diff options
Diffstat (limited to 'mail/mailman/files')
-rw-r--r-- | mail/mailman/files/patch-Mailman::Cgi::private.py | 34 | ||||
-rw-r--r-- | mail/mailman/files/patch-Mailman::ListAdmin.py | 20 | ||||
-rw-r--r-- | mail/mailman/files/patch-README.EXIM | 13 |
3 files changed, 0 insertions, 67 deletions
diff --git a/mail/mailman/files/patch-Mailman::Cgi::private.py b/mail/mailman/files/patch-Mailman::Cgi::private.py deleted file mode 100644 index 08fd1390c7a6..000000000000 --- a/mail/mailman/files/patch-Mailman::Cgi::private.py +++ /dev/null @@ -1,34 +0,0 @@ -Index: Mailman/Cgi/private.py -=================================================================== -RCS file: /cvsroot/mailman/mailman/Mailman/Cgi/private.py,v -retrieving revision 2.16.2.1 -diff -u -r2.16.2.1 private.py ---- private.py 8 Feb 2003 07:13:50 -0000 2.16.2.1 -+++ private.py 10 Feb 2005 03:34:21 -0000 -@@ -1,4 +1,4 @@ --# Copyright (C) 1998-2003 by the Free Software Foundation, Inc. -+# Copyright (C) 1998-2005 by the Free Software Foundation, Inc. - # - # This program is free software; you can redistribute it and/or - # modify it under the terms of the GNU General Public License -@@ -35,13 +35,17 @@ - _ = i18n._ - i18n.set_language(mm_cfg.DEFAULT_SERVER_LANGUAGE) - -+SLASH = '/' -+ - - - def true_path(path): - "Ensure that the path is safe by removing .." -- path = path.replace('../', '') -- path = path.replace('./', '') -- return path[1:] -+ parts = path.split(SLASH) -+ safe = [x for x in parts if x not in ('.', '..')] -+ if parts <> safe: -+ syslog('mischief', 'Directory traversal attack thwarted') -+ return SLASH.join(safe)[1:] - - - diff --git a/mail/mailman/files/patch-Mailman::ListAdmin.py b/mail/mailman/files/patch-Mailman::ListAdmin.py deleted file mode 100644 index 699193b55451..000000000000 --- a/mail/mailman/files/patch-Mailman::ListAdmin.py +++ /dev/null @@ -1,20 +0,0 @@ ---- /usr/local/src/mailman-2.1.5/Mailman/ListAdmin.py-2.1.5 2004-02-29 12:55:27.000000000 +0900 -+++ Mailman/ListAdmin.py 2004-06-10 22:44:39.373711240 +0900 -@@ -83,6 +83,8 @@ - except IOError, e: - if e.errno <> errno.ENOENT: raise - self.__db = {} -+ # put version number in new database -+ self.__db['version'] = IGN, mm_cfg.REQUESTS_FILE_SCHEMA_VERSION - - def __closedb(self): - if self.__db is not None: -@@ -122,7 +124,7 @@ - - def NumRequestsPending(self): - self.__opendb() -- # Subtrace one for the version pseudo-entry -+ # Subtract one for the version pseudo-entry - return len(self.__db) - 1 - - def __getmsgids(self, rtype): diff --git a/mail/mailman/files/patch-README.EXIM b/mail/mailman/files/patch-README.EXIM deleted file mode 100644 index 628acda3e281..000000000000 --- a/mail/mailman/files/patch-README.EXIM +++ /dev/null @@ -1,13 +0,0 @@ ---- README.EXIM.orig Fri Oct 18 23:02:15 2002 -+++ README.EXIM Tue Jan 28 11:18:24 2003 -@@ -77,8 +77,8 @@ - - # User and group for Mailman, should match your --with-mail-gid - # switch to Mailman's configure script. -- MAILMAN_USER=mailman -- MAILMAN_GROUP=mailman -+ MAILMAN_USER=mailnull -+ MAILMAN_GROUP=mail - - - Transport for Exim 3 |