Paraphrasing the website:
Mailman is a mailing list manager (MLM); that is, software to help manage
email discussion lists, much like Majordomo, LISTSERV, and the like.
Unlike most similar products, Mailman gives each mailing list a web page
and allows users to subscribe, unsubscribe, and change their preferences
via the web. Even a list manager can administer his or her list(s)
entirely via the web. Mailman integrates many common MLM features,
including web-based archiving (though it also has hooks for external
archivers), mail-to-news gateways, bounce handling, spam prevention,
Majordomo-style email-based list administration, direct SMTP delivery (with
fast bulk mailing), digest delivery, virtual domain support, and more.
Mailman is written mostly in Python (with a smattering of C where necessary
for security purposes), and includes hooks to make it easily scriptable and
extensible. It is compatible with most web servers and browsers, and most
mail transfer agents (mail servers). Mailman's documentation may be found on
its website.
===> The following configuration options are available for mailman-2.1.39_4:
DOCS=on: Build and/or install documentation
HTDIG=off: - EXPERIMENTAL - htdig integration patches
NAMAZU2=off: Make private archives searchable with namazu2
NLS=on: Native Language Support
NOMAILPWD=on: Elide plaintext passwords from monthly reminders
====> Integrate with which MTA?: you have to select exactly one of them
COURIER=off: for use with courier
EXIM4=off: for use with exim4
OPENSMTPD=off: for use with opensmtpd - EXPERIMENTAL -
POSTFIX=off: for use with postfix
SENDMAIL=on: for use with sendmail
===> Use 'make config' to modify these settings
*/*: Deprecate python2 consumers
lang/python2 and lang/python27 have been deprecated since 2020-01-01 and their
EXPIRATION_DATE of 2020-12-31 passed nearly six years.
Set the same expiration date on the remaining python:2.7 consumers so that
python2 and python27 can be removed on 2026-11-01
The date was chosen to fall after the 2026Q4 branch is created, so that the
removal happens on main only and the quarterly branch keeps python2 for its
full lifetime.
Approved by: portmgr
mail/mailman: fix empty group/user name regression in 2.1.39_2
...and drop files/patch-configure-in, which is no longer needed;
neither is autoreconf needed to be reinstated.
We can cheat the test -z "$VAR" inside the MM_FIND_{GROUP,USER}...
configure[.in] macros by putting the proper contents into the
proper environment variables.
To fix the regression in...
PR: 274991
Reported by: leres@
mail/mailman: pull in the post-2.1.39 fixes upstream...
by diffing revisions 1885 (2.1.39) against 1893 in the upstream repo
While here, drop USES=autoreconf, which we no longer need, and
which triggers warnings from autoconf because the configure.in was
developed for an older autoconf version.
Bump PORTREVISION to 2.
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
mail: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ashish@FreeBSD.org>
* Aaron Dalton <aaron@FreeBSD.org>
* Adam David <adam@FreeBSD.org>
* Adam McDougall <mcdouga9@egr.msu.edu>
* Adam Weinberger <adamw@FreeBSD.org>
* Ade Lovett <ade@FreeBSD.org>
* Akinori MUSHA aka knu <knu@idaemons.org>
* Alex Deiter <tiamat@komi.mts.ru>
* Alex Dupre <ale@FreeBSD.org>
* Alex Dupre <sysadmin@alexdupre.com>
* Alex Perel <veers@disturbed.net>
(Only the first 15 lines of the commit message are shown above )
mail/mailman: Update dependency
dns/pydnspython1 has been created to isolate python 2.7 only version for
the ports that require python 2.7. Update the dependency accordingly.
mail/mailman: regression fix update to 2.1.39
Mark Sapiro announced Mailman 2.1.39 "[...] fixes
https://bugs.launchpad.net/mailman/+bug/1954694
[...]
The fix for CVE-2021-42097 was case sensitive and should not be.
The fix for CVE-2021-44227 introduced a potential NameError in logging.
This could cause a user's changes to the option's page to not be
accepted and perhaps cause a 'We hit a bug' response if the user visited
the page with a mixed- or upper-case email address."
URL: https://bugs.launchpad.net/mailman/+bug/1954694
MFH: 2021Q4
mail/mailman: security update to 2.1.37
- A potential XSS attack via the user options page has been reported by
Harsh Jaiswal. This is fixed. CVE-2021-43331 (LP: #1949401)
LP: A crafted URL to the user options page can execute arbitrary
javascript.
