mailman security bump

Package-Manager: portage-2.1.9.5/cvs/Linux x86_64

5 files changed, 207 insertions, 5 deletions

diff --git a/net-mail/mailman/ChangeLog b/net-mail/mailman/ChangeLog
index d962d7304f8d..5a1027e18016 100644
--- a/net-mail/mailman/ChangeLog
+++ b/net-mail/mailman/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for net-mail/mailman
 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-mail/mailman/ChangeLog,v 1.121 2010/08/12 21:37:57 hwoarang Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-mail/mailman/ChangeLog,v 1.122 2010/09/13 23:12:08 hanno Exp $
+
+*mailman-2.1.14_rc1 (13 Sep 2010)
+
+  13 Sep 2010; Hanno Boeck <hanno@gentoo.org> +mailman-2.1.14_rc1.ebuild,
+  +files/mailman-2.1.14_rc1-directory-check.patch:
+  Security version bump, adjust patch for directory check.
 
   12 Aug 2010; Markos Chandras <hwoarang@gentoo.org> mailman-2.1.13.ebuild,
   +files/mailman-2.1.13-ldflags.patch:
diff --git a/net-mail/mailman/Manifest b/net-mail/mailman/Manifest
index d5c401d2f4d3..5ee94a259d9c 100644
--- a/net-mail/mailman/Manifest
+++ b/net-mail/mailman/Manifest
@@ -1,3 +1,6 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA1
+
 AUX 50_mailman.conf 429 RMD160 54104453464b725adc18e5fb66bee265089013f6 SHA1 7b002917ae358587fc121f8c06c54c76dd0d9934 SHA256 8a93c5f9b2012122c6e85445620d5eb388e1bc38cb2102158bb62681cb61d3ec
 AUX 50_mailman.conf-r1 592 RMD160 2f2be797205a63b728fe89a3367bbfb0e1f5d5dc SHA1 12a9d7276eb796c7512ece411a56f4b45f861a7d SHA256 4512a9dd6cba38a080654cbe172941a053fdc8b33afb65748d76716e9d00a029
 AUX README.gentoo-r2 5537 RMD160 8d753bb466666bac03ee4da4b7e35456d66dfec3 SHA1 f2702f1dbcab75397795b55883972a047b39463e SHA256 3809aa17e4e9a244cdf7c06af1605c3ce660329b0e279a93c4c3650b8d9ffa42
@@ -5,6 +8,7 @@ AUX README.gentoo-r3 6804 RMD160 8885ce718cee4c1ff7fba103b6be314dfbf794c2 SHA1 3
 AUX mailman-2.1.12-add-destdir.patch 379 RMD160 f5cec806246df499d90174c907dce2562cd5c607 SHA1 919e3d7fab0e4d4fe176ce1f92bc9651c8d3cf91 SHA256 10a22b784eecfc86c78380be6c389b90bbcec3e4c31a04b70f6a09e96ef4afd8
 AUX mailman-2.1.12-directory-check.patch 1485 RMD160 1b2a12f332ca2c70d2cca4310d6f6d1ed37085aa SHA1 56abf3e8643a7140450a338b133b5f6e2e62d4a4 SHA256 4986cc5e7d37cec02b4f29dbf4838e81799fabdfb89bbc7f8e54c9210ae1de6d
 AUX mailman-2.1.13-ldflags.patch 1022 RMD160 24cb935e95056a55ce77de1c00c083d88dbf2a52 SHA1 ea60f2a9b567c7832525ad150f6a2399d8feb1e1 SHA256 75b9fe8ef757541776532f76b1262c1616d440178ad39c432fe2d529eecf5645
+AUX mailman-2.1.14_rc1-directory-check.patch 786 RMD160 4dcf690c6a5f26feff25376a5adfc261d887d2c2 SHA1 6049bf7e1b21a72861683d9251111209564f9a55 SHA256 13c5988eeaf1fad7c7f4db2c817bb234dce022636e0ebe1a7de9d0ef8400d91c
 AUX mailman-2.1.8_rc1-directory-check.patch 1287 RMD160 3bf6d1216a79a32d68340cb0df5db9b5f44a3931 SHA1 ad2b689ce7911b509f999cd849d0402c36ded97c SHA256 2d31eda834429a55edad1fea3c379ecb3e8f05c03fac82f172989caeab85314d
 AUX mailman-2.1.9-fix-XSS.patch 11287 RMD160 b4dff793463c976cef7bdfe2cded986a8f7820ab SHA1 d01f299044ddaf8c0c6df53cb7b8ec73f3f183a4 SHA256 cd2ffb0e19dd12205d375f3c83b7d6a3177c0f3389bf15db37bce1e63e459307
