], [email protected]:
bug#716; Package greylistd. Full text available.

Message received at [email protected]:


Received: (at submit) by bugs.devuan.org; 5 Oct 2022 12:52:47 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from mail.dyne.org [141.95.83.167]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Wed, 05 Oct 2022 12:52:47 +0000 (UTC)
Received: from mail.monssa.com.ar (mail.monssa.com.ar [190.3.107.187])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by mail.dyne.org (Postfix) with ESMTPS id A0330661994
	for <[email protected]>; Wed,  5 Oct 2022 14:51:20 +0200 (CEST)
Received: from aleph.devel.monssa.com.ar ([10.20.30.21]:43742)
	by mail.monssa.com.ar with esmtpsa  (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <[email protected]>)
	id 1og3rk-0005W2-I4; Wed, 05 Oct 2022 09:51:12 -0300
Received: from fmaresca by aleph.devel.monssa.com.ar with local (Exim 4.92)
	(envelope-from <[email protected]>)
	id 1og3rk-0006jZ-Ez; Wed, 05 Oct 2022 09:51:12 -0300
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: "Fernando M. Maresca (Monitoring Station S.A.)" <[email protected]>
To: Devuan Bug Tracking System <[email protected]>
Subject: hash built-in function in python3 is salted
Message-ID: <166497427241.10164.17845131670545146281.reportbug@aleph.devel.monssa.com.ar>
Date: Wed, 05 Oct 2022 09:51:12 -0300
X-Spam-Score: -1.0
X-Spam-Status: No, score=0.0 required=5.0 tests=RCVD_IN_DNSWL_BLOCKED,
	SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED autolearn=disabled version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mail.dyne.org

Package: greylistd
Version: 0.8.8.7
Severity: grave



The hash() function used to hash triplets in python3 has a different
behaviour that the python2 version. 

py3 hash() is salted, so the hash it produces for the same input text differs between runs.

That produces two problems in greylistd:
- multiple entries added to the lists 
- checks produces different keys

To reproduce:
- start greylistd

- greylist clear
- greylist list --white (verify is empty)
- greylist add --white a.com
- greylist list --white (verify a.com is in wl)
- greylist check a.com (should be white)

- restart greylistd
- greylist list --white (verify a.com is in wl)
- greylist check a.com (returns grey, should be white)

Thank you.



-- System Information:
Distributor ID:	Devuan
Description:	Devuan GNU/Linux 3 (beowulf)
Release:	3
Codename:	beowulf
Architecture: x86_64

Kernel: Linux 5.10.0-0.bpo.7-amd64 (SMP w/12 CPU cores)
Locale: LANG=es_AR.UTF-8, LC_CTYPE=es_AR.UTF-8 (charmap=UTF-8), LANGUAGE=es_AR:es (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages greylistd depends on:
ii  adduser                3.118
ii  debconf [debconf-2.0]  1.5.71+deb10u1
ii  python                 2.7.16-1

Versions of packages greylistd recommends:
ii  exim4  4.92-8+deb10u6

greylistd suggests no packages.

-- debconf-show failed
Acknowledgement sent to "Fernando M. Maresca (Monitoring Station S.A.)" <[email protected]>:
New bug report received and forwarded. Copy sent to [email protected]. Full text available.
Report forwarded to [email protected], [email protected]:
bug#716; Package greylistd. Full text available.

Devuan BTS -- Powered by Debian bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.

Devuan Bugs Owner <[email protected]>.
Last modified: Sat, 30 Nov 2024 22:39:01 UTC