diff options
author | tm <tm@pkgsrc.org> | 2021-11-20 21:50:39 +0000 |
---|---|---|
committer | tm <tm@pkgsrc.org> | 2021-11-20 21:50:39 +0000 |
commit | 8a42713809deb6fc5fd61d9f9b7641d7f3a737c5 (patch) | |
tree | 095287d4e7a1865761d20a4c3c06c7b6dceccc18 /mail/mailman/Makefile | |
parent | d149bca7da99b88942fdd09b435f8fa13e7dd96b (diff) | |
download | pkgsrc-8a42713809deb6fc5fd61d9f9b7641d7f3a737c5.tar.gz |
Pullup ticket #6534 - requested by bsiegert
mail/mailman: security fix
Revisions pulled up:
- mail/mailman/Makefile 1.95
- mail/mailman/PLIST 1.31
- mail/mailman/distinfo 1.31
---
Module Name: pkgsrc
Committed By: tm
Date: Tue Oct 26 18:42:55 UTC 2021
Modified Files:
pkgsrc/mail/mailman: Makefile PLIST distinfo
Log Message:
mail/mailman: Update to 2.1.35
2.1.35 (19-Oct-2021)
Security
- A potential for for a list member to carry out an off-line brute force
attack to obtain the list admin password has been reported by Andre
Protas, Richard Cloke and Andy Nuttall of Apple. This is fixed.
CVE-2021-42096 (LP:#1947639)
- A CSRF attack via the user options page could allow takeover of a users
account. This is fixed. CVE-2021-42097 (LP:#1947640)
Bug Fixes and other patches
- Fixed an issue where sometimes the wrapper message for DMARC mitigation
Wrap Message has no Subject:. (LP: #1915655)
- Plain text message bodies with Content-Disposition: and no declared
charset are no longer scrubbed. (LP: #1917968)
- CommandRunner now recodes message bodies in the charset of the user's
or list's language to avoid a possible UnicodeError when including the
message body in the reply. (LP: #1921682)
- Delivery disabled by bounce notices to admins now have 'disabled'
properly translated. (LP: #1922843)
- DMARC policy discovery ignores domains with multiple DMARC records per
RFC 7849, (LP: 1931029)
Diffstat (limited to 'mail/mailman/Makefile')
-rw-r--r-- | mail/mailman/Makefile | 7 |
1 files changed, 3 insertions, 4 deletions
diff --git a/mail/mailman/Makefile b/mail/mailman/Makefile index ae7ba32c164..832b484b7d1 100644 --- a/mail/mailman/Makefile +++ b/mail/mailman/Makefile @@ -1,9 +1,8 @@ -# $NetBSD: Makefile,v 1.94 2020/12/04 20:45:27 nia Exp $ +# $NetBSD: Makefile,v 1.94.8.1 2021/11/20 21:50:39 tm Exp $ -DISTNAME= mailman-2.1.34 -PKGREVISION= 1 +DISTNAME= mailman-2.1.35 CATEGORIES= mail www -MASTER_SITES= https://launchpad.net/mailman/2.1/2.1.34/+download/ +MASTER_SITES= https://launchpad.net/mailman/2.1/2.1.35/+download/ EXTRACT_SUFX= .tgz MAINTAINER= pkgsrc-users@NetBSD.org |