- A potential for for a list moderator to carry out an off-line brute force
attack to obtain the list admin password has been reported by Andre
Protas, Richard Cloke and Andy Nuttall of Apple. This is fixed.
CVE-2021-43332 (LP: #1949403)
LP: The CSRF token for the admindb page contains an encrypted version of
the list admin password which could potentially be cracked by a
moderator via an off-line brute force attack.
MFH: 2021Q4
Security: 9d7a2b54-4468-11ec-8532-0d24c37c72c8
Security: CVE-2021-43331
Security: CVE-2021-43332
mailman: add -postfix and -exim4 slave ports
This is to avoid accidents on upgrading, for instance, if
the POSTFIX option is getting lost and mail starts to bounce.
The slave ports prevent that.
mail/mailman: update to 2.1.34 (bugfixes)
Changelog:
http://bazaar.launchpad.net/~mailman-coders/mailman/2.1/view/1859/NEWS#L8
(Note the ValueError fix was already in FreeBSD's 2.1.33_1 and
- on quarterly - the 2.1.30_5 port/package versions.)
Follow POLA:
No MFH requested, as 2020Q2 and head/ have diverged too far,
so let 2020Q3 pick up the change instead.
mail/mailman: update to 2.1.32
- fixes the i18n issues in 2.1.31
- drop local patch for Spanish Castilian mailman.po file
- drop local REINPLACE_CMD for translations of the security fixed code
- uses a patch from the upstream merged rev 1814 of the htdig branch
mail/mailman: security update to 2.1.31
Over the upstream 2.1.31, additional fixes were needed:
+ fix up quoting in one string of the messages/es/ translation
to unbreak gettext
+ fix up all */LC_MESSAGES/mailman.po to match up with the security fix.
Upstream Changelog for 2.1.31, cited from
<https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/view/1845/NEWS#L8>:
Security
- A content injection vulnerability via the options login page has been
discovered and reported by Vishal Singh. This is fixed. (LP: #1873722)
i18n
- The Spanish translation has been updated by Omar Walid Llorente.
Bug Fixes and other patches
- Bounce recognition for a non-compliant Yahoo format is added.
- Archiving workaround for non-ascii in string.lowercase in some Python
packages is added.
MFH: 2020Q2
Security: 88760f4d-8ef7-11ea-a66d-4b2ef158be83
mail/mailman: rcfile and pkg-message tweaks
Limit the install message about pkg install -I to installs (not upgrades).
Convert the required_dirs of the rcfile into a coded prereq check,
so that we can print the proper error message, and point the user to
the right place.
Bump PORTREVISION.
mail/mailman: fix some permission issues, realign template policy
- tighten up permissions on install dirs even more, patching
bin/check_perms to not complain - fewer directories or files belong
in mailman's hand or need group write permissions.
- revert 2.1.30's "make templates samples" because the upstream has
always instead provided a templates/site dir here and warned users that
default templates will be overwritten on updates or reinstallation
https://wiki.list.org/DOC/4.48%20How%20can%20I%20change%20the%20HTML%20or%20.txt%20templates%20used%20by%20my%20mailing%20lists%3F
changed templates will be written to different directories, the site,
domain-specific or list-specific directory
- adjust pkg-plist such that a no-script install, a regular install
with post-install script run, and check_perms agree on permissions,
(Only the first 15 lines of the commit message are shown above )
mail/mailman: update to 2.1.30 - bug fix (incl. data loss)
* upstream changelog:
https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/view/head:/NEWS#L6
Note that upstream means 2.1.30 to be the final 2.x release,
because it relies on Python 2.x which is EOL upstream.
! MAJOR DATA LOSS FIX, rename all templates/* files to .sample,
! and list them as a @sample in pkg-plist, because they can be edited
! through the web server, and an upgrade should not stomp over edited files.
* rearrange makefile a bit (portlint, portfmt)
* update and upload new htdig patch
* expose NLS port option to pkg-install script to avoid failure
(Only the first 15 lines of the commit message are shown above )
mail/mailman: repair incomplete UCL conversion of pkg-message.in
There are parts of the install message that are also relevant on
updates, but were missed. Add them, and bump PORTREVISION.