 AUX mailman-2.1.9-icons.patch 555 RMD160 d0beb080e0dd4c753ce5e075b3c7db424b5474ef SHA1 786edc8b3ed11920aaaa23a8f3c0e4f9ae190a87 SHA256 cd78a7447febcbe1901144a190ef14cf9075b8055cc275e0405fc748f9c855f0
@@ -13,10 +17,19 @@ AUX mailman.rc 597 RMD160 be0a574298a1d8d547a4ca76f864dd5fee9b897d SHA1 f464f5ba
 DIST mailman-2.1.11.tgz 7992229 RMD160 667297720aae9fef07600eab6fbf3d2cfc205c8b SHA1 068f1927f4d8dd0896b5064bdf6d102798491b72 SHA256 66f2e1d27b6d1f253a8ebbe218cacaab947e6b421f7513fbaea2314b24f06bda
 DIST mailman-2.1.12.tgz 8010027 RMD160 94d8d132bb37180bf4c02ccd2a5fb3862ce13b94 SHA1 6d6281f7ce322e271f0259321f4d8931ff46e6ae SHA256 5e9313252cc2eea774c453131e7f3fe3a5873ebce26628c5504cdc318d563ddd
 DIST mailman-2.1.13.tgz 8166504 RMD160 3a62b04ea0f48c3ecbe815eb927d282f765e416c SHA1 923dd78a17cbab576354b53a80443fe05f134398 SHA256 ddab5169c851e49134d8e58fd0d5fd3b920d8ddb5f52582c2ec95076c746a25e
+DIST mailman-2.1.14rc1.tgz 8201021 RMD160 1d06dc327068561e032658afc715ee12c07e0c0e SHA1 573080ed44e9878d182eeaca82892dc843dca31b SHA256 f3969382740418a8e30eb27142d98ec39613a098649bc14992cbfda671c45b70
 DIST mailman-2.1.9.tgz 7829201 RMD160 135f94eeecca1f562f98dfe98c1a367bed229372 SHA1 e9f6f55e2551c3e576460749383da20599412d42 SHA256 1b7a2c853c21bfd22205167dc3678c634a3f981721d95d1cd923ca84967cc986
 EBUILD mailman-2.1.11.ebuild 5799 RMD160 d2a98c07786101920267b3b5b04338c802f22b56 SHA1 0c143d4328e461519ea62a7f2647aab8b770b7ab SHA256 6b9841f293f9f0027b4bc6c47d9b23e8e659f67ccf18451307a85b700f822a19
-EBUILD mailman-2.1.12.ebuild 5955 RMD160 790d5192e1d4eae74b59f5637205a00c8761022d SHA1 0a3d7ac18a798f3fd4851e4137647c767c45b6e1 SHA256 214e41abcfa8b1ae4db3a9dee0d73a084024da9ef28727d29d2d219ab7552dbc
+EBUILD mailman-2.1.12.ebuild 5953 RMD160 c53330f3c2ab9c82f7dc0a3bb2def6f4139ee803 SHA1 15574fa5b6b25d736caa7916145dfc82d527c6e2 SHA256 091211cf071fa03b4067a8f8f0fef86a0147bfd79e961ce0471ab84c6a571e4f
 EBUILD mailman-2.1.13.ebuild 5925 RMD160 0e084b114243ec1c89ab8f5bf95e21e47ae11d89 SHA1 5090e7dc3097ea3e34978df98b2ccd5e3b610fd2 SHA256 290b704a118610db622ba15aa31d9b8a2a218e9e94826fa5cca1d6f8e5c793b6
+EBUILD mailman-2.1.14_rc1.ebuild 5964 RMD160 4855f046faa69f8cb6bcac0f55dea02da2b6d8c4 SHA1 c4e84d546c91a9de954a9a952918dc29e7aa83ff SHA256 3c1575a7205dc9362f64980b287a62c67ff29302e36590b219e77264d634c202
 EBUILD mailman-2.1.9-r3.ebuild 5043 RMD160 af96466c4999637c7dbbe451bd9f356212d67e6e SHA1 da83aa902924804aee28b35ba65f4b378f943ae1 SHA256 b5d7277a1f8f87a6aac2977e58faeeaf337950bc0f030097f6bef6875584e973
-MISC ChangeLog 16211 RMD160 a5ccc2a438c96e636973a5da668fa17abf84b805 SHA1 5eb037a12fa5eb41117cacd8e074fcd7083235d7 SHA256 aff7d10d2df75809304f147dac29b63d73d57ec5bd7a5c69a7405b129041453c
+MISC ChangeLog 16428 RMD160 89dad3a4ded1b6e3136eb8ae4936375934e554a1 SHA1 da966cbc1dc370651663d11ab6d89308f3ebb0e7 SHA256 67f2c03b632be6f2539f90cc3b6dac519f0f29cf6378ff5ff8e03d91223627cf
 MISC metadata.xml 218 RMD160 30759d93f0209fdd74f29393ae54999fe6b2bdff SHA1 486b307ff1dae10aef7d18472460a21bc2decdfb SHA256 09421ca1b9299683d07f68ddbbd3ed97251dac613121b420841a3251da7fcb89
