2008-08-05 15:22:21 by Joerg Sonnenberger | Files touched by this commit (1) |
Log message:
Fix path to wrong interpreter. Bump revision. From PR 39290.
|
2008-06-29 09:47:03 by Kimmo Suominen | Files touched by this commit (5) |
Log message:
Update mailman to 2.1.10 as a security fix for CVE-2008-0564
http://secunia.com/advisories/28794/
Includes many bug fixes, see share/doc/mailman/NEWS for details.
|
2008-05-29 21:17:34 by Joerg Sonnenberger | Files touched by this commit (1) |
Log message:
Disable the permission check, mailman is very bitching otherwise.
|
2008-04-25 22:39:14 by Joerg Sonnenberger | Files touched by this commit (170) |
Log message:
Update PYTHON_VERSIONS_COMPATIBLE
- assume that Python 2.4 and 2.5 are compatible and allow checking for
fallout.
- remove PYTHON_VERSIONS_COMPATIBLE that are obsoleted by the 2.3+
default. Modify the others to deal with the removals.
|
2008-04-16 14:15:28 by David Brownlee | Files touched by this commit (1) |
Log message:
PYTHON_VERSIONS_ACCEPTED+=25
|
2007-07-04 22:55:07 by Johnny C. Lam | Files touched by this commit (136) |
Log message:
Make it easier to build and install packages "unprivileged", where
the owner of all installed files is a non-root user. This change
affects most packages that require special users or groups by making
them use the specified unprivileged user and group instead.
(1) Add two new variables PKG_GROUPS_VARS and PKG_USERS_VARS to
unprivileged.mk. These two variables are lists of other bmake
variables that define package-specific users and groups. Packages
that have user-settable variables for users and groups, e.g. apache
and APACHE_{USER,GROUP}, courier-mta and COURIER_{USER,GROUP},
etc., should list these variables in PKG_USERS_VARS and PKG_GROUPS_VARS
so that unprivileged.mk can know to set them to ${UNPRIVILEGED_USER}
and ${UNPRIVILEGED_GROUP}.
(2) Modify packages to use PKG_GROUPS_VARS and PKG_USERS_VARS.
|
2007-03-28 22:55:58 by Manuel Bouyer | Files touched by this commit (1) |
Log message:
Release maintenership; I will hopefully not have to use this software any more.
|
2007-01-18 07:33:45 by Martti Kuparinen | Files touched by this commit (1) |
Log message:
Fixed indentation.
|
2006-09-25 20:56:44 by Manuel Bouyer | Files touched by this commit (3) |  |
Log message:
Update to 2.1.9, from Martin Wilke in pkg/34567
Chnages since 2.1.9rc1:
- Fixed an unexploitable format string vulnerability. Discovery and fix
by Karl Chen. Analysis of non-exploitability by Martin 'Joey' Schulze.
Also thanks go to Lionel Elie Mamane. CVE-2006-2191.
Also running a diff -r shows that there has been small updates to various
translations.
|
2006-09-10 01:20:11 by Manuel Bouyer | Files touched by this commit (3) |
Log message:
Update to 2.1.9rc1, fixes security issues.
Security
- A malicious user could visit a specially crafted URI and inject an
apparent log message into Mailman's error log which might induce an
unsuspecting administrator to visit a phishing site. This has been
blocked. Thanks to Moritz Naumann for its discovery.
- Fixed denial of service attack which can be caused by some
standards-breaking RFC 2231 formatted headers. CVE-2006-2941.
- Several cross-site scripting issues have been fixed. Thanks to Moritz
Naumann for their discovery. CVE-2006-3636
Internationalization
- New languages: Arabic, Vietnamese.
Bug fixes and other patches
- Fixed Decorate.py so that characters in message header/footer which
are not in the character set of the list's language are ignored rather
than causing shunted messages (1507248).
- Switchboard.py - Closed very tiny holes at the upper ends of queue
slices that could result in unprocessable queue entries. Improved FIFO
processing when two queue entries have the same timestamp.
|