Package: sympa / 6.1.23~dfsg-2+deb8u1

Metadata

Package Version Patches format
sympa 6.1.23~dfsg-2+deb8u1 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
0001_fix_web_interface_vulnerability | (download)

wwsympa/wwsympa.fcgi.in | 11 8 + 3 - 0 !
1 file changed, 8 insertions(+), 3 deletions(-)

 fix a vulnerability in the web interface (wwsympa)
 which allows one to send himself by email any readable file by the
 sympa user on the filesystem
1002_mysql_default_charset_engine.patch | (download)

src/etc/script/create_db.mysql | 26 13 + 13 - 0 !
1 file changed, 13 insertions(+), 13 deletions(-)

 add default charset and engine to mysql schema
1004_wizard_support_batch_and_display_mode.patch | (download)

src/sympa_wizard.pl.in | 48 46 + 2 - 0 !
1 file changed, 46 insertions(+), 2 deletions(-)

 add batch and display modes to sympa_wizard.pl
1005_wizard_emit_cmd_and_newline_when_dying.patch | (download)

src/sympa_wizard.pl.in | 12 6 + 6 - 0 !
1 file changed, 6 insertions(+), 6 deletions(-)

 emit command name and newline when dying in sympa_wizard.pl
1007_wizard_probe_currently_supported_locales.patch | (download)

src/sympa_wizard.pl.in | 45 45 + 0 - 0 !
1 file changed, 45 insertions(+)

 probe currently supported locales in sympa_wizard.pl
1011_fix_sqlite_support | (download)

src/etc/script/create_db.SQLite | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 fix sqlite db schema upgrade
1012_fix_manpages_issues.patch | (download)

doc/man8/alias_manager.pod.in | 2 2 + 0 - 0 !
doc/man8/archived.pod.in | 4 3 + 1 - 0 !
doc/man8/bounced.pod.in | 2 2 + 0 - 0 !
doc/man8/sympa.pod.in | 2 2 + 0 - 0 !
src/sympa_wizard.pl.in | 12 7 + 5 - 0 !
5 files changed, 16 insertions(+), 6 deletions(-)

 fix typos and bad whatis entries in manpages
1015_locales_fallback.path | (download)

src/lib/Language.pm | 3 2 + 1 - 0 !
1 file changed, 2 insertions(+), 1 deletion(-)

 make possible to fallback on c locale when no other locales are available.
2001_ca_bundle_check_as_warning.patch | (download)

src/lib/Conf.pm | 6 5 + 1 - 0 !
1 file changed, 5 insertions(+), 1 deletion(-)

 raise a warning instead of an error when the ca bundle file is not readable.
  For its internal usage (to make https request and verify smime mail signatures) Sympa
  needs access to the Certificates Authorities installed on the system.

  Certificates Authorities are available in the package ca-certificates and
  this package also provides a single file with all the CA concatenated.
  The location of this file is /etc/ssl/certs/ca-certificates.crt

  Sympa package provides a symlink from /usr/share/sympa/default/ca-bundle.crt
  to /etc/ssl/certs/ca-certificates.crt

  Recently, to fix bug #537051 the ca-certificates package maintainer has
  decided to replace the CA bundle generation
  (/etc/ssl/certs/ca-certificates.crt) in the postinst by a trigger.

  During installation of Sympa, if ca-certificates is not present, it is
  installed as a Sympa dependency but the sympa postinst will always be
  executed before the ca-certificates triggers.
  It means that Sympa start will fail with an error because
  /etc/ssl/certs/ca-certificates.crt does not exists (not yet generated by the
  ca-certificates trigger).

  The following patch tries to detect if the CA bundle configured in sympa is a
  symlink to /etc/ssl/certs/ca-certificates.crt. In that case, a warning raised
  instead of en error.

  This is a purely Debian specific fix, which is quite ugly but it works.

  A better patch will be very much appreciated.
2006_disable_cssupdated_email_on_update.patch | (download)

src/lib/Conf.pm | 6 3 + 3 - 0 !
1 file changed, 3 insertions(+), 3 deletions(-)

 disable email notification 'css updated' on each upgrade