e60b89a6a0
- Fix checksum failures in Defaults.py[c]: No longer patch Defaults.py in postinstall, instead configure --with-mailhost=localhost --with-urlhost=localhost, as Fedora and Arch Linux do. - Add a related note to FreeBSD-post-install-notes. - Add a related safeguard to the rcfile, which will refuse to run if the DEFAULT_*_HOSTs are not configured. This can be changed with a new mailman_run_localhost="YES" rc.conf setting, which will then restrict itself to printing the warnings, but still start mailman. - Update htdig patch to upstream SVN r1734. - Bump USES, python:2 -> python:2.7 - Regenerated patches. Changelog: https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/view/1743/NEWS#L8 Release/SecuritY announcement: https://www.mail-archive.com/mailman-users@python.org/msg70478.html PR: 225767 (related vuxml entry) Reported by: Vladimir Krstulja MFH: 2018Q1 Security: CVE-2018-5950 Security: 3d0eeef8-0cf9-11e8-99b0-d017c2987f9a
45 lines
2.0 KiB
Plaintext
45 lines
2.0 KiB
Plaintext
--- Mailman/Defaults.py.in.orig 2018-02-04 17:04:39 UTC
|
|
+++ Mailman/Defaults.py.in
|
|
@@ -148,7 +148,7 @@ GLOBAL_BAN_LIST = []
|
|
# Command that is used to convert text/html parts into plain text. This
|
|
# should output results to standard output. %(filename)s will contain the
|
|
# name of the temporary file that the program should operate on.
|
|
-HTML_TO_PLAIN_TEXT_COMMAND = '/usr/bin/lynx -dump %(filename)s'
|
|
+HTML_TO_PLAIN_TEXT_COMMAND = '%%LOCALBASE%%/bin/lynx -dump %(filename)s'
|
|
|
|
# A Python regular expression character class which defines the characters
|
|
# allowed in list names. Lists cannot be created with names containing any
|
|
@@ -538,8 +538,8 @@ VIRTUAL_MAILMAN_LOCAL_DOMAIN = None
|
|
# and virtual-mailman.db files, respectively, from the associated plain text
|
|
# files. The file being updated will be appended to this string (with a
|
|
# separating space), so it must be appropriate for os.system().
|
|
-POSTFIX_ALIAS_CMD = '/usr/sbin/postalias'
|
|
-POSTFIX_MAP_CMD = '/usr/sbin/postmap'
|
|
+POSTFIX_ALIAS_CMD = '%%LOCALBASE%%/sbin/postalias'
|
|
+POSTFIX_MAP_CMD = '%%LOCALBASE%%/sbin/postmap'
|
|
|
|
# Ceiling on the number of recipients that can be specified in a single SMTP
|
|
# transaction. Set to 0 to submit the entire recipient list in one
|
|
@@ -573,7 +573,7 @@ SMTPPORT = 0
|
|
|
|
# Command for direct command pipe delivery to sendmail compatible program,
|
|
# when DELIVERY_MODULE is 'Sendmail'.
|
|
-SENDMAIL_CMD = '/usr/lib/sendmail'
|
|
+SENDMAIL_CMD = '/usr/sbin/sendmail'
|
|
|
|
# SMTP authentication for DELIVERY_MODULE = 'SMTPDirect'. To enable SASL
|
|
# authentication for SMTPDirect, set SMTP_AUTH = Yes and provide appropriate
|
|
@@ -851,6 +851,12 @@ VERP_CONFIRMATIONS = No
|
|
# debugging).
|
|
MAX_AUTORESPONSES_PER_DAY = 10
|
|
|
|
+# This FreeBSD port of Mailman can utilize Postfix SMTP server's VERP ability.
|
|
+# You may set VERP_STYLE = 'Postfix' to enable it.
|
|
+VERP_STYLE = 'Manual'
|
|
+
|
|
+# When using Postfix style VERP you will need the following setting.
|
|
+POSTFIX_XVERP_OPTS = '+='
|
|
|
|
|
|
#####
|