Security bump. see bug #129136

(Portage version: 2.0.54)

5 files changed, 194 insertions, 53 deletions

diff --git a/net-mail/mailman/ChangeLog b/net-mail/mailman/ChangeLog
index 6b1948977ac6..928aa59dddb6 100644
--- a/net-mail/mailman/ChangeLog
+++ b/net-mail/mailman/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for net-mail/mailman
 # Copyright 2002-2006 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-mail/mailman/ChangeLog,v 1.71 2006/02/13 04:12:08 weeve Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-mail/mailman/ChangeLog,v 1.72 2006/04/14 16:42:12 mholzer Exp $
+
+*mailman-2.1.8_rc1 (14 Apr 2006)
+
+  14 Apr 2006; Martin Holzer <mholzer@gentoo.org>
+  +files/mailman-2.1.8_rc1-directory-check.patch, +mailman-2.1.8_rc1.ebuild:
+  Security bump. see bug #129136
 
   13 Feb 2006; Jason Wever <weeve@gentoo.org> mailman-2.1.7.ebuild:
   Stable on SPARC wrt security bug #119313.
@@ -52,7 +58,7 @@
 
 *mailman-2.1.6_beta1 (12 Feb 2005)
 
-  12 Feb 2005; Tuấn Văn <langthang@gentoo.org>
+  12 Feb 2005; Tuấn Văn <langthang@gentoo.org>
   +files/mailman-2.1.6_beta1-directory-check.patch,
   +mailman-2.1.6_beta1.ebuild:
   New version. New directory-check.patch, thanks to Brian Harring <ferringb@gentoo.org>
@@ -63,10 +69,10 @@
   09 Feb 2005; Gustavo Zacarias <gustavoz@gentoo.org> mailman-2.1.5-r4.ebuild:
   Stable on sparc wrt #81109
 
-  09 Feb 2005; Olivier Crête <tester@gentoo.org> mailman-2.1.5-r4.ebuild:
+  09 Feb 2005; Olivier Crête <tester@gentoo.org> mailman-2.1.5-r4.ebuild:
   Stable on x86, bug #81109
 
-  09 Feb 2005; Tuấn Văn <langthang@gentoo.org>
+  09 Feb 2005; Tuấn Văn <langthang@gentoo.org>
   +files/mailman-2.1.5-true_path.patch:
   revision bump with true_path patch.
 
@@ -74,7 +80,7 @@
   mailman-2.1.5-r3.ebuild:
   Stable on amd64, bug #77524
 
-  16 Jan 2005; Tuấn Văn <langthang@gentoo.org> mailman-2.1.5-r3.ebuild:
+  16 Jan 2005; Tuấn Văn <langthang@gentoo.org> mailman-2.1.5-r3.ebuild:
   stable on x86.
 
   16 Jan 2005; Jason Wever <weeve@gentoo.org> mailman-2.1.5-r3.ebuild:
@@ -82,7 +88,7 @@
 
 *mailman-2.1.5-r3 (15 Jan 2005)
 
-  15 Jan 2005; Tuấn Văn <langthang@gentoo.org>
+  15 Jan 2005; Tuấn Văn <langthang@gentoo.org>
   +files/mailman-2.1.5-driver.cvs.patch, +mailman-2.1.5-r3.ebuild:
   revision bump to resolve bug #77524.
 
