Module Name:	pkgsrc
Committed By:	bouyer
Date:		Sat Sep  9 23:20:11 UTC 2006

Modified Files:
	pkgsrc/mail/mailman: Makefile PLIST distinfo

Log Message:
Update to 2.1.9rc1, fixes security issues.

  Security

    - A malicious user could visit a specially crafted URI and inject an
      apparent log message into Mailman's error log which might induce an
      unsuspecting administrator to visit a phishing site.  This has been
      blocked.  Thanks to Moritz Naumann for its discovery.

    - Fixed denial of service attack which can be caused by some
      standards-breaking RFC 2231 formatted headers.  CVE-2006-2941.

    - Several cross-site scripting issues have been fixed.  Thanks to Moritz
      Naumann for their discovery.  CVE-2006-3636

  Internationalization

    - New languages: Arabic, Vietnamese.

  Bug fixes and other patches

    - Fixed Decorate.py so that characters in message header/footer which
      are not in the character set of the list's language are ignored rather
      than causing shunted messages (1507248).

    - Switchboard.py - Closed very tiny holes at the upper ends of queue
      slices that could result in unprocessable queue entries.  Improved FIFO
      processing when two queue entries have the same timestamp.


To generate a diff of this commit:
cvs rdiff -r1.44 -r1.45 pkgsrc/mail/mailman/Makefile
cvs rdiff -r1.11 -r1.12 pkgsrc/mail/mailman/PLIST
cvs rdiff -r1.12 -r1.13 pkgsrc/mail/mailman/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.