Changelog:
http://bazaar.launchpad.net/~mailman-coders/mailman/2.1/view/1859/NEWS#L8
(Note the ValueError fix was already in FreeBSD's 2.1.33_1 and
- on quarterly - the 2.1.30_5 port/package versions.)
Follow POLA:
No MFH requested, as 2020Q2 and head/ have diverged too far,
so let 2020Q3 pick up the change instead.
- fixes the i18n issues in 2.1.31
- drop local patch for Spanish Castilian mailman.po file
- drop local REINPLACE_CMD for translations of the security fixed code
- uses a patch from the upstream merged rev 1814 of the htdig branch
Over the upstream 2.1.31, additional fixes were needed:
+ fix up quoting in one string of the messages/es/ translation
to unbreak gettext
+ fix up all */LC_MESSAGES/mailman.po to match up with the security fix.
Upstream Changelog for 2.1.31, cited from
<https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/view/1845/NEWS#L8>:
Security
- A content injection vulnerability via the options login page has been
discovered and reported by Vishal Singh. This is fixed. (LP: #1873722)
i18n
- The Spanish translation has been updated by Omar Walid Llorente.
Bug Fixes and other patches
- Bounce recognition for a non-compliant Yahoo format is added.
- Archiving workaround for non-ascii in string.lowercase in some Python
packages is added.
MFH: 2020Q2
Security: 88760f4d-8ef7-11ea-a66d-4b2ef158be83
Limit the install message about pkg install -I to installs (not upgrades).
Convert the required_dirs of the rcfile into a coded prereq check,
so that we can print the proper error message, and point the user to
the right place.
Bump PORTREVISION.
- tighten up permissions on install dirs even more, patching
bin/check_perms to not complain - fewer directories or files belong
in mailman's hand or need group write permissions.
- revert 2.1.30's "make templates samples" because the upstream has
always instead provided a templates/site dir here and warned users that
default templates will be overwritten on updates or reinstallation
https://wiki.list.org/DOC/4.48%20How%20can%20I%20change%20the%20HTML%20or%20.txt%20templates%20used%20by%20my%20mailing%20lists%3F
changed templates will be written to different directories, the site,
domain-specific or list-specific directory
- adjust pkg-plist such that a no-script install, a regular install
with post-install script run, and check_perms agree on permissions,
however with tighter write permissions than the default install,
as a security-in-depth safety precaution. [1]
- revise files/pkg-install.in accordingly
- boil down files/pkg-message.in texts a little bit
- bump PORTREVISION
PR: 245853
Reported by: manu@ (IRC) [1]
* upstream changelog:
https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/view/head:/NEWS#L6
Note that upstream means 2.1.30 to be the final 2.x release,
because it relies on Python 2.x which is EOL upstream.
! MAJOR DATA LOSS FIX, rename all templates/* files to .sample,
! and list them as a @sample in pkg-plist, because they can be edited
! through the web server, and an upgrade should not stomp over edited files.
* rearrange makefile a bit (portlint, portfmt)
* update and upload new htdig patch
* expose NLS port option to pkg-install script to avoid failure
* patch upstream bin/check_perms script to not complain about tightened-
up messages/ and mailmanprefix (${PREFIX}/mailman) permissions that we
set to 0755 instead of 02775. Mailman should not need to write outside
designated directories or create new top-level directories in its install.
* fix a typo in the German (mailman.po) translation
* tweak pkg-install to:
- leave ${PREFIX}/mailman permissions alone and not set them to 02775
- fix up non-moved .sample files if pkg-install is run with -I
- create a copy of mm_cfg.py from mm_cfg.py.dist if missing (-I)
- create a newsyslog.conf.d/mailman.conf if missing, from
examples/mailman.newsyslog.sample if installed (-I)
- not attempt to fix messages/ (translations) permissions if the NLS
port option is disabled
* tweak pkg-plist so that the proper permissions and groups are set
by default already
* clean up pkg-message, thanks to bapt@ for pointing out that a missing
type: means "install or upgrade".