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.16 (GNU/Linux)
+
+iEYEARECAAYFAkyOr84ACgkQr2QksT29OyAmDwCdGoHUf8uQPwHOPxgBOoLW2Phk
+je4An2vdDH1NbxnbUue4G7I7MDoaBBZ6
+=VTHK
+-----END PGP SIGNATURE-----
diff --git a/net-mail/mailman/files/mailman-2.1.14_rc1-directory-check.patch b/net-mail/mailman/files/mailman-2.1.14_rc1-directory-check.patch
new file mode 100644
index 000000000000..a3c26ede877a
--- /dev/null
+++ b/net-mail/mailman/files/mailman-2.1.14_rc1-directory-check.patch
@@ -0,0 +1,19 @@
+--- mailman-2.1.14rc1/bin/update	2010-09-09 18:51:09.000000000 +0200
++++ mailman-2.1.14rc1-1/bin/update	2010-09-14 01:02:09.000000000 +0200
+@@ -35,6 +35,7 @@
+ """
+ 
+ import os
++import stat
+ import sys
+ import time
+ import errno
+@@ -428,7 +429,7 @@
+     # Now update for the Mailman 2.1.5 qfile format.  For every filebase in
+     # the qfiles/* directories that has both a .pck and a .db file, pull the
+     # data out and re-queue them.
+-    for dirname in os.listdir(mm_cfg.QUEUE_DIR):
++    for dirname in [x for x in os.listdir(mm_cfg.QUEUE_DIR) if stat.S_ISDIR(os.stat(os.path.join(mm_cfg.QUEUE_DIR,x)).st_mode)]:
+         dirpath = os.path.join(mm_cfg.QUEUE_DIR, dirname)
+         if dirpath == mm_cfg.BADQUEUE_DIR:
+             # The files in qfiles/bad can't possibly be pickles
diff --git a/net-mail/mailman/mailman-2.1.12.ebuild b/net-mail/mailman/mailman-2.1.12.ebuild
index 88577605980d..953e6c1ad794 100644
--- a/net-mail/mailman/mailman-2.1.12.ebuild
+++ b/net-mail/mailman/mailman-2.1.12.ebuild
@@ -1,6 +1,6 @@
-# Copyright 1999-2009 Gentoo Foundation
+# Copyright 1999-2010 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-mail/mailman/mailman-2.1.12.ebuild,v 1.4 2009/10/10 15:01:19 armin76 Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-mail/mailman/mailman-2.1.12.ebuild,v 1.5 2010/09/13 23:12:08 hanno Exp $
 
 inherit eutils python multilib
 
diff --git a/net-mail/mailman/mailman-2.1.14_rc1.ebuild b/net-mail/mailman/mailman-2.1.14_rc1.ebuild
new file mode 100644
index 000000000000..e9109d5c6380
--- /dev/null
+++ b/net-mail/mailman/mailman-2.1.14_rc1.ebuild
@@ -0,0 +1,164 @@
+# Copyright 1999-2010 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-mail/mailman/mailman-2.1.14_rc1.ebuild,v 1.1 2010/09/13 23:12:08 hanno Exp $
+
+inherit eutils python multilib
+
+DESCRIPTION="A python-based mailing list server with an extensive web interface"
+SRC_URI="mirror://sourceforge/${PN}/${P/_/}.tgz"
+HOMEPAGE="http://www.list.org/"
+
+SLOT="0"
+LICENSE="GPL-2"
+KEYWORDS="~amd64 ~ppc ~sparc ~x86"
+IUSE=""
+
+DEPEND=">=dev-lang/python-2.3
+	virtual/mta
+	virtual/cron
+	virtual/httpd-cgi"
+RDEPEND="${DEPEND}"
+S="${WORKDIR}/${P/_/}"
+
+pkg_setup() {
+	INSTALLDIR=${MAILMAN_PREFIX:-"/usr/$(get_libdir)/mailman"}
+	VAR_PREFIX=${MAILMAN_VAR_PREFIX:-"/var/lib/mailman"}
+	CGIUID=${MAILMAN_CGIUID:-apache}
+	CGIGID=${MAILMAN_CGIGID:-apache}
+	MAILUSR=${MAILMAN_MAILUSR:-mailman}
+	MAILUID=${MAILMAN_MAILUID:-280}
+	MAILGRP=${MAILMAN_MAILGRP:-mailman}
+	MAILGID=${MAILMAN_MAILGID:-280}
+
+	# Bug #58526: switch to enew{group,user}.
