ports/mail/mailman/files/patch-Mailman__htmlformat.py
Matthias Andree e60b89a6a0 Security update to 2.1.26 (XSS bug), assorted other fixes.
- Fix checksum failures in Defaults.py[c]:
  No longer patch Defaults.py in postinstall, instead configure
  --with-mailhost=localhost --with-urlhost=localhost, as
  Fedora and Arch Linux do.

- Add a related note to FreeBSD-post-install-notes.

- Add a related safeguard to the rcfile, which will refuse to run
  if the DEFAULT_*_HOSTs are not configured. This can be changed
  with a new mailman_run_localhost="YES" rc.conf setting, which will
  then restrict itself to printing the warnings, but still start mailman.

- Update htdig patch to upstream SVN r1734.

- Bump USES, python:2 -> python:2.7

- Regenerated patches.

Changelog:
https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/view/1743/NEWS#L8

Release/SecuritY announcement:
https://www.mail-archive.com/mailman-users@python.org/msg70478.html

PR:		225767 (related vuxml entry)
Reported by:	Vladimir Krstulja
MFH:		2018Q1
Security:	CVE-2018-5950
Security:	3d0eeef8-0cf9-11e8-99b0-d017c2987f9a
2018-02-08 22:32:23 +00:00

40 lines
1.5 KiB
Python

--- Mailman/htmlformat.py.orig 2018-02-04 17:04:39 UTC
+++ Mailman/htmlformat.py
@@ -646,12 +646,14 @@ class DefinitionList(Container):
from mm_cfg import MAILMAN_URL
PYTHON_URL = 'http://www.python.org/'
GNU_URL = 'http://www.gnu.org/'
+FREEBSD_URL = 'http://www.freebsd.org/'
# The names of the image logo files. These are concatentated onto
# mm_cfg.IMAGE_LOGOS (not urljoined).
DELIVERED_BY = 'mailman.jpg'
PYTHON_POWERED = 'PythonPowered.png'
GNU_HEAD = 'gnu-head-tiny.jpg'
+FREEBSD_POWERED = 'powerlogo.png'
def MailmanLogo():
@@ -663,17 +665,17 @@ def MailmanLogo():
'<br>version %s' % (logo(DELIVERED_BY), mm_cfg.VERSION)
pylink = '<img src="%s" alt="Python Powered" border=0>' % \
logo(PYTHON_POWERED)
- gnulink = '<img src="%s" alt="GNU\'s Not Unix" border=0>' % \
- logo(GNU_HEAD)
- t.AddRow([mmlink, pylink, gnulink])
+ freebsdlink = '<img src="%s" alt="Powered by FreeBSD" border=0>' % \
+ logo(FREEBSD_POWERED)
+ t.AddRow([mmlink, pylink, freebsdlink])
else:
# use only textual links
version = mm_cfg.VERSION
mmlink = Link(MAILMAN_URL,
_('Delivered by Mailman<br>version %(version)s'))
pylink = Link(PYTHON_URL, _('Python Powered'))
- gnulink = Link(GNU_URL, _("Gnu's Not Unix"))
- t.AddRow([mmlink, pylink, gnulink])
+ freebsdlink = Link(FREEBSD_URL, "Powered by FreeBSD")
+ t.AddRow([mmlink, pylink, freebsdlink])
return t