Failure-inducing commit:
------------------------------------------------------------------------
r508882 | mat | 2019-08-14 00:29:42 +0200 (Wed, 14 Aug 2019) | 2 lines
onvert to UCL & cleanup pkg-message (categories l-m)
------------------------------------------------------------------------
mail/mailman: fix cron/rundig if HTDIG option is enabled [1]
Ditto for the two Mailman/Cgi/remote?mmsearch.
PR: 238508 [1]
Reported by: asp-freebsd@partan.com [1]
mail/mailman: Use .conf suffix for /usr/local/etc/newsyslog.conf.d/
- Rename the files installed to /usr/local/etc/newsyslog.conf.d/ to end
with a '.conf' suffix.
- Add pkg-install script to automatically move any copies of the old
newsyslog file to the new location if the new file is unmodified from the
default,
or print a warning if it the new file has been modified.
- Add a note to UPDATING and pkg-message to warn users of this, in case
they are using provisioning/configuration management tools which need
to be modified. Note the UPDATING entry was committed in r485721.
Recent changes to /etc/newsyslog.conf (r340318) will only include files
from the /usr/local/etc/newsyslog.conf.d/ directory which end with
'.conf' and do not beginning with a '.' character.
Reviewed by: mat
Approved by: mandree (maintainer)
Differential Revision: https://reviews.freebsd.org/D17088
mail/mailman: Use .conf suffix for /usr/local/etc/newsyslog.conf.d/
Rename the files installed to /usr/local/etc/newsyslog.conf.d/ to end
with a '.conf' suffix.
Proposed changes to /etc/newsyslog.conf will only include files from the
/usr/local/etc/newsyslog.conf.d/ directory which end with '.conf' and do
not beginning with a '.' character. https://reviews.freebsd.org/D17086
Approved by: mandree (maintainer)
Differential Revision: https://reviews.freebsd.org/D17088
Overhaul default hosts configuration.
- When no virtualhosts are defined, and the default localhost/localhost is
effective, the post-install script now adds DEFAULT_EMAIL_HOST,
DEFAULT_URL_HOST, and add_virtualhost() lines to mm_cfg.py.
Add corresponding support to remove unchanged configurations to the
deinstall script.
- While here, overhaul crontab configuration to only request a merge if the
crontab had been modified, and unify progress reports.
- Merge pkg-deinstall into pkg-install, to avoid duplication of code
that might be missed in later maintenance.
PR: 225961
Reported by: Terry Kennedy
mail/mailman: add reopen to rc script's extracommands.
...and pass it through to mailmanctl.
The previous commit only enabled reopen through ..mailman/scripts/mailman.
Support the upstream "reopen" mode (broken from the beginning in ports)
When the upstream initscript grew a "reopen" mode with 2.1.17 in late 2013,
our patch stuffed the usage information into the wrong place, so that we
inadvertently disabled the new reopen mode, thus never supported it
through the init script in FreeBSD.
Bump PORTREVISION.
PR: 225800
Submitted by: Yasuhito FUTATSUKI
MFH: 2018Q1
Security update to 2.1.26 (XSS bug), assorted other fixes.
- Fix checksum failures in Defaults.py[c]:
No longer patch Defaults.py in postinstall, instead configure
--with-mailhost=localhost --with-urlhost=localhost, as
Fedora and Arch Linux do.
- Add a related note to FreeBSD-post-install-notes.
- Add a related safeguard to the rcfile, which will refuse to run
if the DEFAULT_*_HOSTs are not configured. This can be changed
with a new mailman_run_localhost="YES" rc.conf setting, which will
then restrict itself to printing the warnings, but still start mailman.
- Update htdig patch to upstream SVN r1734.
(Only the first 15 lines of the commit message are shown above )
Convert Python ports to FLAVORS.
Ports using USE_PYTHON=distutils are now flavored. They will
automatically get flavors (py27, py34, py35, py36) depending on what
versions they support.
There is also a USE_PYTHON=flavors for ports that do not use distutils
but need FLAVORS to be set. A USE_PYTHON=noflavors can be set if
using distutils but flavors are not wanted.
A new USE_PYTHON=optsuffix that will add PYTHON_PKGNAMESUFFIX has been
added to cope with Python ports that did not have the Python
PKGNAMEPREFIX but are flavored.
USES=python now also exports a PY_FLAVOR variable that contains the
(Only the first 15 lines of the commit message are shown above )
Update to new upstream release 2.1.25.
This is a routine bug fix release with a minor new feature and some
accessibility improvements for screen readers.