diff --git a/net-mail/mailman/Manifest b/net-mail/mailman/Manifest
index c1841fbee14d..f050c4502d0a 100644
--- a/net-mail/mailman/Manifest
+++ b/net-mail/mailman/Manifest
@@ -1,69 +1,26 @@
-MD5 99dab3393be816c5b1614cd0c306253d ChangeLog 9553
-RMD160 b1e3beff39654ec5a9006b0a4047d3ddde391698 ChangeLog 9553
-SHA256 3034db39ce94f52b6215392a5e27e6e96e6a1a11393437e1d41bc5074bbe256b ChangeLog 9553
+MD5 20b63c057925c086076a07724a34e880 ChangeLog 9770
 MD5 165ec3889c73f334f7b524c654977066 files/50_mailman.conf 429
-RMD160 54104453464b725adc18e5fb66bee265089013f6 files/50_mailman.conf 429
-SHA256 8a93c5f9b2012122c6e85445620d5eb388e1bc38cb2102158bb62681cb61d3ec files/50_mailman.conf 429
 MD5 ea0c850a55a563d90a520ab52809112f files/README.gentoo 4963
-RMD160 13ffe8aeb91ed2a2ff8e7a2b060c7697e19e280e files/README.gentoo 4963
-SHA256 1c16bc84fa18b94884277f57f9ab535a80bee4c4e72783a78d0b109c1532c6c3 files/README.gentoo 4963
 MD5 136d82be0bd84eff6961446171dbe288 files/digest-mailman-2.1.5-r4 63
-RMD160 689928adacbd8a9b9bf64c38e1341d4ac704b0c6 files/digest-mailman-2.1.5-r4 63
-SHA256 1f6a203e04ebb008eebf2316a333eb2e19f22490dc5556f47b3aa4dafcfb7a4d files/digest-mailman-2.1.5-r4 63
 MD5 136d82be0bd84eff6961446171dbe288 files/digest-mailman-2.1.5-r5 63
-RMD160 689928adacbd8a9b9bf64c38e1341d4ac704b0c6 files/digest-mailman-2.1.5-r5 63
-SHA256 1f6a203e04ebb008eebf2316a333eb2e19f22490dc5556f47b3aa4dafcfb7a4d files/digest-mailman-2.1.5-r5 63
 MD5 67bd3d52df6390733875bb04e142d471 files/digest-mailman-2.1.6 63
-RMD160 e3744f8143f0e42ba58fb37f55692438d5d7863e files/digest-mailman-2.1.6 63
-SHA256 4feddcd8607da6ba56d4b91824ed84586f6d183ae0076c994f4ebecdf060fd41 files/digest-mailman-2.1.6 63
 MD5 b6cf776a5d518cd817fcac8a007c265b files/digest-mailman-2.1.6_rc4 66
-RMD160 18f2d96c1c01c0424cca8037b83c2a6cb960e285 files/digest-mailman-2.1.6_rc4 66
-SHA256 5232dae11fef58fa821b46d7b3e08eb9bde19443f6267d270787f9d14dc21d62 files/digest-mailman-2.1.6_rc4 66
 MD5 b8cbeb10e0b59889315d0e112785ebbf files/digest-mailman-2.1.7 63
-RMD160 bca96b989fcfc492ffc2278e9c0c531eff83c9d0 files/digest-mailman-2.1.7 63
-SHA256 c7af7490150aa978d5cea36f894918602e2904d5b0231b9d64034a8eee9d5a55 files/digest-mailman-2.1.7 63
+MD5 b17eefee4b51f107be5eb6e2f5e89fa3 files/digest-mailman-2.1.8_rc1 66
 MD5 1c839f4abbbe57c6ffc915fc8dc3018c files/mailman-2.1.5-directory-check.patch 641
-RMD160 06e080d7cf7dcfc1c026be7ce0f1df0152048c64 files/mailman-2.1.5-directory-check.patch 641
-SHA256 45b1840bddb002d904f303cf25c466ea99eae714a4b8c8dcab1054f28d939678 files/mailman-2.1.5-directory-check.patch 641
 MD5 740c1eb479ebc2df0109668027f60762 files/mailman-2.1.5-driver.cvs.patch 2539
-RMD160 8ed9a1f8132d4b578d9bf162ef07fc82cc3117fc files/mailman-2.1.5-driver.cvs.patch 2539
-SHA256 5b2c21821f896d4834ae8ee188a1d8412f4f1c32ebdb65caf7d8070813a24f30 files/mailman-2.1.5-driver.cvs.patch 2539
 MD5 ede21221890a680ccadd3a6f142f3802 files/mailman-2.1.5-true_path.patch 447
-RMD160 afb650d1ad844ec2f376c065e3128db91c20ff87 files/mailman-2.1.5-true_path.patch 447
-SHA256 221cada753938fe020e7ed483c372288d06eba1c37eb07731ed3e39877836949 files/mailman-2.1.5-true_path.patch 447
 MD5 130b235f32a50d11f76a88b979fb4245 files/mailman-2.1.6-directory-check.patch 1287