+	# need to add mailman here for compile process.
+	# Duplicated at pkg_postinst() for binary install.
+	enewgroup ${MAILGRP} ${MAILGID}
+	enewuser  ${MAILUSR} ${MAILUID} /bin/bash ${INSTALLDIR} mailman -G cron -c "mailman"
+}
+
+src_unpack() {
+	unpack ${A}
+	cd "${S}"
+	epatch "${FILESDIR}/${PN}-2.1.14_rc1-directory-check.patch" || die "patch failed."
+	epatch "${FILESDIR}/${PN}-2.1.9-icons.patch" || die "patch failed."
+	epatch "${FILESDIR}/${PN}-2.1.13-ldflags.patch"
+}
+
+src_compile() {
+	econf --without-permcheck \
+		--prefix="${INSTALLDIR}" \
+		--with-mail-gid=${MAILGID} \
+		--with-cgi-gid=${CGIGID} \
+		--with-cgi-ext="${MAILMAN_CGIEXT}" \
+		--with-var-prefix="${VAR_PREFIX}" \
+		--with-username=${MAILUSR} \
+		--with-groupname=${MAILGRP} \
+	|| die "configure failed"
+
+	emake || die "make failed"
+}
+
+src_install () {
+	emake "DESTDIR=${D}" doinstall || die
+
+	insinto /etc/apache2/modules.d
+	newins "${FILESDIR}/50_mailman.conf-r1" 50_mailman.conf
+	dosed "s:/usr/local/mailman/cgi-bin:${INSTALLDIR}/cgi-bin:g" /etc/apache2/modules.d/50_mailman.conf
+	dosed "s:/usr/local/mailman/icons:${INSTALLDIR}/icons:g" /etc/apache2/modules.d/50_mailman.conf
+	dosed "s:/usr/local/mailman/archives:${VAR_PREFIX}/archives:g" /etc/apache2/modules.d/50_mailman.conf
+
+	newdoc "${FILESDIR}/README.gentoo-r3" README.gentoo || die "newdoc failed"
+
+	dodoc ACK* BUGS FAQ NEWS README* TODO UPGRADING INSTALL contrib/mailman.mc \
+		contrib/README.check_perms_grsecurity contrib/virtusertable || die "dodoc failed"
+
+	exeinto ${INSTALLDIR}/bin
+	doexe build/contrib/*.py contrib/majordomo2mailman.pl contrib/auto \
+		contrib/mm-handler* || die
+
+	dodir /etc/mailman
+	mv "${D}/${INSTALLDIR}/Mailman/mm_cfg.py" "${D}/etc/mailman"
+	dosym /etc/mailman/mm_cfg.py ${INSTALLDIR}/Mailman/mm_cfg.py
+
+	# Save the old config for updates from pre-2.1.9-r2
+	# To be removed some distant day
+	for i in /var/mailman /home/mailman /usr/local/mailman ${INSTALLDIR}
+	do
+		if [ -f ${i}/Mailman/mm_cfg.py ] && ! [ -L ${i}/Mailman/mm_cfg.py ]; then
+			cp ${i}/Mailman/mm_cfg.py "${D}/etc/mailman/mm_cfg.py"
+		fi
+	done
+
+	newinitd "${FILESDIR}/mailman.rc" mailman
+
+	keepdir ${VAR_PREFIX}/logs
+	keepdir ${VAR_PREFIX}/locks
+	keepdir ${VAR_PREFIX}/spam
+	keepdir ${VAR_PREFIX}/archives/public
+	keepdir ${VAR_PREFIX}/archives/private
+	keepdir ${VAR_PREFIX}/lists
+	keepdir ${VAR_PREFIX}/qfiles
+
+	chown -R ${MAILUSR}:${MAILGRP} "${D}/${VAR_PREFIX}" "${D}/${INSTALLDIR}" "${D}"/etc/mailman/*
+	chown ${CGIUID}:${MAILGRP} "${D}/${VAR_PREFIX}/archives/private"