Changelog:
<http://bazaar.launchpad.net/~mailman-coders/mailman/2.1/view/1726/NEWS#L6>
Add a newsyslog configuration file, to rotate logs.
This enforces the EXAMPLES option because we can't keep
the .sample file in etc/newsyslog.conf.d/* - it would be processed
as the actual file, so we use %%EXAMPLESDIR%% for the distributed version.
Fix up DEFAULT_URL_HOST/DEFAULT_MAIL_HOST for jailed or external builds.
If the package is built in, for instance, poudriere, or on a computer other
than the one it is later installed on, the DEFAULT_MAIL_HOST and
DEFAULT_URL_HOST variables in the Mailman/Defaults.py file were unsuitable.
Leverage pkg-install to fix these up to be the same as hostname -f at
install time.
[The MFH would require the intermediate update to 2.1.24 to be included.]
MFH: 2017Q3
Update to new upstream version 2.1.24.
Upstream release notes:
"This release is primarily a bug fix release with a few minor feature additions
and a fix for a probably non-exploitable security issue. See the changelog for
details."
Changelog:
<https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/view/1708/NEWS>
Avoid patch-LP1551075 when HTDIG is enabled. [1]
This patch is part of the HTDIG integration patch already. [1]
Also correct namazurc file path in pkg-message, bumping PORTREVISION.
PR: 207876 [1]
Submitted by: David Sieborger [1]
Preserve some kinds of signatures, reenable HTDIG option.
Pull upstream change 1629 to fix Launchpad Bug #1551075
<https://bugs.launchpad.net/mailman/+bug/1551075>. This fix improves
preservation of OpenPGP MIME multipart signatures, by not collapsing
a multipart with a single sub-part inside multipart/signed parts.
See the Launchpad bug report for details.
EXPERIMENTAL feature: Reenable HTDIG support by rolling the patch on our
own, and laying down instructions to do so in the Makefile. Mark Sapiro
no longer maintains the patch.
Bump PORTREVISION to 3.
Note that the upstream maintainer considers another release in a few
weeks' time, and called for help with updating translations. If you
want to help, see
<http://www.mail-archive.com/mailman-users%40python.org/msg68036.html>
Make sure pkg-install works with postfix-base, too.
Prior to this fix, pkg-install used hardcoded
${PKG_PREFIX}/sbin/postconf, but postfix-base installs it into
/usr/sbin/postconf.
Instead, do a path search for postconf in ${PKG_PREFIX}/sbin:$PATH and
cache the result in a variable.
Fix pkg-install "install -d" invocation.
It used to use GNU-install-isms (options after arguments) that don't
work with BSD install and caused two spurious directories to be created,
one named -g, the other usually named "mailman" (or whichever group name
was configured). Bumps PORTREVISION.
PR: 207528 (Attachment #167455)
Submitted by: ohauer@
MASTER_SITES cleanup.
- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.
While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.
Also, replace some EXTRACT_SUFX occurences with USES=tar:*.
Checked by: make fetch-urlall-list
With hat: portmgr
Sponsored by: Absolight
USE_AUTOTOOLS -> USES=autoreconf, GNU_CONFIGURE=yes
Add USES=fakeroot to permit non-root builds if user is not in wheel
group. [1]
PR: 199396 [1]
Submitted by: dvl [1]
Update to new upstream release 2.1.20.
Fixes one security bug [1], a few other bugs, and adds a feature so that
list admins can edit list addresses.
Uses newer Mailman-and-HTDig integration patches. [2]
Security: CVE-2015-2775 [1]
Security: a5f160fa-deee-11e4-99f8-080027ef73ec [1]
PR: 199286 [2]
Submitted by: David Sieborger [2]
Install powerlogo.png in both image locations.
(Reported by Alex Stangl.)
Take the opportunity to convert powerlogo from GIF to PNG.
Check permissions of mailman/qfiles directory and top-level
subdirectories from post-install before running check_perms script,
further to the existing workarounds for pkg/libarchive permissions
issues.
Update Apache instructions in post-install notes for 2.4 [1], dropping 1.3.
Revise language a bit.
Spell qmail with lowercase q.
Submitted by: [1] Tom Eagle
Update rcfile and permission handling.
- Move directory permission handling into pkg-install, to work around
pkg/libarchive issues on 9.3.