-RMD160 3bf6d1216a79a32d68340cb0df5db9b5f44a3931 files/mailman-2.1.6-directory-check.patch 1287
-SHA256 2d31eda834429a55edad1fea3c379ecb3e8f05c03fac82f172989caeab85314d files/mailman-2.1.6-directory-check.patch 1287
 MD5 208aa179cb4feeb3597841fe30529d15 files/mailman-2.1.6_beta1-directory-check.patch 1494
-RMD160 2d986ed48d8794cc7a444ce41bb9e31a8fba394f files/mailman-2.1.6_beta1-directory-check.patch 1494
-SHA256 6c1a2bb5500c84f49280a575b4c52af25e419d3ed53cc8d6c9d565aed39aa9f6 files/mailman-2.1.6_beta1-directory-check.patch 1494
 MD5 130b235f32a50d11f76a88b979fb4245 files/mailman-2.1.6_rc4-directory-check.patch 1287
-RMD160 3bf6d1216a79a32d68340cb0df5db9b5f44a3931 files/mailman-2.1.6_rc4-directory-check.patch 1287
-SHA256 2d31eda834429a55edad1fea3c379ecb3e8f05c03fac82f172989caeab85314d files/mailman-2.1.6_rc4-directory-check.patch 1287
 MD5 130b235f32a50d11f76a88b979fb4245 files/mailman-2.1.7-directory-check.patch 1287
-RMD160 3bf6d1216a79a32d68340cb0df5db9b5f44a3931 files/mailman-2.1.7-directory-check.patch 1287
-SHA256 2d31eda834429a55edad1fea3c379ecb3e8f05c03fac82f172989caeab85314d files/mailman-2.1.7-directory-check.patch 1287
+MD5 130b235f32a50d11f76a88b979fb4245 files/mailman-2.1.8_rc1-directory-check.patch 1287
 MD5 3089c1f0f8d91abdd612997b085959eb files/mailman.conf 385
-RMD160 bec3c71140385fa88078ffb38be14bfd8ec068c6 files/mailman.conf 385
-SHA256 fdd86c4a72318ade5dfe0f075ce62470979f93d8a4c862993dc32e7bdb422eab files/mailman.conf 385
 MD5 ce6d06f51e3da34e92048369e9fe14d2 files/mailman.rc 597
-RMD160 be0a574298a1d8d547a4ca76f864dd5fee9b897d files/mailman.rc 597
-SHA256 ef4f5482cf68ba44a0fbb83acde29295bd8dcb6512d259d14387dfc29beeb625 files/mailman.rc 597
 MD5 4b900bf200ef5581266a4b9c66cef87b mailman-2.1.5-r4.ebuild 4511
-RMD160 f5eefe10671c71f9584616c058150f5cabd8c29d mailman-2.1.5-r4.ebuild 4511
-SHA256 b9ab1cfa96ba25bfebee03d5838a30ce3adde9ed08d546295714937d912a3b60 mailman-2.1.5-r4.ebuild 4511
 MD5 8c528315bd7d3fd689d76c7b88027f8d mailman-2.1.5-r5.ebuild 4018
-RMD160 14256f0e1156cf4ca6d18b76651041b935025835 mailman-2.1.5-r5.ebuild 4018
-SHA256 c82d0ebba671f8bd81dfc19b509db717024f5b6bec8f855ece03255e79cb4adb mailman-2.1.5-r5.ebuild 4018
 MD5 417c3f75decb0d31c5f9f1baccf8b11a mailman-2.1.6.ebuild 4346
-RMD160 d5760e691b3b4a179d226de031dc74276c606efc mailman-2.1.6.ebuild 4346
-SHA256 ce981d54c701af929a6601a47ea9914ca53b443a1fcad0874a6d9edc3e5ecbbd mailman-2.1.6.ebuild 4346
 MD5 0eba7b183f41b3ecaa8eaa2e6941cd53 mailman-2.1.6_rc4.ebuild 4353
-RMD160 bf3fed1af0d261e4fe79a266c2d51ca9e567b92d mailman-2.1.6_rc4.ebuild 4353
-SHA256 a4f7a3d0533fba10e7350998acf05f244e24598b83446a14c929f8ee50c53be9 mailman-2.1.6_rc4.ebuild 4353
 MD5 e83c78d42876b9dcb68aaa7cbd0b5a7d mailman-2.1.7.ebuild 4344
-RMD160 a5b5b247219a04740477233082aa41364a5f49fe mailman-2.1.7.ebuild 4344
-SHA256 1df89f5b228ce6c302a023632a2cd20f05ee76c8389b6fd4df28657e883936ab mailman-2.1.7.ebuild 4344
+MD5 22f15683eed8f04bb265ce550f9172e7 mailman-2.1.8_rc1.ebuild 4175
 MD5 5721b86fd871bdfab77231abc6e02f68 metadata.xml 161
-RMD160 273e570423fa3cd9d3f15f7967a43307c8ee9661 metadata.xml 161
-SHA256 4ebf9a8f60040bfb95f13790c1d146a49c69f791f9c421e02a5d96fd6fcb2b32 metadata.xml 161
