lp:ubuntu/gutsy/mailman

Created by James Westby and last modified
Get this branch:
bzr branch lp:ubuntu/gutsy/mailman
Members of Ubuntu branches can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Review team:
Ubuntu Development Team
Status:
Development

Recent revisions

14. By Thijs Kinkhorst

[ Thijs Kinkhorst ]
* Added Portuguese debconf translation by Miguel Figueiredo
  (Closes: #414365).
* Make sure Mailman can be properly purged (Closes: #421676).
* Remove obsolete upgrading code.
* Do not break upgrades in case python is temporarily unavailable
  (Closes: #419563).

[ Lionel Elie Mamane ]
* Avoid implicit-sort-on-load of indexes being converted to Unicode
  (hopefully really closes: #412142 now)

13. By Lionel Elie Mamane <email address hidden>

Upgrade subject and author indexes of _all_ archiving volumes to
Unicode strings. (completely closes: #412142)

12. By Martin Pitt

* Merge from debian unstable, remaining changes:
  - debian/control: exim4 -> postfix.

11. By Martin Pitt

* Synchronize to Debian; remaining Ubuntu change:
  - debian/control: exim4 -> postfix.

10. By Martin Pitt

* SECURITY UPDATE: XSS.
* Add debian/patches/security-CVE-2006-3636-XSS.dpatch:
  - Fix various cross-site scripting vulnerabilities.
  - Patch backported from svn head, thanks to Barry Warsaw for preparing it.
  - CVE-2006-3636
* Add debian/patches/security-CVE-2006-2941.dpatch:
  - Scrubber.py: Do not bail out if emails' get_filename() throws a
    ValueError. This has been properly fixed in the next upstream email
    package (in Python core), but the fix is very intrusive. Thanks to Steve
    Alexander for discovering this and for the proposed patch.
  - CVE-2006-2941
  - Closes: LP#49620
* Add debian/patches/security-error_log.dpatch:
  - Check characters in URL to prevent injecting bogus messages into
    error_log.
  - Patch taken from upstream SVN:
    http://svn.sourceforge.net/viewvc/mailman?view=rev&revision=7918

9. By Martin Pitt

Merge new Debian revision; Debian adopted the init script and apache2
dependency fix, only remaining diff is the exim4->postfix dependency
change.

8. By Martin Pitt

* Merge to Debian; remaining Ubuntu changes:
  - debian/mailman.init: Create /var/{run,lock}/mailman.
  - debian/control: exim4 -> postfix.
* debian/control: Dependency fix: apache -> apache2.

7. By Martin Pitt

* Security update: Remote DoS.
* Add debian/patches/72_mime_None_payload.dpatch:
  - Do not crash if python's email module returns None for the payload of a
    MIME part. This can happen for message/delivery-status or parts that
    contain only two blank lines.
  - See upstream bug reports and CVS patch:
    https://sourceforge.net/tracker/?func=detail&atid=100103&aid=1430236&group_id=103
    https://sourceforge.net/tracker/?func=detail&atid=100103&aid=1099138&group_id=103
    http://cvs.sourceforge.net/viewcvs.py/mailman/mailman/Mailman/
    Handlers/Scrubber.py?r1=2.18.2.22&r2=2.18.2.23&diff_format=u
* CVE-2006-0052

6. By Tollef Fog Heen

Create /var/run/mailman and /var/lock/mailman if they're missing.
Part of the New World Order with those being tmpfs-es. Malone #33749

5. By Martin Pitt

* SECURITY UPDATE: Remote DoS.
* Add debian/patches/70_invalid_utf8_dos.dpatch:
  - Do not crash on attachment filenames with invalid UTF-8 encoded name.
  - Thanks to Lionel Elie Mamane <email address hidden> for preparing the
    patch.
  - CVE-2005-3573
* Add debian/patches/71_invalid_date_dos.dpatch:
  - Do not crash on mails with specially crafted dates which generate an
    OverflowError exception.
  - CVE-2005-4153

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:ubuntu/karmic/mailman
This branch contains Public information 
Everyone can see this information.

Subscribers