- Handle some crucial directory permissions directly in pkg-install,
so that running check_perms becomes optional.
- Try a bit harder to preserve permissions on the archives/private dir.
- The rcfile now fixes directory permissions by default on start.
- You can now set mailman_fix_perms="NO" in the /etc/rc.conf* files,
to avoid running check_perms -f on start, or from pkg-install.
- Clean up pkg-plist.
- Bump PORTREVISION to 6.
Suggested by: bapt@, peter@
The rcfile now runs bin/check_perms so users have a visual clue in case
they installed the package without running scripts (pkg install -I).
Clean up inconsistent image (=icon) installation. Reported by Alex Stangl.
Makefile: Shuffle things around to please portlint.
Makefile: Clean up muting: only mute RM, comments, MKDIR.
Makefile: Move postfix checks into pkg-install.
pkg-deinstall: drop workaround for traditional pkg_delete.
pkg-deinstall: less verbose mail list reporting.
pkg-deinstall: cleanups for last_mailman_version handling.
pkg-install: defeat "Re-run..." line from check_perms to avoid confusing users.
pkg-plist: cleanups and modernization. Sets directory permissions.
NOTE: pkg 1.4.1 is unable to extract these on package installs,
"make install" however should be fine.
Back out bapt's "cleanup" commit r371953.
This causes directory permissions to change, and if installation happens
without scripts, installing the new package causes mailman to become
defunct until bin/check_perms is run manually.
Most directories need to have group mailman (or whatever is configured)
and mode 02775, with exception of the archive/private.
More cleanups to follow later.
Submitted by: flo@
Add OPENSMTPD's user ID [1]. Add warnings about GIDs [2].
The FreeBSD pkg-message and post-install documentation now clearly warn
that the binary package is only meant for use with Sendmail, and
hints that poudriere can be used to build a Mailman package with
different options.
PR: 192230 [1]
Submitted by: feld [1], Tom Limoncelli [2]
Avoid leftovers on pkg_add-based systems by running a
depth-first remove of empty directories under the Mailman directory.
Submitted by: jenkins/swills@
- Update to new upstream release 2.1.17, resetting PORTREVISION.
- Remove patch-Makefile.in, which has been integrated by upstream.
- Announcement:
<https://mail.python.org/pipermail/mailman-announce/2013-November/000186.html>
- Poudriere 3.0.13 ticket filed about misreported orphans in testport:
<https://fossil.etoilebsd.net/poudriere/tktview/e8d957a27f8ce8b6255ed655d031e6d05b02492c>
Upgrade to new upstream release 2.1.16, release notes:
https://launchpad.net/mailman/2.1/2.1.16/
Support stage directory. (Requires Python 2.7, 2.6 is no longer
sufficient.) This requires us to compile the Python scripts ourselves to
avoid spilling the stagedir name all over the .pyc files, as Mailman's
build would do (causing complaints from make stage-qa).
While there, compile bin/*.py programs, too.
The post-install section of the Makefile is more verbose now.
Run Mailman's bin/update after install.
Fixes to handling the mailman_last_version file to avoid leftover dirs
from an unused Mailman installation and deinstallation.
Scripts are more robust now, and use mktemp -d for temporary directories.
Note that I could not fully test all integrations yet. If integrations are
failing, please add detailed information how you set up your MTA, and
Mailman, what user/group IDs are, how list aliases are managed, and
thereabouts.
- Update to 2.1.15. [2] Changes: click View the full Changelog on
https://launchpad.net/mailman/2.1/2.1.15
- Fix without-NLS install: Install at least English template. [1]
- Drop EXIM3 option, we don't have an Exim 3 port any more.
- Drop INTEGRATION option, which would at best be confusing.
- Reformat COMMENT to fit into common limits.
- Fix typo in COURIER_DESC.
- When Postfix integration is chosen, add BUILD and RUN_DEPENDS on
Postfix because we need the postconf program.
- Use htdig patches for Mailman version 2.1.12 and remove BROKEN tag,
(Only the first 15 lines of the commit message are shown above )
- Please welcome back Chris Petrik as maintainer of
these ports [1]
- Trim headers
- Remove indefinite article from COMMENT
- Convert tab to space in WWW lines
PR: ports/175415 [1]
Submitted by: Chris Petrik <c.petrik.sosa@gmail.com> [1]
Discussed with: bapt
Number of commits found: 215 (showing only 100 on this page)
