Subject: CVS commit: pkgsrc/mail/mailman
From: Manuel Bouyer
Date: 2006-09-10 01:20:11
Message id: 20060909232011.4187F211CA@cvs.netbsd.org

Log Message:
Update to 2.1.9rc1, fixes security issues.

  Security

    - A malicious user could visit a specially crafted URI and inject an
      apparent log message into Mailman's error log which might induce an
      unsuspecting administrator to visit a phishing site.  This has been
      blocked.  Thanks to Moritz Naumann for its discovery.

    - Fixed denial of service attack which can be caused by some
      standards-breaking RFC 2231 formatted headers.  CVE-2006-2941.

    - Several cross-site scripting issues have been fixed.  Thanks to Moritz
      Naumann for their discovery.  CVE-2006-3636

  Internationalization

    - New languages: Arabic, Vietnamese.

  Bug fixes and other patches

    - Fixed Decorate.py so that characters in message header/footer which
      are not in the character set of the list's language are ignored rather
      than causing shunted messages (1507248).

    - Switchboard.py - Closed very tiny holes at the upper ends of queue
      slices that could result in unprocessable queue entries.  Improved FIFO
      processing when two queue entries have the same timestamp.

Files:
RevisionActionfile
1.45modifypkgsrc/mail/mailman/Makefile
1.12modifypkgsrc/mail/mailman/PLIST
1.13modifypkgsrc/mail/mailman/distinfo