MFH: 2020Q2 (@samples is an important fix against data loss on update)
There are parts of the install message that are also relevant on
updates, but were missed. Add them, and bump PORTREVISION.
Failure-inducing commit:
------------------------------------------------------------------------
r508882 | mat | 2019-08-14 00:29:42 +0200 (Wed, 14 Aug 2019) | 2 lines
onvert to UCL & cleanup pkg-message (categories l-m)
------------------------------------------------------------------------
- Rename the files installed to /usr/local/etc/newsyslog.conf.d/ to end
with a '.conf' suffix.
- Add pkg-install script to automatically move any copies of the old
newsyslog file to the new location if the new file is unmodified from the default,
or print a warning if it the new file has been modified.
- Add a note to UPDATING and pkg-message to warn users of this, in case
they are using provisioning/configuration management tools which need
to be modified. Note the UPDATING entry was committed in r485721.
Recent changes to /etc/newsyslog.conf (r340318) will only include files
from the /usr/local/etc/newsyslog.conf.d/ directory which end with
'.conf' and do not beginning with a '.' character.
Reviewed by: mat
Approved by: mandree (maintainer)
Differential Revision: https://reviews.freebsd.org/D17088
Rename the files installed to /usr/local/etc/newsyslog.conf.d/ to end
with a '.conf' suffix.
Proposed changes to /etc/newsyslog.conf will only include files from the
/usr/local/etc/newsyslog.conf.d/ directory which end with '.conf' and do
not beginning with a '.' character. https://reviews.freebsd.org/D17086
Approved by: mandree (maintainer)
Differential Revision: https://reviews.freebsd.org/D17088
- When no virtualhosts are defined, and the default localhost/localhost is
effective, the post-install script now adds DEFAULT_EMAIL_HOST,
DEFAULT_URL_HOST, and add_virtualhost() lines to mm_cfg.py.
Add corresponding support to remove unchanged configurations to the
deinstall script.
- While here, overhaul crontab configuration to only request a merge if the
crontab had been modified, and unify progress reports.
- Merge pkg-deinstall into pkg-install, to avoid duplication of code
that might be missed in later maintenance.
PR: 225961
Reported by: Terry Kennedy
When the upstream initscript grew a "reopen" mode with 2.1.17 in late 2013,
our patch stuffed the usage information into the wrong place, so that we
inadvertently disabled the new reopen mode, thus never supported it
through the init script in FreeBSD.
Bump PORTREVISION.
PR: 225800
Submitted by: Yasuhito FUTATSUKI
MFH: 2018Q1
- Fix checksum failures in Defaults.py[c]:
No longer patch Defaults.py in postinstall, instead configure
--with-mailhost=localhost --with-urlhost=localhost, as
Fedora and Arch Linux do.
- Add a related note to FreeBSD-post-install-notes.
- Add a related safeguard to the rcfile, which will refuse to run
if the DEFAULT_*_HOSTs are not configured. This can be changed
with a new mailman_run_localhost="YES" rc.conf setting, which will
then restrict itself to printing the warnings, but still start mailman.
- Update htdig patch to upstream SVN r1734.
- Bump USES, python:2 -> python:2.7
- Regenerated patches.
Changelog:
https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/view/1743/NEWS#L8
Release/SecuritY announcement:
https://www.mail-archive.com/mailman-users@python.org/msg70478.html
PR: 225767 (related vuxml entry)
Reported by: Vladimir Krstulja
MFH: 2018Q1
Security: CVE-2018-5950
Security: 3d0eeef8-0cf9-11e8-99b0-d017c2987f9a
Ports using USE_PYTHON=distutils are now flavored. They will
automatically get flavors (py27, py34, py35, py36) depending on what
versions they support.
There is also a USE_PYTHON=flavors for ports that do not use distutils
but need FLAVORS to be set. A USE_PYTHON=noflavors can be set if
using distutils but flavors are not wanted.
