The following reply was made to PR pkg/24041; it has been noted by GNATS.

From: Soren Jacobsen <snj@netbsd.org>
To: gnats-bugs@netbsd.org
Cc: 
Subject: PR/24041 CVS commit: [pkgsrc-2004Q4] pkgsrc/mail/mailman
Date: Tue, 22 Feb 2005 22:13:28 +0000 (UTC)

 Module Name:	pkgsrc
 Committed By:	snj
 Date:		Tue Feb 22 22:13:28 UTC 2005
 
 Modified Files:
 	pkgsrc/mail/mailman [pkgsrc-2004Q4]: Makefile PLIST distinfo
 Added Files:
 	pkgsrc/mail/mailman [pkgsrc-2004Q4]: DEINSTALL INSTALL
 	pkgsrc/mail/mailman/patches [pkgsrc-2004Q4]: patch-ai
 
 Log Message:
 Pullup ticket 304 - requested by Lubomir Sedlacik
 security fix for mailman
 
 Revisions pulled up:
 - pkgsrc/mail/mailman/Makefile		1.16,1.19
 - pkgsrc/mail/mailman/PLIST		1.5
 - pkgsrc/mail/mailman/files/DEINSTALL	1.1
 - pkgsrc/mail/mailman/files/INSTALL	1.1
 - pkgsrc/mail/mailman/distinfo		1.5
 - pkgsrc/mail/mailman/patches/patch-ai	1.1
 
     Module Name:    pkgsrc
     Committed By:   kim
     Date:           Sat Dec 25 16:55:33 UTC 2004
 
     Modified Files:
             pkgsrc/mail/mailman: Makefile PLIST
     Added Files:
             pkgsrc/mail/mailman/files: DEINSTALL INSTALL
 
     Log Message:
     Change permissions of installed files to match what is required by
     the software to work.  Run "check_perms -f" to make sure permissions
     are correct (it still fixes a setgid problem with "mail/mailman").
 
     Remove mm_cfg.pyc (compiled copy of mm_cfg.py) always, so the package
     can be deinstalled cleanly.
 
     Closes PR pkg/24041.
 
     ---
 
     Module Name:    pkgsrc
     Committed By:   tv
     Date:           Mon Feb 14 16:56:38 UTC 2005
 
     Modified Files:
             pkgsrc/mail/mailman: Makefile distinfo
     Added Files:
             pkgsrc/mail/mailman/patches: patch-ai
 
     Log Message:
     Apply patch from Mailman maintainers to fix vulnerability described in:
     http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0202
 
 
 To generate a diff of this commit:
 cvs rdiff -r0 -r1.1.2.1 pkgsrc/mail/mailman/DEINSTALL \
     pkgsrc/mail/mailman/INSTALL
 cvs rdiff -r1.15 -r1.15.2.1 pkgsrc/mail/mailman/Makefile
 cvs rdiff -r1.4 -r1.4.8.1 pkgsrc/mail/mailman/PLIST
 cvs rdiff -r1.4 -r1.4.4.1 pkgsrc/mail/mailman/distinfo
 cvs rdiff -r0 -r1.1.2.1 pkgsrc/mail/mailman/patches/patch-ai
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.