CVS commit: pkgsrc/mail/mailman

["Greg Troxel" <gdt%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   gdt
Date:           Tue Aug 27 16:56:57 UTC 2024

Modified Files:
        pkgsrc/mail/mailman: DESCR Makefile distinfo

Log Message:
mail/mailman: Update to 2.1.39

Welcome to December, 2021.

packaging changes: Adapt to excessively complicated and hard-to-deal
with upstream URLs.

Upstream NEWS:

2.1.39 (13-Dec-2021)

  Bug Fixes and other patches

    - User matching for CSRF tokens is no longer case sensitive., and a
      potential NamerError in logging is fixed.  (LP: #1954694)

2.1.38 (30-Nov-2021)

  Security

    - A potential CSRF attack against a list admin from a list member or
      moderator has been blocked.  CVE-2021-44227  (LP: #1952384)

  Bug Fixes and other patches

    - NotAMemberError exception from the user options page when the user has
      been asynchronously unsubscribed is fixed.  (LP: #1951769)

2.1.37 (12-Nov-2021)

  Bug Fixes and other patches

    - A bug in the fix for CVE-2021-43332 has neen fixed.  (LP: #1950833)

2.1.36 (12-Nov-2021)

  Security

    - A potential XSS attack via the user options page has been reported by
      Harsh Jaiswal.  This is fixed.  CVE-2021-43331 (LP: #1949401)

    - A potential for for a list moderator to carry out an off-line brute force
      attack to obtain the list admin password has been reported by Andre
      Protas, Richard Cloke and Andy Nuttall of Apple.  This is fixed.
      CVE-2021-43332 (LP: #1949403)


To generate a diff of this commit:
cvs rdiff -u -r1.2 -r1.3 pkgsrc/mail/mailman/DESCR
cvs rdiff -u -r1.99 -r1.100 pkgsrc/mail/mailman/Makefile
cvs rdiff -u -r1.31 -r1.32 pkgsrc/mail/mailman/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/mailman/DESCR
diff -u pkgsrc/mail/mailman/DESCR:1.2 pkgsrc/mail/mailman/DESCR:1.3
--- pkgsrc/mail/mailman/DESCR:1.2       Wed May  8 15:15:37 2024
+++ pkgsrc/mail/mailman/DESCR   Tue Aug 27 16:56:57 2024
@@ -8,4 +8,5 @@ archiving, mail-to-news gateways, spam f
 delivery, and so on.  See the features page (http://www.list.org/features.html)
 for more detail.
 
-This is Mailman 2, rather than the current version 3.
+This is Mailman 2, rather than the current version 3.  Mailman 2 is no
+longer maintained upstream; the last release was in 2021.

Index: pkgsrc/mail/mailman/Makefile
diff -u pkgsrc/mail/mailman/Makefile:1.99 pkgsrc/mail/mailman/Makefile:1.100
--- pkgsrc/mail/mailman/Makefile:1.99   Tue Aug 27 16:46:21 2024
+++ pkgsrc/mail/mailman/Makefile        Tue Aug 27 16:56:57 2024
@@ -1,9 +1,11 @@
-# $NetBSD: Makefile,v 1.99 2024/08/27 16:46:21 gdt Exp $
+# $NetBSD: Makefile,v 1.100 2024/08/27 16:56:57 gdt Exp $
 
-DISTNAME=      mailman-2.1.35
-PKGREVISION=   3
+VERSION_MINOR= 2.1
+VERSION_MICRO= 39
+VERSION=       ${VERSION_MINOR}.${VERSION_MICRO}
+DISTNAME=      mailman-${VERSION}
 CATEGORIES=    mail www
-MASTER_SITES=  https://launchpad.net/mailman/2.1/2.1.35/+download/
+MASTER_SITES=  https://launchpad.net/mailman/${VERSION_MINOR}/${VERSION}/+download/
 EXTRACT_SUFX=  .tgz
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost

Index: pkgsrc/mail/mailman/distinfo
diff -u pkgsrc/mail/mailman/distinfo:1.31 pkgsrc/mail/mailman/distinfo:1.32
--- pkgsrc/mail/mailman/distinfo:1.31   Tue Oct 26 18:42:55 2021
+++ pkgsrc/mail/mailman/distinfo        Tue Aug 27 16:56:57 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.31 2021/10/26 18:42:55 tm Exp $
+$NetBSD: distinfo,v 1.32 2024/08/27 16:56:57 gdt Exp $
 
-BLAKE2s (mailman-2.1.35.tgz) = a6a80c5ad82c38e6801fadd2995c140562baa9b716aab78ffd99671ff627023f
-SHA512 (mailman-2.1.35.tgz) = 2411a1a8196ec9c298231bfb649c2575b899ce167730b0069c76712a95c488520ca55b56a383b18a3e245774ad76ca1df7dbf3a937c2e2837021128709746ae4
-Size (mailman-2.1.35.tgz) = 9508348 bytes
+BLAKE2s (mailman-2.1.39.tgz) = c94e24bb305546af36787b111f69f086332ab0c9ab7352bb5656499478c9c2a8
+SHA512 (mailman-2.1.39.tgz) = f5d6b16e4c8bae608d9c98182ec6a10b9bdd2cf4be7286d35991b5315b053be600e59753cc37444ebe9eacffc9b1d20bc5f64cf8ec6be953285b455ab1ba1356
+Size (mailman-2.1.39.tgz) = 9508474 bytes
 SHA1 (patch-aa) = 9684b1caeb52f31ee6967eae3f9a464de214879e
 SHA1 (patch-ab) = 39f6294e53110bd1fd09b1e90ab46820f4d48e3f
 SHA1 (patch-ad) = 665884b9dd1789e4abd430c762bdbfd707d48d30