A new USE_PYTHON=optsuffix that will add PYTHON_PKGNAMESUFFIX has been
added to cope with Python ports that did not have the Python
PKGNAMEPREFIX but are flavored.
USES=python now also exports a PY_FLAVOR variable that contains the
current python flavor. It can be used in dependency lines when the
port itself is not python flavored. For example, deskutils/calibre.
By default, all the flavors are generated. To only generate flavors
for the versions in PYTHON2_DEFAULT and PYTHON3_DEFAULT, define
BUILD_DEFAULT_PYTHON_FLAVORS in your make.conf.
In all the ports with Python dependencies, the *_DEPENDS entries MUST
end with the flavor so that the framework knows which to build/use.
This is done by appending '@${PY_FLAVOR}' after the origin (or
@${FLAVOR} if in a Python module with Python flavors, as the content
will be the same). For example:
RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}six>0:devel/py-six@${PY_FLAVOR}
PR: 223071
Reviewed by: portmgr, python
Sponsored by: Absolight
Differential Revision: https://reviews.freebsd.org/D12464
This enforces the EXAMPLES option because we can't keep
the .sample file in etc/newsyslog.conf.d/* - it would be processed
as the actual file, so we use %%EXAMPLESDIR%% for the distributed version.
If the package is built in, for instance, poudriere, or on a computer other
than the one it is later installed on, the DEFAULT_MAIL_HOST and
DEFAULT_URL_HOST variables in the Mailman/Defaults.py file were unsuitable.
Leverage pkg-install to fix these up to be the same as hostname -f at
install time.
[The MFH would require the intermediate update to 2.1.24 to be included.]
MFH: 2017Q3
This patch is part of the HTDIG integration patch already. [1]
Also correct namazurc file path in pkg-message, bumping PORTREVISION.
PR: 207876 [1]
Submitted by: David Siebörger [1]
Pull upstream change 1629 to fix Launchpad Bug #1551075
<https://bugs.launchpad.net/mailman/+bug/1551075>. This fix improves
preservation of OpenPGP MIME multipart signatures, by not collapsing
a multipart with a single sub-part inside multipart/signed parts.
See the Launchpad bug report for details.
EXPERIMENTAL feature: Reenable HTDIG support by rolling the patch on our
own, and laying down instructions to do so in the Makefile. Mark Sapiro
no longer maintains the patch.
Bump PORTREVISION to 3.
Note that the upstream maintainer considers another release in a few
weeks' time, and called for help with updating translations. If you
want to help, see
<http://www.mail-archive.com/mailman-users%40python.org/msg68036.html>
Prior to this fix, pkg-install used hardcoded
${PKG_PREFIX}/sbin/postconf, but postfix-base installs it into
/usr/sbin/postconf.
Instead, do a path search for postconf in ${PKG_PREFIX}/sbin:$PATH and
cache the result in a variable.
It used to use GNU-install-isms (options after arguments) that don't
work with BSD install and caused two spurious directories to be created,
one named -g, the other usually named "mailman" (or whichever group name
was configured). Bumps PORTREVISION.
PR: 207528 (Attachment #167455)
Submitted by: ohauer@
- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.
While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.
Also, replace some EXTRACT_SUFX occurences with USES=tar:*.
Checked by: make fetch-urlall-list
With hat: portmgr
Sponsored by: Absolight
Fixes one security bug [1], a few other bugs, and adds a feature so that
list admins can edit list addresses.
Uses newer Mailman-and-HTDig integration patches. [2]
Security: CVE-2015-2775 [1]
Security: a5f160fa-deee-11e4-99f8-080027ef73ec [1]
PR: 199286 [2]
Submitted by: David Siebörger [2]
Matthias Andree
Mathieu Arnold
Ben Woods
Kurt Jaeger
Martin Wilke
Dmitry Marakasov
Baptiste Daroussin