From 9af285dd6c90098c292627f735a8c7bc3d0f2ace Mon Sep 17 00:00:00 2001 From: Matthias Andree Date: Tue, 26 Jun 2018 16:01:38 +0000 Subject: MFH: r473352 Security upgrade mail/mailman to v2.1.27 Changelog: Release announcement: Reported by: portscout@ (release) Security: 739948e3-78bf-11e8-b23c-080027ac955c Security: CVE-2018-0618 Security: JVN#00846677 Security: JPCERT#97432283 Approved by: ports-secteam@ (miwi@) --- mail/mailman/Makefile | 9 +++---- mail/mailman/distinfo | 10 +++---- mail/mailman/files/mailman.newsyslog.sample.in | 1 + mail/mailman/pkg-plist | 37 ++++++++++++++++++++++++++ 4 files changed, 47 insertions(+), 10 deletions(-) diff --git a/mail/mailman/Makefile b/mail/mailman/Makefile index 70df9d161474..f15f69bc4952 100644 --- a/mail/mailman/Makefile +++ b/mail/mailman/Makefile @@ -2,8 +2,7 @@ # $FreeBSD$ PORTNAME= mailman -DISTVERSION= 2.1.26 -PORTREVISION= 4 +DISTVERSION= 2.1.27 CATEGORIES= mail MASTER_SITES= GNU \ SF/${PORTNAME}/Mailman%202.1%20%28stable%29/${PORTVERSION} \ @@ -125,11 +124,11 @@ MAIL_GID?= _smtpd PKGNAMESUFFIX+= -with-htdig # how to create PATCHFILES: #X identify what is the version of msapiro's patches corresponding to the release. -#X fetch http://bazaar.launchpad.net/~msapiro/mailman/htdig/tarball/1702 +#X fetch http://bazaar.launchpad.net/~msapiro/mailman/htdig/tarball/1768 #X unpack this tarball, and the original distfile -#X diff -NEur original-unpack bazaar-unpack | xz --best -c >msapiro-htdig-1702.patch.xz +#X diff -NEur original-unpack bazaar-unpack | xz --best -c >msapiro-htdig-1768.patch.xz #X upload the latter with mode 0644 or similar to freefall's public_distfiles/ directory -_HTDIGREV= 1734 +_HTDIGREV= 1768 PATCHFILES+= msapiro-htdig-${_HTDIGREV}.patch.xz RUN_DEPENDS+= htdig:textproc/htdig PLIST_SUB+= SUB_HTDIG="" diff --git a/mail/mailman/distinfo b/mail/mailman/distinfo index bd519c6eed6c..03fdb145e098 100644 --- a/mail/mailman/distinfo +++ b/mail/mailman/distinfo @@ -1,5 +1,5 @@ -TIMESTAMP = 1518121723 -SHA256 (mailman/mailman-2.1.26.tgz) = 240177e1ef561ede88d7b48283c3835f39bbd0b1ae19100d3520cbe43058339f -SIZE (mailman/mailman-2.1.26.tgz) = 9264592 -SHA256 (mailman/msapiro-htdig-1734.patch.xz) = 1616c8ae2cb393bd60aa463523fe1b7e7f4bae20d29104242388ba1886e0b8c0 -SIZE (mailman/msapiro-htdig-1734.patch.xz) = 50304 +TIMESTAMP = 1529962222 +SHA256 (mailman/mailman-2.1.27.tgz) = cb899eb3bd1d5248dd4788af3ad8b0341ff300fc1248ce4031d2e71679931222 +SIZE (mailman/mailman-2.1.27.tgz) = 9373313 +SHA256 (mailman/msapiro-htdig-1768.patch.xz) = af6a7633de842fdea552b10067fa71b7ac697b6db80261073e04bdd6c5918ad8 +SIZE (mailman/msapiro-htdig-1768.patch.xz) = 50276 diff --git a/mail/mailman/files/mailman.newsyslog.sample.in b/mail/mailman/files/mailman.newsyslog.sample.in index 20c872eb75b4..c4c3b976ea60 100644 --- a/mail/mailman/files/mailman.newsyslog.sample.in +++ b/mail/mailman/files/mailman.newsyslog.sample.in @@ -5,6 +5,7 @@ %%MAILMANDIR%%/logs/mischief %%USER%%:%%GROUP%% 660 10 2000 * X %%MAILMANDIR%%/data/master-qrunner.pid %%MAILMANDIR%%/logs/post %%USER%%:%%GROUP%% 660 10 2000 * X %%MAILMANDIR%%/data/master-qrunner.pid %%MAILMANDIR%%/logs/qrunner %%USER%%:%%GROUP%% 660 10 2000 * X %%MAILMANDIR%%/data/master-qrunner.pid +%%MAILMANDIR%%/logs/security %%USER%%:%%GROUP%% 660 10 2000 * X %%MAILMANDIR%%/data/master-qrunner.pid %%MAILMANDIR%%/logs/smtp %%USER%%:%%GROUP%% 660 10 2000 * X %%MAILMANDIR%%/data/master-qrunner.pid %%MAILMANDIR%%/logs/smtp-failure %%USER%%:%%GROUP%% 660 10 2000 * X %%MAILMANDIR%%/data/master-qrunner.pid %%MAILMANDIR%%/logs/subscribe %%USER%%:%%GROUP%% 660 10 2000 * X %%MAILMANDIR%%/data/master-qrunner.pid diff --git a/mail/mailman/pkg-plist b/mail/mailman/pkg-plist index 700f2835058f..fd7cc2cb979e 100644 --- a/mail/mailman/pkg-plist +++ b/mail/mailman/pkg-plist @@ -857,6 +857,43 @@ %%MMDIR%%/templates/en/unsubauth.txt %%MMDIR%%/templates/en/userpass.txt %%MMDIR%%/templates/en/verify.txt +%%NLS%%%%MMDIR%%/messages/eo/LC_MESSAGES/%%MM_USERNAME%%.mo +%%NLS%%%%MMDIR%%/messages/eo/LC_MESSAGES/%%MM_USERNAME%%.po +%%NLS%%%%MMDIR%%/templates/eo/admlogin.html +%%NLS%%%%MMDIR%%/templates/eo/approve.txt +%%NLS%%%%MMDIR%%/templates/eo/archidxentry.html +%%NLS%%%%MMDIR%%/templates/eo/archidxfoot.html +%%NLS%%%%MMDIR%%/templates/eo/archidxhead.html +%%NLS%%%%MMDIR%%/templates/eo/archlistend.html +%%NLS%%%%MMDIR%%/templates/eo/archliststart.html +%%NLS%%%%MMDIR%%/templates/eo/archtoc.html +%%NLS%%%%MMDIR%%/templates/eo/archtocentry.html +%%NLS%%%%MMDIR%%/templates/eo/archtocnombox.html +%%NLS%%%%MMDIR%%/templates/eo/article.html +%%NLS%%%%MMDIR%%/templates/eo/bounce.txt +%%NLS%%%%MMDIR%%/templates/eo/cronpass.txt +%%NLS%%%%MMDIR%%/templates/eo/disabled.txt +%%NLS%%%%MMDIR%%/templates/eo/emptyarchive.html +%%NLS%%%%MMDIR%%/templates/eo/help.txt +%%NLS%%%%MMDIR%%/templates/eo/invite.txt +%%NLS%%%%MMDIR%%/templates/eo/listinfo.html +%%NLS%%%%MMDIR%%/templates/eo/masthead.txt +%%NLS%%%%MMDIR%%/templates/eo/nomoretoday.txt +%%NLS%%%%MMDIR%%/templates/eo/options.html +%%NLS%%%%MMDIR%%/templates/eo/postack.txt +%%NLS%%%%MMDIR%%/templates/eo/postauth.txt +%%NLS%%%%MMDIR%%/templates/eo/postheld.txt +%%NLS%%%%MMDIR%%/templates/eo/private.html +%%NLS%%%%MMDIR%%/templates/eo/probe.txt +%%NLS%%%%MMDIR%%/templates/eo/refuse.txt +%%NLS%%%%MMDIR%%/templates/eo/roster.html +%%NLS%%%%MMDIR%%/templates/eo/subauth.txt +%%NLS%%%%MMDIR%%/templates/eo/subscribe.html +%%NLS%%%%MMDIR%%/templates/eo/subscribeack.txt +%%NLS%%%%MMDIR%%/templates/eo/unsub.txt +%%NLS%%%%MMDIR%%/templates/eo/unsubauth.txt +%%NLS%%%%MMDIR%%/templates/eo/userpass.txt +%%NLS%%%%MMDIR%%/templates/eo/verify.txt %%NLS%%%%MMDIR%%/templates/es/admindbdetails.html %%NLS%%%%MMDIR%%/templates/es/admindbpreamble.html %%NLS%%%%MMDIR%%/templates/es/admindbsummary.html -- cgit v1.2.3