+	chmod 2775 "${D}/${INSTALLDIR}" "${D}/${INSTALLDIR}"/templates/* \
+		"${D}/${INSTALLDIR}"/messages/* "${D}/${VAR_PREFIX}" "${D}/${VAR_PREFIX}"/{logs,lists,spam,locks,archives/public}
+	chmod 2770 "${D}/${VAR_PREFIX}/archives/private"
+	chmod 2770 "${D}/${VAR_PREFIX}/qfiles"
+	chmod 2755 "${D}/${INSTALLDIR}"/cgi-bin/* "${D}/${INSTALLDIR}/mail/mailman"
+
+}
+
+pkg_postinst() {
+	python_mod_optimize ${INSTALLDIR}/bin/ ${INSTALLDIR}/Mailman \
+		${INSTALLDIR}/pythonlib/*/
+
+	enewgroup ${MAILGRP} ${MAILGID}
+	enewuser  ${MAILUSR} ${MAILUID} -1 ${INSTALLDIR} mailman -G cron -c "mailman"
+	elog
+	elog "Please read /usr/share/doc/${PF}/README.gentoo.bz2 for additional"
+	elog "Setup information, mailman will NOT run unless you follow"
+	elog "those instructions!"
+	elog
+
+	elog "An example Mailman configuration file for Apache has been installed into:"
+	elog "  ${APACHE2_MODULES_CONFDIR}/50_mailman.conf"
+	elog
+	elog "To enable, you will need to add \"-D MAILMAN\" to"
+	elog "/etc/conf.d/apache2."
+	elog
+
+	ewarn "Default-Configuration has changed deeply in 2.1.9-r2. You can configure"
+	ewarn "mailman with the following variables:"
+	ewarn "MAILMAN_PREFIX (default: /usr/$(get_libdir)/mailman)"
+	ewarn "MAILMAN_VAR_PREFIX (default: /var/lib/mailman)"
+	ewarn "MAILMAN_CGIUID (default: apache)"
+	ewarn "MAILMAN_CGIGID (default: apache)"
+	ewarn "MAILMAN_CGIEXT (default: empty)"
+	ewarn "MAILMAN_MAILUSR (default: mailman)"
+	ewarn "MAILMAN_MAILUID (default: 280)"
+	ewarn "MAILMAN_MAILGRP (default: mailman)"
+	ewarn "MAILMAN_MAILGID (default: 280)"
+	ewarn
+	ewarn "Config file is now symlinked in /etc/mailman, so etc-update works."
+	ewarn
+	ewarn "If you're upgrading from below 2.1.9-r2 or changed MAILMAN_PREFIX, you"
+	ewarn "NEED to make a few manual updates to your system:"
+	ewarn
+	ewarn "1.  Update your mailman users's home directory: usermod -d ${INSTALLDIR} mailman"
+	ewarn "2.  Re-import the crontab: su - mailman -c 'crontab cron/crontab.in'"
+	ewarn "3.  Copy your old mm_cfg.py file to /etc/mailman/mm_cfg.py"
+	ewarn
+	ewarn "Additionally if you've modified MAILMAN_VAR_PREFIX (or upgraded from"
+	ewarn "a pre 2.1.9-r2 installation), you should move your old lists/ and"
+	ewarn "archives/ directory to the new location, ensuring that the"
+	ewarn "permissions is correct.  See bug #208789 for a discussion."
+	ebeep
+}
+
+pkg_postrm() {
+	INSTALLDIR=${MAILMAN_PREFIX:-"/usr/$(get_libdir)/mailman"}
+	python_mod_cleanup ${INSTALLDIR}/bin ${INSTALLDIR}/Mailman \
+		${INSTALLDIR}/pythonlib/*/
+}