diff --git a/net-mail/mailman/files/digest-mailman-2.1.8_rc1 b/net-mail/mailman/files/digest-mailman-2.1.8_rc1
new file mode 100644
index 000000000000..4bd883272e2d
--- /dev/null
+++ b/net-mail/mailman/files/digest-mailman-2.1.8_rc1
@@ -0,0 +1 @@
+MD5 7d56c45ded47c62d642a6e8b016ee8ee mailman-2.1.8rc1.tgz 6856298
diff --git a/net-mail/mailman/files/mailman-2.1.8_rc1-directory-check.patch b/net-mail/mailman/files/mailman-2.1.8_rc1-directory-check.patch
new file mode 100644
index 000000000000..d8542fcf6a88
--- /dev/null
+++ b/net-mail/mailman/files/mailman-2.1.8_rc1-directory-check.patch
@@ -0,0 +1,30 @@
+--- bin/check_perms.org	2005-05-25 00:04:15.000000000 +0200
++++ bin/check_perms	2005-05-25 00:04:35.000000000 +0200
+@@ -331,6 +331,8 @@
+         print _('checking permissions on list data')
+     # BAW: This needs to be converted to the Site module abstraction
+     for dir in os.listdir(mm_cfg.LIST_DATA_DIR):
++        if not S_ISDIR(statmode(os.path.join(mm_cfg.LIST_DATA_DIR,dir))):
++            continue
+         for file in checkfiles:
+             path = os.path.join(mm_cfg.LIST_DATA_DIR, dir, file)
+             if STATE.VERBOSE:
+--- bin/update.org	2005-05-25 00:04:30.000000000 +0200
++++ bin/update	2005-05-25 00:04:35.000000000 +0200
+@@ -34,6 +34,7 @@
+ """
+ 
+ import os
++import stat
+ import md5
+ import sys
+ import time
+@@ -425,7 +426,7 @@
+     # Now update for the Mailman 2.1.5 qfile format.  For every filebase in
+     # the qfiles/* directories that has both a .pck and a .db file, pull the
+     # data out and re-queue them.
+-    for dirname in os.listdir(mm_cfg.QUEUE_DIR):
++    for dirname in [x for x in os.listdir(mm_cfg.QUEUE_DIR) if stat.S_ISDIR(os.stat(os.path.join(mm_cfg.QUEUE_DIR,x)).st_mode)]:
+         dirpath = os.path.join(mm_cfg.QUEUE_DIR, dirname)
+         if dirpath == mm_cfg.BADQUEUE_DIR:
+             # The files in qfiles/bad can't possibly be pickles
diff --git a/net-mail/mailman/mailman-2.1.8_rc1.ebuild b/net-mail/mailman/mailman-2.1.8_rc1.ebuild
new file mode 100644
index 000000000000..753685a8bb2b
--- /dev/null
+++ b/net-mail/mailman/mailman-2.1.8_rc1.ebuild
@@ -0,0 +1,147 @@
+# Copyright 1999-2006 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-mail/mailman/mailman-2.1.8_rc1.ebuild,v 1.1 2006/04/14 16:42:12 mholzer Exp $
+
+inherit eutils depend.apache
+IUSE="apache2 postfix sendmail qmail courier exim xmail"
+
+MY_PV=${PV/_rc/rc}
+
+DESCRIPTION="A python-based mailing list server with an extensive web interface"
+SRC_URI="mirror://sourceforge/${PN}/${PN}-${MY_PV}.tgz"
+HOMEPAGE="http://www.list.org/"
+
+SLOT="O"
+LICENSE="GPL-2"
+KEYWORDS="~amd64 ~ppc ~sparc ~x86"
+
+DEPEND=">=dev-lang/python-2.3
+	virtual/mta
+	net-www/apache"
+
+INSTALLDIR="/usr/local/mailman"
+APACHEGID="81"
+
+if use postfix; then
+	MAILGID="280"
+elif use sendmail; then
+	MAILGID=daemon
+elif use qmail; then
+	MAILGID=qmail
+elif use courier; then
+	MAILGID=mail
+elif use exim; then
+	MAILGID=mail
+elif use xmail; then
+	MAILGID=xmail
+else
+	MAILGID="280"
+fi
+
+S=${WORKDIR}/${PN}-${MY_PV}
+
+pkg_setup() {
+	# Bug #58526: switch to enew{group,user}.
+	# need to add mailman here for compile process.
+	# Duplicated at pkg_postinst() for binary install.
+	enewgroup mailman 280
+	enewuser mailman 280 /bin/bash ${INSTALLDIR} mailman -G cron -c mailman
+	mkdir -p ${INSTALLDIR}
+	chown mailman:mailman ${INSTALLDIR}
+	chmod 2775 ${INSTALLDIR}
+}
+
+src_unpack() {
+	unpack ${A} && cd "${S}"
+	epatch ${FILESDIR}/${P}-directory-check.patch || die "patch failed."
+}
+
+src_compile() {
+
+	econf \
+		--prefix=${INSTALLDIR} \
+		--with-mail-gid=${MAILGID} \
+		--with-cgi-gid=${APACHEGID} \
+	|| die "configure failed"
+
+	make || die "make failed"
+}
+
+src_install () {
+	ID=${D}${INSTALLDIR}
+
+	make prefix=${ID} var_prefix=${ID} doinstall || die
+
+	keepdir ${INSTALLDIR}/logs
+	keepdir ${INSTALLDIR}/locks
+	keepdir ${INSTALLDIR}/spam
+	keepdir ${INSTALLDIR}/archives/public
+	keepdir ${INSTALLDIR}/archives/private
+	keepdir ${INSTALLDIR}/lists
+	keepdir ${INSTALLDIR}/qfiles
+
+	if use apache2; then
+		insinto ${APACHE2_MODULES_CONFDIR}
+	else
+		insinto ${APACHE1_MODULES_CONFDIR}
+	fi
+	newins ${FILESDIR}/mailman.conf 50_mailman.conf
+
+	dodoc ${FILESDIR}/README.gentoo
+	dodoc ACK* BUGS FAQ NEWS README* TODO UPGRADING INSTALL
+	dodoc contrib/README.check_perms_grsecurity contrib/mm-handler.readme
+	dodoc contrib/virtusertable contrib/mailman.mc
+
+	cp build/contrib/*.py contrib/majordomo2mailman.pl contrib/auto \
+		contrib/mm-handler* ${D}/usr/local/mailman/bin
+
+	# Save the old config into the new package as CONFIG_PROTECT
+	# doesn't work for this package.
+	if [ -f ${ROOT}/var/mailman/Mailman/mm_cfg.py ]; then
+		cp ${ROOT}/var/mailman/Mailman/mm_cfg.py \
+			${D}/usr/local/mailman/Mailman/mm_cfg.py
+		einfo "Your old config has been saved as mm_cfg.py"
+		einfo "A new config has been installed as mm_cfg.dist"
+	fi
+	if [ -f ${ROOT}/home/mailman/Mailman/mm_cfg.py ]; then
+		cp ${ROOT}/home/mailman/Mailman/mm_cfg.py \
+			${D}/usr/local/mailman/Mailman/mm_cfg.py
+		einfo "Your old config has been saved as mm_cfg.py"
+		einfo "A new config has been installed as mm_cfg.py.dist"
+	fi
+	if [ -f ${ROOT}/usr/local/mailman/Mailman/mm_cfg.py ]; then
+		cp ${ROOT}/usr/local/mailman/Mailman/mm_cfg.py \
+			${D}/usr/local/mailman/Mailman/mm_cfg.py
+		einfo "Your old config has been saved as mm_cfg.py"
+		einfo "A new config has been installed as mm_cfg.py.dist"
+	fi
+
+	exeinto /etc/init.d
+	newexe ${FILESDIR}/mailman.rc mailman
+
+	chown -R mailman:mailman ${ID}
+	chmod 2775 ${ID}
+}
+
+pkg_postinst() {
+	enewgroup mailman 280
+	enewuser mailman 280 -1 ${INSTALLDIR} mailman -G cron -c "mailman"
+	cd ${INSTALLDIR}
+	bin/update
+	einfo "Running \`${INSTALLDIR}/bin/check_perms -f\` *"
+	bin/check_perms -f
+	einfo ""
+	einfo "Please read /usr/share/doc/${PF}/README.gentoo.gz for additional"
+	einfo "Setup information, mailman will NOT run unless you follow"
+	einfo "those instructions!"
+	einfo ""
+
+	einfo "An example Mailman configuration file for Apache has been installed into:"
+	use apache2 && einfo "  ${APACHE2_MODULES_CONFDIR}/50_mailman.conf"
+	use apache2 || einfo "  ${APACHE1_MODULES_CONFDIR}/50_mailman.conf"
+	einfo ""
+	einfo "To enable, you will need to add \"-D MAILMAN\" to"
+	use apache2 && einfo "/etc/conf.d/apache2."
+	use apache2 || einfo "/etc/conf.d/apache."
+	einfo ""
+}